🔑🦸‍♂️ [monthly report - (June, July,) August 2021]

keys-defender(69)

Published in

GEMS

Words

2733

Reading

13 min

Listen

Play

@keys-defender activity report for the month of _{(JUNE, JULY and)} AUGUST

_{<< Previous report}

K E Y S P R O T E C T I O N:

_{@keys-defender's actions when a key leak is detected on the Hive blockchain:}
_{- (automatically) puts funds in savings, including new incoming transfers [active key]}
_{- (automatically) resets leaked keys [owner key]}
_{- (automatically) warns the user via instant wallet memo or auto-reply [all other keys]}
_{_{[These can be verified on https://hiveblocks.com/@keys-defender]}}
_{- (manually) reach out to the owner on discord and hive chat, if the handle matches}

PRIVATE KEY LEAKS detected, and where possible protected:

JUNE: (7 leaks)

1. @ivancespedes

- Chain: steem (steem only account =[ ), type: ACTIVE key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 2.47}
_{- Reputation: 48}
_{- Followers: 63}
_{- Account age: Joined 3/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-ywn0axzlaxzhbmnlc3blzgvzc3rlzw0}}}

2. @dankwah44

- _{Chain: steem (steem only account =[ ), type: MEMO key, operation: transfer}

Leaked account stats:
_{- Estimated Account Value: $ 6.36}
_{- Reputation: 48}
_{- Followers: 12}
_{- Account age: Joined 5/2021}

@keys-defender's disclosure: _{_{_{https://peakd.com/@dankwah44/kd-key-leak-bwvtb2rhbmt3ywg0nhn0zwvt}}}

3. @becky49

- _{Chain: steem (steem only account =[ ), type: MEMO key, operation: transfer}

Leaked account stats:
_{- Estimated Account Value: $ 2.83}
_{- Reputation: 45}
_{- Followers: 9}
_{- Account age: Joined 5/2021}

@keys-defender's disclosure: _{_{_{https://peakd.com/@becky49/kd-key-leak-bwvtb2jly2t5ndlzdgvlbq}}}

4. @euclid49

- Chain: steem (steem only account =[ ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 246.15}
_{- Reputation: 58}
_{- Followers: 105}
_{- Account age: Joined 4/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2v1y2xpzdq5c3rlzw0}}}

5. @mahmus243

- Chain: steem (steem only account =[ ), type: POSTING key, operation: post

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 5/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-cg9zdgluz21hag11czi0m3n0zwvt}}}

6. @loyferm

- Chain: hive (Hive only account =] ), type: ACTIVE key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 280.69}
_{- Reputation: 64}
_{- Followers: 145}
_{- Account age: Joined 8/2020}

@keys-defender's disclosure: _{_{_{kd-key-leak-ywn0axzlbg95zmvybwhpdmu}}}

7. @charlottek

- Chain: steem (steem only account =[ ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0.8}
_{- Reputation: 40}
_{- Followers: 18}
_{- Account age: Joined 6/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2noyxjsb3r0zwtzdgvlbq}}}

JULY: (5 leaks)

1. @charlottek

- Chain: steem (steem only account =[ ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0.8}
_{- Reputation: 40}
_{- Followers: 18}
_{- Account age: Joined 6/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2noyxjsb3r0zwtzdgvlbq}}}

2. @fakrihusaini

- Chain: steem (steem only account =[ ), type: POSTING key, operation: post

Leaked account stats:
_{- Estimated Account Value: $ 6.58}
_{- Reputation: 44}
_{- Followers: 5}
_{- Account age: Joined 7/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-cg9zdgluz2zha3jpahvzywluaxn0zwvt}}}

3. @subiheko123

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0.06}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 7/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3n1ymlozwtvmtizagl2zq}}}

4. @euclid49

- Chain: steem (steem only account =[ ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 246.59}
_{- Reputation: 58}
_{- Followers: 105}
_{- Account age: Joined 4/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2v1y2xpzdq5c3rlzw0}}}

5. @saharamee

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 7/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3nhagfyyw1lzwhpdmu}}}

AUGUST: (34 leaks!!!!)

