! WARNING ! HACKERS ARE SMART ON STEEMIT !

destbest (53) in steemit • 7 years ago (edited)

Someone recently got his account stolen after following a link from @twinkledrop

Here is how the hacker proceeded:

EDIT: Seems like steemit updated their code and phishing links are now displayed in red. Great news !

The hacker posted a nice comment on one of his post saying:

(This is a demo)
Someone stole your post, you need to report him :

https://steemit.com/@potential-plagiarist/stolen-post / http://www.bitsharesfcx.com/

Here is the trick:
If you click on the link, you will be redirected outside of steemit.com, on a site that looks like the real site (it's fake) and you will be asked to login like you would on steemit.

The hacker used the fact that you can format a link in markdown like so:

[ LINK YOU SEE ] ( REAL LINK )

The link in the demo is formatted like so:

[ https://steemit.com/@potential-plagiarist/stolen-post ]
( http://www.bitsharesfcx.com/ )

How to prevent this from happening again

One way to prevent such hack in the future would be to warn users when they follow a link that redirects them outside of steemit.com

What to do if your account was stolen

Start there: https://steemit.com/recover_account_step_1

Be safe out there.

DestBest

steemit hack security steem steemdev

7 years ago by destbest (53)

$51.14

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!

Sort Order:

Trending

[-]

sirstacksalot (63) · 7 years ago

Thank you very much for the warning. I am always leary about entering any of my passwords.

$1.52

3 votes

[-]

wix (55) · 7 years ago

It's so gross that people would be willing to stoop so low :/

$1.43

3 votes

[-]

paulmoon410 (56) · 7 years ago (edited)

That's what people do

$0.00

[-]

joythewanderer (78) · 7 years ago

I've been following this lately. The scammer is getting smart by using a 65+ account. I hope your friend gets her account back.

$1.40

2 votes

[-]

silbart (53) · 7 years ago

Thank you a lot @destbest for sharing this post. I am new here and most of my followers too, so upvote and resteem. Thats a serious problem. Greetings from Mongolia, Silbart.

$1.40

1 vote

[-]

euni (56) · 7 years ago

Rainie Song @twinkledrop is still operating on steemit. I went in & saw Chinese language. Seems like steemit doesn't really care hackers, criminals, & terrorists on Steemit as long as they purchase steem...

$1.03

1 vote

[-]

destbest (53) · 7 years ago

For all we know, the account @twinkledrop might have been the first hacked account, it's a good thing imo that steemit is not taking any direct action but rather focus on improving the site so that it doesn't happen anymore.

$0.00

[-]

nationalpark (63) · 7 years ago

I wrote 3 posts about the details of the scam:

$0.88

1 vote

[-]

destbest (53) · 7 years ago (edited)

These posts are very detailed, thank you for your work !
UpVoted !

$0.00

[-]

nationalpark (63) · 7 years ago

Rainie Song's @twinkledrop was stolen. Now she is using a new account

$0.00

[-]

steemnepal (56) · 7 years ago

Very useful informations@destbest thanks for sharing with us .
The real problem is I have seen so many clone sites that looks exactly same like the steemit site.After some deep investigation I found out that there are some site exists there somewhat officially, and people were referring those sites while the steemit site was down.
So at this point how could we find out which clone site is real and which is phishing??

$0.99

1 vote

[-]

kingsberry (58) · 7 years ago

Hackers did their terrible job very smartly without any doubt. All of users be safe from them & provide more secure system. Very useful link you give us for report them if our account has stolen. tough task but possible one..all us will be protect maybe can be happen to us..Absolutely brilliant post @destbest.

$0.97

1 vote

[-]

jbn (60) · 7 years ago

Common sense is the best anti-virus. Thats what i always tell people

$0.96

2 votes

[-]

mdo (0) · 7 years ago

$0.00

Reveal Comment

[-]

sanjayrai (49) · 7 years ago

Woah , That's Terrible .

Thank you so much for sharing this!
I'll keep this in mind !

$0.96

1 vote

[-]

teks (57) · 7 years ago

That's one of the reasons I do not like URL editors.
Thank you very much for the warning.

