Community post
! WARNING ! HACKERS ARE SMART ON STEEMIT !
Someone recently got his account stolen after following a link from @twinkledrop
Here is how the hacker proceeded:
EDIT: Seems like steemit updated their code and phishing links are now displayed in red. Great news !
The hacker posted a nice comment on one of his post saying:
(This is a demo)
Someone stole your post, you need to report him :
https://steemit.com/@potential-plagiarist/stolen-post
Here is the trick:
If you click on the link, you will be redirected outside of steemit.com, on a site that looks like the real site (it's fake) and you will be asked to login like you would on steemit.
The hacker used the fact that you can format a link in markdown like so:
[ LINK YOU SEE ] ( REAL LINK )
The link in the demo is formatted like so:
[ https://steemit.com/@potential-plagiarist/stolen-post ]
( http://www.bitsharesfcx.com/ )
How to prevent this from happening again
One way to prevent such hack in the future would be to warn users when they follow a link that redirects them outside of steemit.com
What to do if your account was stolen
Start there: https://steemit.com/recover_account_step_1
Replies (85)
Rainie Song @twinkledrop is still operating on steemit. I went in & saw Chinese language. Seems like steemit doesn't really care hackers, criminals, & terrorists on Steemit as long as they purchase steem...
Useful
I had upvote you.
Your post r very interesting and helpful. So I appreciate your working. It may inspaire many other. Like it inspires me. Can u plz follow me and upvote me . If u help me, my friend I will follow you. I had vote you. It's about amazing facts and Funny joke's.
For all we know, the account @twinkledrop might have been the first hacked account, it's a good thing imo that steemit is not taking any direct action but rather focus on improving the site so that it doesn't happen anymore.
I think this too
Common sense is the best anti-virus. Thats what i always tell people
I had upvote you and followed you. Follow me and upvote my posts.
Very useful informations@destbest thanks for sharing with us .
The real problem is I have seen so many clone sites that looks exactly same like the steemit site.After some deep investigation I found out that there are some site exists there somewhat officially, and people were referring those sites while the steemit site was down.
So at this point how could we find out which clone site is real and which is phishing??
You posted more valuable one bcz in this summer lot of account had hacked from scammers. You nicely introduce link as our if account has stolen. Also i hv suggestion. its do the needful for redevelop more secure connection.
Followed/ Upvoted & Resteemed
thanks for it......
Woah , That's Terrible .
Thank you so much for sharing this!
I'll keep this in mind !
Woah , That's Terrible .
Thank you so much for sharing this!
I'll keep this in mind !
oui c'est un bonne travaille Merci a vous de @bakabou159704
Hackers did their terrible job very smartly without any doubt. All of users be safe from them & provide more secure system. Very useful link you give us for report them if our account has stolen. tough task but possible one..all us will be protect maybe can be happen to us..Absolutely brilliant post @destbest.
if a smart guy before the check and control the link is safe or not but sometimes we forget it and directly click .! so this happens internet always . be safe be secure !
regards
be smart !
here is your vote result's - how is earn much money in steemit
C'est normal
Soyez prudent
That's one of the reasons I do not like URL editors.
Thank you very much for the warning.
Good example !
Very helpful and important post you sharing @destbest about steemit hackers.
You nicely wrote article how to report account hackers if our account stolen with give to us link.
Thanks a lot for give best service.
I`m follow you
thanks dude follow you + :D
Rainie Song's @twinkledrop was stolen. Now she is using a new account
I wrote 3 posts about the details of the scam:
Thank u
Hey. @destbest Very useful information thanks for sharing with us .
These posts are very detailed, thank you for your work !
UpVoted !
I am aware of the phishing site from the first or second day on steemit since and still haven't logged in to any other sites similar or clone to the main steemit site( Though i use busy.org).
But still I can see there are so many applications out there for steem blockchain and asking me for my steem key. I have been always afraid in heart while using those think what if they could steal my password.
How to find or measure the trustworthy authority of those other third party sites/apps , do you have any idea??
Thank you sir for importent information.
It's so gross that people would be willing to stoop so low :/
Phishing is the right term, just be careful of what is in the address bar.
Also, if you make your browser remember your user/pass, it should not ask you that data again if you are in the real website.
Hacking is more like exploiting a bug to get an account.
here is my post dude :D https://steemit.com/tr/@moorkedi/steemit-guevenlik-konusu like you
Great work !
I just upvoted your post 👍
thanks a lot your effort i only use your idea and write some good stuff :D like exp. programs free in turkish users and :D your result : turkish people not see any spam or hacks like that I hope ..
Thank you very much for the warning. I am always leary about entering any of my passwords.
I've been following this lately. The scammer is getting smart by using a 65+ account. I hope your friend gets her account back.
Thank you a lot @destbest for sharing this post. I am new here and most of my followers too, so upvote and resteem. Thats a serious problem. Greetings from Mongolia, Silbart.
thanks for sharing this. being new.. I don't like signing up for stuff through links on here.. lol!!! I am paranoid. lol
Signing in.......
@destbest,
I found this post helpful and therefore I am upvoting & resteeming it. I will be coming back for more.
Thank you for creating this hackers awareness post.
@stevenmosoes
Signing out........
