Re: Attack?

Quote from: Jack of Diamonds on January 02, 2012, 11:19:55 AM

There is every reason to suspect another exchange is trying to poach members from mtgox. Just got this pishing email:

Quote

Date: Mon, Jan 2, 2012 at 10:44 AM
Subject: [Mt.Gox] Your account is currently pending review.
To: -

Dear Mt.Gox user,

Your account is currently pending review, please visit
https://mtgox.com/forms/verificationFor those users who have had their accounts marked for review, an
explanation of why were are implementing these security measures can be
found here:

Security Measures
Explained
Verified Accounts are eligible for monthly/daily transaction limits of up
to 5 times the monthly limit and 10 times the daily limit.

In order to apply for the Verified account status please attach a copy of
the following documents:
- Your government issued photo ID (passport, permanent residence card or
drivers license) and
- A scan of either your monthly utility bill (power, phone, TV, gas, water,
etc.) or a certificate of residency issued by your local government.

Thanks,
The Mt.Gox team

Email info of users is from the earlier leak of emails last year.
They are trying to make it look like Mt. Gox is unreliable, under government surveillance/pressured by officials to gain personal information from it's clients.

Combine with a simultaneous DDoS & it's obvious a competitor is attempting to drive traffic to their site this way, too big of a coincidence.

A pretty basic and primitive strategy, if you ask me.
Also Mt. Gox is up now.

Those emails are for luring people into providing their MtGox login details and their identification documents. The objectives are theft and identity theft, not poaching customers. Phishing scams like this have existed since long before Bitcoin exchanges did and they succeed in part because they lift so much from the actual website of the business whose customers are being targetted - as they have in this case. Mt Gox is verifying a lot of accounts for AML/KYC purposes and it has explained that on its website - the copy on the fake site is lifted directly from the real Mt Gox website as is the procedure for verifying accounts. The difference is that the information isn't being sent to Mt Gox but to someone who'll use it to empty exchange accounts and commit identity fraud if possible.