Silk Road forums
Discussion => Off topic => Topic started by: astor on July 13, 2013, 05:30 am
-
The phishing site has the same server version and time as the real site, and if you create an account on the phishing site, you can log in on the main site.
The phishing site is not a phishing site at all. It's run by the Atlantis admins. It's a second onion address that points to the same server.
I believe they are using it as a form of deniable marketing. They are behind this spam, but they want to make it look like a phisher is doing it, and the "fools" who sign up on the phishing site will go on to use their site as normal.
-
Ugh. Good catch, astor. :\
-
Wow. well i suggest if your using the site to save the legitimate URL in your bookmarks:)
Much Love_mcrad!
-
Wow... ???
-
The phishing site has the same server version and time as the real site, and if you create an account on the phishing site, you can log in on the main site.
The phishing site is not a phishing site at all. It's run by the Atlantis admins. It's a second onion address that points to the same server.
I believe they are using it as a form of deniable marketing. They are behind this spam, but they want to make it look like a phisher is doing it, and the "fools" who sign up on the phishing site will go on to use their site as normal.
Shady but intelligent. :-\
-
Oh yeah, and the most damning evidence: who the hell would create an Atlantis phishing site? :)
-
SKETCH!
-
Some have suggested that it could be a proxy, like a hidden service version of onion.to. While that's possible, one indicator would be that accessing the site takes twice as long. Hidden service access times can be quite variable, but I haven't experienced a noticeable delay in accessing the phishing site.
Plus, that would make it the most sophisticated phishing site we've seen. Once phishers get your user/pass/pin, they don't care anymore. Usually they throw up an error page. Why would someone create such a sophisticated phishing site for mostly useless Atlantis accounts? Why spam it here where the vast majority of people don't have Atlantis accounts?
In my mind, there's a 95% chance it is run by the Atlantis admins, and a 5% chance it's a proxy.
-
So basically the guys who spam vendors in PM's, in the forums, post AMA's on reddit and make commercials are shady and classless?
Lol.
If you look into it they have a board of directors and it's completely fucking retarded and pretentious.
-
The phishing site has the same server version and time as the real site
Does this alone prove Atlantis admins are behind the phishing sites? Perhaps we have capable forgers at work..
-
And the phishing site doesn't ask for your PIN (unless you register an account), making the account info useless.
-
Doesn't surprise me at all. I have noticed as of late that their employed marketing expert has been creating ridiculous threads on Silk Road trying to spread FUD about Silk Road, I just think thats low and disrespectful to the entire community here. Obviously his facebook, twitter and youtube campaigns have all been big fails lol
-
Sometimes, instead of saying, "it couldn't possibly be" and risking your livelihood when, "its so obvious, nobody would fall for that trap." You'll realize that the trap was for you all along.
I do my best not to dismiss what I don't understand; would you care to join me?
Take this here spade. I'm certain its a spade. It lifts dirt from the earth and leaves it where I so choose. I could call it wooden plank with some cheap recycled iron, but together, those unremarkable things make the spade a spade.
Atlantis cannot possibly exist for the benefit of is buyers and sellers. Much of their expenses are arbitrary, and although their costs are lower, the proportions are as such that Atlantis needs more buyers and sellers and transactions than the silk road currently possesses to maintain a similar profit margin. They are not solvent, and considering historical circumstances, may never become so.
-
The phishing site has the same server version and time as the real site, and if you create an account on the phishing site, you can log in on the main site.
The phishing site is not a phishing site at all. It's run by the Atlantis admins. It's a second onion address that points to the same server.
I believe they are using it as a form of deniable marketing. They are behind this spam, but they want to make it look like a phisher is doing it, and the "fools" who sign up on the phishing site will go on to use their site as normal.
I've also noticed the Atlantis spam has started at precisely the same time as some of the bitcoin spam, coincidence? on at least 3 occasions recently now it has commenced simultaneously where I have been deleting the forum accounts of both.
