I have lost a bit more than 0.5 BTC in total.
I had 11 GH/s and had enough to buy another 1.5.
I have sent the files dumped in my TEMP folder to another CEX user, he will pull it apart and help to discover what and how he managed to get it done.
The webpage listed above ran a JAVA plugin, which I stupidly agreed to run.
What got my attention at first was btc-e loaded in another web browser that was closed.
It also ran an app called mtgox_bot.exe.
The Scumbag has managed to get into my account and change my password, I am locked out.
I was able to see my worker on ghash.io with 0 GH/s just before I was locked out of there.
I'm SAD.
Lesson for everyone. Never run a Java plugin. Sorry for your loss
Java is ok from trusted places or sandboxed. The best one is
http://www.sandboxie.com/I did download whole site as mirror and applet.jar on the website. Anyone who knows java could look in that what's acctually this script doing.
Zip file is here:
http://www38.zippyshare.com/v/80049771/file.htmlI suggest any one to run it sundboxed.
You've lost me ..... what Java are you encouraging people to download and run given that the thread was about someone who ran some Java and got hacked because of it ?