Currently there is a scammer sending messages, leaving comments etc on Steem about an alleged JST airdrop for STEEM holders. This is a reminder to not follow any links you receive in comments or messages on blockchain and even if you do, to not enter your keys in any case.
DEUTSCH
Hier nur mal kurz auf Deutsch. Es gibt keinen JST Airdrop wie in Kommentaren auf Steem behauptet wird. Es handelt sich hierbei um einen SCAM! Wer seine Keys auf der verlinkten Seite eingegeben hat, sollte so schnell wie möglich sein Passwort ändern. Weiter mit Details nun auf Englisch:
The above comment is being spread on various Steem posts using old accounts that have been inactive for a long time and have been hacked at some earlier point. Some of the accounts that I checked have been hacked in early 2018.
The comments like to a website with the url https://www.justnetwork.tech/, which claims to offer a 1000 JST airdrop for the Steemit community. Clicking the "claim now" button links to a fake Steemconnect site that wants you to enter your keys. The site is obviously fake, which you can see from many hints. For example the url is not steemconnect but something with justnetwork, the overall appearance is slightly different from the original SC and, probably the most obvious fact, you can enter anything you want and it will give you this confirmation page:
The stolen funds are being transferred to this account:
https://wallet.hive.blog/@warrentto/transfers
https://steemitwallet.com/@warrentto/transfers
and later forwarded to:
https://wallet.hive.blog/@stecm/transfers
https://steemitwallet.com/@stecm/transfers
Another account that has received funds earlier is:
https://wallet.hive.blog/@stcemit/transfers
https://steemitwallet.com/@stcemit/transfers
The hacker used @mxcsteem to cash out the funds, his memo code is 100205. Some other (older) exchange memo codes associated with the accounts are:
With STEEM:
@bittrex 541e4998572d432da02, 73cf5f7177fa49e5b02, f8d7e4b95e384d7bb16
@huobi-pro 138958
@deepcrypto8 (Binance) 101441751
Checking both of the used domains on whois.domaintools shows that the URL were registered 4 days ago:
https://whois.domaintools.com/justnetwork.tech
https://whois.domaintools.com/justnetwork.my.id
But I couldn't find any relevant information on it.
Remember: Never give out your keys or click on unknown links and always question everything strangers try to "gift" to you.