Quote from: picobit on September 12, 2013, 07:10:22 PM

Quote from: Drfatalis on September 12, 2013, 04:02:01 PM

becareful on blockchain for this day:

my wallet are pumped of my btc this day(unauthorized transaction)

i think this address is an xss:http://www.blockchain.mobi/wallet/login/index.htm (see.mobi)

Ouch! Are you saying that there is a cross-site scripting bug on blockchain.info, and that somebody is using it to redirect us users to blockchain.mobi? Shocked

That would be very bad indeed.

I have not tried to check this myself, I do not trust that I would necessarily detect the problem, and don't want to lose my coins.

A friend hit the same scam, but hit the .mobi site through a "well"-placed Google Ad when searching for blockchain, I believe.

Always go straight to the proper URL. Bookmarks and web extensions help. As does 2FA.