Topic: WARNING: Fake DGEX emails from attacker: DO NOT CLICK LINKS IN THESE EMAILS! (Read 6073 times)

Graviton · « **on:** August 05, 2014, 09:16:48 am »

I have been provided with the following concerning reference below.

DGEX has not issued such update. It seems someone is sending out emails in my name - and doing pretty well in copying my style. I would not download any of the wares linked, as it is likely they contain malware. I'm also supposing the Bitbucket repository is not Wesley's, but again the attacker is trying to impersonate him in order to gain confidence in order to spread malware.

Quote

On Aug 1, 2014 6:28 PM, "admin" <admin@dgex.com> wrote:
Dear DGEX Trader,

DGEX.com is now reopened with a suite of new services and a 100% new infrastructure that should render hacking of customer funds practically impossible. Customers will be given control of their funds at all times through distributed client-side Bitcoin / NXT / FIMK wallets accessible through the DGEX service and shared with its appropriate automation facilities.

TOTP is now included in the Wesley Client. OFFSPRING NXT Client update is following with TOTP.
Mac: https://bitbucket.org/xxx.zip
Windows: https://bitbucket.org/xxx.zip

Thank you for your patience.

Kind regards,

Graviton Capital
DGEX.com

---
This is a DGEX membership newsletter that is sent to all members. We do not send more than two messages a month maximum, and generally send only important system announcements. If you do not wish to receive important announcements through email, please let us know.

Damelon · « **Reply #1 on:** August 05, 2014, 09:18:53 am »

Sent as an announcement to all members of the forum (hence the "edit" by me mentioned in your post)

Eadeqa · « **Reply #2 on:** August 05, 2014, 09:28:18 am »

If these bitbucket links have malicious software, why include the full link?

wesley · « **Reply #3 on:** August 05, 2014, 09:28:53 am »

My repo is http://bitbucket.org/wesleyh

Not wesleyhnxt

yassin54 · « **Reply #4 on:** August 05, 2014, 09:34:01 am »

Quote from: Damelon on August 05, 2014, 09:18:53 am

Sent as an announcement to all members of the forum (hence the "edit" by me mentioned in your post)

thanks!!!!
I just received announcement.
thanks Graviton for this information.

Eadeqa · « **Reply #5 on:** August 05, 2014, 09:36:29 am »

Quote from: wesleyh on August 05, 2014, 09:28:53 am

My repo is http://bitbucket.org/wesleyh

Not wesleyhnxt

change the OP link to at least something like

https://bitbucket.org/wesleyhnxt/nxt-wallet-win/downloads/nxt-wallet-win-setup-1.2.2-nrs-XXXX.zip

so it gets 404 error

qqNxt · « **Reply #6 on:** August 05, 2014, 09:37:46 am »

what a scum trying to scam us.
nobody better fall for this or its going to be another bite on us. so much scams recently its getting on my nerves.

In future, dgex should sign a nxt token for emails. and a link to the tutorial on how to verify such token.
nxt token can be used to prevent such scams right?

Eadeqa · « **Reply #7 on:** August 05, 2014, 09:50:20 am »

Quote from: qqNxt on August 05, 2014, 09:37:46 am

what a scum trying to scam us.
nobody better fall for this or its going to be another bite on us. so much scams recently its getting on my nerves.

I would love to see law enforcement get involved and track and prosecute online thieves.

xcn · « **Reply #8 on:** August 05, 2014, 10:25:05 am »

Quote from: Eadeqa on August 05, 2014, 09:50:20 am

Quote from: qqNxt on August 05, 2014, 09:37:46 am
what a scum trying to scam us.
nobody better fall for this or its going to be another bite on us. so much scams recently its getting on my nerves.

I would love to see law enforcement get involved and track and prosecute online thieves.

You can put NXT24 on the list.

bionic · « **Reply #9 on:** August 05, 2014, 04:35:53 pm »

and i guess the DGEX relaunch pushes a few more days eh?

Graviton · « **Reply #10 on:** August 05, 2014, 05:08:07 pm »

Quote from: bionic on August 05, 2014, 04:35:53 pm

and i guess the DGEX relaunch pushes a few more days eh?

Haha this email attack would not be a very good excuse...

We are aiming to enable at least partial account access and a new useful, free facility tonight before midnight GMT time as planned in the latest update.

Come-from-Beyond · « **Reply #11 on:** August 05, 2014, 05:16:26 pm »

Quote from: wesleyh on August 05, 2014, 09:28:53 am

My repo is http://bitbucket.org/wesleyh

Not wesleyhnxt

Makes sense, no need to have wesleyhnxt, wesleyhethereum, wesleyhstellar...

megashira1 · « **Reply #12 on:** August 05, 2014, 05:41:14 pm »

Never have I realized the full degenerative state of humanity until becoming involved with crypto.

Few sparks of light here and there (graviton); for the the most part however, severely degenerative.

May god have mercy on our souls.

IanDeMartino · « **Reply #13 on:** August 05, 2014, 05:49:38 pm »

has anyone looked at the files linked to in the phishing attempt in sandbox mode to see what they do?

Damelon · « **Reply #14 on:** August 05, 2014, 06:58:46 pm »

If anyone still has this mail, could they send me a PM?

xyzzyx · « **Reply #15 on:** August 05, 2014, 08:49:04 pm »

Quote from: megashira1 on August 05, 2014, 05:41:14 pm

Never have I realized the full degenerative state of humanity until becoming involved with crypto.

Cryptocurrency circles: You will never find a more wretched hive of scum and villainy. We must be cautious.

crimi · « **Reply #16 on:** August 06, 2014, 03:11:38 am »

http://cointelegraph.com/news/112221/while-temporarily-closed-malware-sent-to-dgex-users

oldnbold · « **Reply #17 on:** August 06, 2014, 08:16:33 am »

...from the above article:

Quote

We then asked if he has filled DMARC (Domain-based Message Authentication, Reporting & Conformance) records, he responded that he “[doesn't] know what that is.”

Never heard of it myself either, despite its widespread adoption:

Quote

As of early 2013 DMARC had been deployed to protect roughly 2 billion email accounts - over 60% of consumer mailboxes globally, and over 80% of consumer mailboxes in the United States.

http://www.dmarc.org/

wesley · « **Reply #18 on:** August 06, 2014, 08:21:45 am »

Just so you know, a dmca request was filled yesterday and the bitbucket closed: https://bitbucket.org/wesleyhnxt/nxt-wallet-win

Graviton · « **Reply #19 on:** August 06, 2014, 08:37:11 am »

Quote from: wesleyh on August 06, 2014, 08:21:45 am

Just so you know, a dmca request was filled yesterday and the bitbucket closed: https://bitbucket.org/wesleyhnxt/nxt-wallet-win

Who filled a DMCA request?

Cointelegraph... the Daily Mail of crypto, regarding quality.

News:

Author Topic: WARNING: Fake DGEX emails from attacker: DO NOT CLICK LINKS IN THESE EMAILS! (Read 6073 times)

megashira1