Topic: There has been an increased number of "fake" electrums out there, be careful. - page 4. (Read 2000 times)
December 27, 2018, 01:01:18 AM
Yes i fell for it because i was in a hurry and didn't expect a pop-up within a legit version to be a phishing link. Do you know if they think it was just the standalone client that is the issue or is it malicious files aside from it? I plan on wiping and reinstalling OS in the morning but don't want to if i don't have to ( i know, i know i probably should just to be safe)
December 27, 2018, 12:30:06 AM
Below is the link to view the public PGP key of the developer, Thomas V.
https://pgp.key-server.io/pks/lookup?op=get&search=0x2BD5824B7F9470E6
On that web page, there is a link to download the key.
https://pgp.key-server.io/pks/lookup?op=get&search=0x2BD5824B7F9470E6
On that web page, there is a link to download the key.
December 27, 2018, 12:12:50 AM
The real links are:
https://github.com/spesmilo/electrum (the github repository hosting the code)
https://electrum.org/ (website of the project)
6694D8DE7BE8EE5631BED9502BD5824B7F9470E6 (the real PGP public key of the developer)
Anything else is fake. Don't just trust me, double and triple check these values yourself.
I have also included the PGP public key because I have been seeing many scammers in the past signing the malicious Electrum releases with a PGP public key (obviously a different one that they own) and if you check the signature with their public key you will see a correct signature and it can create the illusion of being real!
Additionally if you see the following error message, ignore it and change your server. It is the malicious server of the attacker and as you can see the link is also fake:
More information:
https://github.com/spesmilo/electrum/issues/4953
https://github.com/spesmilo/electrum/issues/4968
https://github.com/spesmilo/electrum (the github repository hosting the code)
https://electrum.org/ (website of the project)
6694D8DE7BE8EE5631BED9502BD5824B7F9470E6 (the real PGP public key of the developer)
Anything else is fake. Don't just trust me, double and triple check these values yourself.
I have also included the PGP public key because I have been seeing many scammers in the past signing the malicious Electrum releases with a PGP public key (obviously a different one that they own) and if you check the signature with their public key you will see a correct signature and it can create the illusion of being real!
Additionally if you see the following error message, ignore it and change your server. It is the malicious server of the attacker and as you can see the link is also fake:
More information:
https://github.com/spesmilo/electrum/issues/4953
https://github.com/spesmilo/electrum/issues/4968
Jump to: