B: Electrum server can customize messages to appear in the user's electrum light wallet software, giving hackers a chance to broadcast phishing messages.

Electrum wallet suffered a large-scale DoS attack, which has caused millions of dollars in losses

Bitcoin Wallet Electrum confirms a phishing attack against its users, reminding them not to download Electrum Wallet software from any channel other than the official website. Earlier media reports said Electrum users had maliciously stolen millions of dollars worth of cryptocurrencies. Hackers create Electrum wallet software with malicious code, induce users to download, and trick users into providing login information such as passwords to commit theft.

Users of Bitcoin wallet Electrum are facing a phishing attack, according to the Devi Security Lab. Hackers broadcast messages to the Electrum client through a malicious server, prompting the user to update to v4.0.0, and if the user follows the prompt to install this "backdoor-carrying client", the private key is stolen and all digital assets are stolen. At the time of writing, at least 1,450 BTCs worth about $11.6 million had been stolen from phishing attacks that faked Electrum upgrade tips. DeViable Security Labs hereby suggests that versions of Electrum below 3.3.4 are vulnerable to such phishing attacks, and users using Electrum Wallet are requested to update to the latest version of Electrum 3.3.8 via the official website (electrum.org), which has not yet been officially released, and do not use the link in the prompt to avoid asset losses.

The CPOOT Exchange will launch its first virtual wallet on September 1st, and it is understood that the CPOOT Exchange, part of Tsingpu Online in Malta, will launch its first blockchain virtual wallet experience on September 1st, allowing users to store mainstream currencies such as BTC, EOS, ETH and all ERC20 currencies. The wallet consists of a virtual wallet library and a connected app. Among them, the virtual wallet library never touches the net, avoiding the risk of private key theft.

Electrum is a software wallet. It provides more security than an online wallet, but less than a paper wallet or hardware wallet.

The Electrum team has announced the attack in an official tweet, saying that "this is an ongoing phishing attack on Electrum users" and reminding them to check the authenticity of the client's source before logging in. The team published its official website, and the Electrum clients downloaded elsewhere may be problematic.

Electrum Wallet is one of the most popular Bitcoin wallets and has been around for several years. However, Electrum wallet users often rely on electrum servers, which presents some security and privacy trade-offs. If you use an Electrum personal server, Electrum wallet users can connect locally to their own private servers, enjoying the convenience of Electrum without any trade-offs.

Reddit user u/normal_rc: 'The attacker set up a lot of malicious servers. Once a user's Electrum wallet is connected to these servers, they see what appears to be an official message when sending bitcoin transactions, telling them to upgrade the Electrum wallet, which actually contains a fraudulent URL.

ZClassic (ZCL) has released a beta version of the ZCL Electrum wallet.