The phisher is currently using this account with reputation 72 that is difficult to nuke:
https://peakd.com/@nachomolina/qv8y1o
This phishing wave started a few days ago on Steem, so we were already on the lookout. This attack on Hive should have been stopped as soon as it started thanks to my auto-replies.. but let's keep being vigilant for new phishing domains that could be used by the same attacker.
Initial wave on Steemit:
My report:
@keys-defender's automatic detection on Hive:
UPDATE 1
The phisher is now using this other hacked account: @guider
DO NOT INTERACT WITH HIS MESSAGES
UPDATE 2:
The attacker started using 2 new phishing domains.
Thanks to @louis88 and @good-karma for the reports.
Want to follow my downvote trial?
Use hive.vote for posts: https://hive.vote/dash.php?i=15&id=3&user=keys-defender&type=2
…and rewarding.app for comments:
https://hive.blog/guide/@shmoogleosukami/how-to-join-the-keys-defenders-downvote-trail-via-rewardingapp
UPDATE 3:
Every day a new phishing wave was launched by the same attacker.
He uses a reserve of accounts that he hacked in the past with similar phishing waves or new accounts hacked in the previous day phishing wave.
Here are the latest accounts used:
- "giuseppemasala", "romanreigns", "gingfriend20ph"
- "stepshotfoto", "alessiofox"
My plan for tonight to put an end to these attacks 👇
(if they’re not profitable they’ll stop putting effort into it)
Thank you for the heads up!
!PHISHING https://hisksexyl.moster/q7FT6
!PHISHING https://hisksexyl.moster/q7FT6
Thank you for your report, entry added to @keys-defender's database "PHISHING".
Thank you for your report, the PHISHING domain "hisksexyl.moster" was correctly processed and will be added to the banlist after 3 reports.
Domains can be blacklisted by any top-40 witness, any whitelisted user or by at least 3 users with reputation above 50 - @keys-defender
!PHISHING https://moris69bukail.cyou/L8kCP
!PHISHING https://moris69bukail.cyou/L8kCP
Thank you for your report, entry added to @keys-defender's database "PHISHING".
Thank you for your report, the PHISHING domain "moris69bukail.cyou" was correctly processed and will be added to the banlist after 3 reports.
Domains can be blacklisted by any top-40 witness, any whitelisted user or by at least 3 users with reputation above 50 - @keys-defender
!SCAM (PS. scammy links used for report now removed)
Thank you for your report, entry added to @keys-defender's database "SCAM".
¬rescan test¬ !PHISHING https://phishy.phish.com
Thank you for your report, entry added to @keys-defender's database "PHISHING".
Thank you for your report, entry added to @keys-defender's database "PHISHING".
TEST https://phishy.phish.com
@b0t5-t3sting Your comment contains a link that is on my blacklists ❗ ❗ ❗ 1 2 3
@keys-defender, do NOT click on the link above in their comment.
Reason: PHISHING
Link: "phishy.phish.com*" => DO NOT CLICK ❗
More info: https://hive.blog/hive/@keys-defender/new-feature-phishing-detection-and-auto-reply
Comment 10% downvoted to make it less visible.
This message is self-voted to be more visible among others.
Thanks for the Headsup!
Thanks for the heads up, the best!
Glad I follow the downvote trail of yours, keep up the great work!
Ps, you should include a link to follow youre downvote trail in posts like this one maybe? Just a imput.
!BEER
Posted using Dapplr
Thanks! And link added now 👍
Awsome!
!BEER 🍻
Posted using Dapplr
View or trade
BEER.Hey @keys-defender, here is a little bit of
BEERfrom @sandymeyer for you. Enjoy it!Learn how to earn FREE BEER each day by staking your
BEER.Gonna spread the word, and change my scheduled post to vote for witnesses, thank god it was in time before it went on, i will add the blog thanks
Thx!
!HACKED @giuseppemasala
Thank you for your report, entry added to @keys-defender's database "HACKED-USER".
Thanks for the Warning.
Posted Using LeoFinance Beta
Thanks for the warning, these assholes don't seem to want to stop screwing the community.
!PHISHING https://witness-vote.
Thank you for your report, entry added to @keys-defender's database "PHISHING".
https://peakd.com/@gamerist/comments also
yup
Good work staying vigilant.
Looks like the warning isn't making it to every phishing comment.
Reported URL, looks like commenting now.
Thanks for the heads up
View or trade
BEER.Hey @keys-defender, here is a little bit of
BEERfrom @sandymeyer for you. Enjoy it!Do you want to win SOME BEER together with your friends and draw the
BEERKING.Thanks for sharing the information. It's Very much helpful. Reblogged.
Your post was promoted by @jfang003
@keys-defender! This post has been manually curated by the $PIZZA Token team!
Learn more about $PIZZA Token at hive.pizza. Enjoy a slice of $PIZZA on us!
!PHISHINGhttps://justnetwork.tech/hiauth/
(was already in the blacklist and i've been putting thousands of fake credentials in there since a couple of days ago, thx)
Thank you for your report. The PHISHING domain [justnetwork.tech"] was already in the banlist. - @keys-defender