Either way I wouldn't trust a site that engages in such underhand tactics, they have tried to pull all sorts of shit trying to lure vendors over to them as well, dodgy PM's pretending to be buyers, shady as fuck if you ask me.
-
Another thing is, the last Atlantis spammer wasn't an obvious shill account. They had 175 posts and all of them were normal posts until the spam started. Seems like a lot of work to phish accounts, where you only have the PIN for new accounts, and you have to wait around in the hopes that they are eventually funded.
Perhaps the Atlantis admins are paying people on the forum to spam for them.
-
Already said this in another thread.
The way the forum is being mismanaged has put me off.
Deleting valuable threads amongst other things.
Always wondered why they would do this to themselves.
It's definitely not helping them in the credibility departement.
Well if this claim is true astor..i understand why they could care less about improving
if Phishing meant to be their main source of income -_-.
*sigh* depressing.
-
The phishing site has the same server version and time as the real site, and if you create an account on the phishing site, you can log in on the main site.
The phishing site is not a phishing site at all. It's run by the Atlantis admins. It's a second onion address that points to the same server.
I believe they are using it as a form of deniable marketing. They are behind this spam, but they want to make it look like a phisher is doing it, and the "fools" who sign up on the phishing site will go on to use their site as normal.
I've also noticed the Atlantis spam has started at precisely the same time as some of the bitcoin spam, coincidence? on at least 3 occasions recently now it has commenced simultaneously where I have been deleting the forum accounts of both.
Either way I wouldn't trust a site that engages in such underhand tactics, they have tried to pull all sorts of shit trying to lure vendors over to them as well, dodgy PM's pretending to be buyers, shady as fuck if you ask me.
Seconded. I don't get why they can't just succeed/ fail on their own merits tbh.
-
shady as fuck if you ask me.
qft
for what i have seen so far
-
Either way I wouldn't trust a site that engages in such underhand tactics, they have tried to pull all sorts of shit trying to lure vendors over to them as well, dodgy PM's pretending to be buyers, shady as fuck if you ask me.
I don't think it's as shady as it is dumb.. They're clearly doing it because they think it'll help build their website. The fact that those idiots are even focusing on something like that instead of putting all their efforts into marketing their website to the general public (increasing the number of buyers) just speaks to their level of intelligence. And it really emphasizes the fact that they'll never be in competition with SR.
-
Perhaps the Atlantis admins are paying people on the forum to spam for them.
I've been wondering the exact same thing. The accounts that they're using here certainly have a history of many posts. Is it possible they phished the passwords? You'd figure that if they were doing one or the other someone would post something about it, right?
-
Another thing is, the last Atlantis spammer wasn't an obvious shill account. They had 175 posts and all of them were normal posts until the spam started. Seems like a lot of work to phish accounts, where you only have the PIN for new accounts, and you have to wait around in the hopes that they are eventually funded.
Perhaps the Atlantis admins are paying people on the forum to spam for them.
I wonder if they will start to MiTM PGP on their site.
-
Nice tinfoil hat, astor.
Hey, I have no evidence either, but I am 95% sure you work for the DEA!
-
Plus, that would make it the most sophisticated phishing site we've seen. Once phishers get your user/pass/pin, they don't care anymore. Usually they throw up an error page. Why would someone create such a sophisticated phishing site for mostly useless Atlantis accounts?
Only reason that I can think of is that victims wouldn't catch on as easily, and therefore continue to spread around the bad link.
But I agree it's probably Atlantis admins, since if someone was this capable we'd probably see them use their talents on similarly sophisticated SR phishing site first.
-
The phishing site has the same server version and time as the real site, and if you create an account on the phishing site, you can log in on the main site.
The phishing site is not a phishing site at all. It's run by the Atlantis admins. It's a second onion address that points to the same server.
I believe they are using it as a form of deniable marketing. They are behind this spam, but they want to make it look like a phisher is doing it, and the "fools" who sign up on the phishing site will go on to use their site as normal.
