Never give your login and password on unknown websites!
I already warned you about several phishing attempts (see bottom of this post for a list of them). Here is a new one.
Scam Description
The scammer publish the following comment on user’s post
If you click on the link in the comment, you will be redirected to the following site:
NOTE: the domain name displayed and the background image may be different from the above screenshot
If you click on the Login circle in the top left, a popup window will appear on the left side of the page:
NOTE: the domain name displayed and the background image may be different from the above screenshot
The panel displayed by the site is a fake SteemConnect login panel!
If you enter your credential, and click sign-in (something YOU SHOULD NOT DO), you will be displayed an error page
The goal of the creator of this website is clearly to steal your credentials to hack your account!
Preventive action activated
I will add any account sending phishing links to the black list of my Warning-Bot and it will issue warnings with a link to this post, notifying users of the malicious activity of those accounts.
If you find similiar pishing attemps, contact me on steem.chat
To protect yourself, you can:
- always double check before clicking on a link, especially if this links take you away from steemit.com.
- verify the reputation of people writing comments on your posts. A user with a low reputation should trigger you attention.
Previous threat alerts
If you missed them, please find here the previous alerts I published:
- Scam alert and white hat counter-strike
- Phishing exploit has been stopped - Scammers thwarted!
- Potential scammer reported- @jones420
- Fake Steemit website try to steal your password!
- Phishing attack to steal your active key
- Potential scammer reported - @minnowpond
- Scammer reported - @russiann
- Scammer reported - @steemitrobot
- Scammer reported - @tripadvisor.com
- Scammer reported - @harquick
- Scammer reported - @gtg.witnesses
- Phishing site reported - sleemit(dot)com
- Phishing site reported - www.steemitfollowup(dot)ml
- Phishing site reported - www.steemitfollowup(dot)cf
- Phishing site reported - www.autosteemer(dot)com
- Phishing site reported - www.autosteemer(dot)club
- Phishing site reported - upperwhale
- Phishing site reported - steamit(dot)ga
- Phishing site reported - steenit(dot)cf
- Phishing site reported - steemautobot(dot)ml
- Phishing site reported - autosteem(dot)info
- Phishing site reported - steemij(dot)tk
- Phishing site reported - steemitservices(dot)ml
- Phishing site reported - uppervotes(dot)ml
- Phishing site reported - steemupgot(dot)ga
- Virus infection threat reported - searchingmagnified(dot)com
- Phishing site reported - steemrobot(dot)ga
- Phishing site reported - postupper(dot)ml
- Phishing site reported - steembot
- Phishing site reported - steemone
- Phishing reported - Scammers use account's profile
reminder
A bit of paranoia is the basis of security.
There are a few simple rules to follow in order to avoid having your account hacked:
Rule 1: NEVER, I repeat, NEVER use or give your owner key or password!
Rule 2: Use your posting key to login, post and vote on trusted websites like steemit.com or busy.org.
Rule 3: NEVER give your active key as this key allows to control your funds! Only use your active key for special operation like money transfer or account update on trusted websites like steemit.com.
Rule 4: Anywhere else, if you are requested to provide any of the above key: RUN AWAY!!!
4 simple rules. It's not much to remember. Follow them scrupulously, and you will only have to laugh at unsuccessful attempts from scammers.
Spread the words, resteem this post to your friends, and you will make the platform safer.
Thanks for reading!
If you notice any new suspect activity like the one described above, drop a comment on this post or contact me on steem.chat
@arcange
You may want to check; what We have discovered..
This may help in the investigation on The Phishing Bad Links
https://steemit.com/hacked/@bullionstackers/do-you-know-you-have-been-hacked-or-victims-of-phishing-hacked
Congratulations !
your post was resteemed by @resteemza
Please upvote this reply to help us grow
Great job...Thanks for the warning.
Postingan yang sangat bagus arcange.komentarnya sangat mengagumkan saya
It seems there is no end of these sites. Thank you for bringing them to our attention.
excellent writing
thanks for sharing inportant subject
thanks
Thanks for your care and concern to Steemit community...thanks for sharing @arcange
This is quite helpful @arcange (69)
I already resteemed for safety.
Thanks a lot for this
Prevention and control🔛thanks for sharing this important information with us
Thanks for another notice. I'm already paranoid but every now and then something looks legitimate, I forget myself, and click. Bad move, even if a message is sent from a friend, I know. There are activities here on Steemit that seem attractive, but I hold back from participating because I don't really understand the implications of 'clicking and joining'. Maybe as time goes by I'll be better educated about this platform, right now though, it's, post, comment, upvote. That's about it.
Thanks again for reinforcing my paranoia.
thank you so much for the heads-up about this crazy phishing site. I always keep your advice in mind. Thanks so much.
Gran trabajo. Muchas gracias por la advertencia.
Thank you for your awarness.
Thank you for your information @arcange
hello I was able to recover my account, you can delete me from the list please, I am eliminating all malicious comments.
Hello @pepemartinez,
Glad to read you were able to recover your account.
If it was a problem but I'm fine, and the good thing is that you can recover my account, great work you do, and you have a follower.
@arcange why are you saying my comments are a SCAM?
Link just leads to my post, where I'm curating art posts from artists on steemit, I do not ask anything from them, in fact I actually send them part of the reward gathered by the post.
Where is the scam in that?
Well I'm removing my vote for witness until you clarify why your bot is tracking my comments and accusing me of a "confirmed scam"
EDIT:
situation clarified, false positive people, I return my vote to @arcange for witness
Thanks for your positive reaction and the good communication we had!
@arcange Please check post comment section i think this is one more bad link https://busy.org/@arslanq/saver-food-islamabad-foodchallenge/#@muzzls/re-arslanq-saver-food-islamabad-foodchallenge-20180420t053158895z from @ayazdanish
@arslanq, thanks a lot for your help and for notifying.
These is indeed a scam and it has been added to my blacklist.
You can read my post about it here:
https://steemit.com/steemit/@arcange/phishing-site-reported-autoupvotes
https://steemit.com/love/@acyaasd106/cinta-ekspektasi-vs-realita