*** WARNING! *** New Steemit Phishing Scam -- Be Very Careful with Certain Comments

in #scam6 years ago

Your Attention PLEASE!

This is a general notice to all Steemians! 

hellcow
Beware this user!

There's a new phishing scam afoot in our community-- appears to have just started, maybe half an hour to an hour ago. Please take a moment to familiarize yourself with this, so you don't become a victim of theft!

The intent of the perpetrator is to steal your Steemit master password to gain access to your account and steal your rewards!

A relatively new user by name @hellcow is posting comments on just released posts, all with very similar text to this: 

hellcow
DO NOT click on any links that look like the above!

However, the link is spoofed! It will take you to an offsite page that "looks like" Steemit, but actually isn't. There you will be presented with what LOOKS LIKE a Steemit login screen, but actually this is an attempt to get your Steemit password, so that person can access your account... and presumably empty out your funds.

Even though this person has already been flagged into oblivion, the pattern continues.

DO NOT CLICK ON THE LINK, instead just FLAG the comment if it is not already invisible.

Don't fall for this cheap attempt at stealing!

I am sure others have made similar messages, but everybody needs to be aware this is happening, so PLASE RESTEEM this for greater visibility!

Thank you!

We now return to our regularly scheduled programming, already in progress...

Created at 171226 13:52 PDT

Sort:  

Very useful and important post you share. It help us to be aware of this user

Ever since the rise of prices of SBD and Steem , it seems as if a lot of scam has come along with it

Whenever there is money on the table, some people seem to think it's an invitation to try to steal it. Which is sad, since we have a perfectly legitimate way of earning rewards here!

Greed gets to people , what can I say .

Yes @denmarkguy but thieves are lazy and just love money without work ! fck this mentality they are the enemy, the parasites )

Thanks for the heads up! Will be on the look out! 👀

Glad this scammer got caught early. I hope no one fell for this garbage.

That would be my hope, as well. I think he only got about 20-25 comments out there before that door slammed shut, so I'm hopeful.

Thank you very much for your information, their are some right bastards out there. Cheers mike

Scary thanks for the heads up!

I know @kubbyelizabeth, it is. If you feel inclined to put out the word in the MSP community, that would be awesome! I'm sure this guy is already "buried" but better safe than sorry

Thanks for the warning. It looks like the same trick that someone used a while ago. It's a HTML formatted link leading elsewhere.

Steemit should introduce a hierarchy for design options. There is no problem when trusted users embed HTML code in their posts, but it should be both restricted for newbies and there should be the possibility to take away the right again when abused.

It does seem that whenever the value of Steem is rising, more bottom dwellers come out with their shenanigans.

What you bring up here is something I have suggested before... we need a different "score" here, aside from just reputation and SP; one that is trust-based and directly related to your level of seniority and actual interaction/contribution here. I know reputation sort of does that... but it doesn't really reflect actual trust, standing and contribution in the community, just how much you've been upvoted.

I thought about this before, too. That problems occur is normal, it is the question whether the system has proper mechanisms in place to cope with them systematically.

A solution could involve that users can "buy free" certain functions with their SP/SBD like I described it with HTML or maybe a recursive reputation chain might be something, by which I mean, who knows who and trusts that person (or anonymously user) based on experiences in the past here or elsewhere. This would even work independently of Steemit or the Blockchain. But of course, that too is not failsafe as the case of @zeratul shows.

At the end it is the developers and also the witnesses who have to act (if you want to take some action on this, I will follow you). But I think they will only do that when the project itself is at stake and its standing towards potential investors. You can see that with the case of @haejin vs berni, where they leave things to the steemit "market".

The same will probably also be with low-level scamming attempts. They will leave it to the community to contain it.

I recently wrote a post about another looming problem. Your wallet tells me, you are not affected, but maybe in the future you will, it's about robbers paying newly rich Steemians a visit at home.

I will follow you now.

While it’s not new this is first time I have heard about it in a few months now. Scammers must back at their old tricks again.

Yes, I remember some similar things going around-- last time they came as "wallet spam," as I recall. This is a little more insidious because the links LOOK legit, but if you hover your cursor over them you can see the hidden redirect.

Last time if I'm not mistaken it started out as this then spread into wallet spam with them claiming there been an account security issues.

Wonder if they will ever include peoples rep score in wallet transactions as well. Or even an option to enable a second key code requirement to send or use steem/sbd

Yes, it would be nice if there were more security measures... I like how there are now prefilled fields for people you're already connected to when you make a wallet transfer... makes it all but impossible to put a type in an exchange's username, for example.

On another site I was on-- many years ago-- there was something called a "web of trust" that worked independently of reputation. Reputation is automatically calculated... web of trust could be a purely manually created score.

Wow! Thanks for the heads up... This is scary. More people need to see this. You've earned my vote.

It's just nasty. You can resteem this post... but ABOVE ALL, if you see any comments like the one above, just flag it to make it invisible.

these hacking attacks will increase tremendously , it already happens to exchanges , phone wallets , get some good safe place for your cryptos.
IF you hold "more coins"consider to invest those 60 bucks in a COLD wallet

Sad... but true. My first exposure to this sort of thing was phishing emails during the early days of PayPal... "Your account has been compromised! Please reset your password!" and all that garbage.

A good multi-currency hardware wallet does seem to be becoming more and more of a necessity.

Ah! gentlemen, there is no need to be so distrustful. Now go ahead, click on the image below to visit my trusty webapp and verify that your Credit Cards haven't been hijacked by the hackers. 😂 }:)

You've been hacked!

LOL good one !

Sure dear!! Laughter is the best ally for awakened souls. ¿Doesn't it? :)

Yes, well... clearly not everyone has a sense of humor about this sort of stuff...!

Yeah mate! that's for sure. Because, to have Sense of Humor you have to be a thinking being. And clearly, not everyone can afford and bother to think before acting. }:)

Helloooo!! there is something there?

Hello!

Coin Marketplace

STEEM 0.28
TRX 0.13
JST 0.033
BTC 62121.36
ETH 3004.20
USDT 1.00
SBD 3.71