A couple of Domain Name System registration servers for MyEtherWallet (MEW) were hijacked and redirected users to an unsecure, phishing site to steal private key information. Coindesk reports that around $365k at recent ether prices was stolen during this most recent attack.
“Users, PLEASE ENSURE there is a green bar SSL certificate that says “MyEtherWallet Inc” before making any transactions. We advise users to run a local (offline) copy of the MEW (MyEtherWallet). We urge users to use hardware wallets to store their cryptocurrencies,” it said in a Reddit statement. Those looking for an alternative to MEW could turn to MyCrypto, which was started in February by a former MEW co-founder and offers a similar service. Neither site holds users’ crypto or information; instead, they allow the checking of accounts and enable transactions to be sent to the blockchain, after which they are ferried on to the intended recipient.
https://techcrunch.com/2018/04/24/myetherwallet-hit-by-dns-attack/