Today while exploring the blockchain I came up with a lot of posts that are phishing attempts to get hold of your Active key or master password or whatever you use to login in STEEMit (see why you should not login with your master password to post)

---

I compiled a list and went to speak with the nice people @steemcleaners and they were already aware and measures have been already put in place to mitigate or stop the damage this could potentially do.

A Post flagging campaign was launched using @cheetah, and @patrice form SC have had a hard day doing her magic and protecting us.

---

But from speaking to one of the victim's his testimonial here I realized that I have had the same problem.

STEEMit.com for no reason had been asking for my password.

Initially i dismissed it as a site glitch but was today while speaking with @outwalking (one vitcim of the scam) that i realized my account was at risk.

I usually login with my Private Posting key, so my money was safe, but it doesn't means that the attackers cannot do what they did to the victims (Start posting or modifying old posts to avoid detection) and inundate STEEMit with fake posts that will get your KEYs and either make you become part of a spam BOT-Net or empty your wallet

Here is a great tutorial from @reggaemuffin on how to Change your password

The only thing I would like to add to his post is:

I think they used some JavaScript to poison out cookies I'm digging into the matter, but stopped to write this post so everyone can be aware of the situation.

---

I'm not a witness or anything just a STEEMian like you trying to help make this place better for all of us. But I'm working and learning to become one to care and make the Spanish / Latino community grow

---

Thanks to @happyme for providing the link to what the different Keys DO

---