Rumors: MEW DNS possible hijacked... stay away and safe

TTITA

full member

Activity: 378

Merit: 100

Quote from: ahoenk on April 29, 2018, 01:18:39 PM

This is the proof that any system can not stay safe. DNS hijacked possibly that one of their dns server is being hacked. It is the same hack method as etherdelta when ED being hijacked and thanks god only 230 ethereum. ED hijacked more scary than this hijacked.

Indeed. That's why i seen many topic in this forum that discussing about securing asset into hardware wallet or cold wallet save on computer outside of network, etc. Because this is big issue that still happens many times.

Quote from: kolonel_x on April 29, 2018, 03:14:35 PM

I think now MEW security is not guaranteed anymore, I myself become a victim of hacked wallet hack, somehow they can find private key access and it makes a headache for token holder

I don't think they are has been dump MEW database, so the possibility that happened could be you entering those phishing site and input your privates key into it or those hackers has been compromised your computer before.

kolonel_x

sr. member

Activity: 1092

Merit: 250

I think now MEW security is not guaranteed anymore, I myself become a victim of hacked wallet hack, somehow they can find private key access and it makes a headache for token holder

ahoenk

hero member

Activity: 1246

Merit: 502

This is the proof that any system can not stay safe. DNS hijacked possibly that one of their dns server is being hacked. It is the same hack method as etherdelta when ED being hijacked and thanks god only 230 ethereum. ED hijacked more scary than this hijacked.

NaXxow

legendary

Activity: 1085

Merit: 1000

ALT Add: APfc4bykKHxYSVkvzsLdQvmiTXvTgMiCRM

Quote from: Bardman on April 26, 2018, 06:04:50 AM

Quote from: Mediator on April 25, 2018, 03:34:24 PM

Quote from: Stargazer on April 25, 2018, 03:24:40 PM

Yes this is true and it is more than dangerous, that is why starting from today, i am only going to use mycrypto for sending eth payments, including tokens

Quote from: Mediator on April 25, 2018, 02:23:57 PM

this is not tumors this is true, MEW has made an announcement about this issue in their official account twitter https://twitter.com/myetherwallet/status/988830652526092288
but now i think its back normal guys. but we have to be careful guys!

I am not going to risk my money in this page anymore, we all know how all those people are

everyone has their own choice. if you want to be more secure you can use hardware wallet. IMHO, easy tips to avoid DNS hijacked by looking at the DNS website, always make sure the DNS have a green color

Just download the wallet and use it on your own computer, it's that simple. Besides DNS hijacking like this could happen to literally any other website, crypto or not. Any kind of security breach can happen to anyone anywhere, you can only use so many measures to prevent it, even top security websites can get hacked. Best thing to do is to split your coins into different options, exchanges, wallet, ledger, paper wallet and so on. It's virtually impossible to lose all your coins this way.

I see, good to know some very informative knowledge from you. I also believe hackers are getting smarter day by day. So it is good to know what actions we will take as soon it will happen to everyone.

Bardman

hero member

Activity: 952

Merit: 516

Quote from: Mediator on April 25, 2018, 03:34:24 PM

Quote from: Stargazer on April 25, 2018, 03:24:40 PM

Yes this is true and it is more than dangerous, that is why starting from today, i am only going to use mycrypto for sending eth payments, including tokens

Quote from: Mediator on April 25, 2018, 02:23:57 PM

this is not tumors this is true, MEW has made an announcement about this issue in their official account twitter https://twitter.com/myetherwallet/status/988830652526092288
but now i think its back normal guys. but we have to be careful guys!

I am not going to risk my money in this page anymore, we all know how all those people are

everyone has their own choice. if you want to be more secure you can use hardware wallet. IMHO, easy tips to avoid DNS hijacked by looking at the DNS website, always make sure the DNS have a green color

Just download the wallet and use it on your own computer, it's that simple. Besides DNS hijacking like this could happen to literally any other website, crypto or not. Any kind of security breach can happen to anyone anywhere, you can only use so many measures to prevent it, even top security websites can get hacked. Best thing to do is to split your coins into different options, exchanges, wallet, ledger, paper wallet and so on. It's virtually impossible to lose all your coins this way.

Mediator

legendary

Activity: 1442

Merit: 1001

Quote from: Stargazer on April 25, 2018, 03:24:40 PM

Yes this is true and it is more than dangerous, that is why starting from today, i am only going to use mycrypto for sending eth payments, including tokens

Quote from: Mediator on April 25, 2018, 02:23:57 PM

this is not tumors this is true, MEW has made an announcement about this issue in their official account twitter https://twitter.com/myetherwallet/status/988830652526092288
but now i think its back normal guys. but we have to be careful guys!

