Quote from: gizmobuddy on December 28, 2018, 11:21:27 AM

PLEASE do something about this issue & at the very least run a "Official Electrum Server".

I don't see any point in that... you're still having to trust a third party... if you REALLY want to trust the Electrum server you connect to, you should set up your own full node and run your own Electrum server.

Quote

The current scenario is scary and you never know, what advanced future attacks are brewing by the bad guys.

Personally, I think the issue is being blown out of proportion a little bit...

Electrum is still secure... this was really just social engineering by abusing a feature within Electrum. It still required that the user download, install and run malware. It's not really that different to buying Google advertising and setting up a fake Electrum website and tricking users into downloading your fake Electrum.

I only ever download Electrum by going to electrum.org, downloading the executable... and then checking the file signatures are legit. That is probably the most crucial step!