I've also noticed the Atlantis spam has started at precisely the same time as some of the bitcoin spam, coincidence? on at least 3 occasions recently now it has commenced simultaneously where I have been deleting the forum accounts of both.
Sounds like they purchased the same spam service as the bitcoin scam sites.
-
Nice tinfoil hat, astor.
Hey, I have no evidence either
You must have missed the three posts in this thread where I provided evidence, along with a way to differentiate a proxy from the real site. In my first post, I even laid out evidence before making a claim.
-
BTW, I would never use Atlantis anyway, based on the admins' flagrant disregard for their customers' security. Besides the in-browser PGP thing, they have repeatedly posted onion.to links to their site on clearnet. If the phishing site is a proxy that can MITM your connection and steal your account credentials, than the *official* approved method of accessing their site is the same thing, posted by the admins on sites like reddit.
-
When I saw the "I'm the CEO of an illegal drug market AMA" on reddit I almost busted a tit.
-
Nice tinfoil hat, astor.
Hey, I have no evidence either
You must have missed the three posts in this thread where I provided evidence, along with a way to differentiate a proxy from the real site. In my first post, I even laid out evidence before making a claim.
Are you referring to this?
The phishing site has the same server version and time as the real site, and if you create an account on the phishing site, you can log in on the main site.
The phishing site is not a phishing site at all. It's run by the Atlantis admins. It's a second onion address that points to the same server.
I believe they are using it as a form of deniable marketing. They are behind this spam, but they want to make it look like a phisher is doing it, and the "fools" who sign up on the phishing site will go on to use their site as normal.
That is one huge non sequitur. A phishing site is capable of doing that. It is a relatively unsophisticated MitM strategy exploiting the ignorant. Where you go off the rails and into tin-foil hat territory is when you say that you are 95% sure that it is Atlantis admins doing it, and giving only 5% chance to conceding that it is what it is - a phishing site.
There is definitely something about Atlantis that brings out the irrational in some posters on SRF, and it isn't anything to do with the facts about Atlantis. BMR also has optional auto-encryption, just like Atlantis. I have never heard anyone say that BMR is putting users at risk. The odd thing is that Atlantis clearly has better systems in place than SR - 100% uptime, no image hacks, no database deterioration that necessitates weeks of downtime, etc.
I have around $70K spent at SR, $7K spent at Atlantis. When I first started making purchases on Atlantis, the other posters here on SRF earnestly informed me that Atlantis is an LE honeypot, and using the site would result in my arrest. Obviously that hasn't happened. Next was the claim that my coins that I kept in Atlantis would be stolen by the admins. That didn't happen either.
From reading the Atlantis forums my sense is that the admins there are very above board. I would be very, very surprised if they would change their commission structure without informing vendors in advance. You can get an account there for around $35, and if you are a scammer you will last about 5 minutes once you try to start the scam, and will be banned. Their feedback system is solid, and reveal the existence of scamming and padded feedback instantly.
What I am getting at is that the user experience is a lot better on Atlantis. All it needs now is more vendors selling the specific products that I like and I will definitely spend more money there. The fact that I am a lot less likely to be scammed on Atlantis than on Silk Road is my primary concern.
I am not interested in people saying that I am disloyal. I make no claims on DPR, his time, or his money. I am sure he makes no claims on me, my time, or my money. I am a free person.
-
That is one huge non sequitur. A phishing site is capable of doing that. It is a relatively unsophisticated MitM strategy exploiting the ignorant. Where you go off the rails and into tin-foil hat territory is when you say that you are 95% sure that it is Atlantis admins doing it, and giving only 5% chance to conceding that it is what it is - a phishing site.
Yeah, the theory is that they are phishing for people who use the same info on SR to create accounts on Atlantis, then they clean out the SR accounts. Some people on the forum have claimed this happened to them.
I'm testing that theory now, and I'm willing to accept it if it turns out to be true.
-
I still wouldn't buy anything on Atlantis, given their blatant disregard for their users' security.
