WARNING: Phishing is Back!

guiltyparties (70) in phishing • 5 years ago (edited)

DO NOT click on any links in comments. Phishing is back on Steem.

Do not use your active key or password in any website. Use your private posting key only.

If your account was created by Steemit (@steem), there is currently no reliable way to recover your account.

How does it work?

You will likely see comments and posts with threatening or attractive links. Ignore them. Don't click! This is a common phishing ploy and over 1000 accounts are currently under phisher control. Some of them you may know as former friends. Whatever you do, do not click on anything.

The links look like they belong on Steemit or another legitimate front end but they do not. They take you to a website that looks similar and trick you into revealing your credentials.

Resteem this to get the word out.

More resources:
https://github.com/gryter/plentyofphish
https://steemit.com/phishing/@guiltyparties/phishing-warning-2-0
https://steemit.com/phishing/@guiltyparties/phishing-messages-faq

Like what we're doing? Support us as a Witness.

phishing anti-abuse safety security steem

5 years ago by guiltyparties (70)

$59.04

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!

Sort Order:

Trending

[-]

holoz0r (71) · 5 years ago (edited)

If your account was created by Steemit (@steem), there is currently no reliable way to recover your account.

You can change your recovery account via Steemworld.org

Click account details.

Click Change Recovery account

Sign the transaction with your private owner key.

$0.37

9 votes

[-]

crokkon (68) · 5 years ago (edited)

$0.00

2 votes

[-]

holoz0r (71) · 5 years ago

Yep! My recovery account is one that I own. Prompted by this very post!

$0.00

[-]

joeyarnoldvn (61) · 5 years ago

My recovery account is Steem but can I change that without a master key?

$0.00

[-]

crokkon (68) · 5 years ago (edited)

$0.00

2 votes

[-]

joeyarnoldvn (61) · 5 years ago

Oh ok, thanks.

$0.00

[-]

revo (60) · 5 years ago

I'm a little bit wary of using my owner key there. And the Steemconnect link is invalid.

$0.00

[-]

holoz0r (71) · 5 years ago

Change keys after you do this if you're that worried. :)

$0.00

[-]

revo (60) · 5 years ago

Might have to. Don't want anything relying on Justin Sun providing a service to me.

$0.00

[-]

joanstewart (65) · 5 years ago

Could not get this to work, not sure if I missed some step, always used steemconnect.

$0.00

[-]

holoz0r (71) · 5 years ago

It takes 30 days for the recovery account to change

$0.00

[-]

joanstewart (65) · 5 years ago

Thanks for assistance!

$0.00

[-]

mondoshawan (62) · 5 years ago

Just who to trust?! ha

$0.00

[-]

diamond-head (46) · 5 years ago

Thanks to share here

$0.00

[-]

yidneth (67) · 5 years ago

good to know, scary still

$0.00

[-]

joeyarnoldvn (61) · 5 years ago

I have a question. What is required to create a recovery account? My first account, this one, was made via Steemit in 2017. I have not seen a private master key for this account and I assume whoever created this Steem account (my Steemit account, @joeyarnoldvn) for me on my behalf has my private master key. According to Steemd, my recovery account is Steem or @steem.

Which keys are required for changing recovery accounts or can I change mine?

$0.00

[-]

holoz0r (71) · 5 years ago

If you log into steemitwallet.com you can get your private keys.

Your master key (or password) provides access to all the below

Your posting private key lets you post transactions to the blockchain.
Your active private key lets you transact - power up, send steem, etc
Your owner private key lets you change your recovery account.
Your memo private key lets you read encrypted memos (transfers sent with a prefix of a pound symbol (#)

Hope that helps

Think of this as having different locks to different sections of your house.

$0.13

1 vote

[-]

joeyarnoldvn (61) · 5 years ago

No. I've tried many times for years. I've been having this problem for many years now. I used to write articles about this. Based on what I've seen since like 2017, I have not had access to my private master key. I believe I never got it in the first place. I am not new to Steemit. I have made three other accounts and I obtain master keys to two of them and do not have master keys to the ones I made via Steemit as they keep the master keys. My recovery account is @steem.

$0.00

[-]

holoz0r (71) · 5 years ago

I'm not sure I understand, when I signed up my account ~3 or so years ago, I did so via steemit.com, and I remember painstakingly writing down all my keys by hand, including my masterkey (password)

I've changed them a few times since though!

