Someone Withdrew Steems to Steemit with Private Keys as Memos

in #wherein4 years ago

Yes, recently, apart from seeing steemit starts to PD, we also notice there are two transfers to steemit with memos likely the private keys.

image.png

May I suggest the owners of these keys immediately change their password, to avoid your accounts being compromised.

Someone may just do a bruteforce algorithm - trying combinations of account with these two private keys, it may take time, but may be quicker than your think if the keys are still valid.

There are currently 1.4M account. Let's say, we try 1 account/keys combination per second, and it will take around 16 days to crack one.

image.png

The good thing is that these two transfers are from the Exchanges, so the owner/initiator's identities are not revealed. It will be less lucky if you accidentally put your keys as memos, which may be detected by bots and then your funds will be stolen immediately.


Every little helps! I hope this helps!

Steem On!~

Computing & Technology

If you like my work, please consider voting for me, thanks!
https://steemit.com/~witnesses type in justyy and click VOTE



Alternatively, you could proxy to me if you are too lazy to vote!

Also: you can vote me at the tool I made: https://steemyy.com/witness-voting/?witness=justyy

Sort:  

Yes, you are right.

What do you think about @Steemit account powering down?
PS: Looking around... the community it is a bit concern!

It is said the funds will cover the operation costs.

Hard to believe that... just the first power down is around 1.6 Millions USD!
PS: Do you really think this is the case... funds to cover the operation costs?

I don't really know... but I wouldn't worry too much.

@justyy, thanks a lot for sharing your opinion regarding my concern.
I do have one more question (and i promise i will stop with the questions for a while, as i know you are very busy)...
As you probably notice on SteemEngine, SteemConnect got deprecated, and now we are advice to use Steem Keychain. Since this is an extension that needs to be install in the browser and it's been developed by a witness who is not with us anymore... do you think is safe to install Steem Keychain and start using it on SteemEngine?
Wish you a great week-end!

You can check their source code on github, and download the source code from github, install it as a local version (development mode), this should give you some confidence of using it.

啪啪啪啪

Coin Marketplace

STEEM 0.19
TRX 0.15
JST 0.029
BTC 63466.72
ETH 2683.95
USDT 1.00
SBD 2.80