Be careful - New scam for phishing website uses fake comments with images

in steemit •  6 years ago  (edited)

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!
Sort Order:  

Thanks for the warning! This is one of the most helpful posts I've read in awhile. These scams are very frustrating and I've learned that it's best to never click a link regardless of who it's from, even your friends. I'm really hoping that a DM function is incorporated into Steemit, to help mitigate this problem. If one already exists, please let me know.

Thank you for your support and for your witness vote @mantishands, really appreciated!

The only way you can "DM someone" is to write a comment under one of his/her posts or do a micro-transfer with your message in the memo.

You're very welcome @arcange. I've seen the micro transfers and some personlized messages that way. But I don't really see myself wanting to advertise my personal communications with another user for all to see. I understand that the blockchain is designed that way, but some of my words and ideas are for me and my friends only. Maybe someone who's smarter than me will build an app on top of Steemit that will provide a solution...

You may encrypt the memo content using your memo key. Then only the sender and the recipient will be able to read it. But that's not really an easy way to share messages with a group of friends.

Yeh, that's one thing I do NOT like about Steemit.

Not user friendly at all, & yes you could move over to Discord, but not everyone uses Discord & why should we have to?

Thanks for your post btw.

Wow, thanks for this, as I need readers and rarely use them, I might not have noticed... what a miserable state of consciousness to spend so much time scamming others....random question, can someone steal your steem without you noticing on the wallet/transaction info page?

Thank you for keeping us well informed @arcange! I voted you for witness and I can't think of anyone who could do it better! =D

Thanks for your support and your witness vote @kawaiicrush, really appreciated!

Appreciate you taking the time to share this new phishing scam with the community. Not everyone will diligently look at the site’s name and most will simply re-enter their password. The method of scamming is different but end result is the same. Will share with others so they are aware.

These scammers are getting pretty sophisticated.

That's exactly what I was thinking! Though I would never enter my credentials unless I was already trying to log into a site I intentionally navigated to, the rest of the scam would probably catch me without this warning. I saw a comment like this on my most recent article and actually did think it was from exyle.

I don't resteem often, but this needs to be shared. Thank you @arcange for all you do. I've seen your comments pop up on both my account as well as my daughter's. As a newbie, it could be easy to fall for something like this. I appreciate the work you're doing to help Steemians stay safe and protected.

I'm glad to read my comment was helpful. Thanks for your feedback @crowbarmama.

Thanks so much for the warning. I truly appreciate that their are people spreading the word. I will resteem to help increase awareness.

Thank you for your support @headchange

thank you for the heads up, pretty sure this is the same name that was doing this on a couple of my posts and we flagged cause of the link,,,thanks again for doing great work, you have my vote

Thank you @battleaxe

You do a good work.

Posted using Partiko Android

For three weeks in steemit has already encountered intrusive proposals to be a referral in doubtful minings. Advertising is necessary, but requires a reasonable restriction, spam is not allowed at all.

Up to you to flag spammers to lower their reputation if they are too aggressive with their "advertising"

wow, that is some devious shit, thanks for the heads up and all of your hard work fighting these scamming turds.

Thank you @funbobby51

it is my pleasure

So many work))

Great catch. Thanks for the warning, matey!

Thanks for the warning. Upvoted and about to resteem.

Proud member of #steemitbloggers @steemitbloggers

Thankyou! Gracias!

Great work - really! Saving alot of people from alot of stress :)

This scam is very intricate indeed, resteemed!

Thanks for the warning.

Resteem'd! Thank you!

hate this things thank for the tip !

Congratulations @arcange! You have completed the following achievement on Steemit and have been rewarded with new badge(s) :

You published 4 posts in one day

Click on the badge to view your Board of Honor.
If you no longer want to receive notifications, reply to this comment with the word STOP

To support your work, I also upvoted your post!

Do not miss the last post from @steemitboard:
SteemitBoard and the Veterans on Steemit - The First Community Badge.

You can upvote this notification to help all Steemit users. Learn why here!

Thanks for these useful and informative tips @arcange

Thank you for the advice!

Would you know if these fraudulent links are filtered out by using mobile apps outside if the steemit domain?

Posted using Partiko Android

To be honest, it depends on which app you use.

Nice one, weldon, would really be happy if all these fake and scam account are been, banned from usage....

Oh man, this is a sneeky one for sure. Thanks for the heads up I actually got a suspect looking link in my last post but that guy wasn't as smart of a scammer as whoever is doing this.

Thank you for the alert , can we also report the domain somewhere ?

Thanks for the heads up sir.

Yuck these are more nasty then i expected. Thanks for the info, some of these are hard to spot even when you are very careful. I wonder how many people have been tricked..

I always get scared When these sort off things happen! Thanks I have resteemed this nlog to My followers hope they follow up

They are getting more and more creative

I have always been impressed how creative "bad" people can be. It's just a pity they do not use their skills in a positive way.

Chasing after them can teach you some interesting technical tricks sometimes. Like the way they manipulate the browser history when you land on their page so that even if you click on the Back button of the browser you are still on their website

Posted using Partiko iOS

Nothing really extraordinary technically speaking. This is because there is an intermediate domain with a redirect. Two clicks "back", is you are back on the original comment on Steemit.

  ·  6 years ago (edited)

One of the sites I saw is pushing a lot of fake URLs in the history and even with ten clicks back you’re still on their site which will again change the history. They saturate the history by doing a pushState() in a loop at each page load.

Thanks for this amazing work.

Buenas noche amigo gracias con su información. Bendiciones para usted. Saludos desde Venezuela hasta luego

Team Good Alpaca loves this post! Nomnomnomnom!
teamgoodbanner1.png
Delegate to our project via SteemConnect:
10 SP | 20 SP | 50 SP | 100 SP | 200 SP | 500 SP | 1000 SP | 5000 SP

That's really insane! Thanks for this much appreciated!

Thank you very much for always giving us your undying support and advices. Steemit may have been very promising for its technology, but also very frustrating and discouraging for this kind of reasons and lack of support from other big players. We hope there will be more like you and the likes of @surpassinggoogle to make this platform a working system in the future and not a platform of politics and thugs.

Exceptionally useful post. Thanks for the work you do. Resteemed.

Thank you!

I am so sorry I missed this before I could add my vote!
I had no idea that this kind of hidden link was even possible. Thank you so much for letting us know!

Thank you for this! I will be very careful!

Thanks for the heads up! This is good information that should be spread to all Steemians!

Go through the Discord channels of which I am part and report on its publication, everyone can contribute to the platform in some way;)

Thanks a lot to let us know !!! I pay attention of that

This is the smartest scam I've seen on steemit so far. It's such a shame that this kind of talent is being used to fuck people over when the world has enoguh problems

Thanks for warning us @arcange your work is so good. Keep it up, please :D

many thanks @arcange for the warning as no one else seemed to bother to let others know but you. very much appreciated

You're welcome @banditqueen