Pages:
Author

Topic: MyEtherWallet Succumbs to DNS Attack with $ 17 million stolen (Read 592 times)

member
Activity: 173
Merit: 10
So before you enter the private key from your wallet, it can fall into the hands of scammers? How then do I go into my wallet and make a transaction?
newbie
Activity: 25
Merit: 0


Popular Ethereum wallet interface MyEtherWallet has succumbed to a DNS hijacking attack that allowed a hacker to redirect users to a malicious version of the website.

The MEW confirmed that this was not their fault and was trying their best to identify the attacked server to fix things as soon as possible.
This topic is rapidly spreading on the Reddit forum. The attacking IP address seems to come from Russia. At the time of writing, 25,000 ETH ($ 17 million) has been stolen.

It is highly recommend that everyone be careful when using the MEW wallet and follow the security instructions by MEW wallet. In other words, you are advised to integrate Metamask into login and make direct transactions via Metamask. If you want to check your balance, visit https://etherscan.io/, which means you do not have to log into MyEtherwallet.com anymore, so you will avoid the hidden potential risk here.

Rothscoin team.



I haven't heard the news yet, but I really felt sorry for those people who lost their money/coins due to hacking. I hope those victims will serve the justice they deserve, it's really hard to earn money especially if you're in 3rd world country like me. That's why I am always checking the site that I am visiting which is possible for the attacks/malicious software that can steal our data especially our bank account details. We should be aware of our actions too don't download suspicious files or whatever 3rd party application that can lead to penetration of our private files. Anyway, thank you for informing use brother.

hero member
Activity: 2884
Merit: 794
I am terrible at Fantasy Football!!!

After today's loss, I stopped trusting MyEtherWallet. If it is hacked, and I did not go to any fake sites, I decided all the shadows, not even very valuable, to bring to the stock exchanges. For today, wallets will be used only for transfer from one exchange to another.
If you no longer trust in myetherwallet, and I cannot really blame anyone that doesn't right now, then use another wallet it is that simple, there are many other wallets out there that you can use in order to generate your ethereum addresses, while I have never had any kind of problem with myetherwallet I'm seriously thinking about replacing it.
hero member
Activity: 952
Merit: 552
If dns server is the weak link why not log-in into myetherwallet via IP?
Why is myetherwallet not publishing their ips for safe use?
Currently I am showing 54.192.122.81
Crap I guess I cannot login via IP.. sigh!
member
Activity: 602
Merit: 10
Unfortunately, this situation shows once again how people are reckless. I'm sure that hose who had access to the MEW with the Trezor or Ledger Nano S hardware wallet did not suffer from this attack.
member
Activity: 266
Merit: 10
MyEtherWallet is not a safe wallet, and if you use a hardware wallet and MyEtherWallet, your encryption should be safe.

hero member
Activity: 1540
Merit: 507
You know what ? OP is writing random thing and smugle his website link there. There no 17million stolen https://etherscan.io/address/0x1d50588c0aa11959a5c28831ce3dc5f1d3120d29 here the hacker wallet. I hope you guys still be aware too.
Been searching up which wallet on where OP is tending to say here.$17 million stolen is indeed high amount but i dont think the address you given in on the ones who do make that redirection or DNS hack of mew. 215 Ether is just too small out of that DNS attack but yet its quite big money basing on current Eth price which is $641 that would be still roughly on $137k.
Hacking incidents do really happen and most of the time they do appear when theres a bullish trend or market is on greens. Wink
$17 millions just like an illusion. I'm seeing so many people are talking only one wallet that has used by scammer to scamming through the phishing site. I don't even see any other wallet address related to this scam. DNS hijacked was a classic hacked case. That's happened on so many platforms.
member
Activity: 183
Merit: 10
equitybase: Crypto Real Estate Exchange
DNs were compromised,not their fault, it is faulty DNS,which is why i luckily i didnt get hacked,it isnt goin to be issue as those hackers are didnt get all of the funds in mew wallets,it should have some cold storage.As far as i know it is already fixed few hours ago which is why those people who logged in their mew to the are the only ones who got hacked.
full member
Activity: 294
Merit: 100
Tokenize Fantasy Sports
Now everyone must be wary of cryptos stored at the MEW because the security of this website is not good at all. And they will not be responsible if the site is being hacked cryptos. Therefore, there is a backup plan that is hardware wallet. You can buy Ledger Nano S or Trezor to store cryptos as these are the 2 safest wallets available at the moment. Use hardware wallets to avoid being hacked by the hacker
hero member
Activity: 3010
Merit: 794
You know what ? OP is writing random thing and smugle his website link there. There no 17million stolen https://etherscan.io/address/0x1d50588c0aa11959a5c28831ce3dc5f1d3120d29 here the hacker wallet. I hope you guys still be aware too.
Been searching up which wallet on where OP is tending to say here.$17 million stolen is indeed high amount but i dont think the address you given in on the ones who do make that redirection or DNS hack of mew. 215 Ether is just too small out of that DNS attack but yet its quite big money basing on current Eth price which is $641 that would be still roughly on $137k.
Hacking incidents do really happen and most of the time they do appear when theres a bullish trend or market is on greens. Wink

wow, $17 mil. is a large number if it's true. People should be more careful. It's easy to get lazy and let your guard down.