-
I still wouldn't buy anything on Atlantis, given their blatant disregard for their users' security.
Explain to me how they have disregarded MY security.
-
Nice way to limit the response. This isn't just about you.
As I wrote before, the admins have posted onion.to links to their site on clearnet.
If the phishing site is a proxy that MITMs connections to steal account credentials, then an *official* approved method of accessing the site, promoted by the admins themselves, opens their users to the exact same threat. You never know when onion.to or onion.sh might start doing that.
That is a flagrant disregard for their users' security. That combined with the in-browser PGP feature breeds laziness and insecurity among their users.
-
By running commercials, spamming reddit, and through other feeble mainstream marketing techniques, Atlantis in my opinion has brought/is bringing unwanted attention to the entire scene, as well as attracting the lowest common denominator of customers (noobs) to the various marketplaces and the darknet in general.
So IMHO, they can go fuck themselves just from a lack of tact and common sense and are jeopardizing the security of EVERYONE who uses various mediums (IOPS, SR, BMR) to buy narcotics.
So there's your jeopardy.
-
Uh huh. Because I have never seen a onion.to link to SR... wait, hold on a minute...
I remain unconvinced. I don't see how I am at risk. I don't see how vendors are at risk. It seems like a bunch of hyperbole.
-
Uh huh. Because I have never seen a onion.to link to SR... wait, hold on a minute...
astor's point was that in the case of Atlantis, their ADMINS post .to links, which Silk Road admins have never done. the onion.to proxy puts people in danger because many people assume that using it is the same as using Tor ... which is absolutely not the case.
if you've seen an SR admin post an onion.to link to advertise SR, please, report it immediately!
-
Personally I would rather see less threads about Atlantis here, but people that are against Atlantis for whatever reason keep posting them.
I detect a new hardline stance against Atlantis by the mods here. Have the mods received instructions about how to treat threads about Atlantis? Why not just ban all mention of Atlantis altogether?
-
Uh huh. Because I have never seen a onion.to link to SR... wait, hold on a minute...
I remain unconvinced. I don't see how I am at risk. I don't see how vendors are at risk. It seems like a bunch of hyperbole.
You must be extremely dense if you don't understand the difference between users posting onion.to links and the admins posting onion.to links. They can't account for what 77,000 people do, but they've never posted links through third party proxies themselves.
The fact that the Atlantis admins have repeatedly done that is one way they have shown a flagrant disregard for their users' security.
-
Personally I would rather see less threads about Atlantis here, but people that are against Atlantis for whatever reason keep posting them.
I detect a new hardline stance against Atlantis by the mods here. Have the mods received instructions about how to treat threads about Atlantis? Why not just ban all mention of Atlantis altogether?
Here is your answer: http://dkn255hz262ypmii.onion/index.php?topic=178694.0
1 Is a vendor allowed to link their Atlantis/Black Market Reloaded-accounts in their Silk Road Profiles?
2 Is a vendor allowed to link their Atlantis/Black Market Reloaded-accounts in their Silk Road Forum Profiles?
3 Is a vendor allowed to link their Atlantis/Black Market Reloaded-accounts in a Silk Road Forum Post?
4 Are other users in the Silk Road Forums allowed to link to vendors on Atlantis/Black Market Reloaded?
5 If a vendor is allowed to link their Atlantis/Black Market Reloaded-accounts at any place here on Silk Road, is the same true for a personal web site created by the vendor itself?
6 Is a vendor more likely to be allowed to link to a different e-commerce site if the products sold there are entirely different from Silk Road?
7 Is a vendor more likely to be allowed to link to a personal web site of any kind if the products there are legal (but still sold illegally) ?
8 Are there any Official Policies or Agreements in place with sites like Atlantis and Black Market Reloaded on this subject?
