Bitcoin Forum

Bitcoin => Bitcoin Technical Support => Topic started by: slowdays on March 30, 2017, 05:59:45 AM



Title: Computer hacked , btc stolen .Bitcoin find and recovery software
Post by: slowdays on March 30, 2017, 05:59:45 AM
Hello , i have been experiencing issue with my wallets , i was trying to find some help here , unfortunately 24hours after i registered here and downloaded couple softwares like Bitcoin find and Recovery , my poloniex wallet was cleaned and my all multibit wallets emptied tonight . Something is going on in this forum.


Title: Re: Computer hacked , btc stolen .Bitcoin find and recovery software
Post by: pedrog on March 30, 2017, 08:29:07 AM
Hello , i have been experiencing issue with my wallets , i was trying to find some help here , unfortunately 24hours after i registered here and downloaded couple softwares like Bitcoin find and Recovery , my poloniex wallet was cleaned and my all multibit wallets emptied tonight . Something is going on in this forum.

Can you show where you find said software?

You shouldn't download and install random programs you find in the Internet, now you know what happens if you do...


Title: Re: Computer hacked , btc stolen .Bitcoin find and recovery software
Post by: Qartada on March 30, 2017, 08:39:12 AM
Hello , i have been experiencing issue with my wallets , i was trying to find some help here , unfortunately 24hours after i registered here and downloaded couple softwares like Bitcoin find and Recovery , my poloniex wallet was cleaned and my all multibit wallets emptied tonight . Something is going on in this forum.

Can you show where you find said software?

You shouldn't download and install random programs you find in the Internet, now you know what happens if you do...
Actually don't show where you found it - we don't need to get it ourselves.

Viruses are not the forum's responsibility.  If you downloaded two random programs from the forum you're very naïve.  It's not like the forum posts and creates everything on the forum.  Check before clicking.


Title: Re: Computer hacked , btc stolen .Bitcoin find and recovery software
Post by: slowdays on March 30, 2017, 09:49:38 AM
I know , its horrible mistakes , https://bitcointalk.org/index.php?action=profile;u=543143  , this the guy who made this soft , im certain it his shit , its only thing i did . At least please delete him and his threads to protect others . Best Regards!


Title: Re: Computer hacked , btc stolen .Bitcoin find and recovery software
Post by: HI-TEC99 on March 30, 2017, 11:38:28 PM
Hello , i have been experiencing issue with my wallets , i was trying to find some help here , unfortunately 24hours after i registered here and downloaded couple softwares like Bitcoin find and Recovery , my poloniex wallet was cleaned and my all multibit wallets emptied tonight . Something is going on in this forum.

Can you show where you find said software?

You shouldn't download and install random programs you find in the Internet, now you know what happens if you do...

He says here (https://bitcointalk.org/index.php?topic=1847935.msg18388276#msg18388276) it was either an openssl windows binary I posted a link to, or some new software that claims to enhance the btcrecover software. If you could evaluate whether either of those programs is malicious it would help prevent others getting hacked. I made a post explaining why I think the openssl binary I recommended is clean here (https://bitcointalk.org/index.php?topic=1847935.msg18396705#msg18396705). The TLDR is that file is from a site referenced by the openssl website. There have been no other complaints about it, or its creators who have been distributing binaries since 2003, and a virustotal scan of it is clean.

I made another post explaining that I recommended trying software called btcrecover, but not the new software the OP tried here (https://bitcointalk.org/index.php?topic=1847935.msg18397381#msg18397381). You can find a quote from the creator of the new software the OP installed at the bottom of that post. His software's called "Bitcoin find & recover", not btcrecover.

I feel sorry for the OP as he says he got hacked straight after I posted a solution for how to recover 17 Bitcoins from his corrupt multibit wallet file here (https://bitcointalk.org/index.php?topic=1845816.msg18383606#msg18383606). If you, or anyone you know, could identify any malicious software you could help stop others losing their coins.

edit

The "Bitcoin find & recover" software's github's been deleted, which strongly suggests that software was malicious, not the openssl installer binary I posted a link to.

It would seem that the "Bitcoin Find and Recover" github has been deleted (removed?)... The entire "Alex-Jaeger" account seems to have disappeared from Github... so I suspect that it is indeed the culprit. My instinct is telling me that the guy managed to steal some wallets and has deleted the github before people find the exploits in the the code...

The OpenSSL binary you linked is relatively trustworthy as HI-TEC99 has thoroughly illustrated. I have used it myself without issue.

It looks like looks like racezefi has indeed got hold of some wallets (https://bitcointalk.org/index.php?topic=1847649.msg18385308#msg18385308) :(

Sorry for you loss, but hopefully this will serve as a reminder for people that they need to be ULTRA paranoid about running software that does anything related to their bitcoins/wallets/private keys... if you didn't check the code and compile it yourself, but choose to run precompiled binaries, you are potentially exposing yourself to the loss of all of your coins!  :-\




Title: Re: Computer hacked , btc stolen .Bitcoin find and recovery software
Post by: Hatcher on March 31, 2017, 09:51:39 AM
my poloniex wallet was cleaned

Doesn't really make sense since you need to verify Poloniex withdrawals through your email.


Title: Re: Computer hacked , btc stolen .Bitcoin find and recovery software
Post by: slowdays on April 02, 2017, 06:23:50 PM
my poloniex wallet was cleaned

Doesn't really make sense since you need to verify Poloniex withdrawals through your email.

I think trojan i woke up , poloniex was cleaned and all wallets except one i have created after scanning with Find and Recover . I wonder how that guy still here and his software. Amazing job bitcoin talk team


Title: Re: Computer hacked , btc stolen .Bitcoin find and recovery software
Post by: HI-TEC99 on April 02, 2017, 06:28:28 PM
my poloniex wallet was cleaned

Doesn't really make sense since you need to verify Poloniex withdrawals through your email.

I think trojan i woke up , poloniex was cleaned and all wallets except one i have created after scanning with Find and Recover . I wonder how that guy still here and his software. Amazing job bitcoin talk team

Do you agree the openssl windows binary I posted a link to wasn't responsible for your computer getting hacked? Considering the "Bitcoin find & recover" software's dev deleted his github immediately after your hack it's fairly obvious his software was responsible.


Title: Re: Computer hacked , btc stolen .Bitcoin find and recovery software
Post by: ImHash on April 02, 2017, 08:37:58 PM
Wait a second, what does an installation of a software has anything to do with an exchange balance? did you have your exchange page opened while logged in to your account? all this forum is providing is a link to download the newest bitcoin core wallet, other than that nothing is from forum staff/administrators.
Why didn't you seek guidance from experts in the forum first before downloading anything? you should've tried to do everything manually by yourself before trying to install a software to do it for you.

No one to blame here other than yourself, this forum has no virus.