There are multiple users reporting @Alby password reset attempts. 🚨
If you are an Alby user, please login right away, and change your email and password to prevent any unauthorized access or loss of funds.
Login to reply
Replies (2)
I thought it was sus, since I use passwordless logins.
Update on the @Alby attack:
⚠️ IT’S WORSE THAN I THOUGHT! ⚠️
What I believe is happening is someone is using the public Lightning addresses from Nostr profiles to doxx everyone’s registered email address on Alby.
By simply entering a valid Alby address, the login page LEAKS the corresponding email address.
This means that the purpose of the attack is not so much to breach your Alby account, it’s to collect emails of Alby users for future phishing attacks.
View quoted note →