Observation and Analysis - The Fake Cheetah 观察与分析之诈骗 🔍

nationalpark (63)in #cn • 7 years ago (edited)

Eclipse of 2016 二零一六的月蚀

Update: @sallybeth23 and @birudanak are victims of the scam. It's possible the other names listed are also victims. It means the scam is not new. It already exists for at least one month.

更新： sallybeth23和birudanak都是钓鱼骗局的受害者。估计其他人也都是受害者。看来这个骗局至少持续了一个月了。

Recently, @twinkledrop's account was phishing attached by @cheetoh. I searched the memo of the bittrex transfers and found that following accounts might be related to @cheetoh:

@sallybeth23, @birjudanak, @steemmatt, @angrysage, @albertbongers used the same memo of 612036a11c5c4b2ead6 before. 612036a11c5c4b2ead6 is the memo that @cheetoh to transfer @twinkledrop's money to @bittrex.

Furthermore, @sallybeth23 used 78ed9a0b0de34a96995 before. The same memo was also used by @dansononlife and @altermaker.

@birjudanak also used memos of bd4b4f58f6424813b39 and 6c433485aac646ae931. The first memo never used by other account. They second memo used by @albertbongers before.

Therefore, these accounts might be related. Today I don't have time to do more research. If any of you are interested, you may want to start from there.

最近 @twinklesong的账号 @twinkledrop遭受假猎豹的钓鱼袭击被盗号盗款。一个叫做 @cheetoh伪装成 @cheetah，在受害者帖子里留言中加入恶意链接并伪装成Steemit页面。受害者输入密码后，袭击者修改密码并把存款转入bittrex。

通过SteemSQL，可以看到骗子把受害者的六百多SBD转移到 @bittrex，memo是612036a11c5c4b2ead6。查询这个memo，可以找到以下记录：

Screen Shot 2017-10-22 at 11.47.13 PM.png

记录显示， @sallybeth23, @birjudanak, @steemmatt, @angrysage, @albertbongers都使用过同一个memo转款到 @bittrex。

查询一下 @sallybeth23转款到 @bittrex发现此号还用过另外一个memo：78ed9a0b0de34a96995。查询这个memo发现还有两个账号使用过这个memo： @dansononlife, @altermaker
Screen Shot 2017-10-22 at 11.51.54 PM.png

查询 @birjudanak，发现它还使用过 bd4b4f58f6424813b39和6c433485aac646ae931。其中第一个memo其他人没有使用过，第二个memo @albertbongers使用过。

所以跟 @cheetoh相关的账号可能有：

我今天没有时间继续研究。大家谁有兴趣可以继续挖。

加勒比海系列

数据、观察、分析系列

技术系列

#steemit #cn-steemit #phishing #security

7 years ago in #cn by nationalpark (63)

$18.62

Sort:

Trending

[-]

wangwenjing (61) 7 years ago

辛苦了，以后一定注意这些帐号。

$0.07

1 vote

[-]

nationalpark (63) 7 years ago

骗子确实多

$0.00

[-]

birjudanak (64) 7 years ago

Yes my account was stolen last month and i also noticed it too that they used same memo and also discussed about all this to Admin and account was recovered successfully but i lost 156 steem and 7 SBD. Also emailed to bittrex about it to take action against that memo but they didn't do anything.

$0.00

[-]

nationalpark (63) 7 years ago

I am glad you recovered your account. Do you know @albertbongers? It's your account or another victim?

$0.00

[-]

birjudanak (64) 7 years ago

I only know other is Sally Beth because i seen her post and as i know her i enter site and i lost all but we both recovered our accounts. Other people I don't know them.

$0.00

[-]

minnowpond (62) 7 years ago

@reported has voted on behalf of @minnowpond.
If you would like to recieve upvotes from minnowponds team on all your posts, simply FOLLOW @minnowpond.

            To receive an upvote send 0.25 SBD to @minnowpond with your posts url as the memo
            To receive an reSteem send 0.75 SBD to @minnowpond with your posts url as the memo
            To receive an upvote and a reSteem send 1.00SBD to @minnowpond with your posts url as the memo

$0.00

[-]