It would be nice if any additional information which I didn't cover in the questions could be included as well if it helps the understanding of this matter. :)
I numbered your questions to make them easier to respond to:
1 No
2 No policy, so yes for now
3 No policy, so yes for now
4 Yes
5 the answers are the same for personal websites as they are for other markets
6 & 7 These don't affect the answers above
8 No
I'll add that instructing customers who contact you on SR to buy elsewhere is also prohibited. The forums are about discussion and openness, so so far I've done everything I can to limit censorship here and honestly I don't want to bother policing it.
Silk Road hosts a vendor's storefront and for that service we take a small cut of each trade. To use your storefront here to collect customers and take them elsewhere isn't just breaking your contract, it's shady and underhanded. I do take offense when people use the infrastructure I've created and maintain and made open to just about everyone and use it to direct people elsewhere. So, I'm not going to try to stop you from linking elsewhere on the forum, but it's not respectful in the least, and I think it should be frowned upon by others as well.
-
By running commercials, spamming reddit, and through other feeble mainstream marketing techniques, Atlantis in my opinion has brought/is bringing unwanted attention to the entire scene, as well as attracting the lowest common denominator of customers (noobs) to the various marketplaces and the darknet in general.
So IMHO, they can go fuck themselves just from a lack of tact and common sense and are jeopardizing the security of EVERYONE who uses various mediums (IOPS, SR, BMR) to buy narcotics.
So there's your jeopardy.
very good point BC.
Hidden services are just like the RL underworld not for anyone, and there are to many people which just want to have a peek and then they can't hold their mouth and tell everyone about these things, drawing the attention of close minded and ignorant people, which goal it is to control everything from knowledge to narcotics, to us and other communities in the darknet.
-
Perhaps finding a way to shut down the /r/silkroad subreddit (forcefully if necessary) and limiting media exposure would also reduce the number of "noobs" and immature kids flooding the darknet looking to get blown...
I have a feeling it would.
Also, as a side note:
Having journalists, even ones who describe and promote the positive, educating, and choice-allowing nature of SR, should be limited if not discouraged from participating on this site. Although some view these folks as tools to combat the negative image of SR that's been pushed with increasing frequency recently, I don't believe it to be worth the risk of attracting even more unwanted attention. The public's (and more importantly, LE's) image of SR as a virtualized back alleyway full of insidious individuals is set in stone. It will not be changed
-
Uh huh. Because I have never seen a onion.to link to SR... wait, hold on a minute...
astor's point was that in the case of Atlantis, their ADMINS post .to links, which Silk Road admins have never done. the onion.to proxy puts people in danger because many people assume that using it is the same as using Tor ... which is absolutely not the case.
if you've seen an SR admin post an onion.to link to advertise SR, please, report it immediately!
Hasn't happened cirrus and nor will it ever happen either, onion.to has no place on SR and any person remotely concerned about their online security will never use it.
I'm sure there have been cases of forum members and maybe even vendors posting .to links however as stated it should be vigorously discouraged wherever it is seen.
-
Astor +1, and thank you.
Keep investigating
-
I actually think that someone in Atlantis (maybe the admins themselves, but I have no proof of this) create accounts with well known user names here is SR.
I tried to make a search on my name in Atlantis and guess what? It's there! With MY PGP to booth! Somebody obviously created an account there with my personal PGP but to what end? They cannot naturally un-encrypt messages with that key, so what's the point?
I don't understand what's the deal but I suggest everybody to check for their user names here in SR in Atlantis. I can bet how much you want that in the majority of cases you will be already there. It's really possible that a normal buyer scammer would use your account with YOUR PGP? What would be the point? I would understand that if they used a well known account here with THEIR OWN PGP, but with the true one?
But maybe someone with a little more experience in these things can make me understand what would be the point of doing something like that, if not just to have an account with my name there (something that the Admins would be more interested in than a normal buyer).
-
A lot of FUD in here. :P
-
I actually think that someone in Atlantis (maybe the admins themselves, but I have no proof of this) create accounts with well known user names here is SR.
Well, SR vendors have been PMed by "buyers" with Atlantis gift codes, asking them to create an account on Atlantis and sell to them there. Certainly their shadiness extends far beyond this issue here.
-
A lot of FUD in here. :P
Differentiating a proxy from the real site is difficult. The real site and the phishing site have the same time stamp, exactly 12 seconds ahead of real time, but a good proxy simply forwards the main site and MITMs the connection. Access times to hidden services can be variable, but taking averages over many access attempts might yield some fruitful results. I've discovered that TTLs are useless. They are reset along the circuit, so you always get 64.
This is of course great for plausible deniability, if they are behind it.
The thing is, Jack, it's not a single data point, but the aggregate of facts. Atlantis has been on an aggressive marketing campaign for some time now, and it's clear they want to steal SR users. They tried creating forum accounts and advertising here, but those accounts and posts were deleted. They tried drawing vendors to their market by waiving the vendor fee and 3 months of commission. They tried luring more vendors with these "buyer" shills with gift codes. They created an AMA on on the Silk Road subreddit, for Christ's sake. Is it really hard to believe they would engage in underhanded tactics to steal SR users?
Do you believe those were real buyers with gift codes? I can't prove they weren't, but the aggregate of facts convinces me they were Atlantis shills.
-
Brutal catch astor my man, flawless. Anyway, never been on Atlantis, just when they opened a while ago and didnt had 2 much products or vendors, but anyway, i'll always stick with SR, no chance of moving into another site of this kind, plenty of good people on the forums, awesome vendors and IMO really nice support.
-
I believe someone/or multiple people might have created psyops accounts in favor of luring people over to atlantis...but that's just a crazy theory. I have seen weird people post in vendors threads asking if they would be selling on atlantis with good rep for no reason which makes me think they had multiple accounts to positive rep each other though and links to atlantis in their sig lol
-
There's good and bad vendors just like on SR. Can't comment on the admins dealings behind closed doors but the forum is actually pretty reasonable about things. If anything, they are trying too hard to act like they don't care about their importance relative to SR while at the same time listing a bunch of marketing ploys on their login page.
They also take Litecoin though, which if SR started taking there would probably cease to be an Atlantis
-
I started here, and i will finish here.
-
I created an account on SR and it looks like an abandoned marketplace. Barely any customers, vendors hadn't logged in for a month or so.
I don't know, I feel sorta bad for them.....
I ain't buying shit off of that until I see some results though. That's for damn sure.
-
silk road the OG. stay with it !! ;D
-
What is Atlantis?
-
Astro , If you have any questions about Atlantis marketing tactics you may direct them to me since I took over that role with the launch of our YT video.
Pm spamming links to SR users is frankly ineffective when I consider all the methods I have at my disposal and not something I would ever take this job to be a part of.
I also mod the Atlantis forum and I even registered here with the same name just so there would be no ambiguity about who I am.
I believe our cheaper rates and better feedback system is enough and in time I think every good vendor will list on both sites, In my mind and how I plan things is that we will now independently attract our own audience and SR will also have it's own with most vendors listing on both sites.
I have refrained from posting directly about Atlantis on the SR forums as I honestly tried but cant figure out where users here stand with regard to us, we are wrong if we try to advertise how we are better to SR users and we are wrong if we decide to target clearweb users. Perhaps we should just sit back and admire our pretty site and hope people see it shine from afar :P
I also didn't take this role to try and prove or disprove conspiracy theory's when in reality we are all just wasting our time discussing when we could be suggesting solutions,All I know about the matter is I informed SR mods about the phlishing site on July 10 while I was stuck in the newbie forum on multiple occasions and nothing was done bar removing the threads. It would have been much easier to just add the url to the profanity blacklist and not delete threads every time I posted "scam ^^^^^ Don't click" and reported it.
Any mod worth their salt would have done that immediately instead of wasting their own time..Unless they thought I would just eventually leave it alone and move on out of the newbie section but lets not start throwing rumors around since my posts calling out the scam have now been deleted with the offending threads but SR mods are free to check the bin for them if they think I'm lying.
