Topic: MyEtherWallet Succumbs to DNS Attack with $ 17 million stolen (Read 543 times)
So before you enter the private key from your wallet, it can fall into the hands of scammers? How then do I go into my wallet and make a transaction?
Popular Ethereum wallet interface MyEtherWallet has succumbed to a DNS hijacking attack that allowed a hacker to redirect users to a malicious version of the website.
The MEW confirmed that this was not their fault and was trying their best to identify the attacked server to fix things as soon as possible.
This topic is rapidly spreading on the Reddit forum. The attacking IP address seems to come from Russia. At the time of writing, 25,000 ETH ($ 17 million) has been stolen.
It is highly recommend that everyone be careful when using the MEW wallet and follow the security instructions by MEW wallet. In other words, you are advised to integrate Metamask into login and make direct transactions via Metamask. If you want to check your balance, visit https://etherscan.io/, which means you do not have to log into MyEtherwallet.com anymore, so you will avoid the hidden potential risk here.
Rothscoin team.
I haven't heard the news yet, but I really felt sorry for those people who lost their money/coins due to hacking. I hope those victims will serve the justice they deserve, it's really hard to earn money especially if you're in 3rd world country like me. That's why I am always checking the site that I am visiting which is possible for the attacks/malicious software that can steal our data especially our bank account details. We should be aware of our actions too don't download suspicious files or whatever 3rd party application that can lead to penetration of our private files. Anyway, thank you for informing use brother.
After today's loss, I stopped trusting MyEtherWallet. If it is hacked, and I did not go to any fake sites, I decided all the shadows, not even very valuable, to bring to the stock exchanges. For today, wallets will be used only for transfer from one exchange to another.
If dns server is the weak link why not log-in into myetherwallet via IP?
Why is myetherwallet not publishing their ips for safe use?
Currently I am showing 54.192.122.81
Crap I guess I cannot login via IP.. sigh!
Why is myetherwallet not publishing their ips for safe use?
Currently I am showing 54.192.122.81
Crap I guess I cannot login via IP.. sigh!
Unfortunately, this situation shows once again how people are reckless. I'm sure that hose who had access to the MEW with the Trezor or Ledger Nano S hardware wallet did not suffer from this attack.
MyEtherWallet is not a safe wallet, and if you use a hardware wallet and MyEtherWallet, your encryption should be safe.
You know what ? OP is writing random thing and smugle his website link there. There no 17million stolen https://etherscan.io/address/0x1d50588c0aa11959a5c28831ce3dc5f1d3120d29 here the hacker wallet. I hope you guys still be aware too.
Been searching up which wallet on where OP is tending to say here.$17 million stolen is indeed high amount but i dont think the address you given in on the ones who do make that redirection or DNS hack of mew. 215 Ether is just too small out of that DNS attack but yet its quite big money basing on current Eth price which is $641 that would be still roughly on $137k.Hacking incidents do really happen and most of the time they do appear when theres a bullish trend or market is on greens.
DNs were compromised,not their fault, it is faulty DNS,which is why i luckily i didnt get hacked,it isnt goin to be issue as those hackers are didnt get all of the funds in mew wallets,it should have some cold storage.As far as i know it is already fixed few hours ago which is why those people who logged in their mew to the are the only ones who got hacked.
Now everyone must be wary of cryptos stored at the MEW because the security of this website is not good at all. And they will not be responsible if the site is being hacked cryptos. Therefore, there is a backup plan that is hardware wallet. You can buy Ledger Nano S or Trezor to store cryptos as these are the 2 safest wallets available at the moment. Use hardware wallets to avoid being hacked by the hacker
You know what ? OP is writing random thing and smugle his website link there. There no 17million stolen https://etherscan.io/address/0x1d50588c0aa11959a5c28831ce3dc5f1d3120d29 here the hacker wallet. I hope you guys still be aware too.
Been searching up which wallet on where OP is tending to say here.$17 million stolen is indeed high amount but i dont think the address you given in on the ones who do make that redirection or DNS hack of mew. 215 Ether is just too small out of that DNS attack but yet its quite big money basing on current Eth price which is $641 that would be still roughly on $137k.Hacking incidents do really happen and most of the time they do appear when theres a bullish trend or market is on greens.
wow, $17 mil. is a large number if it's true. People should be more careful. It's easy to get lazy and let your guard down.
