Warning - Posting Keys Compromised - CHANGE KEYS NOW

jeffjagoe (72)in #warning • 6 years ago (edited)

Warning - Posting Keys Compromised

CHANGE KEYS & REVOKE APP ACCESS NOW

Someone gained access to the Posting Keys of a plethora of accounts. Currently the ground zero and the culprit has yet to be identified.

What Happened...

As you can see in the photo below taken from my STEEMD page, someone recently used my Posting Key to upvote @ladycasper, @zulkifli123 and @adetanlus's posts at 100% voting strength. The culprit also chose to use the hijacked accounts to flag/downvote @haejin posts at 100%.

At first I thought it was someone that I was trailing from Streemian. I soon realized I do not have any curation trails going. The Posting Key was compromised and by the looks of the posts, I was not the only one. One of the third-party services that uses STEEMConnect must have been the victim... or worse... maybe STEEMConnect itself...

What to do:

Go to STEEMConnect & Revoke Access

https://steemconnect.com/login

Get rid of all applications with access to your Posting Key. After you login to STEEMConnect go to the App Authorization section and click the revoke button for all applications linked to your account.

Change the Master Password

It might be a good idea to change your Master Password after revoking access to the applications. If STEEMConnect itself is compromised, then your funds may be at stake because STEEMConnect operates with an Active Key. Click your profile icon and go to the change password section as seen below.

BE SURE TO SAVE YOUR NEW PASSWORD IN A SAFE PLACE!

Hopefully there will be some answers in the near future. It would be nice to know what caused the reckless voting. Stay safe out there STEEMians and Happy Friday!