1. @hiscoolness

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 7/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2hpc2nvb2xuzxnzagl2zq}}}

2. @jksd88

- Chain: hive (hive + steem account), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2prc2q4oghpdmu}}}

3. @katzur4

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 1}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2thdhp1cjroaxzl}}}

4. @miriamir

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer_from_savings

Leaked account stats:
_{- Estimated Account Value: $ 0.2}
_{- Reputation: 30}
_{- Followers: 9}
_{- Account age: Joined 7/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb21pcmlhbwlyagl2zq}}}

5. @young-18

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0.08}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 7/2020}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3lvdw5nlte4agl2zq}}}

6. @karocont2011

- Chain: hive (Hive only account =] ), type: ACTIVE key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 46.34}
_{- Reputation: 55}
_{- Followers: 7}
_{- Account age: Joined 7/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-ywn0axzla2fyb2nvbnqymdexagl2zq}}}

7. @dulaanoydula

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0.01}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 7/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2r1bgfhbm95zhvsywhpdmu}}}

8. @vnc81

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0.76}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3zuyzgxagl2zq}}}

9. @asad06

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer-to-savings

Leaked account stats:
_{- Estimated Account Value: $ 28.96}
_{- Reputation: 53}
_{- Followers: 28}
_{- Account age: Joined 6/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2fzywqwnmhpdmu}}}

10. @asule

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2fzdwxlagl2zq}}}

11. @strawh8merell

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3n0cmf3adhtzxjlbgxoaxzl}}}

12. @nowa2

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb25vd2eyagl2zq}}}

13. @vc2208

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0.13}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3zjmjiwoghpdmu}}}

14. @kallen-04

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0.66}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 7/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2thbgxlbi0wnghpdmu}}}

15. @dlmmqb

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer-to-savings

Leaked account stats:
_{- Estimated Account Value: $ 33.64}
_{- Reputation: 53}
_{- Followers: 10}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2rsbw1xymhpdmu}}}

16. @tientm185

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3rpzw50bte4nwhpdmu}}}

17. @fritzjames19

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2zyaxr6amftzxmxowhpdmu}}}

18. @v4ughnk4el

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 1.98}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3y0dwdobms0zwxoaxzl}}}

19. @c4essyv4yne

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2m0zxnzexy0ew5lagl2zq}}}

20. @cjabellera3

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 28}
_{- Followers: 1}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2nqywjlbgxlcmezagl2zq}}}

21. @earlaah

- Chain: hive (Hive only account =] ), type: POSTING key, operation: account-update

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-cg9zdgluz2vhcmxhywhoaxzl}}}

22. @wazzaturtle

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3dhenphdhvydgxlagl2zq}}}

23. @callie16

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0.59}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 7/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2nhbgxpzte2agl2zq}}}

24. @saipher24

- Chain: hive (Hive only account =] ), type: POSTING key, operation: post

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 6}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-cg9zdgluz3nhaxbozxiynghpdmu}}}

25. @rosseres

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0.95}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3jvc3nlcmvzagl2zq}}}

26. @shak3sp3ar3

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 7/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3noywszc3azyxizagl2zq}}}

27. @anandjadhao

- Chain: hive (hive + steem account), type: POSTING key, operation: account-update

Leaked account stats:
_{- Estimated Account Value: $ 85.89}
_{- Reputation: 54}
_{- Followers: 3548}
_{- Account age: Joined 9/2017}

@keys-defender's disclosure: _{_{_{kd-key-leak-cg9zdgluz2fuyw5kamfkagfvagl2zq}}}

28. @gooddayyee

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2dvb2rkyxl5zwvoaxzl}}}

29. @hitland21

- Chain: hive (hive + steem account), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb2hpdgxhbmqymwhpdmu}}}

