To withdraw money to bittrex you need to enter their name into a form. So a spelling mistake 'bitrex' for example, would send money to the wrong account.
I could create several accounts (either using cli_wallet or by buying reddit accounts), with common ways to make spelling mistakes of bittrex and poloniex. Waiting for people to make mistakes (which they have already) and accidentally send money to my account.
RE: WARNING: Easy Potential Social Engineering Hack! #steemit -#hack + Temporary Solution