Author

Topic: Warining : phishing on electrum.net (Read 402 times)

newbie
Activity: 3
Merit: 0
July 09, 2019, 12:02:56 AM
#28
If this message is read by Hackers, please return the money to the original wallet, the child needs treatment !!!
1ME9AwwAXVoZjbhgEpCBvBe5zShhzPcK7m
legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲
July 03, 2019, 05:11:23 AM
#27
cube42&Dizzona, I'm sorry for your losses, you are victims are fake wallet which can still be downloaded if you use outdated version of official Electrum. Or if you search for Electrum by using Google search engine without adblocker and click at the top of search results where Google show paid advertisements.

I know how easy is to be tricked to download / update wallet when you see pop-up in official app, but this is just exploit hackers use even today. Unfortunately the lessons of the manner in which it should be handled with cryptocurrency costs too much.
legendary
Activity: 2730
Merit: 7065
July 03, 2019, 04:09:18 AM
#26
Are those internal sites only?
Or accessed via the internet? I could not understand such a situation.

Is there no IT administration or similar ? I can't imagine they approve that.
They can be accessed via the Internet. I can use them at home as well as from the office. Once we log in we are redirected to a https site BUT the site where the login details are entered is not encrypted.

To be honest I am not sure why their IT team allows it to be done in that way.
newbie
Activity: 3
Merit: 0
July 02, 2019, 11:55:09 PM
#25
Hi guys. If it is less painful to someone that he is not the only one, then I will write that I was also robbed after installing the update from electrum.net. Stole 1.4 BTC. It is a pity that this money was intended for the treatment of a child. Let the criminals be punished for it.
hero member
Activity: 3010
Merit: 794
July 02, 2019, 04:16:32 PM
#24
be careful  electrum.net is a phishing website .
I have lost 1 bitcoin installing the fake application...
 Cry
here transaction ID : https://blockstream.info/tx/825bf2963e3b88777fd8a323eeaf300a69676b7cc24929625c53c4d5ffec28f3
I want to die today...
Sorry for you loss.Its already down.


Just wondering on how you do end up on electrum.net?Google search? This is a common mistake for most people.
HCP
legendary
Activity: 2086
Merit: 4363
July 02, 2019, 03:57:33 PM
#23
I have updated elctrum (was a pop up wijting electrum to upgrade...i did that...and then i transfer my bak for bitcoins.
I recieven the bitcoins...then i want to move my bitcoins to Exodus...I did fill in the recieve adres   but the ecoins are not delevired! And its now 2 days now....am i being hacked?
What version did you update to? and where did you download it from?

If it was a version 4... you have definitely downloaded a fake version of Electrum and your coins have most likely been stolen.
If you downloaded from anywhere other than https://www.electrum.org/#download (check your browser history), then you have most likely downloaded a fake version of Electrum and your coins have most likely been stolen.
newbie
Activity: 4
Merit: 0
July 02, 2019, 03:38:15 PM
#22
I have updated elctrum (was a pop up wijting electrum to upgrade...i did that...and then i transfer my bak for bitcoins.
I recieven the bitcoins...then i want to move my bitcoins to Exodus...I did fill in the recieve adres   but the ecoins are not delevired! And its now 2 days now....am i being hacked?
legendary
Activity: 1624
Merit: 2481
July 02, 2019, 06:23:09 AM
#21
But my company provides us with several sites that uses shared login details between several partners and some of the sites are unfortunately not encrypted.

Are those internal sites only?
Or accessed via the internet? I could not understand such a situation.

Is there no IT administration or similar ? I can't imagine they approve that.

TLS certificates are for free. There is not a single reason to not use them, especially when handling sensitive information.
legendary
Activity: 2730
Merit: 7065
July 02, 2019, 05:38:08 AM
#20
Never use insecure connection even if you trust the other party, insecure connection is vulnerable to MITM attack which can be used to collect user's data & manipulate send/received data (such as edit Bitcoin address).
I understand but unfortunately in my line of work I am sometimes forced to do that.
What I do in private is a different thing, especially with Bitcoin, wallets, etc. But my company provides us with several sites that uses shared login details between several partners and some of the sites are unfortunately not encrypted.
legendary
Activity: 1624
Merit: 2481
July 02, 2019, 01:31:51 AM
#19
But overall I agree that a non encrypted connection between you and the server should be avoided unless you absolutely trust the other party.

If you transmit sensitive information via the internet, you already have to trust the other party.

Encryption does not protect you from the other party, you are basically encrypting for them to decrypt since you share the same key.

