A phishing website to generate private IOTA wallet seed passphrases, collected wallet keys, with estimates of up to US$4 million worth of MIOTA tokens stolen. The malicious website operated for an unknown amount of time, and was discovered in January 2018.[90]