Dear #Cardano community, I finally figured out how the attackers got access to my X account to post on my behalf. I wanted to share this experience, so it doesn't happen to you! โ ๏ธ๐ฆ๐
In this case, it was a simple phishing attack (one of the most common ways to get unauthorized access to accounts). I always try my best to stay alert and check everything twice, but I'm a human, and last week was very stressful for me, so I was caught with my guard down. ๐ข
First, I got a DM from a "woman" who offered to interview me for a crypto news account on X. Usually, I get contacted by official accounts, but sometimes marketers and community managers do reach out from their private accounts. I thought this was the case, so my first mistake was not to double-check the relationship between this person and the official account "she" was claiming to represent. โ
After exchanging some messages, the attacker shared a "Calendly" link to schedule a meeting. Unfortunately, I didn't realize that it took me to a fake website that looked almost the same as the real Calendly app. My next mistake was not to double-check the website's URL. In this case, it was https://t.co/Ju6oyQ7kTq instead of https://t.co/xi06fVAInT. โโ
I had to jump on a call when this happened and my mind was elsewhere, so I made the final mistake and logged in using the SSO for X. This is how they got permission to post on my behalf. โโโ
This happened last week, so I figured they waited to study my time zone and activity to post the scam announcements while I was asleep so that they could be seen by as many people as possible before I realized what was happening. Finally, I woke up to the DMs of many great people from the community warning me, and I removed the posts and all app permissions, changed my password, and informed everyone about the attack right away.
Fortunately, I have 2FA activated, so the attackers couldn't hijack my account and DMs. But this scary experience was a good reminder that scammers never sleep and they will keep trying until you give them a small chance. Especially now that we are in a bull market and people are more keen to jump on a token sale without doing proper research.
Key learnings in a nutshell:
๐ก๏ธ Always double-check the identity of any account reaching out claiming to be someone or representing a big platform, channel, project, etc.
๐ก๏ธ Avoid clicking on links if possible. But if you must, double-check the domain on the website's URL.
๐ก๏ธ Before logging in on any website (either using SSO or a wallet connection), always make sure that it's legit. You can do this by quickly googling the app's name and comparing the URLs of the first results.
๐ก๏ธ Do Your Own Research (DYOR). Especially before buying a token or connecting your wallet to a new dapp. Even if you get a link or an offer from an official account, it's still possible that this account has been hacked. So, always check that the post makes sense with the brand and that the web domains of the URLs are the official ones!
๐ก๏ธ Take a break if you are tired. Overworking only weakens your awareness and capacity to detect potential scams. Also, always try to take your time when logging in on any website. Rushing things can easily lead to big mistakes.
I wanted to thank everyone who informed me about this incident and helped me to solve it. I really appreciate your incredible support!!! โค๏ธ
https://t.co/ocZFakEfmb
Dear @X and @elonmusk,
I want to publicly address a major flaw on ๐:
Why is it easier to impersonate a legit content creator than to report scam accounts on this platform?
Every time someone creates a fake profile trying to deceive my followers, I need to go through a very cumbersome and time-consuming KYC process. So, why don't you store this data to make the reporting process easier and faster?
Why can impersonators repost my entire feed and then block me while keeping all my posts?
Why don't you have AI-powered tools that automatically flag accounts using the exact same banner, profile picture, name, bio, and link from original profiles? An automated email notification or DM would be very useful to be able to react before some damage is done!
Content creators and their communities are currently at the mercy of scammers damaging the quality and user experience of ๐.
We must invest so much time and effort to take actions because it's very difficult to search for these fake profiles, especially if they block us after copying our info and reposting our feed. So, we can only rely on good-hearted followers who take their precious time to give us a heads-up when they are followed and contacted by an impersonator via DM.
As public figures, we have the responsibility to protect our communities, and this problem is particularly serious for #Crypto ๐ because it damages our reputation as industry as well.
Blockchain is deeply connected with social media because we are creating a trustless and decentralized platform that can only thrive thanks to education and social interactions. So, please take actions to protect your #web3 audience!
If you need my help or more inputs from my side, I'm always happy to help!
Sincerely,
Carolina Isler
@LaPetiteADA ๐ฆ๐
#Cardano #Bitcoin #Ethererum #USDC #USDT #Binance #Dogecoin #Avalanche #Polkadot #Ripple #ICP #Solana #Tezos #Algorand #Ergo
@cardano_whale@orbisproject Name inspired by the short story "Tlรถn, Uqbar, Orbis Tertius" by Jorge Luis Borges. He produced some of the finest literature in Spanish language. I hope this project honors such a legacy!
Moon Map Update๐
1/ UI for the search and purchasing of plots is now complete - Allowing users to locate any group of plots and purchase directly from the map.
@book_io One of the first Cardano personalities I met is @Cryptofly777 , she runs a pool, is a great NFT artist and has deep connections in the space. Shout out to you Linda!
Yep... we're hiring. If you're passionate about books and want to help decentralize knowledge, come take a look.
And to be very clear: we work a lot and have a lot of fun.
https://t.co/akwSZoyxOY
The plot revolves around the adventures of Alonso Quijano, who reads so many chivalric romances that he loses his mind...
RT, Follow, Like, and call someone you love to be entered to win Don Quixote #0671
#cardano#nfts
We've been hard at work building our DEX for #Cardano. Here are pics of our UI, which is about 90% complete currently. Pics are of:
- The user trading portal
- The concentrated liquidity portal
- Our yield farming dashboard
Retweet this and let folks know #Cardano is building. ๐ช
@viettb85 @cardano_whale They are projects building on top of Cardano, one related to stable coin and the other ZK rollups. No effect on Cardano whatsoever. Other projects are guiding similar features.
IOHK Midnight is going to deliver privacy smart contracts (computational confidentiality), a groundbreaking new feature.
We all benefit from it, Monero and any other blockchain too. Furthermore, people with #Cardano stake will receive #DUST (Midnight token), in addition to #ADA.
Tomorrow!
Treasure Island
Author: Robert Louis Stevenson
Total Volume: 2407, 179 Unique Covers
Sale Starts: Nov. 21st, 10PM UTC
Price: 59 ADA / 49 ADA OGโs
Mint Limit: 5
NOTE: 77 Covers are 1:1
Just saying we will be 1K+ in discord soon ๐คทโโ๏ธ๐
Jump in ๐
RT, Quote Tweet, Tag Purple Fam ๐
Winner in 3 Days - 200 $Mutant of @MutantNFTs
Let's raid this and get everyone into Purple Discord
#CNFTs#Cardano#NFTs#SolNFTs
https://t.co/Udkt0LHGkv
To round off the @OfficialGeniusx multi-token ISPO giveaway, we have a special one.
London eye is up for the grab!
Like & retweet for a chance to win the London eye land plot!
All about the ISPO here:
https://t.co/2UPBHqTawf
PS! We're present in both Lausanne and Berlin.
Hello friends! I'm going to be dropping the limited #NFT edition of The INCIDENT with @book_io on Nov 22nd. Double-volume edition of books 1&2 in the million-selling Sam Jameson series. #NFTbooks, #NFTProjects