I don't blame OP for putting their website, but when I see two guys in suits on some website, offering me something, right away I can see a big sign fraud lol.
Due to the lack of security of the MEW website. I find it very disturbing at times. I pity all the people that were affected by the hack. They should implement a simple verification security feature to avoid such attack. Today all the people are selling and we can see a bloodbath in CMC. Due to these hacks, the prices kept going down.
This is DNS hacked which involves on the domain itself and MEW has nothing to do with redirection.
oh crap,that is going to be the reason why the market alts are dumping because of this incident! we should be protecting ourselves so that we wont get hack in the future.If you are having metamask extension in your browser,together with your hardwallet you should be fine not unless you are one of those unlucky people who logged in when the attack was happen.
Due to the lack of security of the MEW website. I find it very disturbing at times. I pity all the people that were affected by the hack. They should implement a simple verification security feature to avoid such attack. Today all the people are selling and we can see a bloodbath in CMC. Due to these hacks, the prices kept going down.
That is a crazy thing to happen. Stole DNS, wow, it is very high tech skill one who can attack such technique. How about using JSON file It is still secure or not. when people log with pv key it is vulnareble to attack. As long as I use JSOn file , the asset is secure.
After today's loss, I stopped trusting MyEtherWallet. If it is hacked, and I did not go to any fake sites, I decided all the shadows, not even very valuable, to bring to the stock exchanges. For today, wallets will be used only for transfer from one exchange to another.
You know what ? OP is writing random thing and smugle his website link there. There no 17million stolen https://etherscan.io/address/0x1d50588c0aa11959a5c28831ce3dc5f1d3120d29 here the hacker wallet. I hope you guys still be aware too.
Been searching up which wallet on where OP is tending to say here.$17 million stolen is indeed high amount but i dont think the address you given in on the ones who do make that redirection or DNS hack of mew. 215 Ether is just too small out of that DNS attack but yet its quite big money basing on current Eth price which is $641 that would be still roughly on $137k.Hacking incidents do really happen and most of the time they do appear when theres a bullish trend or market is on greens.
wow, $17 mil. is a large number if it's true. People should be more careful. It's easy to get lazy and let your guard down.
I don't blame OP for putting their website, but when I see two guys in suits on some website, offering me something, right away I can see a big sign fraud lol.
Yea I have noticed yesterday that the website of MEW is not accesable there was something on the page that it was being attack by some kind of crap I thought I was having problem with my Internet or Browser and now that I have read this it is clear now Thanks!
I never check my MEW regularly and as what the OP states, I used etherscan.io first to check my balance and see something wrong with my wallet before logging it. One thing I noticed though is that I have received some weird tokens so
I reported it to be a scam coin.
And now I was surprised to see the news that MEW was exploited again. And this is not the first time that this incident happened so I hope that everyone did learn from the past mistakes and bookmark MEW or used Metatask and be careful on the links that you clicked while browsing the web.
You know what ? OP is writing random thing and smugle his website link there. There no 17million stolen https://etherscan.io/address/0x1d50588c0aa11959a5c28831ce3dc5f1d3120d29 here the hacker wallet. I hope you guys still be aware too.
Been searching up which wallet on where OP is tending to say here.$17 million stolen is indeed high amount but i dont think the address you given in on the ones who do make that redirection or DNS hack of mew. 215 Ether is just too small out of that DNS attack but yet its quite big money basing on current Eth price which is $641 that would be still roughly on $137k.Hacking incidents do really happen and most of the time they do appear when theres a bullish trend or market is on greens.
I was just shocked by this info, I'm really thankful to all the powers that I was not checking my wallets during that crucial period of time.
This morning I found a loss of 0.82 ETH from my wallet. But I did not go there 20 days and could not light the key. Pleased to surprise - yesterday I thought where to attach, but today there are no such thoughts.
So yes, when we register on a MyEtherWallet they warn us, to doublecheck site adress, where you are filling your forms and enter your info.
Jump to: