Leak -- Compromised POSTING key successfully protected!!

0 comments

keys-defender2.4 K4 years agoHive.Blog2 min read

https://cdn.steemitimages.com/DQmRBQhwa1mKebp3zmT3i8CNPmDRMTcpwwfrWXAMEeWRDSR/image.png

❗❗❗ 💀💀 ⚠️⚠️
It's a new day and another user leaked one of their private keys into the Hive Blockchain.

https://cdn.steemitimages.com/DQmXrgmkPidLgXtMvLHPYM44Gd32zayQ3ZuWKj3z6gAGRMj/image.png

They COMPROMISED their...

private POSTING key

HOW: in a post operation published to the Hive blockchain.

The compromised account owner has now been notified in multiple ways. The identity of the user will be disclosed only in the weekly report in order to give them time to address the issue.

https://steemitimages.com/640x0/https://i.pinimg.com/236x/60/a7/0b/60a70b92165f10376d3d64c357fc7577--the-matrix-keanu-reeves.jpg

Compromised account stats:

Reputation: 57
Followers: 560
Account creation: September 2017
Last Post: 10 hours ago
Estimated account value: $ 19.23 on steem

Top 5 private ACTIVE keys protected:

_{1. @nextgen622:}~$ 28,000 _{2. @cryptoandcoffee:}~$ 8,400 _{3. @runridefly:}~$ 3,300 _{4. @globalmerchantio: ~$ 250}
_{5. @j3dy: ~$ 120 (500 HIVE automatically protected for 9 days)}

What does this bot do?

- _{Keys protection_{[live scan of transfers / posts / comments / other_ops. Auto-transfers to savings, auto-reset of keys, ..] {see automatic posts on leak and weekly reports}}}
- _{Phishing protection
_{[live scan of blocks to warn against known phishing campaigns and compromised domains]}}
- _{Re-posting detection
_{[mitigates the issue of re-posters]}}
- _{Code injections detection
_{[live scan of blocks for malicious code targeting dapps of the Hive ecosystem]}}
- _{Anti spam efforts
_{[counteracts spam from hive haters]}}

_{My security disclosures:}
_{- _{XSS vulnerabilities in #########.com}}
_{- _{XSS vulnerabilities in hive-db.com}

- _{XSS vulnerabilities in scribe.hivekings.com}

- _{XSS vulnerabilities in hiveblockexplorer.com}

- _{Malicious ads redirecting all Steemit iOS users to a phishing site}

- _{Reverse tabnabbing and clickjacking in steem.chat and steeemit registration page}}