New vulnerability?

[metatr0n]

There are several reports of an AD in reddit, blitz.gg and other sites that displays ADs trying or automatically downloading a supposed crypto wallet hosted on https://electrum-4.github.io

 

It can be seen on these reddit threads: 

 

https://www.reddit.com/r/Electrum/comments/lpju4h/did_someone_just_try_to_phish_me_if_so_might_be/

https://www.reddit.com/r/newzealand/comments/lpjq6t/is_this_a_problem/

https://www.reddit.com/r/leagueoflegends/comments/lpl8ix/blitzgg_using_your_pc_as_a_bitcoin_miner/

 

It happened to me a few hours ago when i turned on my pc.

[ki8aras]

some people are even getting it on mobile devices so its pretty widespread

[metatr0n]

Blitz has pushed a new update that prevents this kind of act from an Ad.

GitHub also removed the malicious codebase https://github.com/electrum-4/electrum-4.github.io

[JovanD]

1 hour ago, ki8aras said:

some people are even getting it on mobile devices so its pretty widespread

I always joke about what shitshow google play store can be like flashlight app trying to mine bitcoin 

[ki8aras]

20 minutes ago, JovanD said:

I always joke about what shitshow google play store can be like flashlight app trying to mine bitcoin 

nah the one guy that got it on mobile said he was using an iPhone 11

 

[LogicalDrm]

-> Moved to Programs, Apps and Websites