$0.94

1 vote

[-]

moorkedi (57) · 7 years ago

if a smart guy before the check and control the link is safe or not but sometimes we forget it and directly click .! so this happens internet always . be safe be secure !
regards

be smart !
here is your vote result's - how is earn much money in steemit

$0.91

1 vote

[-]

destbest (53) · 7 years ago

Good example !

$0.00

1 vote

[-]

moorkedi (57) · 7 years ago

thanks dude follow you + :D

$0.00

[-]

moorkedi (57) · 7 years ago

here is my post dude :D https://steemit.com/tr/@moorkedi/steemit-guevenlik-konusu like you

$0.00

[-]

destbest (53) · 7 years ago (edited)

Great work !
I just upvoted your post 👍

$0.00

1 vote

[-]

moorkedi (57) · 7 years ago

thanks a lot your effort i only use your idea and write some good stuff :D like exp. programs free in turkish users and :D your result : turkish people not see any spam or hacks like that I hope ..

$0.81

1 vote

[-]

bakabou159704 (40) · 7 years ago

oui c'est un bonne travaille Merci a vous de @bakabou159704

$0.90

1 vote

[-]

destbest (53) · 7 years ago

C'est normal
Soyez prudent

$0.00

[-]

risansa (46) · 7 years ago

Useful

$0.88

1 vote

[-]

destbest (53) · 7 years ago (edited)

I think this too

$0.00

1 vote

[-]

risansa (46) · 7 years ago

Thank u

$0.00

[-]

madushanka (74) · 7 years ago

You posted more valuable one bcz in this summer lot of account had hacked from scammers. You nicely introduce link as our if account has stolen. Also i hv suggestion. its do the needful for redevelop more secure connection.
Followed/ Upvoted & Resteemed

$0.87

1 vote

[-]

dilruksha (47) · 7 years ago

Hey. @destbest Very useful information thanks for sharing with us .

$0.83

1 vote

[-]

sharif24 (55) · 7 years ago

Thank you sir for importent information.

$0.81

1 vote

[-]

katteasis (63) · 7 years ago

I am aware of the phishing site from the first or second day on steemit since and still haven't logged in to any other sites similar or clone to the main steemit site( Though i use busy.org).
But still I can see there are so many applications out there for steem blockchain and asking me for my steem key. I have been always afraid in heart while using those think what if they could steal my password.
How to find or measure the trustworthy authority of those other third party sites/apps , do you have any idea??

$0.80

1 vote

[-]

dragonking (57) · 7 years ago (edited)

Very helpful and important post you sharing @destbest about steemit hackers.
You nicely wrote article how to report account hackers if our account stolen with give to us link.
Thanks a lot for give best service.
I`m follow you

$0.80

1 vote

[-]

nehomar (64) · 7 years ago

Phishing is the right term, just be careful of what is in the address bar.

Also, if you make your browser remember your user/pass, it should not ask you that data again if you are in the real website.

Hacking is more like exploiting a bug to get an account.

$0.79

1 vote

[-]

tanmoykumer (49) · 7 years ago

thanks for it......

$0.77

2 votes

[-]

turksays (49) · 7 years ago

OMG, good thing I just found this blog! Thanks for sharing!

$0.00

1 vote

[-]

sergiudemerji (37) · 7 years ago

Interesting Information , Thanks for sharing . This scammers are a big trouble at the moment . When we get rid of them they are like pain in the ass.

$0.00

1 vote

[-]

steemitboard (66) · 5 years ago

@destbest, sorry to see you have less Steem Power.
Your level lowered and you are now a Red Fish!

Vote for @Steemitboard as a witness to get one more award and increased upvotes!

$0.00

[-]

twofingersshort (46) · 7 years ago

thanks for sharing this. being new.. I don't like signing up for stuff through links on here.. lol!!! I am paranoid. lol

$0.00

[-]

stevenmosoes (63) · 7 years ago

Signing in.......

@destbest,

I found this post helpful and therefore I am upvoting & resteeming it. I will be coming back for more.

Thank you for creating this hackers awareness post.

@stevenmosoes
Signing out........

