Scammers creativity and efforts to steal your credentials are endless!
The battle between the defenders of the community and scammers is raging. Thanks to combined work from @steemcleaners' team members (and several other users like me, we managed to reduce the number of scammers' victims.
It seems that our efforts to educate and warn users are paying off. Scammers are now forced to use increasingly complex or elaborated phishing techniques.
Here is a new one, very pernicious! Be very careful!
Scam Description
The scammer publish the following comment on user’s post
If you click on the link in the comment, you will be redirected to the following site:
NOTE: the domain name displayed may be different from the above screenshot
This website is a FAKE COPY of minnowbooster's website!.
You will notice the webpage is NOT SECUTED by a valid SSL certificate and that the underlying URL of the login item in the Account menu leads to another website domain.
If you look at the original site, you will notice that counterfeiting is particularly well done. But the original site is secured by a valid SSL certificate.
If you click on the login item in the account menu of the phishing website, you will be redirected to the following page:
NOTE: the domain name displayed may be different from the above screenshot
The page displayed by the site is a fake SteemConnect login page!!
If you enter your credential, and click sign-in (something YOU SHOULD NOT DO), you will be displayed an error page
The purpose of this webpage is to steal your credentials to hack your account!
Preventive action activated
I will add any account sending phishing links to the black list of my Warning-Bot and it will issue warnings with a link to this post, notifying users of the malicious activity of those accounts.
If you find similar phishing attempts, contact me on steem.chat
To protect yourself, you can:
- always double check before clicking on a link, especially if this links take you away from steemit.com.
- verify the reputation of people writing comments on your posts. A user with a low reputation should trigger you attention.
Previous threat alerts
If you missed them, please find here the previous alerts I published:
- Scam alert and white hat counter-strike
- Phishing exploit has been stopped - Scammers thwarted!
- Potential scammer reported- @jones420
- Fake Steemit website try to steal your password!
- Phishing attack to steal your active key
- Potential scammer reported - @minnowpond
- Scammer reported - @russiann
- Scammer reported - @steemitrobot
- Scammer reported - @tripadvisor.com
- Scammer reported - @harquick
- Scammer reported - @gtg.witnesses
- Phishing site reported - sleemit(dot)com
- Phishing site reported - www.steemitfollowup(dot)ml
- Phishing site reported - www.steemitfollowup(dot)cf
- Phishing site reported - www.autosteemer(dot)com
- Phishing site reported - www.autosteemer(dot)club
- Phishing site reported - upperwhale
- Phishing site reported - steamit(dot)ga
- Phishing site reported - steenit(dot)cf
- Phishing site reported - steemautobot(dot)ml
- Phishing site reported - autosteem(dot)info
- Phishing site reported - steemij(dot)tk
- Phishing site reported - steemitservices(dot)ml
- Phishing site reported - uppervotes(dot)ml
- Phishing site reported - steemupgot(dot)ga
- Virus infection threat reported - searchingmagnified(dot)com
- Phishing site reported - steemrobot(dot)ga
- Phishing site reported - postupper(dot)ml
- Phishing site reported - steembot
- Phishing site reported - steemone
- Phishing reported - Scammers use account's profile
- Phishing site reported - steemitfoto
- Phishing site reported - SteemLove
- Phishing site reported - Autoupvotes
- Phishing site reported - SteemitConnect
reminder
A bit of paranoia is the basis of security.
There are a few simple rules to follow in order to avoid having your account hacked:
Rule 1: NEVER, I repeat, NEVER use or give your owner key or password!
Rule 2: Use your posting key to login, post and vote on trusted websites like steemit.com or busy.org.
Rule 3: NEVER give your active key as this key allows to control your funds! Only use your active key for special operation like money transfer or account update on trusted websites like steemit.com.
Rule 4: Anywhere else, if you are requested to provide any of the above key: RUN AWAY!!!
4 simple rules. It's not much to remember. Follow them scrupulously, and you will only have to laugh at unsuccessful attempts from scammers.
Spread the words, resteem this post to your friends, and you will make the platform safer.
Thanks for reading!
If you notice any new suspect activity like the one described above, drop a comment on this post or contact me on steem.chat
Thanks for this post.
Wow! I fucking hate scammers! HATE them. I just don't get it. The level of effort that goes in to creating and orchestrating a fake site like this is crazy - why not just put that energy into an actual post that might earn some funds. Thanks for sharing - keep doing all the good work you're doing. Much love.
I agree with you. So much effort. But if they manage to deceive enough people who have a significant amount in their wallet, then it may be profitable.
Very good post sir 👍👍
just vupvote you mr. @arcange 😎
Resteemed for more exposure!
Thanks for the great work!
This is really informative..... I'm already on the alert
It really has no limits, you have to make everyone aware of any of these attacks, they are lurking anywhere, thank you for this detailed information.
I gotta tell ya, I absolutely love how much you guys are keeping everyone safe and informed. I have also started watching for them, and letting people know, if I happen to see them.
Thank you so much for the hard work you put in! Its unfortunate that there are people out there trying to cheat the system.
I really appreciate seeing your posts as a contant reminder to take security seriously
Thank you for educating a knowledgeable information.
thanks for sharing @arcange!!! great help:0
thank you for this post you guys are caring and thinking for steemians safety
Thank you so much for your help to eliminate these scAmmers around steemit, I'm one of thome minnows that you've been warned with those phising site on my post... I'm so grateful to have like you on this platform to protrct us minnows 😘😊❤️