PSA - MyEtherWallet DNS Hijacked - DO NOT USE THE WALLET

in #ethereum7 years ago

MEW is the most popular frontend and wallet for Ethereum and tokens.

Do not use it right now even with MIST (Chrome plugin alowing nice and little bit more secure interaction). It looks like DNSes of the site are hijacked and respond with russian IP instead of original one.

All funds seem to be going into https://etherscan.io/address/0x1d50588c0aa11959a5c28831ce3dc5f1d3120d29

image.png

DO NOT USE THE SITE AND SHARE INFO TO OTHERS

Follow, Resteem and VOTE UP @kingscrown creator of http://fuk.io blog for 0day cryptocurrency news and tips!

Sort:  

Could someone tell me if this could happen to the sites connected to the Steem blockchain? Like Steemit.com, busy.org and/or D.tube (via steemconnect) etc.etc...

Whoa, thats alarming thou. Im worried about my MEW account, i have some coins there :(

Just wait it out. It will be resolved. There is no issue or risk if you just leave everything as is. If you need to move coins you can use an alternative wallet.

Your coins are not on MEW. They are on the blochain. As long as you have your public and private key you can access them from other ETH wallet.

Where is the blockchain to solve this issue? We need decentralized unhackable DNS. To many people are affected by this insecure front end. Not everyone can or wishes to run a full node...

Thanks for keeping the community informed.

Thanks for spreading the word.

It probably isn't the Russians. It is probably the banksters or George Soros pretending to be Russians. The market is coming back and they can't stand it.

If accessing a Ledger Nano from it, still all secure on the device itself...?

You can run MyEtherWallet offline / locally by going to github and just placing all of the javascript in a local directory.

Here is the link, that was shown in the old MyEtherWallet page

  1. go to https://github.com/kvhnuke/etherwallet/releases/latest
  2. click on vx.x.x.x.zip
  3. move zip to an airgapped computer
  4. unzip it and double-click index.html
  5. MyEtherWallet is now running entirely on your computer.

Here is a video showing how it is done.

Thanks for the heads up. I certainly know what it's like to be scammed. Several months ago I was scammed out of my steemit wallet 663.843 sbd and left a bad taste in my mouth. As I am not a quitter I continue one on steaming. People need to be aware of these scams again thanks

Same here @enjoywithroy I was scammed by bitcoingold (BTG) last year. I lost 0.5 btc in that scam. I was new at that time didn’t knew much about public key and private key. It was million dollar scammed by BTG team. Yeah it’s bitter to have that experience.

best desktop app for view cryptocurrency stats and signals https://usignals.com

Don’t do spamming otherwise you’ll be flagged.

Another hijack or another rumor? They really do need to improve their security....

DNS relies upon the national registry. Which is now controlled by the UN.

You can go to the EtherWallet github repository and download the entire webpage, and then run the wallet/webpage locally.

All my bandwidth is gone, and all i have done is post one comment. Anyone?

thank you for the information friend

I only trust hardware wallets and papper wallets.

Sure, hardware wallets cost pretty much for something that looks like a USB stick.

But, it's extremelly useful.

I'd rather pay like a 100$ and have my cryptos safe, than be cheapskate and possibly lose 100 times more money than 100$.

What wallet do you recommend as an overall wallet? And how is wallets different from each other?

Ah those good old Russians again they are hacking everything like I said such things are acts of war they are playing with fire

a very very useful post, thank you very much

Actually i think it is not that easy to fight an army of hackers, having one goal, while you have to satisfy everyone on every end and try to secure the wallet up enough, without making the use to complex.

But, at end this problems need to be solved first before, crypto can be a real thing.

I used MEW account for several times.Now i am feeling so much tension.

thank you for sharing this, i appreciate it and will watch for further updates , not sure what to do now only used MEW in the past thank you again much respect to you

Thank you for the information@kingscown

Hi,
Thank you for warning us, I appreciate so much. Cheers

I survived because of my laziness. I was about to move my Tokens to this wallet.

Always good too see updates like this going around. I don't use it but still good to know. Thank you!

omg! what do i do now..So much coin of mine are in it. Help me lord.

They scammed 215 ETH already. Personally I always use a local copy of MEW obtained from GitHub.

Spam is discouraged by the community, including comment spam.

Tips to avoid being flagged

Thank You! ⚜

Resteemed... People need to be aware of this- Thanks!

How about using Meta Mask + MEW? Is it safe?

Looks like one wallet had 85 ETH stolen, worth about $60,000. Hacks like these makes me want to spread out my crypto more and more because I know there is always the risk that something could happen if I keep it in one place.

It might be Russian hackers but the conspiracy theorist in me says it has something to do with mycrypto.com.

The lady who used to work with myetherwallet tried to hijack myetherwallet's customers and redirected them to her site (which is mycrypto.com). She essentially pulled the rug under the guy who came up with the idea originally and then proceeded to act like she's a victim. This just smells so much like her.

Great info this is very alarming!

thanks for sharing you always come with great Writting skillss and always write awesome articles keep it up Hope you also visit my blog thanks