Quote from: Raja_MBZ on July 08, 2019, 05:45:41 PM

Quote from: Binary100100 on July 08, 2019, 05:20:29 PM

~snip~
I've been hacked... twice.
Both times they used RDP to access. The first time they just used my Google password and cleaned out some of my trading platform wallets (Nicehash, Gemini, Binance, etc) because I had my passwords saved on Chrome. Really stupid! I only lost a couple hundred bucks though. But I should have taken better action than changing my passwords because that's all I did. The second time it was because Chrome Remote Desktop! (That was another dumb idea. Almost as dumb as having everything stored to my Exodus wallet.)
What I think happened the first time was someone cracked my Google account (again). With that they were able to access my machines... to include the one with my Exodus wallet. They logged on, installed a keylogger and logged off. They logged on again later once they acquired my password for Exodus and cleaned me out. They I had over 30LTC stored in it.
It had nothing to do with Claymore though because I didn't have it installed on my machine with Exodus.

So now....

I use Awesome Miner to manager my rigs on a separate machines (I don't have any internet browsers on it or anything else) and my rigs don't have anything saved to it. I mine with MiningPoolHub and everything is paid out to my Ledger hardware wallet. All trading platforms I access with only one machine (which I turn on and off only as needed) and my cellphone. My mining rigs and the machine with Awesome Miner are all connected to a VPN router. I won't say that it's impossible to hack but it's definitely a lot more secure than before. I have changed the RDP access ports (no longer 3389) I also have Pulseway installed on my primary machine (that I'm on now) and whenever an RDP connection is logged in Windows event logger (Event ID's 1149) it sends an alert to my phone. Of course I updated the firewall settings on both of my routers (primary router and my VPN router) so that a remote connection can only be made by ONE machine (white listed for the one with Awesome Miner running.)

Still... I don't tempt fate. I shut down everything that I don't need and I run anti-virus (ESET) and MalwareBytes daily.

Conclusion:
Use this as a learning experience. I heard stories of being hacked and losing everything but I never really learned anything from anyone because "It'll never happen to me. I'm a nobody."
Some optimism though: At least you were hacked today instead of next month when you have even more to lose. I wouldn't even bother trying to pursue the hacker/thief because even if you could identify him/her there's nothing your local law enforcement will do. Assuming you could prove it, it would be a tough case to fight in court.

Advice:
If you NEED to use a wallet (such as Exodus) then store it only on a virtual machine and then shut it down when you don't need it. And obviously never store your passwords on Chrome or any other browser. (I can't believe I did that.)

This is a very informative and experience-filled post; I think you should make a new thread (maybe in Beginners & Help section?) and express this experience of yours there, so that it may reach more people and create more awareness.

I'm sure there are a lot of people that can share stories. I'll consider it.
I forgot to mention another thing that I do as well... should be a no-brainer though... change your IP address assigned by your ISP. Do this by changing the mac address on the router. Reboot if necessary. So if someone is trying to do a MITM (man in the middle attack) or trying to crack your computers by brute-force then make it tougher for them by changing your IP address every once in a while. Wink