30. @kwij.xyz

- Chain: hive (hive + steem account), type: POSTING key, operation: comment

Leaked account stats:
_{- Estimated Account Value: $ 28.98}
_{- Reputation: 25}
_{- Followers: 2}
_{- Account age: Joined 1/2019}

@keys-defender's disclosure: _{_{_{kd-key-leak-cg9zdgluz2t3awouehl6agl2zq}}}

31. @illuvium

- _{Chain: hive (Hive only account =] ), type: POSTING key, operation: account-update}

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{https://peakd.com/@illuvium/kd-key-leak-cg9zdgluz2lsbhv2axvtagl2zq}}}

32. @jjprac

- Chain: hive (hive + steem account), type: ACTIVE key, operation: comment

Leaked account stats:
_{- Estimated Account Value: $ 7163.36}
_{- Reputation: 71}
_{- Followers: 909}
_{- Account age: Joined 7/2017}

@keys-defender's disclosure: _{_{_{kd-key-leak-ywn0axzlampwcmfjagl2zq}}}

33. @popcorn24

- Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer

Leaked account stats:
_{- Estimated Account Value: $ 53.61}
_{- Reputation: 48}
_{- Followers: 22}
_{- Account age: Joined 5/2021}

@keys-defender's disclosure: _{_{_{kd-key-leak-bwvtb3bvcgnvcm4ynghpdmu}}}

34. @anne912711

- _{Chain: hive (Hive only account =] ), type: MEMO key, operation: transfer}

Leaked account stats:
_{- Estimated Account Value: $ 0}
_{- Reputation: 25}
_{- Followers: 0}
_{- Account age: Joined 8/2021}

@keys-defender's disclosure: _{_{_{https://peakd.com/@anne912711/kd-key-leak-bwvtb2fubmu5mti3mtfoaxzl}}}

_{NOTE: @keys-defender still scans the STEEM blockchain because your private keys are shared across the two chains unless you reset your password at https://wallet.hive.blog/@your-username-here/password ! - do it!}

_{TOTAL PRIVATE KEYS FOUND since launch:}

_{Cold scan}

_{Part 1:}
- _{3x MEMO KEYS}
- _{39x POSTING KEYS}
- _{2x ACTIVE KEYS}

_{Part 2}
- _{1x ACTIVE KEY}
- _{55x POSTING KEYS}
- _{13x MEMO KEYS}

_{+ Live scan:} _{o a a a a a a p p a a p p a a a p p p p p a p p p p p p m m p p p a p o p m a m m p p p p p p p p p p p p p p p p p p a m p m m m m m p m p p p p m p p m p a p p p a a (june) `a m m m p a m` (july) `m p m m m` (august) `m m m m m a m m m m m m m m m m m m m m p m m p m m p m m p p a m m`}

= TOT: 242
(65 memo keys, 151 posting keys, 24 active keys, 2 owner keys)

What's going on ~~@steemmonsters~~ @splinterlands ??

About 90% of the leaks this month are from new Splinterlands users. Please instruct them on how to use their keys!

PHISHING LINKS detected (and auto-replied to): June & July: HUNDREDS

Article 1

Article 2

Article 3

SCAM LINKS:

new reports: June: 6, July: 2, August: 1

detected (and auto-replied to) on Hive: 0

CODE INJECTIONS detected on Hive: June: 5, July: 1

1. @shoutmon (Splinterlands dev) - a few XSS tests -> eg. _{https://hive-db.com/block/55208602}

2. False positive, just a copy and paste or autogenerated post: https://hiveblocks.com/exxp/@omardothussain/thefutureofcryptoknowledgeontheblockchainweveripediacofounder-mahbodmoghadamep1-18q0zzjysctvxmjqm194

UNSAFE LINKS detected:

Shortened links: 20.8/h -> ~14,976/month. Auto-replies/warnings throttled 1/20.
HTTP links: 51.8/h -> ~37,296/month. Auto-replies/warnings throttled 1/20.

