Bitcoin Forum

Economy => Web Wallets => Topic started by: hargax on April 26, 2013, 09:12:53 PM



Title: blockchain.info wallet hacked
Post by: hargax on April 26, 2013, 09:12:53 PM
I've just noticed 4.92BTC have been sent from my wallet to this one: https://blockchain.info/address/1JKJdYSZNrWSca1b9ajejdmjuqooE7TLFr

Just a heads up for everyone.


You Sent

4.92067098 BTC ($ 671.73)

Value at time of transaction $ 717.43


Horrible :(



Title: Re: blockchain.info wallet hacked
Post by: naphto on April 26, 2013, 09:13:50 PM
Happens.
Bitcoins is unsafe, you should use it only at your own risks.


Title: Re: blockchain.info wallet hacked
Post by: Hiroaki on April 26, 2013, 09:19:58 PM
keylogger...?


Title: Re: blockchain.info wallet hacked
Post by: MWNinja on April 26, 2013, 10:16:23 PM
His blockchain.info alias matches his forum name, and it has no 2-factor authentication.  Attacker grabs the wallet and performs an offline brute force attack.  Guessing the password wasn't very good either. 


Title: Re: blockchain.info wallet hacked
Post by: hargax on April 26, 2013, 10:21:48 PM
His blockchain.info alias matches his forum name, and it has no 2-factor authentication.  Attacker grabs the wallet and performs an offline brute force attack.  Guessing the password wasn't very good either. 

You're right, my password was lazy. Lesson learned.


Title: Re: blockchain.info wallet hacked
Post by: lophie on April 26, 2013, 10:39:10 PM
$717.43 is the cost of this lesson. If you gave this amount to me I would vehemently teach you everything I know about cryptography  :D. Too bad you did not care enough to invest in learning basic security measures. I still feel bad for you man... well kinda....


Title: Re: blockchain.info wallet hacked
Post by: Razick on April 26, 2013, 11:50:51 PM
I absolutely sympathize. Sure, you should know that strong passwords are necessary, especially for that much money, but I get tired of "Your fault for not securing." No, the shame is all on the no-life asshole who took it.

Sorry this had to happen.


Title: Re: blockchain.info wallet hacked
Post by: Wardrick on April 26, 2013, 11:54:10 PM
I recommend you memorize a few different strings of letters and number and use those for your passwords. Then use lazy passwords for things that people would have no interest in or bother hacking (Sealswithclubs acct. , AurumXchange, etc) unless you're storing a lot of money in there.

The way hackers get your PW is by differentiating in a string of letters and numbers a lot of times, if you're password is a random string of letters and numbers there's no word or certain thing they can look for. I read about this on a bunch of sites, random letters and numbers are the way to go.



Title: Re: blockchain.info wallet hacked
Post by: justusranvier on April 27, 2013, 06:00:02 AM
There is no excuse for using lazy passwords in 2013. Memorize a strong passphrase for a Lastpass account, then use it to generate random unique passwords for every website you use.