Scammers everywhere - Be careful with your Keys and Passwords
Never use your Master Password to login on Steemit please!
Think most are aware about some of the important security rules on this platform but just to repeat it given a friend of mine today got hacked and the account was stolen. We do not know what exactly happened but the account was lost and a certain account has started power down and transferred the available funds to his / her account already. There is not much one can do apart from really being careful on some things.
- NEVER click on any link in any post, comment or wallet message before you did not investigate it is no phishing attempt Mouseover them to ensure you are aware where they link you to. If you are not sure - do NOT click.
- NEVER use your Master Password to login on Steemit - as DEFAULT use posting key! ALWAYS - only use Active Key for financial transactions - put your Master Password in a safe place (password manager, paper, engrave in a stone (but keep it somewhere no one has access!), put it in more than one safe places but make sure NOT to tell anyone where this is!
- KEEP ALL your Keys in a safe place!
- If you got hacked - use the Stolen Account Recovery tool immediately!
- Let others know your account has been hacked via the channels your connections are active so the can inform the community!
- Report scammers on https://steem.chat/channel/steemitabuse
BE CAREFUL - Do NOT DRINK OR USE DRUGS WHILE USING STEEMIT
Feel free to spread the news so we minimise people falling into a scam trap - follow @arcange and @guiltyparties for more advice on how to protect your account.
In the past few weeks I have seen a lot of fake websites that look like steemit with the goal of stealing the passwords.
Your friend probably visited one of those websites.
Which one is the account receiving the stolen funds?
Seems she was not clicking any phishing link but who know - the receiving account I reported to steemitabuse and prefer not to mention here - I might do later maybe as he seems to have found another victim.
A password manager like Lastpass can help. It won't fill in passwords if you are on a fake site. The reason you see an icon next to links on Steemit is to indicate they are not on Steemit itself. Links in wallet messages should be treated with suspicion.
BTW It should be 'advice' (noun), not 'advise' (verb) in the last line.
Exactly - also use Lastpass - thanks for the hint on my shitty English :-) - correcting.
Omg sir i always use my master password i don't know about keys 😟😢😲. What is it and why is it happening😢😢 please guide me about master keys
Are you serious? You need to check the Steemit FAQs: Re Master Password and Keys read this from the official FAQs please:
You can check your keys under wallet/permissions:
sir thank you so much after reading your post i was so curious and worried too so already read these FAQ'S
Sehr wichtige Info, wird gleich resteemed :-)
Merci hombre - heute was am Start für #DanceWeekend?
Gerne, klar Post ist schon online :-)
https://steemit.com/danceweekend/@mikenero/ibngsu8d
Wird resteemed
Thx :-)
mach ich später - gib mr ein oder 2 Stündchen - die Aktualität hat mich eingeholt :-) aber evtl. magst ja auch bisserl German Metal aus den 1980ern
Thank you for bringing this to awareness again, and especially for highlighting the importance of keeping the Master Key safe and NOT using it as default login password!
Never enough caution!
I know how it feels as my account was hacked about a month ago.
Thanks @ana-maria - yeah i remember your issue recently.
I think i know what happened, because my account was stolen some days ago. Your friend opened a link and signed up using his password. If you track the replies he got, one of them must be a phishing link.He must contact steemit and his account will be recovered in some hours.
He must report the user who sent him the link. If he doesnt know, I can check it out for him.
I hope that everything works out soon as possible :)
Not sure - I checked my friend's profile and did not discover anything suspicious - she started to account recovery already and I reported this to steemtiabuse. Thanks for offering help.
Hopefully she can recover her account soon. Have a nice Weekend :)
It's very important to remain vigilant at all times when dealing with any form of crypto login or transaction. Scammers are everywhere at the moment, and sadly people are losing everything due to a lapse in concentration.
Thanks for the reminder.
Sad that a small few have no conscience or scruples.
Human nature eh.
xox
Can´t warn enough of those things! You have to be vigilant all the time. One of the most dangerous phishing attempts is when one got phished that you follow. You tend to not be on your guard too much if a link is being posted by somebody you know/trust/like.
thank you for the information that is very important for everyone @uwelang you very good