I am not going to risk my money in this page anymore, we all know how all those people are

everyone has their own choice. if you want to be more secure you can use hardware wallet. IMHO, easy tips to avoid DNS hijacked by looking at the DNS website, always make sure the DNS have a green color

Stargazer

sr. member

Activity: 641

Merit: 253

▰▰▰ Global Cryptocurrency Paymen

Yes this is true and it is more than dangerous, that is why starting from today, i am only going to use mycrypto for sending eth payments, including tokens

Quote from: Mediator on April 25, 2018, 02:23:57 PM

this is not tumors this is true, MEW has made an announcement about this issue in their official account twitter https://twitter.com/myetherwallet/status/988830652526092288
but now i think its back normal guys. but we have to be careful guys!

I am not going to risk my money in this page anymore, we all know how all those people are

Aragorn_125

full member

Activity: 448

Merit: 100

MenaPay - Crypto made easier than cash

Quote from: SalmanMJ9 on April 24, 2018, 09:03:31 AM

Some rumors going around that Myetherwallet got hacked.... Better to stay away and not access your wallet with private key or keystore file until they fix it or they announce an update.... Stay safe ya'll

Reference:
https://www.reddit.com/r/MyEtherWallet/comments/8ek0jj/think_i_got_scammedphishedhacked/

--------
UPDATE:

Unfortunately the rumors are true and you can track the hacker wallet here (he stoke almost 25k ETH so far):

https://etherscan.io/address/0xb3aaaae47070264f3595c5032ee94b620a583a39

Here's an official announcement from Myetherwallet:

https://twitter.com/myetherwallet/status/988787116015415296

Yes, now it is better to refrain from using MEW to sleep peacefully and not think about what coins can steal. I hope soon everything will be fine and we'll get to use MEW.

kumiskura

full member

Activity: 632

Merit: 122

Quote from: damberg on April 25, 2018, 07:59:02 AM

It is scary how often do these scamming/phising attempts happen. Every investor and trader should take precautionary measures and make a habit of them (always checking SSL certificate, never accessing MEW from borrowed, public or suspicious computers etc.). We are never safe in this..

it was not scamming nor phising but instead it was DNS itself.
when you are loging in into your account,you will be redirected to 'someplace' and then your account automatically do the transaction.
no matter what,as long as you try to log in or get access to your account,
you will do that directly.
so it's not phising or scamming,it's much more worst compared to those things.

Mediator

legendary

Activity: 1442

Merit: 1001

this is not tumors this is true, MEW has made an announcement about this issue in their official account twitter https://twitter.com/myetherwallet/status/988830652526092288
but now i think its back normal guys. but we have to be careful guys!

kapalmabur

sr. member

Activity: 2002

Merit: 250

some exchange markets have begun to withhold all transaction activity for tokens erc-20. The MEW effect is immense and damaging to the ecosystem if it does not immediately get a practical solution. I do not understand what the relationship between giveaway eth is being intensively done with the practice of piracy dns this time.

Obviously this is very detrimental to many things and the sustainability of the platform itself. I feel this as a hackaton that will make things worse.

dragone

member

Activity: 249

Merit: 10

Quote from: paladium on April 25, 2018, 07:45:37 AM

They had a perfect timing to stop the bull. These are the crypto markets that can not stop.

Agree with you. A lot of fear on market. MEW and article about " OKEx Suspends ERC20 Deposits on Discovery of Critical Ethereum Smart Contract Bug" after that . Looks like someone tried to stop bull market. Anyway I'm not using MEW uti situation will clear. Usually I use metamask so generally I'm not worried about . But in general I worried that crypto has so security problems and I hope MEW will do good job for security our funds. Cause it's really sad wehn people lose their maney that way. It's worst than even scam ICO. When wallet was hacked you didn't know about and don't even know to do.

alexv10av

member

Activity: 504

Merit: 10

once again when hackers make substitution of CSN and depositors lose their coins. Unfortunately, the MEV team still does nothing to make the wallet safe

wndrbr3d

hero member

Activity: 914

Merit: 500

Just use Ledger Nano/Trezor wallet or local version of MyEtherWallet at least (In this variant all you need to fear are viruses/phishing extensions).

crypto-bit

full member

Activity: 333

Merit: 100

Quote from: duyduc256 on April 25, 2018, 07:44:07 AM

Quote from: crypto-bit on April 25, 2018, 03:31:06 AM

This so worried,I read some article regarding this news and i shocked that hacker steal millions of dollar worth of eth and other ERC-20 tokens.The hacker is smart that he able to hijack the DNS of MEW and create some phishing technique.I have also token and eth and i did not acces right now until the issue concern will resolve.

