Many of the ICOs have Slack channels, which have become in some cases the main method of communicating updates for their community of interested people and those looking to get in on their token sales. As it seems with every popular online medium, scammers will eventually find a way to capitalize on it.
If you are subscribed to any Slack group for an ICO, a cryptocurrency, a token, or related, be very very careful.
https://twitter.com/kyletorpey/status/884050209323593729
- kyletorpey
Here's proof of one address used for this scam:
It is now empty as the ETH has been moved, however people are on it, and trying to track down the scammer, see the comments here for more details, as well as other ETH addresses used:
https://etherscan.io/address/0xba83e9ce38b10522e3d6061a12779b7526839eda#comments
One of the scam methods was spam with fake MyEtherWallet links, which looked legit but were spoofed sites at a similar url address. The people who got caught up in this clicked on the link, and sent ETH private keys inadvertently when they logged in to the fake site, and then sent the ETH, giving control over to the scammer.
The best practice is certainly to not sent crypto to any address that you haven't verified with the actual website of the person/company you want to send to, no matter the source. Do not send to addresses that you're sent via Slack, email, chat, text, SMS, etc. Also, don't click on a link to a website where an address is supposedly located - type in the url of the company or token sale website yourself, as these can be easily spoofed, and are a main source of this latest scam.
Be careful out there!