I have already suggested the homepage be changed in such a way (if possible)to render this phishing obsolete. If you have any input of suggestion on this I will only be too happy to take it upstairs.
I also commend the SR mods for finally removing all trace of the offending links.
And like that, I made my contribution and you guys are free to get on with things here.
Have a nice day :)
H2.0
-
kill em with kindness H2.0
nobody in the right mind using Atlantis thinks it is as wide-reaching or successful as Silk Road at the moment.
nobody in the right mind would solely use Atlantis and not Silk Road
can't say the same about vice versa, which is understandable.
life and everything that goes with it is about balance, have you found yours yet?
-
Just so everybody is aware of how we are trying to nip this in the bud and be pro-active about this.
I have been keeping an eye on the newbie forum and other places where scammers thrive.
Apparently a buyer has now posted the link in a vendor feedback post
"5 of 5 Biggest Competition to Silk Road: http://[CENSORED: scam link].onion/ 49 minutes "
I have asked the person reporting it to let me know the url of the listing so that SR mods can be informed who posted it and ban the buyer account.
If they have made purchases before then It may be possible to further narrow down who is behind this particular post.
Here is the link to the thread where it was reported http://dkn255hz262ypmii.onion/index.php?topic=186313.msg1348923#msg1348923
I have now saved the URL and informed mods to add it to the profanity/blacklist of terms so it cannot be posted on the forum again. (Hopefully you can so this site-wide)
so now the scam url ( http://[CENSORED: scam link].onion/ ) should soon be replaced with some ( other text that is not scam link ) everywhere it appears if the mods here are efficient enough.
If the scammers get a new url I would encourage anyone else to report this in the same way, If we make their lives hard and expensive enough to operate they will go away.
We have also added a not on out login page to check the url in the address bar is correct so hopefully it encourages users to be more aware of these scams.
I have contacted libertas to engage with me on the matter and hopefully we can find out who the buyer account belonged to.
*****EDIT*****Here is the listing with the phishing link, http://silkroadvb5piz3r.onion/silkroad/user/1422ef17de
Whoever is behind it likes their coke ;D, Hopefully there will be a real investigation into this and findings can be posted here publicly.
-
Heya, astor.
Just wonderin' how that tin foil hat is working out for you. In case you haven't noticed there are a lot of SR users and vendors, and new Atlantis users that having their money stolen through this phishing scam. Instead of alerting people to the dangers of this scam and asking the mods to take action against it, you instead suggested that it wasn't a phishing scam at all, just an Atlantis marketing ploy. You did so against all the evidence and all the logic to the contrary. Someone might question your motives in doing that. Yeah, your tin foil hat can be worn that way too.
-
Heya, astor.
Just wonderin' how that tin foil hat is working out for you. In case you haven't noticed there are a lot of SR users and vendors, and new Atlantis users that having their money stolen through this phishing scam. Instead of alerting people to the dangers of this scam and asking the mods to take action against it, you instead suggested that it wasn't a phishing scam at all, just an Atlantis marketing ploy. You did so against all the evidence and all the logic to the contrary. Someone might question your motives in doing that. Yeah, your tin foil hat can be worn that way too.
Is that like wearing your ball cap sideways? ;D
-
Heya, astor.
Just wonderin' how that tin foil hat is working out for you. In case you haven't noticed there are a lot of SR users and vendors, and new Atlantis users that having their money stolen through this phishing scam. Instead of alerting people to the dangers of this scam and asking the mods to take action against it, you instead suggested that it wasn't a phishing scam at all, just an Atlantis marketing ploy. You did so against all the evidence and all the logic to the contrary. Someone might question your motives in doing that. Yeah, your tin foil hat can be worn that way too.
Who? Link the threads please.
-
I've read a bunch of threads and replies today about newbs (and not such newbs) losing access to SR due to the Atlantis phishing scam, but I didn't read of anyone losing coin. Many of the users wrote something like "lucky I didn't use the same pin" but from what Astor is saying they didn't have the opportunity to give their pin?
