Search content
Sort by

Showing 12 of 12 results by beesa888
Post
Topic
Board Bitcoin Technical Support
Re: looks like i've been hacked - please help me understand what's happening
by
beesa888
on 06/04/2015, 03:57:08 UTC
it looks to have stopped at the last address and hasn't moved in a couple of days. It seems fairly inactive. The final transaction appears to be somewhere in China, however im not sure how accurate that is.
Post
Topic
Board Bitcoin Technical Support
Re: looks like i've been hacked - please help me understand what's happening
by
beesa888
on 03/04/2015, 13:51:06 UTC
you should also verify that on this forum itself no one is using :

https://blockchain.info/address/1EsBPY677Dbft6FT39zJQYsVU5CC3QWRJw

this address cause HE has your bitcoins.

which he probably bought from :

1DN1VGT7DcfpjaS3R43quv2ZpbYxUumHVv

or is its his own address... like inter transfer from electrum which gives someone the opportunity to own over 5 bitcoin address in a same wallet. making inter transfers are obvious

im sorry, i dont fully understand what you are saying here.

I can see that my bitcoin are unspent at the last address. how would I see if that final address belongs to anyone here?

what kind of wallet?

I think its called Bitcoin Core or bitcoin-qt? does that make any sense to you?

can you try to do a scan with malwarebyte anti malware, and hitmanpro?

see if there is something malevolous

also i suggest you to use zemana free anti-logger, it hide your key-stroke

i did perform a malware scan, and oddly found malware dating back to backup files i saved back in 2005. I dont think bitcoin was even around back then so im not sure if that would have caused it. I used malware-byte. I think as someone suggested, might be best to format and reinstall the OS along with setting up cold storage.
Post
Topic
Board Bitcoin Technical Support
Re: looks like i've been hacked - please help me understand what's happening
by
beesa888
on 03/04/2015, 02:31:04 UTC
what kind of wallet?

I think its called Bitcoin Core or bitcoin-qt? does that make any sense to you?
Post
Topic
Board Bitcoin Technical Support
Re: looks like i've been hacked - please help me understand what's happening
by
beesa888
on 02/04/2015, 15:11:50 UTC
thanks for the quick response, pretty gutted, i can follow the transaction but don't really know how this were able to do this
Post
Topic
Board Bitcoin Technical Support
Topic OP
looks like i've been hacked - please help me understand what's happening
by
beesa888
on 02/04/2015, 15:04:45 UTC
so i checked my wallet a couple of days ago and noticed my 50 coins were missing.

i restored my wallet from a backup and after rescanning it showed i only have 0.05 coins left.

almost 50btc where 'sent' unauthorised from my wallet to 1LAosJwSQHmUzNnToPgjLaRTVUHP2WM8Wt

https://blockchain.info/address/1LAosJwSQHmUzNnToPgjLaRTVUHP2WM8Wt

according the my wallet it matches up on block chain showing 4 transactions. im still trying to follow it, but i have no idea what to do Sad

i was trying to restore for backup and do a double spend, but it looks like its too late for that now...

it looks like they are trying to launder it, anyone else able to dissect anything out of this?
Post
Topic
Board Beginners & Help
Re: My MtGox account hacked... Lost $60,000... :'(
by
beesa888
on 15/12/2013, 00:27:00 UTC
lindatess,

Thanks you so much for your suggesting, this has been the most helpful so far, I'm currently gathering all the evidence i have and have spoken to my local state police assitance line who will refer me to the Australian Federal Police.

I will keep the thread updated as events develop.

Thank you for all your kind words so far guys, I really hope I can get something back. Or have these criminals put away for a long time to prevent them hacking anyone elses account.

Yeah, they washed the money on the other side of the bid/ask spread. Effectively, earning the spread each time the transaction was conducted.

This leaves no paper trail, or so they think, if you request the transaction history and check who was on the other side of the transaction, you may have a case. In fact it might help if you know Japanese or are connected to someone involved with mtgox. From what it looks like the hacker was on the other side of the transaction.

Otherwise they were giving away free money to random people <<< Very unlikely.

So, Looks like you might be able with a warrant (Japanese Authorities required) to take a look at the data. Take a look into it.

I'm pretty sure RUB/BTC is not traded often on mtgox, so the hacker definitely knows their bitcoin knowledge. The same I've seen with AUD/BTC, which would guarantee that the hacker actually got the money on the other side of the trade if no one else was trading in that currency pair.

But if I have anything to say, I expect the hacker to be in jail within a few months if you follow my methodology.



As you can see the volume is almost always zero.

https://www.mtgox.com/?Currency=RUB

Go for it, you will get your money back, or in a weak case, send the hacker to jail, as they require real information to withdraw from mtgox!!!!

As you can see on December 9th there was a huge rise in volume as the hacker tried to wash the funds.

My guess it's someone who knows their Finance and Information Security. Luckily I love these two areas myself and understand how the hacker has slipped up. He/She will be in jail soon, don't worry about it, but hurry up and get a police report, get translators to help with mtgox paperwork, and get mtgox to block the wire transfer on the other side, otherwise the other person might flee to the Cayman Islands or some non-extradition country.

I mean, I've seen a lot of dumb hackers throughout my life, but this person who stole your money is probably an idiot.
Post
Topic
Board Beginners & Help
Re: My MtGox account hacked... Lost $60,000... :'(
by
beesa888
on 13/12/2013, 01:28:21 UTC
1. show us your gox wallet on the blockchain
2. yes or no- Gox is saying you have zero transactions in your account when you claim to have 18 pages
soemone is lying, and ive got a feeling it isnt gox.

I'm not sure what you mean, but here are some screenshots of the rough transactions.

http://i39.tinypic.com/k0hnys.png
http://i43.tinypic.com/fc4dph.png
http://i42.tinypic.com/2a5nqj4.png

Gox claimed nothing was withdrawn, and i check, nothign was. everything in my account was traded as a loss. they bought high and sold low. I have no idea why someone would do this...  Huh Cry
Post
Topic
Board Beginners & Help
Re: My MtGox account hacked... Lost $60,000... :'(
by
beesa888
on 12/12/2013, 00:49:58 UTC
It wasnt all coin, half fiat have BTC.

it was there because i actively traded it everyday. I was even trading it till the night before the attack. Woke up the next morning and realised i could not log into my MtGox account anymore.

I still have some in an offline secure wallet thankfully

My antivirus definitions update daily, but i think i need a malware  scanner too

2 Factor Authentication is the biggest mistake that i failed to implement. Still hurts but its an expensive lesson learnt.


Futhermore, MtGox support has contact me and advised me that no fiat or BTC withdrawls were ever requested....
This is striking me as odd. they claim that i never had any coin or fiat in my account i last logged in. It makes me so mad when I have 18 pages of transactions that happened in one day in a currency I have never traded in before! looking at the transactions it seems they traded all my coins onto the market at a loss! i dont understand why they have done this!!?  Huh Huh Huh





Why didn't you use two factor authentication to secure your account?

why did you leave 60.000 USD on that account in coins (even worse than in dollars).

why didnt you store the coins on a secure wallet?

why is you antivirus program 3 years old? (correct right  Roll Eyes ? )

https://en.bitcoin.it/wiki/Securing_your_wallet
Post
Topic
Board Beginners & Help
Re: My MtGox account hacked... Lost $60,000... :'(
by
beesa888
on 11/12/2013, 02:43:13 UTC
I will install these later. because i think i will do a complete format first.

Im even considering running a VMware client and using only VM to trade in the future with 2 factor authentication. then power down the VM everytime im done.


Get Avast free edition for live protection, Malwarebytes for strong scanning detection. Both free Wink .


I wonder if its possible that Mt Gox got hacked? Did you ever log on from a computer other than your own?
I hope you hear from them..

I have only logged in from my home PC and occasionally work PC which should be fairly secure.

I check my google logs and found that the IP address from the suspect locations logging in were all TOR exit routers...

Even though it shows it was in The Netherlands, the hacks maybe Russian because they traded with RUB?
Post
Topic
Board Beginners & Help
Re: My MtGox account hacked... Lost $60,000... :'(
by
beesa888
on 10/12/2013, 15:05:47 UTC
Im just wondering how they got me... im usually pretty careful with virus and phising scam things.

what you you guys recommend i scan my PC with for possible threats?

Post
Topic
Board Beginners & Help
Re: My MtGox account hacked... Lost $60,000... :'(
by
beesa888
on 10/12/2013, 14:58:44 UTC
im a noob, who made a noob mistake... very very silly mistake
im still trying to work out how to use the 2 fact auth

I've gone and changed all my passwords now

im looking at the Yubikey and software authenticators now
Post
Topic
Board Beginners & Help
Topic OP
My MtGox account hacked... Lost $60,000... :'(
by
beesa888
on 10/12/2013, 14:47:21 UTC
I noticed i had issues logging in yesterday, when it kept telling my password was incorrect. I started getting really suspicious when i tried to reset the password, it would not give me an email to reset it.

I checked my gmail mail and found it had been access from The Netherlands... (I'm from Australia)

this happened in less them 24 hours... in that time I sent Mtgox 4 emails desperately trying to get them to suspend my account. But im so freaking angry that i still have not heard back from them. Are my BTC gone forever?

I have a ton of transactions in RUB currency?

I'm just devastated right now...