Block fake mee6 bot and others #11684
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
```
"airdrop.claims",
"antispambot.org",
"antispambot.pro",
"claim.uniswap.lc",
"curvefi-wallet.co",
"freethadrop.com",
"harmonize-info.com",
"mee6.rs",
"metamask-finance.com",
"metamask.546245.shop",
"metamask.thisisnotalpha.com",
"pancakeswaq.financial",
"posvalidator-ethereum.info",
"posvalidator-ethereum.net",
"secure-login-coinbase.com",
"secure-reset-coinbase.com",
"stfx-airdrops.org",
"xrpdouble-promotion.com",
"mclarenautto.xyz",
"uniswap.gg",
"uniswap.lc",
"user663225-metamask.ddns.net",
"web3-dapps-pages-dev.netlify.app",
"wvw-sushiswap.icu",
"wwwmetamask-io.myvnc.com",
"wwwunlockexodus.xyz",
```
dubstard
requested review from
a team,
409H,
AlexHerman1,
trn1ty,
ethphishingmaintainer1000,
tayvano,
samczsun and
deshvin
as code owners
409H
added
the
blocklist addition
409H
previously approved these changes
Feb 23, 2023
dupe "stfx-airdrops.org", already existed on line 1014 (after rebasing)
dubstard
commented
Feb 23, 2023
409H
approved these changes
Feb 23, 2023
|
Thanks for the merge chief |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Spear phish attempt via discord - fake mee6 bot - steals tokens and admin access of phished staff so scammers can post bogus links on behalf of the staff to instill trust.
This fake bot is extremely dangerous as is poses danger to the whole ecosystem.
This spear phishing scam attempt was made against a lot of DEX and DAO team members, but as the domain of the fake mee6 is fresh i imagine they might target other brands as well
I believe they wanted to get the staff team member to visit a bogus discord via web browser instead of the native client
and by "verifying" via the fake mee6 bot upon entering the fake coin market cap discord, the scammers obtain the discord tokens for access of the staff member and can then login as them (account take over)
Then they could wreck chaos by posting scam link inside the discord via the staff member's own account!!!!!
SCAM "instructions"
馃毄(huge red flag!)
TOKEN STEALING EXFIL - 馃毄(GIGA huge red flag!)
FAKE messages
full story:
https://twitter.com/steviepxyz/status/1628238813825847301