Hey community, we are publishing this post to let users know beforehand that there are scammers running fake clones of our service. Do not access any website that claims to be us, but is not one of our main addresses.

Correct addresses:

  • trocador.app

  • trocadorfyhlu27aefre5u7zri66gudtzdyelymftvr4yjwcxhfaqsid.onion

Fake websites:

  • troccador, troccadoor, trocadoor (any other typo)

  • trocadupz35kdyzgqpadqor4jk7u4lmbo2(…).onion

Right now our services are suffering non-stop DDoS attacks for the last three weeks, and they are using ToR exit nodes to conduct such attack (both through clear net and onion). For this reason we had to turn off our Onion link, as we are working into pushing changes to mitigate the attack. There’s a chance that these fake websites might be related to the attack, they might be trying to lure users into their fake clones, so it is important to Bookmark the correct website. Stay safe! Our team is small, but we are working into going back to normal.–

You are viewing a single thread.
View all comments View context
3 points
*

it’s weird that they are able to ddos an onion. i thought tor had pow mitigations?

I want to know about this too. Why didn’t you use HiddenServicePoWDefensesEnabled?

permalink
report
parent
reply
2 points

We have not yet implemented PoW, as our team is small and we are trying to mitigate the attack on clearnet first, since most users come from there. But yes, some nice people already suggested this, and we’ll look into it this week.

permalink
report
parent
reply
1 point
*

This doesn’t add up:

nobody else noticed the inconsistencies?! They are running a business, they need to comply. And now playing stupid! Getting free ads with FUD. This doesn’t add up, indeed.

Edit: It does make a great deal of sense, however, if you think the big bros (not troc) are trying to sell “Cybersecurity”. Before they start selling, they create the need first. It works the same way every time: they sell you wars, peace, vaccines, security, privacy, co2 certs or even your own slavery. What to us looks like false flags — to them its all good business practice.

permalink
report
parent
reply
1 point
*

We are just updating the community to let people know that services are disrupted right now, not working 100%. We need to be open about this otherwise users will complain asking why we did this or that, so we are just being transparent. We also need to let users know there are fake websites running because we have already seen some users lose money to these scams, so this is quite important. About what you also said, yes, many other onion websites are suffering attacks as well. I believe eXch was suffering DDoS too, among others.

permalink
report
parent
reply
1 point

I respect that. But I am also around long enough: Flooding attacks never lasted long in the past and did not cause permanent disruption. Iet’s not call it hacking, its plain old overloading. After 3-5 days its over usually and admins learnt a lot in that time. (Run a stressnet node!)

And BTW trocador.app is loading as fast as ever here. All the best, your customers just need patience.

permalink
report
parent
reply

Monero

!monero@monero.town

Create post

This is the lemmy community of Monero (XMR), a secure, private, untraceable currency that is open-source and freely available to all.

GitHub

StackExchange

Twitter

Wallets

Desktop (CLI, GUI)

Desktop (Feather)

Mac & Linux (Cake Wallet)

Web (MyMonero)

Android (Monerujo)

Android (MyMonero)

Android (Cake Wallet) / (Monero.com)

Android (Stack Wallet)

iOS (MyMonero)

iOS (Cake Wallet) / (Monero.com)

iOS (Stack Wallet)

iOS (Edge Wallet)

Instance tags for discoverability:

Monero, XMR, crypto, cryptocurrency

Community stats

  • 284

    Monthly active users

  • 794

    Posts

  • 4.9K

    Comments

Community moderators