I think all will soon be resolved and everyone will be safe. All hackers are getting smarter as they continually attack the market and we should have more layers of security. I am confident MEW is working to fix this and will give investors more options to secure their accounts. The best advice is not to log in at this point as it is very dangerous

That's why i did not use MEW for a while,I dont want to risk my privatekeys over them, I know that fact that they are working on there DNS issue but still i dont get confident, who know's what the hacker thinks that they can repeat what is already they done.

damberg

full member

Activity: 658

Merit: 108

It is scary how often do these scamming/phising attempts happen. Every investor and trader should take precautionary measures and make a habit of them (always checking SSL certificate, never accessing MEW from borrowed, public or suspicious computers etc.). We are never safe in this..

Palakka

legendary

Activity: 1484

Merit: 1000

Leading Crypto Sports Betting & Casino Platform

Quote from: aggress0r on April 25, 2018, 06:59:38 AM

Quote from: kryptqnick on April 24, 2018, 03:33:44 PM

Quote from: tdeannova on April 24, 2018, 09:40:21 AM

Is this true? today I have several times access myetherwallet to transact, is my wallet safe? this worries me and scares me.

There was a twitter update from MEW that everything seems to be stable now, but I think it would be best not to access the wallet for some time. The hackers used the technique which lives the name of the website as it should be, but redirects it elsewhere. It's kind of tricky and not that easy to notice.

Quote from: aggress0r on April 24, 2018, 03:23:13 PM

Hey guys do you know could this happen to MetaMask account?

ps. I should purchase Ledger as soon as possible

I don't think it can. Metamask is an extension on your browser, I think it's pretty different from accessing a specific website. At least, I see no people talking about this dns thing being also the case for metamask accounts.
Theoretically, though, it could be hacked or you could be deceived, as some stories about Metamask on github show.

Thanks for help, mate. My Metamask account was not affected.

Don't worry If you are using Metamask to store your ETH and your token
I using MEW and Worry to open MEW now. better to wait until any announcement by MEW.

paladium

sr. member

Activity: 448

Merit: 250

CHIEF GROWTH OFFICER OF GLOBAL ENTERPRENEUR

They had a perfect timing to stop the bull. These are the crypto markets that can not stop.

duyduc256

sr. member

Activity: 700

Merit: 250

Quote from: crypto-bit on April 25, 2018, 03:31:06 AM

This so worried,I read some article regarding this news and i shocked that hacker steal millions of dollar worth of eth and other ERC-20 tokens.The hacker is smart that he able to hijack the DNS of MEW and create some phishing technique.I have also token and eth and i did not acces right now until the issue concern will resolve.

I think all will soon be resolved and everyone will be safe. All hackers are getting smarter as they continually attack the market and we should have more layers of security. I am confident MEW is working to fix this and will give investors more options to secure their accounts. The best advice is not to log in at this point as it is very dangerous

aggress0r

full member

Activity: 1050

Merit: 101

Quote from: kryptqnick on April 24, 2018, 03:33:44 PM

Quote from: tdeannova on April 24, 2018, 09:40:21 AM

Is this true? today I have several times access myetherwallet to transact, is my wallet safe? this worries me and scares me.

There was a twitter update from MEW that everything seems to be stable now, but I think it would be best not to access the wallet for some time. The hackers used the technique which lives the name of the website as it should be, but redirects it elsewhere. It's kind of tricky and not that easy to notice.

Quote from: aggress0r on April 24, 2018, 03:23:13 PM

Hey guys do you know could this happen to MetaMask account?

ps. I should purchase Ledger as soon as possible

I don't think it can. Metamask is an extension on your browser, I think it's pretty different from accessing a specific website. At least, I see no people talking about this dns thing being also the case for metamask accounts.
Theoretically, though, it could be hacked or you could be deceived, as some stories about Metamask on github show.

Thanks for help, mate. My Metamask account was not affected.

Topic: Rumors: MEW DNS possible hijacked... stay away and safe (Read 535 times)