At the time of writing, at least 1,450 BTCs (stolen by one user, antimalware firm Malwarebytes and Electrum) had been stolen in phishing attacks that faked Electrum upgrade tips, with a total value of approximately $11.6 million.
Complete qtum-electrum-new compatibility with legacy data formats.
Users of Bitcoin wallet Electrum are facing phishing attacks, according to Johnwick.io. Hackers broadcast messages to the Electrum client through a malicious server, prompting the user to update to v4.0.0, and if the user follows the prompt to install this "backdoor-carrying client", the private key is stolen and all digital assets are stolen. At the time of writing, at least 1,450 BTCs worth about $11.6 million had been stolen from phishing attacks that faked Electrum upgrade tips. DeViable Security Labs hereby suggests that versions of Electrum below 3.3.4 are vulnerable to such phishing attacks, and users using Electrum Wallet are requested to update to the latest version of Electrum 3.3.8 via the official website (electrum.org), which has not yet been officially released, and do not use the link in the prompt to avoid asset losses.
The Electrum team has announced the attack in an official tweet, saying that "this is an ongoing phishing attack on Electrum users" and reminding users to check the authenticity of the client's source before logging in. The team published its official website, and electrum clients downloaded elsewhere may be problematic.
Electrum is a popular software wallet that works by connecting to a dedicated server. These servers receive a hash of the Bitcoin address in the wallet and reply with transaction information. Electrum wallets are fast and have few resources, but by default, it connects to these servers and can easily monitor users. In addition to Electrum, some other software uses public Electrum servers. By 2019, it is a faster and better alternative to BIP37.
To simplify the foundation's money management, the Litecoin Foundation is moving from multi-signature Electrum-LTC wallets to BitGo's multi-signature wallets, officials tweeted.
Implement blacklisting logic to alert malicious servers outside the Electrum client view.
Bitcoin Wallet Electrum has released a beta version of Electrum 4.0, which supports the Lightning Network.
Construct the transaction body, fill in the transaction information and sign the transaction using the corresponding private key to send the transaction to the blockchain for verification.
Electrum users are reminded of the Update Tip, which indicates that the new version of Electrum is likely to be fake, and if installed, transfer Bitcoin out in another security environment in a timely manner.