Author

Topic: Phishing attempt on your Ether wallet via Slack and other communication channels (Read 409 times)

sr. member
Activity: 1022
Merit: 363
I got this scam message on slack:

Quote
=== MYETHERWALLET UPGRADE REQUIRED ===

*HARD FORK FINAL NOTICE*

This message was shared to all Slack users in the hope of reaching as many Ethereum Wallet holders as possible.
Due to the Hard Fork that will be happening in the following days, all ethereum wallets require to be manually upgraded immediately, otherwise they risk being unprotected and your funds may be lost during the fork process.

Please visit https://www.myetherwallet.com/?upgrade#view-wallet-info to upgrade your wallet to latest security settings.

We decided to implement a number of changes and improvements, including higher levels of anonymous transactions, easier programming and smart contracts, and additional security in the form of masking, which will help protect users against hacking.

We are taking these measures to protect both you and our network from phishing and malicious attacks.

Thank you for your cooperation and understanding!
MyEtherWallet, LLC”.


This is a SCAM. The myetherwallet url which looks valid, links to this website (https://www.xn--myetherwaet-15ba.com/?upgrade#view-wallet-info). The UI of this phishing website is the same as that of myetherwallet.

Original website:
Fake website:

Always check for "MYETHERWALLET LLC [US]" cetificate (marked as 1 in the original screenshot). This certificate detail is missing in the fake website.
Don't click any links you get on channels like slack etc.
Be very careful when uploading/entering your private key/wallet backup on any third party services.



This kind of attack is so popular on SLACK and many people got caught on this phising attempts and also some other of this phising site is searchable on google so we must be carefull and always check the url of the site where we use to go to, And use the official site of MEW since there url is clear and they give fair warning about this kind of modus so people would be more aware that MEW wallet phising is existing.
hero member
Activity: 528
Merit: 501
In the last 2-3 days I have over 300 notifications ...annoying

full member
Activity: 308
Merit: 100
full member
Activity: 239
Merit: 100
thanks a lot for your warning abt scams
I personally use several wallets registered in my ether wallet
a lot of info is transmitted through my slack group
full member
Activity: 501
Merit: 127
After trying different applications mainly for communications. I would say that Slack is the BEST compare to Telegeram, WeChat, etc. However, this issue is very rampant especially if the project is gaining popularity. I'm also curious, how can someone control "slackbot"? Does is limit the function to channel admin and to slack team itself or ANYONE can control this slack bot?
newbie
Activity: 14
Merit: 0
Well I was one of the noobs that got phished from this. Deleted the app immediately.

1.12 ETH. Guess I should be glad I didn’t have more.  Embarrassed
legendary
Activity: 2380
Merit: 5213
I receive a lot of emails from slack every day. It is really disgusting. I marked slack messages as spam. Now I lose real emails too. But I think this way is better.
hero member
Activity: 994
Merit: 515
Get'em boys
after seeing the view-wallet-info string this got me thinking...your wallet only gets cleaned dry if you have some eth to supplement the transaction? Because I dont see the hacker sending in extra fees to move the tokens Roll Eyes
full member
Activity: 391
Merit: 114
It's been going on for sometime now.
It seems to run in waves......from many a day to just a few on the various channels I'm on.
Saw a note from a crypto media writer that was getting over 60 a day since he is a member of so mant slack groups.

Slack just seems to not care.

I got 45 messages today. Incredible. Gmail app is starting to mark them as phishing. I'm not surprised if they will mark Slack messages as spam...
legendary
Activity: 1019
Merit: 1001
Spectreproject Community Manager
It's been going on for sometime now.
It seems to run in waves......from many a day to just a few on the various channels I'm on.
Saw a note from a crypto media writer that was getting over 60 a day since he is a member of so mant slack groups.

Slack just seems to not care.
full member
Activity: 378
Merit: 101
thank you for the Information
full member
Activity: 391
Merit: 114
they also use my.etherwallet.com.de and a few others.. i get about 50+ notifications per day on slack, it's really getting ridiculous

the same for me, it's incredible how Slack is not doing something to block this!

full member
Activity: 203
Merit: 100
This is bat country!
I even tried to contact the developers of Slack and asked them to come up with a solution to allow us to block certain users. I hope they find one soon cause all these messages are making victims on a daily basis.
full member
Activity: 280
Merit: 106
I have been getting this too, for a coin I mined some time ago. Very annoying. Thanks for the heads up.
erv
full member
Activity: 280
Merit: 100
they also use my.etherwallet.com.de and a few others.. i get about 50+ notifications per day on slack, it's really getting ridiculous

its like a plague.. even email is flooded with e-mails notifying slack  Undecided
legendary
Activity: 2688
Merit: 1240
they also use my.etherwallet.com.de and a few others.. i get about 50+ notifications per day on slack, it's really getting ridiculous
legendary
Activity: 2632
Merit: 1094
It has been months now that these messages are being sent from all the slack channels.
full member
Activity: 308
Merit: 100
I got this scam message on slack:

Quote
=== MYETHERWALLET UPGRADE REQUIRED ===

*HARD FORK FINAL NOTICE*

This message was shared to all Slack users in the hope of reaching as many Ethereum Wallet holders as possible.
Due to the Hard Fork that will be happening in the following days, all ethereum wallets require to be manually upgraded immediately, otherwise they risk being unprotected and your funds may be lost during the fork process.

Please visit https://www.myetherwallet.com/?upgrade#view-wallet-info to upgrade your wallet to latest security settings.

We decided to implement a number of changes and improvements, including higher levels of anonymous transactions, easier programming and smart contracts, and additional security in the form of masking, which will help protect users against hacking.

We are taking these measures to protect both you and our network from phishing and malicious attacks.

Thank you for your cooperation and understanding!
MyEtherWallet, LLC”.


This is a SCAM. The myetherwallet url which looks valid, links to this website (https://www.xn--myetherwaet-15ba.com/?upgrade#view-wallet-info). The UI of this phishing website is the same as that of myetherwallet.

Original website:
Fake website:

Always check for "MYETHERWALLET LLC [US]" cetificate (marked as 1 in the original screenshot). This certificate detail is missing in the fake website.
Don't click any links you get on channels like slack etc.
Be very careful when uploading/entering your private key/wallet backup on any third party services.

Jump to: