Account Hijacked

[chigbolu]

I am sorry to hear that you lost all cryptos.
Same with me too. Back then, total value was around $300,000. How did manage to cope after this loss?
Very disappointing.

All the best

[tsuratsura-3557]

I am sorry to hear that you lost all cryptos.
Same with me too. Back then, total value was around $300,000.
Very disappointing.

All the best

[wdfh]

No actually this accident can happen to anyone, the proposal is right there on the UI to accept and an uninformed / fatigued user will make the same mistake

It happened to me on Saturday... I have been using crypto since 2012 and have had a BTS account for many years. I was on OL and had just sent myself a small transfer to a phone wallet, but it was taking longer than usual. So, I checked back to my OL account and saw this new tab "proposal" with pending, I thought oh that's OL checking to make sure I want to send my funds, I even saw Openledger in the name, turns out it was openledger-delagate and a scammer. I checked back an hour later and my account balance was zero... I had been drained of 1.7 BTC converted to 300,000 BTS.

If anyone wants to take a look they can see my account name at kurtduncan

I have asked Openledger if they can refund in a goodwill gesture, but have not heard anything back.

This sort of thing should be switched off by default. I now have no crypto 

[vod]

McAfee's risk category - PUPs - Acronym for potentially unwanted program. PUP or PUPs is a term used to describe unwanted programs such as Trojans, spyware and adware, along with other malware which may compromise your privacy.
I would like to know if BitShares are doing something to resolve it.

[sschiessl]

 I saw that too...  Did McAfee show any details as to why the warning?

[vod]

I also received a proposal from unknown source just recently and now McAfee warns that wallet.bitshares.org is risky - PUPs - this warning started on 4/18/19.   Any comments?

[litepresence]

I am documenting this issue here:

https://github.com/bitshares/bsips/issues/154

BSIP: Proposals Scam Prevention #154

[pc]

Please provide links to what has been said and done for the sake of information.

There are several posts in this forum where it is discussed. This thread here is almost 4 weeks old, for example.
There are several articles on steem that talk about this, for example https://steemit.com/community/@erodedthoughts/bitshares-scam-proposed-permission-update
It was/is discussed in various telegram groups.
It was/is discussed on discord.

The UI has made approving proposals a 3-step-process, see post from Stefan above. Unfortunatly, people have been taught for years that whenever their computer pops up a box they MUST NOT READ IT and the MUST CLICK ON OK.

[iamredbar]

Exploit : to make use of meanly or unfairly for one's own advantage.

Just a differing in definition.

[postup5]

I'm getting the word out to others by sharing my experience so others can see. Please provide links to what has been said and done for the sake of information.

[pc]

It is unacceptable that nothing has been said or done to protect others from this exploit. I won't be using bitshares anymore.

A *lot* has been said *and* done. But of course it's easier to blame the tools than to admit your own fault.

If someone walked up to you and said "Hello, my name is Mr. Policeman. Please give me your money and the keys to your house, I will protect them for you.", would you do it? (The sad truth is that even in the real world people fall for this. They don't stop using money though.)

[postup5]

Exploit : to make use of meanly or unfairly for one's own advantage.

[iamredbar]

I did hear back after a few days regarding my ticket. Seems there is nothing they can do. Here is a link to my bitshares explorer account page:http://bts.ai/u/postup5
Looks like openledger-security has control and has all but drained it. It is unacceptable that nothing has been said or done to protect others from this exploit. I won't be using bitshares anymore.

This is not an exploit. You need to be aware of what you are agreeing to when approving a proposal.

[postup5]

I did hear back after a few days regarding my ticket. Seems there is nothing they can do. Here is a link to my bitshares explorer account page:http://bts.ai/u/postup5
Looks like openledger-security has control and has all but drained it. It is unacceptable that nothing has been said or done to protect others from this exploit. I won't be using bitshares anymore.

[Thul3]

I had the same proposal from openledger-something .I was thinking a bit if to accept or not because a day ealier i contacted openledger support about a manuel withdrawl but decided at the end since i can't see (at least i don't know where) what the proposal contains i won't accept it.