Be careful when you receive comments with promising proposals.
They often come from scammers. Every day, I discover and warn you about new phishing attempts (see bottom of this post for a list of them).
Here is a new phishing attempt spreading on Steemit.
Scam Description
The scammer publish the following comment on user’s post
If you click on the link in the comment, you will be redirected to the following site:
The site is a simple “static” website created using the gooyaabiteloates.com website creator.
In the middle of the website, you are invited to “test the service for free” for 30 days.
If you click on the “Join Now” button, you will be redirected to a fake SteemConnect page
The uppervotes(dot)ml website looks EXACTLY like steemconnect.com, but its behaviour will differ as it clearly want to steal your credentials to hack your account!
What is Phishing?
Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details (and money), often for malicious reasons, by disguising as a trustworthy entity in an electronic communication.
source: Wikipedia
Preventive action activated
I will add any account sending phishing links to the black list of my Warning-Bot and it will issue warnings with a link to this post, notifying users of the malicious activity of those accounts.
If you find similar phishing attempts, contact me on steem.chat
To protect yourself, you can:
- always double check before clicking on a link, especially if this links take you away from steemit.com.
- verify the reputation of people writing comments on your posts. A user with a low reputation shoud trigger you attention.
Previous threat alerts
If you missed them, please find here the previous alerts I published:
- Scam alert and white hat counter-strike
- Phishing exploit has been stopped - Scammers thwarted!
- Potential scammer reported- @jones420
- Fake Steemit website try to steal your password!
- Phishing attack to steal your active key
- Potential scammer reported - @minnowpond
- Scammer reported - @russiann
- Scammer reported - @steemitrobot
- Scammer reported - @tripadvisor.com
- Scammer reported - @harquick
- Scammer reported - @gtg.witnesses
- Phishing site reported - sleemit(dot)com
- Phishing site reported - www.steemitfollowup(dot)ml
- Phishing site reported - www.steemitfollowup(dot)cf
- Phishing site reported - www.autosteemer(dot)com
- Phishing site reported - www.autosteemer(dot)club
- Phishing site reported - upperwhale
- Phishing site reported - steamit(dot)ga
- Phishing site reported - steenit(dot)cf
- Phishing site reported - steemautobot(dot)ml
- Phishing site reported - autosteem(dot)info
- Phishing site reported - steemij(dot)tk
- Phishing site reported - steemitservices(dot)ml
reminder
A bit of paranoia is the basis of security.
There are a few simple rules to follow in order to avoid having your account hacked:
Rule 1: NEVER, I repeat, NEVER use or give your owner key or password!
Rule 2: Use your posting key to login, post and vote on trusted websites like steemit.com or busy.org.
Rule 3: NEVER give your active key as this key allows to control your funds! Only use your active key for special operation like money transfer or account update on trusted websites like steemit.com.
Rule 4: Anywhere else, if you are requested to provide any of the above key: RUN AWAY!!!
4 simple rules. It's not much to remember. Follow them scrupulously, and you will only have to laugh at unsuccessful attempts from scammers.
Spread the words, resteem this post to your friends, and you will make the platform safer.
Thanks for reading!
If you notice any new suspect activity like the one described above, drop a comment on this post, contact me on steemit.chat or via Telegram (@The_Arcange)
I am very happy with you who have participated with this, thank you.
Thank you for helping keep Steemit clean!
Tip!
Very interesting and helpful, thank you very much for sharing information ..
please help to support me
Thank you very much for your warning and for this publication.
When I saw the publication of that account I immediately thought it was a scam and did not pay any attention to it. It is becoming increasingly frequent to see these comments in many publications
Hi @arcange! You have received 0.1 SBD tip from @dmcamera!
@dmcamera wrote lately about: Feel free to follow @dmcamera if you like it :)
Hi @arcange! You have received 0.1 SBD tip from @dswigle!
@dswigle wrote lately about: Monochrome Monday Feel free to follow @dswigle if you like it :)
I support you and love your stuff arcange
I'm planning on doing an expose of you on my blog soon. I'd like to ask you something in email PM first. [email protected]
Better to contact me on steem.chat or telegram (see links in posts)
Thank you friends ... you really help us steemit users ... Good luck to you.
Thanks! I have started flagging these scam posts and never opening them, but thanks for getting the word out so that others wont be duped! tip!
This is great information deserving of a definite upvote and resteem @arcange ! I had to give my "active " key 2 days ago when I set up an Auto Voter for the first time at " steemdunk.xyz " I never give my Owner key to anyone . I no the other Auto Voter sites require it as well so I assumed its required for Auto Voting on my behalf . Is this site safe and the other Auto Voter sites do you know !? It seems to be working great and is needed since I returned to work with no internet . Keep up the great work and thanks for sharing !!💕👍😀
As long as you use SteemConnect to sign in, you will be ok. SteemConnect keeps your login info and the website your using just gets a code, so they never even see your keys. I wouldn't put my key in anywhere else. That being said, alot of these scam sites use a fake SteemConnect login, so you have to be careful and make sure that the url is correct and your browser shows the page as secure to make sure your not being duped.
Ok ! thanks a bunch for your awesome information , its good know !✌👍👍👍
Thanks for sharing this with us... Really helpful because hackers are everywhere.
Thanks your information
Thank you so much @arcange for helping us. God Bless
Did you know that mama13 is the account where the SBD is transferred to from 17 accounts including rinku01. Take a look at her wallet. All those accounts have posted plagiarized material. Thot you'd be interested if you weren't aware. There isn't much there but .... it's not right.
Many scammer now on steemit, a few account that I know already hack, they stolen sbd and use it to phising another.
I think your post need to be translate into other languange, because many steemians such as in my place didn't understand english. I apreciate your attemp to make steemit safe. Already Resteem it.
one must be very careful. I was scammed a month and a half ago by good-kama and gtg.witnesses. They sent me to a site exactly like Steemit, got my key and scammed 663.861 SBD and 21 Steem tokens. It is a shame this exists, however I learned sadly it is the price to pay for a decentralized platform. When a scammer smells money they rid themselves of any moral character and deceive. The one who scammed me was from Romania and sold my SBD on blocktrades in Romania, Switzerland and Amsterdam. Thanks for the heads up @arcange
Thanks for the heads up and valuable information!
Thank you for the warning. Keep up the good work.
It's important to know about these phishing sites! Thanks for your efforts to find them.
thank you very much for informing me this information is very useful for me.
thanks!
Please report hugewhale,bigwhale.this is scammers please check.