[WARNING] MyEtherWallet.com highjacked on Google Public DNS

in #cryptocurrency6 years ago (edited)

MEW suddenly switched from the CloudFront CDN to one Russian IP address (46.161.42.42). I'd be careful until more information is revealed.

It has actually been hacked.
This is the hacker's address.: https://etherscan.io/address/0x1d50588C0aa11959A5c28831ce3DC5F1D3120d29
Снимок экрана 2018-04-24 в 17.01.07.png

Now is google DNS is OK:
Снимок экрана 2018-04-24 в 16.49.35.png

Снимок экрана 2018-04-24 в 16.50.04.png

Снимок экрана 2018-04-24 в 16.49.02.png

Result of DNS highjacked:

  • 178 trx (+1 pending at the moment)
  • $149,201.60 ( $690.57/ETH)

Google Public DNS is now resolving the correct ips. Keep in mind the ttl of the old records was some 9000 seconds, we can expect some ISP's to cache that for their clients.

Again, please make sure the SSL Connection is always green when you interact with any website.

Upvote and resteem.

Be careful! Tell your friends!

Sort:  

Thanks a lot for the warning!
I did also a search and found this...

Wow its good

This may have something to do with it: https://www.apnews.com/20aaf45d3c8b4bb5bfbf7cdaa328e1df

No it's about google DNS
8.8.8.8
8.8.4.4
@originalworks

As you said, be be careful Ether collectors :O