Post
Topic
Board Electrum
Re: Electrum 3.0 strange thing and 2 BTC disapeared
by
kahc
on 18/12/2017, 00:28:58 UTC
guys im not infected. i never downloaded anything unknown. that client downloaded from the site itself
Huh? you mean Electrum Auto downloaded and installed itself? Huh

if so, then it definitely sounds like you got a scam version. Electrum has NEVER had an autodownload or update feature that I'm aware of... That sounds highly suspicious to me.

and noone know that i have btc so i believe its a bug or anyhthing like that
when i tried to increase fess for last transactions money gone.
No one needs to know if you have BTC or not... if you're running a scam version of the software, the hackers don't need to know who you are  or where you  live. They'll have your private keys.

Just because nothing happened for a while doesn't mean your wallet wasn't compromised. They may have been waiting for big deposit or for BTC value to increase etc.

I very much doubt that there there is a bug in the wallet so big that it autosends coins to some random address... that's a ridiculous claim. The more likely answer is either your wallet got compromised by something you did (claimed any fork coins lately? exported your private keys? typed something into a website?) or by a scam version of the wallet.

Have you confirmed the digital signature of the file you downloaded and installed?

i mean i downloaded the wallet from here
https://electrum.org/#home

Its not infected i did not fork or did anything. noone knows about my private keys.
nothing and i never download anything it was new pc
i only downloaded this wallet and bitcoin core wallet. nothing less nothing more

There is only one way to know if your Electrum is authentic and that is to verify the digital signature of the file, even if downloaded from the original source it can be infected.
There are many ways, like host-redirect to phishing webpage, compromised server....etc.

Two important factors here that lead us to believe your Electrum is malicious:
1. Unknown change address.
2. Script monitoring compromised change addresses and auto-forward to another address.

If you check the file signature, we can at least confirm/disconfirm our suspicions.