$0.00

[-]

valth (68) · 7 years ago

Hopefully not many people fall for the scam. It's actually pretty common to see this type of link manipulation in e-mail scams, so hopefully most of use are aware of it by now.

$0.00

[-]

olusolaemmanuel (62) · 7 years ago

Thanks @destbest. Information is solution to the problem as hand. I don't know what is wrong with all this internet hackers,an account that someone has labour and grow for months or year will just be taken by another person in twinkling of an eye. God is watching oooo

On judgement day,some people will not make heaven because they are hacker on earth. Keep doing it ,for your father the devil is waiting for you!

$0.00

[-]

yaanivapeji (65) · 7 years ago

Thanks for the info and the warning against hackers. Hacker will go to any length. Sad. Many steemians wouldn't have known this if you didn't discover it. Thanks again.

$0.00

[-]

sohan4745 (49) · 7 years ago

hackers are everywhere, we have to be more conscious and thanks for informing us..

$0.00

[-]

dilruksha (47) · 7 years ago

I resteemit your post. @destbest

$0.00

[-]

irfanullah (60) · 7 years ago

Excellent post very informative @destbest.
Thanks for sharing.

$0.00

[-]

steveblack (55) · 7 years ago

Thanks for the heads up @desbest, Resteeming this one to my friends.

Good work!! Stay cool!

$0.00

[-]

albertvhons (64) · 7 years ago

Why the *** this people keep doing scam!
Would they not know how hard to keep evolving in steemit?

@destbest thanks for the warning

$0.00

[-]

gezzazoom (44) · 7 years ago

Thank you for this great info, regards Gez

$0.00

[-]

wajdizbidi (12) · 7 years ago

I had upvote you and followed you. Follow me and upvote my posts.

$0.00

[-]

spiritlight (41) · 7 years ago

thank you for sharing your post i cant believe there are people out there that would get joys out of doing stuff like this they need to get a life . kind regards amanda.

$0.00

[-]

vaerospace (53) · 7 years ago

Hackers and phishing are stock intrade of the NWO , agenda gain control , sow fear ... I am under constant attack

$0.00

[-]

rudyardcatling (65) · 7 years ago

one can never have enough education on security ... a bit of yubikey or something not connected would go a long way too

viewed, voted, commented, and re-steemed ...

anyone follows me i'll follow back within a few days

$0.00

[-]

allfabeta (67) · 7 years ago (edited)

thank you for the warning

$0.00

[-]

sebcam (66) · 7 years ago

I always login with POSTING KEY, and avoid using the master key, unless Im gonna do some banking type stuff.

$0.00

[-]

madlila (45) · 7 years ago

Thanks for the warning, passing it on!!

$0.00

[-]

paulmoon410 (56) · 7 years ago

Ouch... No lube

$0.00

[-]

annariley (48) · 7 years ago

Thanks for warning us! Be careful everyone :)

$0.00

[-]

venomnymous (66) · 7 years ago

Thanks for getting the word out.

$0.00

[-]

drewonsteemit (30) · 7 years ago

Hopefully these guys can get caught. Never put in your password if your already logged in .

$0.00

[-]

sultnpapper (61) · 7 years ago

@destbest ,
Thanks for posting this, I know I am a little late to the party but I just ran across this post . Very good and very helpful information to keep in mind before clicking a link.
Thanks,
@sultnpapper

$0.00

[-]

bobiecayao (58) · 7 years ago

very informative, thanks for giving us a heads up.

$0.00

[-]

rickyboyent (38) · 7 years ago

thanks for sharing, this needs to be resteemed by everyone! Watch Out for those redirecting links

$0.00

[-]

beautypics (61) · 7 years ago

thanks for the warning

$0.00

[-]

erb (59) · 7 years ago

Thanks for sharing this - very good to know!

$0.00

[-]

sanjayrai (49) · 7 years ago

Woah , That's Terrible .

Thank you so much for sharing this!
I'll keep this in mind !

$0.00

[-]

valikos (64) · 7 years ago

Thank you for advice ;)

$0.00

[-]

akkha (59) · 7 years ago

Thank you so much @destbest for alerting us about this tricky phising cscam !! Really thankfu l for your effort !!👍👍👍

$0.00

[-]

chetanpadliya (71) · 7 years ago

Thanks for warning us.

