Dear MARBLERS,.
07 Mar 2023, 05:31
Dear MARBLERS,
The MBX team has been closely monitoring cases involving uncontrolled password changes and NFT theft over the past weekend.
As a result, we have confirmed all suspected cases and identified the cause of this issue.
The MBX Wallet allows the transfer of NFT and Tokens only when a user knows both “Login information (Social media account and password)” and the “Trading password”.
Upon investigation, we believe that several users' Wallet ‘Login information’ was stolen through external scam websites, VPN, and corrupt APK files.
Among these users, those who had their trading password configured as the "password hint" were found to have their NFT stolen as well.
A user's trading password is normally encrypted, therefore nobody but the user that originally configured it can find out what it is.
Same news in other sources
1MARBLEXMBX #473
07 Mar 2023, 05:31
The suspected cases of hacking from last weekend were most likely carried out by first stealing one's social media account through scam websites and then entering in the trading password that was configured as the "password hint", to steal the user's NFT and Tokens.
We have not identified cases where the trading password was stolen directly. Users that had accessed the official MBX website and its services were not affected by any of the problems above.
In addition to investigating the main reason behind the issue, the MBX team has implemented security measures to prevent the transfer of NFT through any means other than logging into the Wallet.
Furthermore, we plan to continue strengthening our baseline security measures to protect all users' privacy.
We would like to assure you that this problem is not strictly limited to MBX. The theft of personal information seems to be a growing trend all across the blockchain network. In response to this, we strictly advise against visiting suspicious websites or using unverified applications, VPN, and unofficial APK files. We hope that all users will adhere to this advice in order to protect their personal information.
[ How to protect your personal information ]
- DO NOT visit suspicious websites or use external VPN or unverified APK files and apps
- DO NOT click on unknown links to connect your Wallet
*Phishing websites and fraudulent airdrop sites can easily steal your personal information when accessed.
- Remember to change your password regularly
- Only use our services through our official website and Wallet app
For additional inquiry or suspected leakage of personal information, kindly contact our customer service through the official MBX Wallet app.
For the upcoming update, the MBX team will be adding biometric authentication, in addition to other countermeasures. We will work harder than ever to create a safer MBX ecosystem for our users.
Thank you
MBX Team
The suspected cases of hacking from last weekend were most likely carried out by first stealing one's social media account throu
The suspected cases of hacking from last weekend were most likely carried out by first stealing one's social media account through scam websites and then entering in the trading password that was configured as the "password hint", to steal the user's NFT and Tokens.
We have not identified cases where the trading password was stolen directly. Users that had accessed the official MBX website and its services were not affected by any of the problems above.
In addition to investigating the main reason behind the issue, the MBX team has implemented security measures to prevent the transfer of NFT through any means other than logging into the Wallet.
Furthermore, we plan to continue strengthening our baseline security measures to protect all users' privacy.
We would like to assure you that this problem is not strictly limited to MBX. The theft of personal information seems to be a growing trend all across the blockchain network. In response to this, we strictly advise against visiting suspicious websites or using unverified applications, VPN, and unofficial APK files. We hope that all users will adhere to this advice in order to protect their personal information.
[ How to protect your personal information ]
- DO NOT visit suspicious websites or use external VPN or unverified APK files and apps
- DO NOT click on unknown links to connect your Wallet
*Phishing websites and fraudulent airdrop sites can easily steal your personal information when accessed.
- Remember to change your password regularly
- Only use our services through our official website and Wallet app
For additional inquiry or suspected leakage of personal information, kindly contact our customer service through the official MBX Wallet app.
For the upcoming update, the MBX team will be adding biometric authentication, in addition to other countermeasures. We will work harder than ever to create a safer MBX ecosystem for our users.
Thank you
MBX Team