Privnotes.com Is Phishing Bitcoin from Users of Private Messaging Service Privnote.com
Summary: A site called Privnotes.com has been impersonating the legitimate encrypted-message service Privnote.com, and KrebsOnSecurity found it runs an automated script that replaces bitcoin addresses in messages with its own address. The script appears to alter messages only when the sender and receiver have different IP addresses, and Privnote.com's owners said the clone does not fully implement encryption and can read or modify all messages sent through it.
Key Takeaway: Because the real service's messages self-destruct after one read, a sender cannot reopen the note to verify the address, so the substituted wallet address goes unseen. Security expert Allison Nixon of Unit 221B noted the phony site could also read password dumps in messages, though she assessed the bitcoin replacement as the likely main motivation.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026