Pretty weird phishing scam that just wants to lock people out of their accounts, souring them on SR, but not taking their money, which may sour them on the whole online black market phenomena, AB.
-
Ok, so I skimmed through the first 10 pages of the Newbie forum and found these two threads:
http://dkn255hz262ypmii.onion/index.php?topic=186311.0
http://dkn255hz262ypmii.onion/index.php?topic=186313.0
where it looks like 2 people have been phished by that site, and I'd say the better evidence is that the phisher finalized their orders and put the spam in their feedback.
-
Hana Montana had coins stolen the same day that she signed up using the Atlantis phishing site with the same username, password and PIN.
-
Well, she is singing about dancing with molly, so I'm not surprised she's an SR user. :)
-
I got this today in my Atlantis inbox. From what I can see on the Atlantis forum, people register at Atlantis through the phishing proxy, deposit funds, and then the funds are withdrawn. Any SR passwords and PINs gained are just a bonus.
[WARNING]: Phishing attack launched against Atlantis users
Hi All,
We have identified a phishing attempt launched against Atlantis users and have taken various precautions to eliminate its impact.
Please be sure that you use [CENSORED: scam link]rky4es5q.onion when ever you connect to Atlantis and you will experience no issues.
If you use a Tor proxy relay service or were linked here from a third party site, please update your password and security code immediately.
For vendors, we have made it compulsory to specify your security code when enabling or making changes to the automatic withdrawal system.
We will be launching an investigation into where the funds are being routed to and will announce our discoveries on the forum.
As always, support is here to help you in case you have any questions.
Thanks!
The Atlantis Team.
-
If you use a Tor proxy relay service or were linked here from a third party site, please update your password and security code immediately.
Does that mean they are finally renouncing the use of in-proxies like onion.to and onion.sh, since it exposes their users to the same risk of having their account credentials sniffed, or LE putting a box in front of those servers and logging everyone that accesses their market?
-
I've heard rumours there's going to be a Snowden leak shortly on the perfectly (secretly) legal symbiotic relationship between the NSA and Atlantis.
I think it's codenamed "Jism (surveillance program)".
Sorry, that was crass.
-
Was the .to or .sh version in the YouTube video?
-
The phishing site has the same server version and time as the real site, and if you create an account on the phishing site, you can log in on the main site.
This is what happens when you run a tampering proxy. When you go to the phising site they proxy the real site so you ARE talking to the real site, it is just that the proxy can read and tamper.
It does not mean it is bein ran by the same admin. It is not evidence of anything at all other than the phishers are using one of the simplest methods to phis a site. This is not sophisticated, this is script kiddie stuff. You just download a tool, fill in a config file and launch it.
Such a proxy would not need to take twice as long as it would be keeping a well established circuit to the hidden service at all times. Once you make the initial connection to a hidden services further ones are faster meaning a proxy serving only one hidden service will not take twice as long.
The time and version are the same because you are talking to the real server through the fake one. One must be very careful examining evidence to make sure it actually proves what you think it proves.
-
Was the .to or .sh version in the YouTube video?
Not in the video. Apparently there is a .to and .sh link in the text below the video, though. That is pretty silly. The phishing is not from the .to or .sh though, it is from the proxy that astor is talking about in this thread, though he has conflated the two in his previous post.
-
Was the .to or .sh version in the YouTube video?
I don't think so, but I can't check because the video has been removed.
It was in their reddit AMA, which is here: http://www.reddit.com/r/SilkRoad/comments/1i5a5h/hi_guys_atlantis_marketplace_here_do_we_need_to/
They edited it out, but you can see a reference to it in this comment: http://www.reddit.com/r/SilkRoad/comments/1i5a5h/hi_guys_atlantis_marketplace_here_do_we_need_to/cb1cehu
Hilariously, the Atlantis_Marketplace guy, whoever that is, maybe Heisenberg above, says they would *never* advise accessing the site that way, even though he posted it in the fucking OP.