$0.00

[-]

joeyarnoldvn (61) · 5 years ago (edited)

Yeah. You might be right. So, it is possible that I lost mine if that is true. In 2019, I created another account via Steemit and did not get a master key. But when I created 2 other accounts via another website, I did get the random twelve words or passphrase similar to what you get for Bitcoin and other cryptocurrencies. So, I saved those master passphrases for those two accounts.

Are you talking about just a password or a passphrase as in twelve random words?

$0.00

[-]

holoz0r (71) · 5 years ago

Password. Mine is not a key phrase.

$0.00

[-]

joeyarnoldvn (61) · 5 years ago

When I created 2 Steem accounts, I got key phrases. It is the same as Bitcoin. And then there is the master password which should be one level under the passphrase.

$0.00

Show 8 more replies

[-]

drakernoise (60) · 5 years ago

Thanks so much for the warning @guiltyparties!

Resteemed 🤗

$0.00

[-]

ronaldoavelino (80) · 5 years ago

Thank you. Resteemed.

$0.00

[-]

intrepidphotos (75) · 5 years ago

Sad to see but I guess we might have a better chance with blacklists and downvotes this time to deal with them then we did in the bull run.

$0.00

[-]

lesmann (60) · 5 years ago

Thank You!
Very Good Info!
👍🏼😁👍🏼

$0.00

[-]

brittandjosie (71) · 5 years ago

Resteemed

$0.00

[-]

sgt-dan (61) · 5 years ago

Good looking out as always. Retweeted and resteemed.

$0.00

[-]

cloudspyder (59) · 5 years ago

At the moment, I didn't encounter such comments. Thank you.

$0.00

[-]

steevc (73) · 5 years ago

Using Keychain rather than manually entering keys should reduce the risks.

$0.00

[-]

steem-venera (71) · 5 years ago

Спасибо за информацию и с праздником вас 8 Марта.

$0.00

[-]

chesatochi (72) · 5 years ago

The evil forces are amongst us on the steem blockchain.

$0.00

[-]

californiacrypto (61) · 5 years ago

Good to know. Thanks.

$0.00

[-]

jeenger (68) · 5 years ago

Thanks for the warning. Resteem

$0.00

[-]

supernova55 (64) · 5 years ago

@guiltyparties,

Resteem...Thanks!

$0.00

[-]

leoak (44) · 5 years ago

This has been around and people should be aware to never click anything that is from an unknown

$0.00

[-]

steemitboard (66) · 5 years ago

Congratulations @guiltyparties! You have completed the following achievement on the Steem blockchain and have been rewarded with new badge(s) :

You got more than 3750 replies. Your next target is to reach 4000 replies.

_{You can view your badges on your Steem Board and compare to others on the Steem Ranking}
_{If you no longer want to receive notifications, reply to this comment with the word STOP}

Do not miss the last post from @steemitboard:

	Downvote challenge - Add up to 3 funny badges to your board
	Use your witness votes and get the Community Badge

Vote for @Steemitboard as a witness to get one more award and increased upvotes!

$0.00

[-]

papilloncharity (71) · 5 years ago (edited)

@guiltyparties Two questions if I may.

Where have these evil forces come from all of a sudden?
Did they see opportunities on twitter, or is it something else?

How can we see a list of entities that have our active key?

Thank you for this warning my friend. Upvoted and resteemed!

$0.00

[-]

joeyarnoldvn (61) · 5 years ago (edited)

Passwords:

2 of accounts were made via Steemit and I can confirm that I've not seen master passwords or private keys for those accounts meaning that the master key is probably kept by the accounts that create new Steem accounts on behalf of new people trying to join.

Obtaining Master Keys

I've created two additional accounts via another website and was given private master keys for those two. So, I can recognize the difference. At first, I thought I lost my master key for my first Steem account that I created, which is this one, via Steemit in 2017, but I am pretty sure now that I never got the master key in the first place. I used to ask people about this the past three or so years and I have been confused about the details off and on over the years.

Not Via Steemit

I'm writing all of this for the record to let people know that it would be better to create accounts via other websites. Well, technically, you would need to have a Steem account or at least be sponsored by another Steem account that can create an account for you on your behalf. If you don't do it yourself, you may not get a master key or somebody else may obtain a copy of that master key.

Changing Master Keys

If it is possible to later change your master key, then that might be an option. Making an account on your own might be a bit complex for some people. So, I can understand if people would prefer the easiest way to join or register or sign up possible.