I don't blame OP for putting their website, but when I see two guys in suits on some website, offering me something, right away I can see a big sign fraud lol.

You are quoting my post without significant connection towards on what you reply.You are not getting my point and my question towards op on what address and sources where op claims about that $17M hacked tokens amounts.
Due to the lack of security of the MEW website. I find it very disturbing at times. I pity all the people that were affected by the hack. They should implement a simple verification security feature to avoid such attack. Today all the people are selling and we can see a bloodbath in CMC. Due to these hacks, the prices kept going down.
This is DNS hacked which involves on the domain itself and MEW has nothing to do with redirection.
member
Activity: 182
Merit: 10
Revolutionising Marketing and Loyalty
oh crap,that is going to be the reason why the market alts are dumping because of this incident! we should be protecting ourselves so that we wont get hack in the future.If you are having metamask extension in your browser,together with your hardwallet you should be fine not unless you are one of those unlucky people who logged in when the attack was happen.
newbie
Activity: 291
Merit: 0
Due to the lack of security of the MEW website. I find it very disturbing at times. I pity all the people that were affected by the hack. They should implement a simple verification security feature to avoid such attack. Today all the people are selling and we can see a bloodbath in CMC. Due to these hacks, the prices kept going down.
hero member
Activity: 812
Merit: 501
That is a crazy thing to happen. Stole DNS, wow, it is very high tech skill one who can attack such technique. How about using JSON file It is still secure or not. when people log with pv key it is vulnareble to attack. As long as I use JSOn file , the asset is secure.
full member
Activity: 574
Merit: 100

After today's loss, I stopped trusting MyEtherWallet. If it is hacked, and I did not go to any fake sites, I decided all the shadows, not even very valuable, to bring to the stock exchanges. For today, wallets will be used only for transfer from one exchange to another.
member
Activity: 67
Merit: 10
You know what ? OP is writing random thing and smugle his website link there. There no 17million stolen https://etherscan.io/address/0x1d50588c0aa11959a5c28831ce3dc5f1d3120d29 here the hacker wallet. I hope you guys still be aware too.
Been searching up which wallet on where OP is tending to say here.$17 million stolen is indeed high amount but i dont think the address you given in on the ones who do make that redirection or DNS hack of mew. 215 Ether is just too small out of that DNS attack but yet its quite big money basing on current Eth price which is $641 that would be still roughly on $137k.
Hacking incidents do really happen and most of the time they do appear when theres a bullish trend or market is on greens. Wink

wow, $17 mil. is a large number if it's true. People should be more careful. It's easy to get lazy and let your guard down.

I don't blame OP for putting their website, but when I see two guys in suits on some website, offering me something, right away I can see a big sign fraud lol.
hero member
Activity: 2870
Merit: 594
Yea I have noticed yesterday that the website of MEW is not accesable there was something on the page that it was being attack by some kind of crap I thought I was having problem with my Internet or Browser and now that I have read this it is clear now Thanks!

I never check my MEW regularly and as what the OP states, I used etherscan.io first to check my balance and see something wrong with my wallet before logging it. One thing I noticed though is that I have received some weird tokens so
I reported it to be a scam coin.

And now I was surprised to see the news that MEW was exploited again. And this is not the first time that this incident happened so I hope that everyone did learn from the past mistakes and bookmark MEW or used Metatask and be careful on the links that you clicked while browsing the web.
hero member
Activity: 3010
Merit: 794
You know what ? OP is writing random thing and smugle his website link there. There no 17million stolen https://etherscan.io/address/0x1d50588c0aa11959a5c28831ce3dc5f1d3120d29 here the hacker wallet. I hope you guys still be aware too.
Been searching up which wallet on where OP is tending to say here.$17 million stolen is indeed high amount but i dont think the address you given in on the ones who do make that redirection or DNS hack of mew. 215 Ether is just too small out of that DNS attack but yet its quite big money basing on current Eth price which is $641 that would be still roughly on $137k.
Hacking incidents do really happen and most of the time they do appear when theres a bullish trend or market is on greens. Wink
full member
Activity: 448
Merit: 102
APOLLOX Protocol
I was just shocked by this info, I'm really thankful to all the powers that I was not checking my wallets during that crucial period of time.
full member
Activity: 574
Merit: 100
This morning I found a loss of 0.82 ETH from my wallet. But I did not go there 20 days and could not light the key. Pleased to surprise - yesterday I thought where to attach, but today there are no such thoughts.
member
Activity: 198
Merit: 10
So yes, when we register on a MyEtherWallet they warn us, to doublecheck site adress, where you are filling your forms and enter your info.
Pages:
Jump to: