I have been receiving Ether constantly in my Metamask.

[aaankeet]

Hey Guys This is Very Interesting Please Read

I have been receiving ETH to my Address (Metamask) from different Addresses which i have no clue until now
these transaction are happening form a very long time

Internal Trasaction :

ERC20 Tokens

• So i have 2 browsers chrome and brave and i use brave. therefore both metamask are different.
• Today I opened chrome for viewing some transactions on Etherscan then I opened my metamask which is on chrome and I saw I have 0.04 USD On my Ethereum Mainnet Address but I never used this Metamask or address for any transaction at all not for development purposes nor normal eth Transfers then I saw my activity it shows I have been receiving Eth constantly (which i had no clue as i never used or opened this metamask)

as you can see I have received ETH many times but there no outgoing activity in metamask
also this is Account No. 5 which is imported(not by myself).

There Has been lots of transaction happened till now you can go and check on etherscan
Address : 0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266

*Note : Someone is also making transaction from Account 5 to other Addresses

[alymurtazamemon]

@thatboyankit Strange! but you are lucky!

[aaankeet]

@alymurtazamemon lol yea, but not lucky this account made 284 ETH Transfer on July 6 and I didn't even knew about it

[aaankeet]

I think someone is using it for making shady transfers

[alymurtazamemon]

@thatboyankit But how someone is withdrawing the amount from your account?

[alymurtazamemon]

@thatboyankit We could think for a second for accidental deposit but withdraw?

[alymurtazamemon]

@PatrickAlphaC

[JamesMckenna]

A dusting attack ????

https://support.exodus.com/article/1231-what-is-a-dust-attack-and-how-to-mitigate-it#

[PatrickAlphaC]

Please don't add things like MUST READ to the subject title of a discussion like this. If there is a security issue, you should contact security professional.

What is happening here, is that you imported the private key of a well known address - the hardhat node account 0.

If you run:

yarn hardhat node

On any of the projects from this course, you'll see an output like this:

Accounts
========

WARNING: These accounts, and their private keys, are publicly known.
Any funds sent to them on Mainnet or any other live network WILL BE LOST.

Account #0: 0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266 (10000 ETH)
Private Key: 0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80

Account #1: 0x70997970C51812dc3A010C7d01b50e0d17dc79C8 (10000 ETH)
Private Key: 0x59c6995e998f97a5a0044966f0945389dc9e86dae88c7a8412f4603b6b78690d
.
.
.

Account #0 matches up with your account, and is likely the account you imported.

These are default accounts and private keys for hardhat. Most people have the private keys since they work with hardhat. Do no try to send real ETH to this address as your funds will be taken by a bot.