joeruelle on Nostr: I mean the hacker swaps out the NIP-05 in the profile data of the hacked account. It ...
I mean the hacker swaps out the NIP-05 in the profile data of the hacked account. It was @4rs.nl, but then the hacker swapped in @4rz.nl, a domain the hacker owns. (They send that overwrite to the relays.) Then people who didn't know your NIP-05 have a look in the hacked account, see it's @4rz.nl, and that that matches the NIP-05 of the fake new account created by the hacker.
Published at
2025-02-15 18:11:40Event JSON
{
"id": "320f3345c7fdc80286f1d385f8cae5fcf570942f890288fd53345fe60ba30913",
"pubkey": "b90c3cb71d66343e01104d5c9adf7db05d36653b17601ff9b2eebaa81be67823",
"created_at": 1739643100,
"kind": 1,
"tags": [
[
"e",
"50d15c8486af967f33d03afbe2ea3a8e784af02b366b704bf886e714c5b84770",
"wss://nostr.oxtr.dev",
"root"
],
[
"e",
"055d346fdfcc04ad4d17ac0d680eda80f62e77147afb1280295f4b17d54ec688",
"wss://nostr.oxtr.dev",
"reply"
],
[
"p",
"b90c3cb71d66343e01104d5c9adf7db05d36653b17601ff9b2eebaa81be67823"
],
[
"p",
"00000001505e7e48927046e9bbaa728b1f3b511227e2200c578d6e6bb0c77eb9"
]
],
"content": "I mean the hacker swaps out the NIP-05 in the profile data of the hacked account. It was @4rs.nl, but then the hacker swapped in @4rz.nl, a domain the hacker owns. (They send that overwrite to the relays.) Then people who didn't know your NIP-05 have a look in the hacked account, see it's @4rz.nl, and that that matches the NIP-05 of the fake new account created by the hacker. ",
"sig": "32fd8d507d10713eb9dd97d549208b6fa54db712a05ce56fcefc369f844f79f2b3426dec34ac6b89067649846ab7819c3ae5c9fa108733a8a69c47af649c27f6"
}
