Author

Topic: Warning - scammer 'btcshops' active on forum trying to steal your login (Read 5100 times)

newbie
Activity: 14
Merit: 0
The fact that bitcoin has no laws or government regulating it is great...
But that's also the downside to bitcoin...
sr. member
Activity: 288
Merit: 251
Also a good reason to use noscript and deactivate java, so that even if you accidently click on the link you are most likely safe.
This had absolutely nothing to do with any script or java whatsoever.

They just use [url=evilwebsite.com] harmlesswebsite.com [/url] which looks like harmlesswebsite.com so the link appears to be harmless, but actually takes you to some evil page (hover your mouse over the link and notice your browser's status bar which reveals the link's actual destination).

The evil page is made to look like a regular login page (in this case, they duplicated the login page from bitcointalk.org) and whatever you enter there is being stored, and you're being redirected to the real site so you may not even notice you were on a fake page.

Just mentioning because believing you're safe with noscript and deactivating java = false sense of security = makes you actually more vulnerable.
hero member
Activity: 1190
Merit: 516
Got the same pm today. Reported to moderator.
sr. member
Activity: 364
Merit: 250
Also a good reason to use noscript and deactivate java, so that even if you accidently click on the link you are most likely safe.
sr. member
Activity: 588
Merit: 253
newbie
Activity: 42
Merit: 0
Just received this private message in my inbox:

Note that the actual URL is different than what the link looks like (I added the XXXXX to make it not work, to avoid people clicking it here by mistake). Obviously a honeypot spoof URL to steal your bitcointalk login.

More people may have received this. You have been warned.

That is why I tell everyone to hover their mouse over any link to see where it really leads. It should appear on your browser somewhere on Google Chrome its on the bottom left when hovering a link.
sr. member
Activity: 288
Merit: 251
Just received this private message in my inbox:

Note that the actual URL is different than what the link looks like (I added the XXXXX to make it not work, to avoid people clicking it here by mistake). Obviously a honeypot spoof URL to steal your bitcointalk login.

More people may have received this. You have been warned.
Jump to: