Must have web browser addons to keep you a step safer from phishing
⭐ Merited by bones261 (5) ,DdmrDdmr (2) ,o_e_l_e_o (2) ,Kakmakr (1) ,Pmalek (1) ,petestheman (1) ,ETFbitcoin (1) ,wavug (1) ,Crypto-DesignService (1) ,xandry (1)
When I had just gotten to know about cryptocurrencies and joined this forum. My Online security consciousness was close Zero, I did almost all mistakes every newbie could do
- I would use the same email and password for every website sign up
- All my accounts had no 2FA implemented on them
- I would never bookmark important websites for easy lookup
- I would click on any link from google search and would never double check the web address when logging in etcetera
My rude awakening came when my Bitcoin forum account that had then attained a full member status got hacked, the password and email address were instantly changed, and I was completely locked out. That's when I realized that online security is a very serious matter. I could have easily lost all my funds if the hacker had followed up on the exchanges I used because all the login details were the same with no 2FA.
I Later figured out that my Login detail could have most like been phished by the (Bitcointalk[dot]to) site since I even never bookmarked Bitcointalk.org
Even today I still end up with links from the phishing site especially when I am searching specific results from Google that has been posted on Bitcointalk.org
What have always been my guardian angels these web browser add-ons I am going to talk about. These add-ons are a must have for anyone who takes online security very seriously.
I am going to use an example of the Latest Etherdelta like phishing site.
As you can see the address in the red box is not the usual legit http://etherdelta.com/ link, There is not padlock sign to show that the website is secure or the certificate is valid as the popup window warns. This should definitely be a red flag. However, if you don't look at the address, you won't know that have loaded a phishing website... That's why these web browser add-ons come in handy. To help you out when you are less attentive.
1. METAMASK
Besides providing an easy and safe way of making transactions on the Ethereum network with the different Decentralized apps, this web browser add-on comes in handy in that it will warn and block you from accessing any phishing site in case you click on the phishing link by mistake.
MetaMask is available in chrome, Firefox, Opera and Brave browsers
Website: https://metamask.io/
2. CRYPTONITE
This one is run by a team behind The Metacert Protocol. They certify legit crypto related domains and Twitter profiles of legit accounts to avoid impersonation scams.
When you load a profile or crypto website that has been verified and is legit, the Shield turns green. However, if the website is a phishing type or unverified, the shield remains black.
It doesn't stop at that, if the website has been reported for phishing attempts, it will also block you from loading the web page.
Unfortunately, this extension that started as a free plugin is now a paid service.
Website: https://metacertprotocol.com
3. NETCRAFT
Clicking on it after you have loaded a web page will show you the website details and it's risk ratings.
Usually, phishing sites are shown as recently created/new or there is not much information about the site yet (this should be a red flag). The risk ratings a usually high too, in most cases it's 9 for a phishing site and 0 for a legit site.
This Add-on also provides a user with much more details about the domain name, when it was registered and when it could expire.
Website: https://www.netcraft.com/
4. PHISHFORT PROTECT
This is a new kid on the block but really promising. This add-on is also a very important tool that will protect one from phishing attacks and scams targeting crypto users. PhishFort Protect is free and have an open-sourced the code base.
The add-on is available for chrome and chromium bases browsers like Brave. Unfortunately it's currently not available on Firefox
When you have installed the plugin,
- If the website is genuine and has already been categorized, a blue badge will be shown on the add-on.
- If the website is has not been categorized or is unknown, the badge will remain Grey.
- If the website is a phishing/scamming version of an already categorized website like Binance, a red badge will be displayed with an immediate warning message on the screen
Website: https://www.phishfort.com/protect
Using a combination of these web browser add-ons can be of very much help
UPDATE
➖ PhishFort Protect add-on included thanks to ePesoInitiative
Work in progress to include more anti phishing add-ons. If you know of any good anti-phishing add-ons, please comment them in the thread and I will update the list with credits to you.
Thank you.
- I would use the same email and password for every website sign up
- All my accounts had no 2FA implemented on them
- I would never bookmark important websites for easy lookup
- I would click on any link from google search and would never double check the web address when logging in etcetera
My rude awakening came when my Bitcoin forum account that had then attained a full member status got hacked, the password and email address were instantly changed, and I was completely locked out. That's when I realized that online security is a very serious matter. I could have easily lost all my funds if the hacker had followed up on the exchanges I used because all the login details were the same with no 2FA.
I Later figured out that my Login detail could have most like been phished by the (Bitcointalk[dot]to) site since I even never bookmarked Bitcointalk.org
Even today I still end up with links from the phishing site especially when I am searching specific results from Google that has been posted on Bitcointalk.org
What have always been my guardian angels these web browser add-ons I am going to talk about. These add-ons are a must have for anyone who takes online security very seriously.
I am going to use an example of the Latest Etherdelta like phishing site.
As you can see the address in the red box is not the usual legit http://etherdelta.com/ link, There is not padlock sign to show that the website is secure or the certificate is valid as the popup window warns. This should definitely be a red flag. However, if you don't look at the address, you won't know that have loaded a phishing website... That's why these web browser add-ons come in handy. To help you out when you are less attentive.
WEB BROWSER ADD-ONS/EXTENSIONS
1. METAMASK
Besides providing an easy and safe way of making transactions on the Ethereum network with the different Decentralized apps, this web browser add-on comes in handy in that it will warn and block you from accessing any phishing site in case you click on the phishing link by mistake.
MetaMask is available in chrome, Firefox, Opera and Brave browsers
Website: https://metamask.io/
2. CRYPTONITE
This one is run by a team behind The Metacert Protocol. They certify legit crypto related domains and Twitter profiles of legit accounts to avoid impersonation scams.
When you load a profile or crypto website that has been verified and is legit, the Shield turns green. However, if the website is a phishing type or unverified, the shield remains black.
It doesn't stop at that, if the website has been reported for phishing attempts, it will also block you from loading the web page.
Unfortunately, this extension that started as a free plugin is now a paid service.
Website: https://metacertprotocol.com
3. NETCRAFT
Clicking on it after you have loaded a web page will show you the website details and it's risk ratings.
Usually, phishing sites are shown as recently created/new or there is not much information about the site yet (this should be a red flag). The risk ratings a usually high too, in most cases it's 9 for a phishing site and 0 for a legit site.
This Add-on also provides a user with much more details about the domain name, when it was registered and when it could expire.
Website: https://www.netcraft.com/
4. PHISHFORT PROTECT
This is a new kid on the block but really promising. This add-on is also a very important tool that will protect one from phishing attacks and scams targeting crypto users. PhishFort Protect is free and have an open-sourced the code base.
The add-on is available for chrome and chromium bases browsers like Brave. Unfortunately it's currently not available on Firefox
When you have installed the plugin,
- If the website is genuine and has already been categorized, a blue badge will be shown on the add-on.
- If the website is has not been categorized or is unknown, the badge will remain Grey.
- If the website is a phishing/scamming version of an already categorized website like Binance, a red badge will be displayed with an immediate warning message on the screen
Website: https://www.phishfort.com/protect
Using a combination of these web browser add-ons can be of very much help
UPDATE
➖ PhishFort Protect add-on included thanks to ePesoInitiative
Work in progress to include more anti phishing add-ons. If you know of any good anti-phishing add-ons, please comment them in the thread and I will update the list with credits to you.
Thank you.