$0.00

[-]

bangmimi (68) · 7 years ago

you are very amazing, your post is very interesting to read.
keep working and give a lot of benefits to people who always follow you.

if you have time, let's visit my blog @bangmimi

$0.00

[-]

steemitboard (66) · 5 years ago

Congratulations @destbest! You received a personal award!

Happy Birthday! - You are on the Steem blockchain for 3 years!

_{You can view your badges on your Steem Board and compare to others on the Steem Ranking}

Vote for @Steemitboard as a witness to get one more award and increased upvotes!

$0.00

[-]

daltono (75) · 7 years ago

It is great to hear that the links are displayed in red now. Makes me feel a little safer.

You may enjoy my blogs? I write high quality content and have a real eye for design.
Perhaps you would have the time to check me out. I will surely follow back. Just let me know you’ve seen this message by simply commenting back. Take care my friend. I look forward to seeing to post again, until then thanks for helping all of us little guys with your resteem sand upvotes.

$0.00

[-]

gold84 (63) · 7 years ago

@destbest this was a very smart hack, thanks for showing this to the steem community.

Regards, @gold84

$0.00

[-]

funatoz (63) · 7 years ago

I had upvote you.
Your post r very interesting and helpful. So I appreciate your working. It may inspaire many other. Like it inspires me. Can u plz follow me and upvote me . If u help me, my friend I will follow you. I had vote you. It's about amazing facts and Funny joke's.

$0.00

[-]

melissakellie (68) · 7 years ago

it's scary how easy it is to get hacked on here! i'm always scared to click on links on steemit. I hope you have a lovely day :)

$0.00

[-]

flagfixer (54) · 7 years ago

@destbest you were flagged by a worthless gang of trolls, so, I gave you an upvote to counteract it! Enjoy!!

$0.00

[-]

steemitboard (66) · 7 years ago

Congratulations @destbest! You have completed the following achievement on Steemit and have been rewarded with new badge(s) :

Award for the number of upvotes

_{Click on the badge to view your Board of Honor.}
_{If you no longer want to receive notifications, reply to this comment with the word STOP}

Do you like SteemitBoard's project? Then Vote for its witness and get one more award!

$0.00

[-]

steemitboard (66) · 6 years ago

Congratulations @destbest! You have completed the following achievement on the Steem blockchain and have been rewarded with new badge(s) :

You made more than 6000 upvotes. Your next target is to reach 7000 upvotes.

_{Click here to view your Board of Honor}
_{If you no longer want to receive notifications, reply to this comment with the word STOP}

Do not miss the last post from @steemitboard:

	Meet the Steemians Contest - The results, the winners and the prizes
	Meet the Steemians Contest - Special attendees revealed
	Meet the Steemians Contest - Intermediate results

Support SteemitBoard's project! Vote for its witness and get one more award!

$0.00

[-]

steemitboard (66) · 6 years ago

Congratulations @destbest! You received a personal award!

2 Years on Steemit

_{Click here to view your Board of Honor}

Support SteemitBoard's project! Vote for its witness and get one more award!

$0.00

[-]

steemitboard (66) · 6 years ago

@destbest, sorry to see you have less Steem Power.
Your level lowered and you are now a Minnow!

Vote for @Steemitboard as a witness to get one more award and increased upvotes!

$0.00

[-]

steemitboard (66) · 6 years ago

Congratulations @destbest!
You raised your level and are now a Dolphin!

Vote for @Steemitboard as a witness to get one more award and increased upvotes!

$0.00

[-]

steemitboard (66) · 5 years ago

@destbest, sorry to see you have less Steem Power.
Your level lowered and you are now a Minnow!

Vote for @Steemitboard as a witness to get one more award and increased upvotes!

$0.00

[-]

jie28 (56) · 7 years ago

@destbest thanks for this very informative post. I am new here and I never knew what is really totally in here after I read your great post. Thanks again hope to no one hacked again.

$0.00

[-]

aynrand1905 (20) · 7 years ago

$0.00

Reveal Comment