🔑🦸‍♂️ [monthly report - March 2021]

---

PHISHING LINKS detected (and auto-replied to):   ~1384❗

It has been a heavy month for phishing. The attacker that started his phishing waves in February did not slow down in March.

Example 1: https://hive.blog/hive-138876/@keys-defender/there-is-no-airdrop-it-s-just-phishing
Example2: https://hive.blog/hive-138876/@keys-defender/new-phishing-wave-do-not-fall-for-it-there-is-no-mainnet-launch

Furthermore the 3speak domain theft happened and cause the site to be temporarily marked as phishing.

New features have been added in @keys-defender (and some more not disclosed in order to make the phishing prevention more effective) that revealed successful to reduce the impact of such attacks. Plus, hopefully most frontends will start/continue using my universal script to block dangerous domains and users. See the development updates section for more info!

---

CODE INJECTIONS detected on Hive:   2

Just false positives, no harmful code was injected:

 

UNSAFE LINKS detected:

• HTTP links: 70.6/h -> ~50,832/month. Auto-replies/warnings throttled 1/20.
• Shortened links: 20.4/h -> ~14,688/month. Auto-replies/warnings throttled 1/20.

The latter figure seems smaller this month, maybe because of the phishing campaigns
reminding users that shortened links looks phishy 🎣 (and my warnings on their posts about shortened links? =] )

_{NOTE: links that do not use a secure protocol (https) and shortened links (eg. bit.ly) are NOT a threat per se but can lead to theft of credentials if misused or used in a malicious attack.}

---

---

O T H E R   A C T I V I T I E S:   --> will be moved to @hive-defender (👶👶👶👶👶)

---

Confirmed re-posting authors:   0 ✔️

Just some false positive that will be prevented in the future with an easy fix.

Hundreds of notifications were automatically sent to my discord server as suspicious shortening of posts body, but no actual findings were reported. I suspect that the volunteer that used to go through these suspicious edits stopped doing it because Hive Watchers stopped rewarding users for these type of reports. =[

_{some bug fixes are required as well}

---

Downvotes of @keys-defender (and its trail) against hive-abusers:  

Accounts:

not available at this time

 

• _{@keys-defender currently follows the hiveflagreward team's downvote trail}

• _{@keys-defender is downvoting: farming waves, phishing waves, old hive haters that are active again (but not spamming the chain with vomit and dick pics, at this time)}

Followers of my downvote-trail: 10 _{(plus their own trail - about $ 5 downvote power in total) -> PLEASE JOIN}

---

What else has been going on in March..

• Phishing waves...
  [when the attacker surrenders/stops/gets-arrested, I will reveal the additional defense put in place against him that has been effective in stopping him multiple times in the past couple of weeks as soon as he tried to start a new campaign 😎]

      1. _{https://hive.blog/hive/@hivewatchers/new-phishing-warning-no-usdhive-7th-anniversary-airdrop-or-or-nueva-advertencia-de-phishing-no-hay-airdrop-del-7o-aniversario-de}

      2. _{https://hive.blog/hive-138876/@keys-defender/there-is-no-airdrop-it-s-just-phishing}

      3. _{https://hive.blog/hive-138876/@keys-defender/new-phishing-wave-do-not-fall-for-it-there-is-no-mainnet-launch}

 

• 3speak's domain got compromised and later on restored -> https://hive.blog/hivedev/@keys-defender/3speak-is-compromised-at-the-moment-please-do-not-use-it-until-resolved
   
• farming waves on Hive _{(my countermeasure started on April 2nd but the waves started in March so I'm adding it to this report..)} -> https://hive.blog/hive-169321/@gaottantacinque/10-line-script-that-anyone-can-use-to-downvote-abuse-help-counteract-ongoing-farming-on-hive

 

DEVELOPMENT UPDATE:

• Phishing protection in wallet transfers: https://hive.blog/hive-139531/@keys-defender/new-feature-phishing-protection-for-hive-wallet-transfers

• Universal script for hive frontends to timely block phishing: https://hive.blog/hive-139531/@keys-defender/phishing-on-hive-no-more-solution-for-all-frontends

• Command on chain to allow the Hive community to timely block a phishing campaign -> https://hive.blog/hive-139531/@keys-defender/community-reported-phishing-automation-added-to-keys-defender

• New commands and new banlists for the community -> https://hive.blog/hive-169321/@keys-defender/new-commands-and-ban-lists

 
OTHERS:

• Tentative of doing the first restrospective meeting for the Hive community in occasion of its first birthday -> https://hive.blog/hive-139531/@gaottantacinque/retrospective-meeting-for-the-hive-community

 

Future development:

See the posts above for more details.
In a nutshell my current priorities are:
_{( ...let's see how far I get today and tomorrow - will likely spend less time on this starting from next week, gotta do life stuff.. =] )}

1. @kd to follow hive-defender up-down/votes + notify discord of votes > 6.5 days
2. Mute lists and tests in testing community using @key-defender.shh
3. Formula to counteract exact votes (plus UI?)
4. Universal script to use new banlists. + other improvements
5. Allow community to remove entries from ban list
6. Abuse reports (rewarded) and separate ban lists (plagiarism, farming, etc)
7. Tech-only proposal to cover expenses??
8. Old (huge) backlog. Eg. bug fixes ( boring.. =] ).
   😎

---

Keys-Defender features:

---

---