izhang's blog

Codeforces Talks Phishing Attack
By izhang, history, 3 years ago, In English

If you receive a message similar to this, DO NOT CLICK ON IT! The text says codeforces.com, but the actual url redirects you to a cobeforces.com page (with a b instead of a d). It then asks you to sign in and will most likely steal your password.

  • Vote: I like it
  • +480
  • Vote: I do not like it

Comments Comments (13)
| Write comment?
»
3 years ago, # |
  Vote: I like it +36 Vote: I do not like it

the message sender has a nice nickname, i wonder what does it mean

→ Reply
»
3 years ago, # |
  Vote: I like it +75 Vote: I do not like it

LOL! I don't know why I find this funny. Thanks for heads up anyway.

→ Reply
»
3 years ago, # |
  Vote: I like it +38 Vote: I do not like it

I got a message as well. But it seems that the fake codeforces website is down now.

→ Reply
»
3 years ago, # |
  Vote: I like it 0 Vote: I do not like it

How is that possible to have a URL with codeforces domain but redirect to another page?

→ Reply
  • »
    »
    3 years ago, # ^ |
      Vote: I like it +22 Vote: I do not like it

    It is just label of the link (ctrl + L) no redirect at all, like this randomUrl.com

    → Reply
    • »
      »
      »
      3 years ago, # ^ |
        Vote: I like it +3 Vote: I do not like it

      ohhh okay i forgot that links have a lable here in codeforces, thank you

      → Reply
    • »
      »
      »
      3 years ago, # ^ |
        Vote: I like it 0 Vote: I do not like it

      I got scared for a sec that should I click this lol

      → Reply
      • »
        »
        »
        »
        3 years ago, # ^ |
          Vote: I like it +3 Vote: I do not like it

        you can hover over it and look at the url in bottom left

        → Reply
»
3 years ago, # |
  Vote: I like it -19 Vote: I do not like it

But why does hacker wants to steal the password of the codeforces profile?

→ Reply
  • »
    »
    3 years ago, # ^ |
      Vote: I like it +125 Vote: I do not like it

    I mean I hope you aren't studying computer science if you are asking such questions...

    → Reply
  • »
    »
    3 years ago, # ^ |
      Vote: I like it +30 Vote: I do not like it

    If OP uses the same password on different websites, the attacker might be able to access the other accounts by getting the password of OP's Codeforces account. Moreover, the OP has his email shown to public on his profile.

    → Reply
  • »
    »
    3 years ago, # ^ |
      Vote: I like it +35 Vote: I do not like it

    so they can steal problem solutions for better delta

    → Reply
»
3 years ago, # |
← Rev. 2   Vote: I like it 0 Vote: I do not like it

So are the Codeforces mirror sites all safe?

*I don't mean they're all unsafe.

→ Reply