Posts

WATCH OUT - NEW PHISHING WAVE. DO NOT VOTE FOR LEOFINANCE USING THAT LINK, it's PHISHING!

avatar of @keys-defender
25
@keys-defender
·
0 views
·
1 min read

  The phisher is currently using this account with reputation 72 that is difficult to nuke:



This phishing wave started a few days ago on ~~Steem~~, so we were already on the lookout. This attack on Hive should have been stopped as soon as it started thanks to my auto-replies.. but let's keep being vigilant for new phishing domains that could be used by the same attacker.

 

Initial wave on Steemit:

My report:

@keys-defender's automatic detection on Hive:



UPDATE 1
The phisher is now using this other hacked account: @guider

DO NOT INTERACT WITH HIS MESSAGES

 



UPDATE 2:

The attacker started using 2 new phishing domains.
Thanks to @louis88 and @good-karma for the reports.

 

https://images.hive.blog/DQmXKyATTi5rJ87d6PkK4QDezkoAngNaUJK5ntWzfgd9wj7/DD0107F0-7306-4ADE-A007-838C460ABAEC.jpeg

 





https://images.hive.blog/DQmZzWKVqP2R51bepFVoHk68BYgrmC6ComAWnPdZ8kVs2Lw/B90E7D55-1FAB-410C-A99C-A3C3A560B948.jpeg
https://images.hive.blog/DQmcrPBLfeo1juvTyBTLgDu5xbGoXPugBgxHe5LKUxUtAgm/04BB01C6-0277-49FC-84CE-56C775A583CE.jpeg

Want to follow my downvote trial? Use hive.vote for posts: https://hive.vote/dash.php?i=15&id=3&user=keys-defender&type=2

  …and rewarding.app for comments:



 

UPDATE 3:

Every day a new phishing wave was launched by the same attacker. He uses a reserve of accounts that he hacked in the past with similar phishing waves or new accounts hacked in the previous day phishing wave.

Here are the latest accounts used:

"giuseppemasala", "romanreigns", "gingfriend20ph"
"stepshotfoto", "alessiofox"

My plan for tonight to put an end to these attacks 👇

(if they’re not profitable they’ll stop putting effort into it)