Phishing websites and scammers are back!
After the HF20, the activity of the scammers seemed to have been stopped thanks to the new Resource Credits system. It was too good to be true and it looks like are back. Be careful!
I already warned you about several scam attempts (see bottom of this post for a list of them). Here is a new one.
Scam Description
The attacker publish the following comment on user’s post
NOTE: the author or the content of the comment may be different from the above screenshot
If you click on the link in the comment, you will be redirected to the following website:
NOTE: the domain name displayed may be different from the above screenshot
The site is a simple “static” website created using the gooyaabiteloates.com website creator.
On the website, your are invited to click on a “Join Now” button to get 30 free STEEM.
If you click on the “Join Now” button, you will be redirected to a FAKE SteemConnect page
The website looks EXACTLY like steemconnect.com, but its behaviour will differ as it clearly want to steal your credentials to hack your account!
What is Phishing?
Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details (and money), often for malicious reasons, by disguising as a trustworthy entity in an electronic communication.
source: Wikipedia
The goal of the creator of this website is to steal your credentials to hack your account and funds!
Preventive action activated
This phishing scam has been added to the black list of my Warning-Bot and it will issue warnings with a link to this post, notifying users of the malicious activity of those accounts.
If you find similar phishing attempts, contact me on steem.chat
To protect yourself, you can:
- always double check before clicking on a link, especially if this links take you away from steemit.com.
- verify the reputation of people writing comments on your posts. A user with a low reputation should trigger you attention.
Previous threat alerts
If you missed them, please find here the previous alerts I published:
- Scam alert and white hat counter-strike
- Phishing exploit has been stopped - Scammers thwarted!
- Potential scammer reported- @jones420
- Fake Steemit website try to steal your password!
- Phishing attack to steal your active key
- Potential scammer reported - @minnowpond
- Scammer reported - @russiann
- Scammer reported - @steemitrobot
- Scammer reported - @tripadvisor.com
- Scammer reported - @harquick
- Scammer reported - @gtg.witnesses
- Phishing site reported - sleemit(dot)com
- Phishing site reported - www.steemitfollowup(dot)ml
- Phishing site reported - www.steemitfollowup(dot)cf
- Phishing site reported - www.autosteemer(dot)com
- Phishing site reported - www.autosteemer(dot)club
- Phishing site reported - upperwhale
- Phishing site reported - steamit(dot)ga
- Phishing site reported - steenit(dot)cf
- Phishing site reported - steemautobot(dot)ml
- Phishing site reported - autosteem(dot)info
- Phishing site reported - steemij(dot)tk
- Phishing site reported - steemitservices(dot)ml
- Phishing site reported - uppervotes(dot)ml
- Phishing site reported - steemupgot(dot)ga
- Virus infection threat reported - searchingmagnified(dot)com
- Phishing site reported - steemrobot(dot)ga
- Phishing site reported - postupper(dot)ml
- Phishing site reported - steembot
- Phishing site reported - steemone
- Phishing reported - Scammers use account's profile
- Phishing site reported - steemitfoto
- Scammers must really hate me a lot to create a dedicated scam link
- Phishing site reported - pixz
- Anti-phishing war - The crooks continue their bashing campaign
- Phishing site reported - SteemitProtection
- Phishing site reported - myaprotection
- Phishing site reported - TPM Rotator
- Phishing site reported - SteemPix
- Phishing site reported - minnowboosternetwhitelistinvite
- Phishing site reported - steemituper
- Phishing site reported - steemiv
- Phishing site reported - Post copied without your permission
- Phishing site reported - Black Steem
- Phishing site reported - Steembottracker(dot)trade
- Scammer reported - @still-observer
- New scam for phishing website uses fake comments with images
- Phishing attempts use images as comments
- Virus infection threat reported - steemitgiveaway(dot).gq
reminder
A bit of paranoia is the basis of security.
There are a few simple rules to follow in order to avoid having your account hacked:
Rule 1: NEVER, I repeat, NEVER use or give your owner key or password!
Rule 2: Use your posting key to login, post and vote on trusted websites like steemit.com or busy.org.
Rule 3: NEVER give your active key as this key allows to control your funds! Only use your active key for special operation like money transfer or account update on trusted websites like steemit.com.
Rule 4: Anywhere else, if you are requested to provide any of the above key: RUN AWAY!!!
4 simple rules. It's not much to remember. Follow them scrupulously, and you will only have to laugh at unsuccessful attempts from scammers.
Spread the words, resteem this post to your friends, and you will make the platform safer.
Thanks for reading!
If you notice any new suspect activity like the one described above, drop a comment on this post or contact me on steem.chat