_{NOTE: links that do not use a secure protocol (https) and shortened links (eg. bit.ly) are NOT a threat per se but can lead to theft of credentials if misused or used in a malicious attack.}

O T H E R A C T I V I T I E S: --> This section will eventually be moved to @hive-defender

Confirmed re-posting authors: 0

_{Got some hits to review. No one is monitoring my bot's (a bit noisy) warnings.. :(}

Downvotes of @keys-defender (and its trail) against abusers:

_{The auto-votes against @crystalan that had been farming comments for months stopped on June 3rd because of its ceased activity}

_{Not many manual downvotes lately. Got a few logs for suspicious votes to review.}

_{@keys-defender currently follows the hiveflagreward team's downvote trail}
_{@keys-defender is downvoting: farming waves, phishing waves and old hive haters.}

Followers of my downvote-trail: 7 _{(plus their own trail - about $ 10 downvote power in total) -> PLEASE JOIN}

DEVELOPMENT UPDATE:

(june, july, august)

Moonwalk feature - rescan of previous 1000 blocks triggered by an accepted phishing report on chain
On-chain command to rescan a target range of blocks against phishing
Utility (!leak discord command) to publish a leak post after manual review (eg. avoid duplicates)
Witness node automatically changed if the one in use is having issues
Switched to use another witness node for cold-scans in order to avoid throttling (ie. 503 api responses) _{cold scan = when for some reason I have to rescan a set of previous blocks}
Utility (!lookup discord command) to generate html snippets for each leak for my (time-consuming) monthly report.
Bug fixes (eg. some rare hangs in the block streaming logic)

- Future development -
As before..

Mute lists and tests in testing community using @key-defender.shh - blocktrades's fix was released and my features seems working - further tests required
Formula to counteract exact votes (plus UI?) -- ** deferred **
Universal script to use new banlists. + other improvements + PR for condenser
Allow community to remove entries from ban lists
pwnd emails check (quick feature)
Abuse reports (rewarded) and separate abuse lists (plagiarism, farming, etc)
Tech-only proposal to cover expenses ??
Old (huge) backlog

😎

_{My security disclosures for Hive:}
_{- _{XSS vulnerabilities in #########.com}}
_{- _{XSS vulnerabilities in hive-db.com}

- _{XSS vulnerabilities in scribe.hivekings.com}

- _{XSS vulnerabilities in hiveblockexplorer.com}

- _{Malicious ads redirecting all Steemit iOS users to a phishing site}

- _{Reverse tabnabbing and clickjacking in steem.chat and steeemit registration page}}

_{Other contributions:}
_{- _{Universal script to prevent phishing in all Hive frontends}}
_{- _{Commands for community reports and ban lists}}

Keys-Defender features:

- _{Keys protection_{[live scan of transfers / posts / comments / other_ops. Auto-transfers to savings, auto-reset of keys, ..] {see automatic posts on leak and monthly reports}}}
- _{Phishing protection
_{[live scan of commentsa and posts to warn users against known phishing campaigns and compromised domains, scan of memos]}}
- _{Re-posting detection
_{[mitigates the issue of re-posters]}}
- _{Code injections detection
_{[live scan of blocks for malicious code targeting dapps of the Hive ecosystem]}}
- _{Anti abuse efforts
_{[counteracts spam from hive haters and milking campaigns]}}

_{_{Discord chat}}

To support this project:

- _Delegations:
_{10, 100, 200 HP,
500 HP, 1000 HP}

- _{Curation trail}
_{_{Follow my curation trail on hive.vote to upvote all my posts with a fixed weight.}}

_{I do NOT receive funding through a proposal or running a node witness}.
If you like what I'm doing please upvote, delegate 👆 or auto-vote 👆 my posts. Thx! 😊