Quote from: piuk on April 26, 2013, 01:13:06 AM

Unfortunately I think more users are likely to be affected by this transaction.

Any users who own an address used in the above transaction (https://blockchain.info/tx/89f8223bc1d9140889496dea843df1854f17aee35b8ac5006ec1efee2ba5bd80) please could you answer the following questions:

A: Do you have a bitcoin app on your android phone?
B: Do you have a blockchain.info wallet holding the address in question?
C: If you have a blockchain wallet do you use a public alias the same as your bitcointalk, bitcoin-otc or irc username?
D: Do you have accounts on one of the following sites: BTC-e, bitcoin-central or mining.bitcoin.cz?
E: Do you reuse the same wallet password on different websites (specifically the above sites)?
F: Do you read the BTC-e chat box?
G: Does your browser have Java enabled? http://isjavaenabled.com

Maybe we can figure out what's going on,
I suspect BTC-e has some flaw that allows hackers to run some custom JS...
have you ever use BTC-e?

A: I have several bitcoin apps. Nothing new in last several months. Blockchain, bitcoin calculator, miner status.
B: I posted above the wallet that was used today. Unsure of that was same one only cause I havent looked and compared at the moment.
C: Same name on blockchain and bitcointalk
D: I mine at bitcoin.cz (slush)
E: Sadly same password, though it was a strong 10+ character using capital and lowercase letters, numbers, and symbols
F: Do not read the BTC-e chat box (dont even know what it is)
G: Java is enabled on this computer.

For myself this only started in the last 14 days.

4/13 was withdraw, but though it was from email hack.
Wallet address was: 1Nr8BbTNTYutpdHKYzDJpAUcuo2wToL1C2
That only had 5.2 Coins removed from various accounts.

The one from today was over 500 coins in their attack, though my loss was only 1.

I have ordered a "rasberry pi" rig that I will be using as my solo bitcoin interface. So that should take care of most issues. Ill have to come up with unique passwords for rest of my bitcoin accounts. Of course only fear is that with multiple passwords I will forget/lose them and writing them down defeats the purpose on some level.

I could go back to a two wallet system. But if they get into my slush account or blockchain they could see the address (public not private).