Encryption is necessary because everyone in between (every router, server, basically anyone who wants to listen to that) can read and modify the information.
You are protecting your data from a 3rd party, not from the server you are communicating with.
legendary
Activity: 2730
Merit: 7065
July 01, 2019, 09:12:06 AM
#18
Anything which doesn't have a TLS certificate should be accessed with caution. Do not download software via http. At least not if you can't or won't verify the signature of the file.
Anything in connection with financial information should not be entered on sites that don't have SSL certificates. In my everyday work I often come across sites used by my company that are not encrypted and use simple http, even in connection with login details. It is not the best practice but that is their problem and their hasn't been any security breaches that I am aware of.

But overall I agree that a non encrypted connection between you and the server should be avoided unless you absolutely trust the other party.
legendary
Activity: 1624
Merit: 2481
July 01, 2019, 03:00:23 AM
#17
Exactly, it only means that the connection between the user and the web server is encrypted. SSL certificates are cheap nowadays. I saw ads as low as $8 a year. Phishers and hackers will buy such cheap certificates solely for the reason that people think they are a sign of security.

You can get them for free.
Let'sEncrypt offers free TLS certificates. They don't even need to pay for it anymore.

But still, a lot of scams don't even bother get a certificate  Roll Eyes
Anything which doesn't have a TLS certificate should be accessed with caution. Do not download software via http. At least not if you can't or won't verify the signature of the file.

 
legendary
Activity: 2730
Merit: 7065
June 30, 2019, 08:56:03 AM
#16
An SSL certificate has nothing to do with scams or fraud or trustworthiness of a website...
Exactly, it only means that the connection between the user and the web server is encrypted. SSL certificates are cheap nowadays. I saw ads as low as $8 a year. Phishers and hackers will buy such cheap certificates solely for the reason that people think they are a sign of security.
HCP
legendary
Activity: 2086
Merit: 4363
June 29, 2019, 04:14:33 PM
#15
An SSL certificate has nothing to do with scams or fraud or trustworthiness of a website... Although it's a common sign of a scam website to make a big deal about the fact that they do have an SSL certificate Roll Eyes

All an SSL cert does is allow them to offer https:// connectivity so that the connection to/from the website is encrypted.
newbie
Activity: 4
Merit: 0
June 29, 2019, 03:54:00 PM
#14
I am sure this is not very helpful for you, but I got the same today with my 0.75BTC (my entire wallet)
Exactly the same, but from electrumsky.com
Hard lession!
We could go for a beer... just not to feel too idiot

Best

A



I am sorry for that. and I can really understand you ...
Electrum.net is offline now ( server not respond).
yesterday I have report a complain to French Police, this is the only thing I can do.
i have also report the website to google.
i have contact let's encrypt ( ssl provider) and ask to disable this phishing website , here the crazy reply:

"Thanks for the report. Our current policy does not allow us to revoke certificates for sites suspected of engaging in phishing, distribution of malware, or other forms of fraud".

they don't revoke any frauds website !!!! thats completely crazy!
without ssl certificate I will be suspicious and maybe avoid this mistake.
For me they encourage phishing, malware... and they are participating in this fraud!

HCP
legendary
Activity: 2086
Merit: 4363
June 28, 2019, 09:25:06 PM
#13
electrum.net is already offline

However the electrumsky domain is still up and running. I've reported it to Google SafeBrowsing and have also filed an "abuse" complaint with the domain registrar here: https://publicdomainregistry.com/report-abuse-complain/
Quote
WHOIS result for electrumsky.com
Domain Name: ELECTRUMSKY.COM
Registry Domain ID: 2404872319_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL: http://www.publicdomainregistry.com
Updated Date: 2019-06-21T19:12:14Z
Creation Date: 2019-06-21T19:12:13Z
Registry Expiry Date: 2020-06-21T19:12:13Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.2013775952
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: NS1.ITITCH.COM
Name Server: NS2.ITITCH.COM
Name Server: NS3.ITITCH.COM
Name Server: NS4.ITITCH.COM
DNSSEC: unsigned
newbie
Activity: 2
Merit: 0
June 28, 2019, 08:32:25 PM
#12
I am sure this is not very helpful for you, but I got the same today with my 0.75BTC (my entire wallet)
Exactly the same, but from electrumsky.com
Hard lession!
We could go for a beer... just not to feel too idiot

Best

A


hero member
Activity: 2996
Merit: 580
Hire Bitcointalk Camp. Manager @ r7promotions.com
June 28, 2019, 05:28:47 PM
#11
Thanks for all your messages !
this is a mistake from me and I was feeling so alone , nowhere to complain, no-one to contact...this is really hard.
anyway, scammers will pay for that.
electrum.net is still online... official site electrum.org should do something. this is not normal.
I open this discussion to warn people and hope that will avoid an other expensive mistake.
The official site can't do anything but to warn, they have warning on their website already.

