Topic: Take care from a update Link on MyEtherWallet on Bitcointalk ! (Read 972 times)

You can install it on the Firefox mobile app. And I would say they can be trusted.

I agree, better to not install 3rd party apps on my mobile phone at all.

There are android browsers that allow you to install extensions, but I've never used them.  I don't know if I'd install MetaMask on some random browser I download off the playstore.  And, be very careful; MetaMask does not have a mobile app.  Not long ago there was scam app on the play store that was imitating MetaMask.  I stupidly installed it on my phone and lost a tiny bit of ethereum.

Be safe.

is there any metamask alike app to be saver on mobile phone internet?

I would like to preemptively plead not guilty

Hell yeah, they all use _ in their usernames. Why they all use _ in their usernames? I think "maybe" list of theymos is now pilled up heavily and even he couldn't find out what should I do next. He is also a human being.


@LoyceV these days

It's a false positive, I didn't report that post. Automated lists still need a manual review.

Next time I'll add a link to the post history, to make it faster.

@LoyceV, I saw this one too and I think he's not one of them. He just quoted the post and asked if any mod can do something (see quote below).

yes it's very annoying, today at mining(altcoins) found 5 phishing links and have been reported, and @philipma1957 found 20

All you can do is keep reporting them. They're easy to spot with the naming formatting. I've nuked probably 50+ today, but this is just one of those issues were going to have to manually deal with by users reporting them until measures are put in place to prevent them. All new users being shadow-banned until white-listed by staff would at least stop them from showing up and being a nuisance and at least theymos put that suggestion into the "maybe" pile so maybe it will be implemented one day.

All I want is my own nuke button

Blocking one URL doesn't help, they're using many different links now.
     1. grigjoy_7F
     2. Kholeen_GK
     3. BabaDunya_gU
     4. kkeksik_Ck
     5. made_in_russia05_0S
     6. SeeYouSomeday_dp
     7. RuDen6i4_Zy
     8. Brrr7_Xr
     9. art_nov_Vz
I couldn't report any on this list, their posts disappeared when I wanted to click Report

I won't tell the spammers what I'm searching for, but here's a new list (which overlaps previous lists):
Give me a few 30 minutes to scrape BPIP for banned accounts. I'll report anything that isn't nuked yet:
     1. mrswest09_AZ Nuked!
     2. Patriot111_AR Nuked!
     3. NikolayLvovich_VF Nuked!
     4. hfkd84_do Nuked!
     5. diokhan_X_S7 Nuked!
     6. Ivvolkovv_aS Nuked!
     7. nikoinlove_3x Nuked!
     8. hpsih_Ya Nuked!
     9. AuthorV_43 Nuked!
    10. klimmm_fo Nuked!
    11. belka966120_G5 Nuked!
    12. lasvegas_coin_4e Nuked!
    13. truiop12_ep Nuked!
    14. ru843_Bm Nuked!
    15. grigjoy_7F Nuked!
    16. malop12_6O Nuked!
    17. knyazhna11_44 Nuked!
    18. docsis_UO Nuked!
    19. Holodoff_zL Nuked!
    20. karamelka189_GK Nuked!
    21. jskee_po Nuked!
    22. mmmmxxxmmmm_rj Nuked!
    23. Kholeen_GK Nuked!
    24. cyberkir_uH Nuked!
    25. Mister_Ruslan_wj Nuked!
    26. tommy_hilfiger65_ym Nuked!
    27. WARbeats13_kq Nuked!
    28. Ryba96_Ye Nuked!
    29. yeager1_a8 Nuked!
    30. Bddesign_m3 Nuked!
    31. eg9st2_pj Nuked!
    32. KadyrovBET_mW Nuked!
    33. yanamaleewa_Qf Nuked!
    34. agasi333_tI Nuked!
    35. BAGreruss_mg Nuked!
    36. Pikachu_29_Ww Nuked!
    37. kolli1_Rt Nuked!
    38. eklykov_52 Nuked!
    39. Pizzazamm_fN Nuked!
    40. AuthorV_8M Nuked!
    41. pshnx213_FR Nuked!
    42. Doobik_xU Nuked!
    43. Pirojenka85_HR Nuked!
    44. DjonGetuber_iv Nuked!
    45. ezeandrey_gg Nuked!
    46. Glebovoz_7A Nuked!
    47. Kobelewis_bc Nuked!
    48. litera7046_aZ Nuked!
    49. Petcold_so Nuked!
    50. BangBangMeow_2D Nuked!
    51. BlackChamp15_Gc Nuked!
    52. BREYKER02_T0 Nuked!
    53. Ylia26_6p Nuked!
    54. DropOnBy_mx Nuked!
    55. magicmarimari_R6 Nuked!
    56. TonyaStark_6l Nuked!
    57. BabaDunya_gU Nuked!
    58. RomanSergienkoM_iD Nuked!
    59. Dmoskovsky_5P Nuked!
    60. Youtube_girl_rj Nuked!
    61. xz1234567_J1 Nuked!
    62. Lexey_7_X7 Nuked!
    63. kkeksik_Ck Nuked!
    64. jdm1love_sS Nuked!
    65. art_nov_LE Nuked!
    66. Justboy86_Hk Nuked!
    67. Moscow_rassvet_oo Nuked!
    68. DrugMagazine_et Nuked!
    69. rzzzzr22_Xu Nuked!
    70. made_in_russia05_0S Nuked!
    71. darkmikh_FP Nuked!
    72. pqkrivulya_H4 Nuked!
    73. Mudak_mudak_ya Nuked!
    74. SeeYouSomeday_dp Nuked!
    75. Eligosss_tF Nuked!
    76. RuDen6i4_Zy Nuked!
    77. dianaa_dreval_u7 Nuked!
    78. Qanterion_uK Nuked!
    79. sekret_kota_borisa_f4 Nuked!
    80. angryclientt_9a Nuked!
    81. zhura0603_EH Nuked!
    82. Brrr7_Xr Nuked!
    83. soberlook_Qm Nuked!
    84. BceLIpOcTo_JC Nuked!
    85. art_nov_Vz Nuked!
    86. Alexey_Dorofeev_7A Nuked!
    87. Qwer4048_lq Nuked!
    88. pavlusya_OR Nuked!
    89. AbuXamza200_Xn Nuked!
    90. DONIA-48 (BPIP)
    91. a89251011008_Um (BPIP)
    92. alesamoxa_SL (BPIP)
    93. liltreex_Wp (BPIP)

I'm not a tech guy, but there are so many members having knowledge about how to avoid this kind of attacks in the first place. This is the second time during this week and is there any loopholes in the bitcointalk security system? Can you guys backtrace and found the people who're behind this.

I think @theymos or any staff member, we owe a hearing from you guys?

---

Admin should give another special rank or shining star to LoyceV for his mission of nuking newbies/bots

  

My list is longer now (I haven't checked which ones you've reported already):
     1. hfkd84_do
     2. misterDikson_za
     3. irondim_qg
     4. Rexx_boy_a0
     5. jdan21_Oa
     6. truiop12_ep
     7. magicmarimari_Mv
     8. KatyaLimova_OB
     9. phantomfucker_bb
    10. pqkrivulya_Ol
    11. vika_basenko_Ac
    12. KadyrovBET_mW
    13. agasi333_tI
    14. DjXoma_gm
    15. jskee_P1
    16. antihuy_Xb
    17. Wizzadr_mQ
    18. SperanskySSS_dj
    19. dzota_qq
    20. Kobelewis_bc
    21. durov666_ki
    22. l1488_RS
    23. Dukhovni_m7
    24. viktoria_k85_XH
    25. Alexandrff97_Yc
    26. RomanSergienkoM_iD
    27. Maksimvrode_hQ
    28. pouter_UE
    29. La_mort_0I
    30. Mojprop_NH
    31. Magae001yc_IT
    32. sergey_12_CV
    33. GHXST_WR
    34. Brrr7_Xr
    35. UnmasteredAgain_EK
    36. NatTwix_Xw
    37. Aaron_Morgan_UR
    38. hpsih_eu
    39. newwrass_GU
    40. misterDikson_jm

Yeah, I found the same.
I found this below my comment on the thread which I comment on, I thought someone replying to my comment (when I use "Show new replies to your posts."), but I found that the Newbs were back, the same link as before (with shortened URL - I've been check)

I'm not really sure if I'll post it here or should I open a new thread so that it will be seen in the main post. However, it's about a suspicious update link on MEW as well, so I decided to post here first. (Based on the usernames, most likely it's the same person/people is/are behind this like the first attempt)

Woah a total of 91 posts of phishing link in my list (and still counting....)
UPDATE: All users in my list have been nuked.

