🔑🦸‍♂️ [monthly report - February 2021]

February 2021 - activities report

K E Y S P R O T E C T I O N:

1. @shiningst

Chain: Steem (steem only account 👎)
Type: Posting key
Operation in which the account was leaked: comment

Leaked account stats:
- Estimated Account Value: $ 2.75
- Reputation: 43
- Followers: 1
- Account age: Joined July 2020

@keys-defender's actions:
- Immediate reply
- Disclosure

2. @florrs0616

Chain: Steem (steem only account 👎)
Type: Posting key
Operation in which the account was leaked: comment

Leaked account stats:
- Estimated Account Value: $ 00.00 (on Hive)
- Reputation: 25
- Followers: 8
- Account age: Joined Feb 2021

@keys-defender's actions:
- Immediate reply
- Disclosure

3. @minato

Chain: Steem (Hive + steem account)
Type: Posting key
Operation in which the account was leaked: comment

Leaked account stats:
- Estimated Account Value: $ 1.35 (on Hive) + $ 1.16 (on Hive)
- Reputation: 36
- Followers: 321
- Account age: Joined Aug 2017

@keys-defender's actions:
- Immediate automated reply
- Disclosure

4. @iamalivechalleng

Chain: Hive (Hive only account 😎)
Type: ACTIVE key
Operation in which the account was leaked: transfer

Leaked account stats:
- Estimated Account Value: $ 53.49
- Reputation: 58
- Followers: 164
- Account age: Joined May 2020

@keys-defender's actions:
- Immediate transfer to savings
- Disclosure

5. @theoctoberwind

Chain: Hive (Hive + steem account)
Type: Memo key
Operation in which the account was leaked: transfer

Leaked account stats:
- Estimated Account Value: $ 19.59 (on Steem) + $ 31.21 (on Hive)
- Reputation: 56
- Followers: 45
- Account age: Joined May 2019

@keys-defender's actions:
- Immediate automated warning via transfer memo
- Disclosure

6. @rimungjuah

Chain: Steem (Hive + steem account)
Type: Posting key
Operation in which the account was leaked: comment

Leaked account stats:
- Estimated Account Value: $ 0.67 (on Hive) + 0.94 (on Steem)
- Reputation: 40
- Followers: 238
- Account age: Joined May 2018

@keys-defender's actions:
- Immediate reply
- Disclosure

_{NOTE: @keys-defender still scans the STEEM blockchain because your private keys are shared across the two chains unless you reset your password at https://wallet.hive.blog/@your-username-here/password!}

_{TOTAL KEYS FOUND since launch:}

_{posting keys: // todo}
_{active keys: // todo}
_{memo keys: // todo}
_{owner keys: // todo}

PHISHING LINKS detected (and auto-replied to): ~155❗

See @hivewatchers's post for more info: https://hive.blog/phishing/@hivewatchers/phishing-warning-no-critical-wallet-update-no-airdrop-no-giveaway

_{Auto-replies in wallet memos will be developed shortly.}

CODE INJECTIONS detected on Hive: 1

No harm, just a dev testing his own site:

UNSAFE LINKS detected:

HTTP links: ~72.3/h -> ~52,056/month. Auto-replies/warnings throttled 1/20.
Shortened links: ~30.7/h -> ~22,104/month. Auto-replies/warnings throttled 1/20.

_{NOTE: links that do not use a secure protocol (https) and shortened links (eg. bit.ly) are NOT a threat per se but can lead to theft of credentials if misused or used in a malicious attack.}

O T H E R A C T I V I T I E S:

Confirmed re-posting authors: 0 ✔️

One false positive:

_{critical bug fixes required}

Downvotes of @keys-defender (and its trail) against hive-abusers:
87
❗

Accounts:
_{- antonireviews -> see phishing wave that hit Hive this week: https://hive.blog/phishing/@hivewatchers/phishing-warning-no-critical-wallet-update-no-airdrop-no-giveaway}
_{- hugojimenez -> another compromised account used for the same phishing attack}
_{- aljif7-> same as above}
_{- joyceimo}
_{- world-travel-pro}
_{- srmallara}
_{- cityhelper}
_{- flaws}
_{- daio}
_{- project.hope}
_{- kingscrown}

_{@keys-defender currently follows the @steemflagrewards volonteers' downvote trail}

_{Followers of my downvote-trail:} 3 _{(plus their own trail - about 10 accounts total)}

What does this bot do?

- _{Keys protection_{[live scan of transfers / posts / comments / other_ops. Auto-transfers to savings, auto-reset of keys, ..] {see automatic posts on leak and monthly reports}}}
- _{Phishing protection
_{[live scan of blocks to warn against phishing campaigns, compromised domains and accounts]}}
- _{Code injections detection
_{[live scan of blocks to detect malicious code targeting dapps of the Hive ecosystem]}}
- _{Re-posting detection
_{[mitigates the issue of re-posters]}}
- _{Anti spam efforts
_{[counteracts spam from hive abusers]}}

_{My security disclosures:}
_{- _{XSS vulnerabilities in #########.com}}
_{- _{XSS vulnerabilities in hive-db.com}

- _{XSS vulnerabilities in scribe.hivekings.com}

- _{XSS vulnerabilities in hiveblockexplorer.com}

- _{Malicious ads redirecting all Steemit iOS users to a phishing site}

- _{Reverse tabnabbing and clickjacking in steem.chat and steeemit registration page}}
_{_{_{(+ ethos, dating site, ..., small crypto exhange.)}}}

_{_{Discord server}}