Warning: Electrum versions older than 3.3.4 are susceptible to phishing. Do not download Electrum from another source than electrum.org, and learn to verify GPG signatures.

It has been displayed on their website all of the time and google is known for putting those phishing links at the top because they can't classify if it's a scam or not. Sorry for your loss mate.
newbie
Activity: 4
Merit: 0
June 28, 2019, 03:26:58 PM
#10
Thanks for all your messages !
this is a mistake from me and I was feeling so alone , nowhere to complain, no-one to contact...this is really hard.
anyway, scammers will pay for that.
electrum.net is still online... official site electrum.org should do something. this is not normal.
I open this discussion to warn people and hope that will avoid an other expensive mistake.

sr. member
Activity: 1414
Merit: 283
June 28, 2019, 02:46:22 PM
#9
be careful  electrum.net is a phishing website .
I have lost 1 bitcoin installing the fake application...
 Cry
here transaction ID : https://blockstream.info/tx/825bf2963e3b88777fd8a323eeaf300a69676b7cc24929625c53c4d5ffec28f3
I want to die today...
I really feel sorry for you man, when you are dealing with that amount of money you should really be sure and check not twice but multiple time that everything is alright, but i think that somethings are really hard to avoid, and sometimes you need to get a wake up call to start checking and being careful , but your wake up call had a really high price.
newbie
Activity: 14
Merit: 0
June 28, 2019, 02:25:57 PM
#8
Thank you for info Smiley
It's only ~11k$, average American earns 70$/year so don't kill yourself, you will waste all your life Cheesy
legendary
Activity: 1526
Merit: 1179
June 28, 2019, 02:16:52 PM
#7
Please calm down. What does that have to do with your death? Think of it one day, there are people who bought a pizza for 10000 BTC.
Please be more understanding. OP lost the money in a time where for a lot people this is more than they would be able to safe or make in a decade. Obviously, it's not a reason to feel like that, but it's not entirely uncommon.

The pizza story was at a time where Bitcoin was worth peanuts, and more importantly, the coins weren't lost but spent on pizzas. I'm actually not sure why you think these situations compare....

I am really sorry to read this. It's such a shame that scammers without a second thought ruin people's lives for their own selfish interests. OP, I really hope that you will try your best to start saving up satoshis from scratch even though you aren't thinking about that right now. Undecided
legendary
Activity: 2450
Merit: 1472
June 28, 2019, 01:02:48 PM
#6
The best thing to do, is to look here on forum first, and have some information about
It looks like their website is down or something with the servers, let's keep looking for information, you are the first to come here, but I suspect a lot of people will lose BTC
mk4
legendary
Activity: 2870
Merit: 3873
📟 t3rminal.xyz
June 28, 2019, 01:00:43 PM
#5
I type on google "electrum" and google propose me "electrum.net" before validation , I click  on this proposition and I didn't see anything suspect.
it's just money of course , I will report this website at the French Police , I can believe  the website ,its still online and new people can be stolen again and again...

So it definitely looks like it was through a Google ad.. Next time make sure to not click ads, and to think twice ALWAYS when clicking links regardless where. Also, if you'd buy the same amount of BTC in the future, please. Grab a hardware wallet.

Anyway, expensive mistake. Best of luck moving forward.
newbie
Activity: 4
Merit: 0
June 28, 2019, 12:44:46 PM
#4
I type on google "electrum" and google propose me "electrum.net" before validation , I click  on this proposition and I didn't see anything suspect.
it's just money of course , I will report this website at the French Police , I can believe  the website ,its still online and new people can be stolen again and again...
legendary
Activity: 2450
Merit: 1472
June 28, 2019, 12:35:13 PM
#3
Man, I'm sorry, it's really sad, but don´t you research first to see https://electrum.org is the original site?
Here in Bitcointalk people emphasize a lot that the only original source is https://electrum.org
mk4
legendary
Activity: 2870
Merit: 3873
📟 t3rminal.xyz
June 28, 2019, 11:45:17 AM
#2
That's unfortunate. Do you mind telling us how you fell for the phishing site? Was it through a Google ad?

The site seems down now though.

I want to die today...
Chin up mate. It's just money. It may be hard depending on what your income is, but money can be made back; whereas you only have one life.
newbie
Activity: 4
Merit: 0
June 28, 2019, 11:11:36 AM
#1
be careful  electrum.net is a phishing website .
I have lost 1 bitcoin installing the fake application...
 Cry
here transaction ID : https://blockstream.info/tx/825bf2963e3b88777fd8a323eeaf300a69676b7cc24929625c53c4d5ffec28f3
I want to die today...
Jump to: