[WARNING] MyEtherWallet.com highjacked on Google Public DNSsteemCreated with Sketch.

in cryptocurrency •  7 years ago  (edited)

MEW suddenly switched from the CloudFront CDN to one Russian IP address (46.161.42.42). I'd be careful until more information is revealed.

It has actually been hacked.
This is the hacker's address.: https://etherscan.io/address/0x1d50588C0aa11959A5c28831ce3DC5F1D3120d29
Снимок экрана 2018-04-24 в 17.01.07.png

Now is google DNS is OK:
Снимок экрана 2018-04-24 в 16.49.35.png

Снимок экрана 2018-04-24 в 16.50.04.png

Снимок экрана 2018-04-24 в 16.49.02.png

Result of DNS highjacked:

  • 178 trx (+1 pending at the moment)
  • $149,201.60 ( $690.57/ETH)

Google Public DNS is now resolving the correct ips. Keep in mind the ttl of the old records was some 9000 seconds, we can expect some ISP's to cache that for their clients.

Again, please make sure the SSL Connection is always green when you interact with any website.

Upvote and resteem.

Be careful! Tell your friends!

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!
Sort Order:  

Thanks a lot for the warning!
I did also a search and found this...
https://www.reddit.com/r/MyEtherWallet/comments/8ek0jj/think_i_got_scammedphishedhacked/

Wow its good

This may have something to do with it: https://www.apnews.com/20aaf45d3c8b4bb5bfbf7cdaa328e1df

  ·  7 years ago (edited)

No it's about google DNS
8.8.8.8
8.8.4.4
@originalworks

As you said, be be careful Ether collectors :O