Scammers everywhere - Be careful with your Keys and Passwords

in #steemit6 years ago (edited)

background-3234504_960_720.jpg

Never use your Master Password to login on Steemit please!

Think most are aware about some of the important security rules on this platform but just to repeat it given a friend of mine today got hacked and the account was stolen. We do not know what exactly happened but the account was lost and a certain account has started power down and transferred the available funds to his / her account already. There is not much one can do apart from really being careful on some things.

  • NEVER click on any link in any post, comment or wallet message before you did not investigate it is no phishing attempt Mouseover them to ensure you are aware where they link you to. If you are not sure - do NOT click.
  • NEVER use your Master Password to login on Steemit - as DEFAULT use posting key! ALWAYS - only use Active Key for financial transactions - put your Master Password in a safe place (password manager, paper, engrave in a stone (but keep it somewhere no one has access!), put it in more than one safe places but make sure NOT to tell anyone where this is!
  • KEEP ALL your Keys in a safe place!
  • If you got hacked - use the Stolen Account Recovery tool immediately!
  • Let others know your account has been hacked via the channels your connections are active so the can inform the community!
  • Report scammers on https://steem.chat/channel/steemitabuse

cybercrime.png

BE CAREFUL - Do NOT DRINK OR USE DRUGS WHILE USING STEEMIT

Feel free to spread the news so we minimise people falling into a scam trap - follow @arcange and @guiltyparties for more advice on how to protect your account.

Sort:  

In the past few weeks I have seen a lot of fake websites that look like steemit with the goal of stealing the passwords.

Your friend probably visited one of those websites.

Which one is the account receiving the stolen funds?

Seems she was not clicking any phishing link but who know - the receiving account I reported to steemitabuse and prefer not to mention here - I might do later maybe as he seems to have found another victim.

Omg sir i always use my master password i don't know about keys 😟😢😲. What is it and why is it happening😢😢 please guide me about master keys

Are you serious? You need to check the Steemit FAQs: Re Master Password and Keys read this from the official FAQs please:

Why should I be careful with my master password?

The master password is used to derive all keys for your account, including the owner key. If someone has access to your master password, they can steal your account and all of the tokens in it.

What are my different keys for?

Posting key - The posting key allows accounts to post, comment, edit, vote, resteem, and follow or mute other accounts. Most users should be logging into Steemit every day with the posting key. You are more likely to have your password or key compromised the more you use it so a limited posting key exists to restrict the damage that a compromised account key would cause.

Active key - The active key is meant for more sensitive tasks such as transferring funds, power up/down transactions, converting Steem Dollars, voting for witnesses, updating profile details and avatar, and placing a market order.

Memo key - Currently the memo key is not used.

Owner key - The owner key is only meant for use when necessary. It is the most powerful key because it can change any key of an account, including the owner key. Ideally it is meant to be stored offline, and only used to recover a compromised account.

You can check your keys under wallet/permissions:

Screen Shot 2018-04-27 at 17.16.21.png

sir thank you so much after reading your post i was so curious and worried too so already read these FAQ'S

Sehr wichtige Info, wird gleich resteemed :-)

Merci hombre - heute was am Start für #DanceWeekend?

Gerne, klar Post ist schon online :-)
https://steemit.com/danceweekend/@mikenero/ibngsu8d

Wird resteemed

mach ich später - gib mr ein oder 2 Stündchen - die Aktualität hat mich eingeholt :-) aber evtl. magst ja auch bisserl German Metal aus den 1980ern

Thank you for bringing this to awareness again, and especially for highlighting the importance of keeping the Master Key safe and NOT using it as default login password!

Never enough caution!

I know how it feels as my account was hacked about a month ago.

Thanks @ana-maria - yeah i remember your issue recently.

I think i know what happened, because my account was stolen some days ago. Your friend opened a link and signed up using his password. If you track the replies he got, one of them must be a phishing link.He must contact steemit and his account will be recovered in some hours.
He must report the user who sent him the link. If he doesnt know, I can check it out for him.
I hope that everything works out soon as possible :)

Not sure - I checked my friend's profile and did not discover anything suspicious - she started to account recovery already and I reported this to steemtiabuse. Thanks for offering help.

Hopefully she can recover her account soon. Have a nice Weekend :)

It's very important to remain vigilant at all times when dealing with any form of crypto login or transaction. Scammers are everywhere at the moment, and sadly people are losing everything due to a lapse in concentration.

Thanks for the reminder.

Sad that a small few have no conscience or scruples.

Human nature eh.

xox

Can´t warn enough of those things! You have to be vigilant all the time. One of the most dangerous phishing attempts is when one got phished that you follow. You tend to not be on your guard too much if a link is being posted by somebody you know/trust/like.

thank you for the information that is very important for everyone @uwelang you very good

Do not drink while using steemit!

Where will one find creativity then?

Good question, different topic lol

Maybe this is the idea for your next topic, "How To Find Creativity On Steemit!"

Coin Marketplace

STEEM 0.21
TRX 0.13
JST 0.030
BTC 66917.83
ETH 3499.90
USDT 1.00
SBD 2.89