Hopefully not many people fall for the scam. It's actually pretty common to see this type of link manipulation in e-mail scams, so hopefully most of use are aware of it by now.
Thanks @destbest. Information is solution to the problem as hand. I don't know what is wrong with all this internet hackers,an account that someone has labour and grow for months or year will just be taken by another person in twinkling of an eye. God is watching oooo
On judgement day,some people will not make heaven because they are hacker on earth. Keep doing it ,for your father the devil is waiting for you!
Thanks for the info and the warning against hackers. Hacker will go to any length. Sad. Many steemians wouldn't have known this if you didn't discover it. Thanks again.
hackers are everywhere, we have to be more conscious and thanks for informing us..
I resteemit your post. @destbest
Excellent post very informative @destbest.
Thanks for sharing.
Thanks for the heads up @desbest, Resteeming this one to my friends.
Good work!! Stay cool!
Why the *** this people keep doing scam!
Would they not know how hard to keep evolving in steemit?
@destbest thanks for the warning
Thank you for this great info, regards Gez
@destbest thanks for this very informative post. I am new here and I never knew what is really totally in here after I read your great post. Thanks again hope to no one hacked again.
thank you for sharing your post i cant believe there are people out there that would get joys out of doing stuff like this they need to get a life . kind regards amanda.
Hackers and phishing are stock intrade of the NWO , agenda gain control , sow fear ... I am under constant attack
one can never have enough education on security ... a bit of yubikey or something not connected would go a long way too
viewed, voted, commented, and re-steemed ...
anyone follows me i'll follow back within a few days
that's right its all about "common sense".
thank you for the warning
I always login with POSTING KEY, and avoid using the master key, unless Im gonna do some banking type stuff.
Thanks for the warning, passing it on!!
Ouch... No lube
That's what people do
Thanks for warning us! Be careful everyone :)
Thanks for getting the word out.
Hopefully these guys can get caught. Never put in your password if your already logged in .
This phishing technique has been exploited since the beginning of time! What's surprising is people don't check the URL on top of their browser. Before entering your password, also check is the site is secure (begins with https://).
@destbest ,
Thanks for posting this, I know I am a little late to the party but I just ran across this post . Very good and very helpful information to keep in mind before clicking a link.
Thanks,
@sultnpapper
very informative, thanks for giving us a heads up.
thanks for sharing, this needs to be resteemed by everyone! Watch Out for those redirecting links
thanks for the warning
Thanks for sharing this - very good to know!
OMG, good thing I just found this blog! Thanks for sharing!
Thank you for advice ;)
Thank you so much @destbest for alerting us about this tricky phising cscam !! Really thankfu l for your effort !!👍👍👍
Thanks for warning us.
you are very amazing, your post is very interesting to read.
keep working and give a lot of benefits to people who always follow you.
if you have time, let's visit my blog @bangmimi
Hello, you are supporting plagiarism. https://steemit.com/spanish/@bert0/educar-para-vivir-no-para-trabajar steemcleaners discovered the plagiarism. Why are you doing this? Please stop supporting plagiarism with your votes.
If you don’t want to click on the link, just go to that user’s profile and check that post. Plagiarism should be rejected, especially by big users like you.
Thanks.
It is great to hear that the links are displayed in red now. Makes me feel a little safer.
You may enjoy my blogs? I write high quality content and have a real eye for design.
Perhaps you would have the time to check me out. I will surely follow back. Just let me know you’ve seen this message by simply commenting back. Take care my friend. I look forward to seeing to post again, until then thanks for helping all of us little guys with your resteem sand upvotes.
@destbest this was a very smart hack, thanks for showing this to the steem community.
Regards, @gold84
Interesting Information , Thanks for sharing . This scammers are a big trouble at the moment . When we get rid of them they are like pain in the ass.
it's scary how easy it is to get hacked on here! i'm always scared to click on links on steemit. I hope you have a lovely day :)
@destbest you were flagged by a worthless gang of trolls, so, I gave you an upvote to counteract it! Enjoy!!
Congratulations @destbest! You have completed the following achievement on Steemit and have been rewarded with new badge(s) :
Click on the badge to view your Board of Honor.
If you no longer want to receive notifications, reply to this comment with the word
STOPCongratulations @destbest! You have completed the following achievement on the Steem blockchain and have been rewarded with new badge(s) :
Click here to view your Board of Honor
If you no longer want to receive notifications, reply to this comment with the word
STOPDo not miss the last post from @steemitboard:
Congratulations @destbest! You received a personal award!
Click here to view your Board of Honor
Vote for @Steemitboard as a witness to get one more award and increased upvotes!
Vote for @Steemitboard as a witness to get one more award and increased upvotes!
Vote for @Steemitboard as a witness to get one more award and increased upvotes!
Congratulations @destbest! You received a personal award!
You can view your badges on your Steem Board and compare to others on the Steem Ranking
Vote for @Steemitboard as a witness to get one more award and increased upvotes!
Vote for @Steemitboard as a witness to get one more award and increased upvotes!
Congratulations @destbest! You have completed the following achievement on the Hive blockchain and have been rewarded with new badge(s) :
You can view your badges on your board and compare yourself to others in the Ranking
If you no longer want to receive notifications, reply to this comment with the word
STOPCheck out the last post from @hivebuzz: