Bitcoin Forum

Other => Beginners & Help => Topic started by: zombo on April 15, 2013, 07:40:53 PM



Title: Local wallet somehow hacked and ALL coins stolen?! Please help.
Post by: zombo on April 15, 2013, 07:40:53 PM
Okay, so I have a local litecoin wallet, and I have P2Pool running on my system. Also ScryptMiner (for CPU mining)
I have several machines mining to this "server" which runs P2Pool and the litecoin wallet.
I transferred most of my coins over to this wallet from exchanges/other pools to store them "safely", I woke up this morning to find a rouge transaction taking 40.10 coins (my total balance at time of transaction) to a random Litecoin address. I DID NOT make this transaction as I was asleep!
How can someone possibly make this transaction? is litecoin bogus? is p2pool a scam? Wouldn't they have to physically enter my "server" to make a transaction in this wallet?
PLEASE help, any advice would be SO GREAT!

https://i.imgur.com/PuJSlav.png


Title: Re: Local wallet somehow hacked and ALL coins stolen?! Please help.
Post by: K5Doom on April 15, 2013, 07:48:58 PM
Wasen't there a version of cpuminer with a trojan in it?


Title: Re: Local wallet somehow hacked and ALL coins stolen?! Please help.
Post by: vm1990 on April 15, 2013, 08:10:15 PM
theres lots of ways to get to a vulnerable server to steal litecoins if you must have litecoins on the server then encrypt the wallet with a very tough password this will not stop people getting into your server and stealing files but will make it impossibly hard for them to spend anything at all

theres been alot of attacks of this kind recently in both litecoin and bitcoin my advice is create a virtual computer in either Oracle or vmware and have it stored on an external harddrive with a copy of windows or what ever operating system and have your main wallets in there this allows you to simply unplug the external harddrive and no one can steal your hard earned coins

the other way they might have found you is seen your mining on your own server and decided your a viable target make it as hard as possible for them to get access to your server good antiviruses and good firewalls

finally run a virus scan id recommend using something like Kaspersky

as for the coins themselves there sadly lost unless you can find the attackers ip address and rehack the asshole