Their new way to deceive/scam people about MEW update (I put the link on a code):

Plenty of Brand New accounts are posting again. I've reported the ff users already:

1. m_karina_7K	11. Voldema_r_32	21. tobbyas_kU
2. RichiHart_tP	12. Holodoff_M6	22. Fateisnothinginmaway_q0
3.sonhousewood_DK	13. mishalion_3Z	23. NatTwix_Xw
4. Damkredit_KW	14. avtoban03_Ox	24. futurecatf_r0
5. diokhan_X_S7	15. cyberkir_Xd	25. Maksimvrode_Yr
6. HollyDaemon_8r	16. Lord_11_Oy	26. Maclead_Pe
7. Sokol_92_RU	17. aktiverclub_WB
8. xz1234567_J1	18. vladbo_3y
9. EverBack_Uh	19. BAGreruss_H5
10. White1900_l8	20. Moscow_rassvet_oo

And in another different post (I put the link on a code too):

Reported users using the post above:

1. Holodoff_zL	11. pshnx213_FR	21. hfkd84_do	31. rzzzzr22_Xu
2. AuthorV_8M	12. BlackChamp15_Gc	22. eg9st2_pj	32. Patriot111_AR
3.Youtube_girl_rj	13. Qwer4048_lq	23. belka966120_G5	33. Lorinka_WX
4. Bddesign_m3	14. truiop12_ep	24. Eligosss_tF	34. kostyaevseev_cO
5. DropOnBy_mx	15. DrugMagazine_et	25. lasvegas_coin_4e	35. vladikan22_Hi
6. yeager1_a8	16. DjonGetuber_iv	26. Justboy86_Hk	36. Upyr875_fV
7.angryclientt_9a	17. litera7046_aZ	27. pqkrivulya_H4
8. Lexey_7_X7	18. diokhan_X_S7	28. Eligosss_tF
9. Doobik_xU	19. Ivvolkovv_aS	29. Mister_Ruslan_wj
10.nikoinlove_3x	20. Dmoskovsky_5P	30. Pikachu_29_Ww

Another post with new link used (I put the link on a code too):

Reported users with the post above:

1. darkmikh_FP	11. BAGreruss_mg	21. Ryba96_Ye
2. ezeandrey_gg	12. Glebovoz_7A	22. Mudak_mudak_ya
3. Kobelewis_bc	13. NikolayLvovich_VF	23. dianaa_dreval_u7
4.yanamaleewa_Qf	14. pavlusya_OR	24. sekret_kota_borisa_f4
5. Qanterion_uK	15. eklykov_52	25. knyazhna11_44
6. vladislavzamorin_lE	16. Petcold_so	26. BangBangMeow_2D
7. ru843_Bm	17. karamelka189_GK	27. hpsih_Ya
8. jdm1love_sS	18. mmmmxxxmmmm_rj	28. BAGreruss_0i
9.RomanSergienkoM_iD	19. docsis_UO	29. La_mort_0I
10. malop12_6O	20. soberlook_Qm

For those who didn’t see this thread before now, the link was “ my wallet ether.com” (without spaces). This site is a phishing site (for google search results).

You should not see this link on the forum anymore because it will automatically be changed to a warning of a phishing link.

Lack of right information at the right place is the biggest drawback of crypto world. If a user had the right information, he would know that ETH wallets don't require users to enter their private keys for updates, especially a browser wallet. Do you think we can have a sticky link in BTT menu bar itself, which has all the security related and general tips about wallets and chains in a point wise simple language? Nothing technical, just plain simple points.

This is a great example on why newbie accounts should not have the opportunity to write freely in all sections of the forum.

Thanks , it was a fight with myself because i just was on the way going to sleep and they started to spam that shit !

But you know we always keeping the eyes open for Spam to get them nuked !

Nice work too on your thread     

Great work here Lafu. I found only one who got fooled by the site, i don't really know if he actually opened that link but he said that he checked it and I left him a message to secure his savings just in case.