Bitcoin Forum

Moved: http://forum.bitcoin.org/index.php?topic=19929.0

I did actually decompile it. Here is proof as well as a thread mob closed.

Thread:



Proof:


Orginal Thread (thanks google):

http://webcache.googleusercontent.com/search?rlz=1C1CHKZ_enUS436US436&sourceid=chrome&ie=UTF-8&q=cache%3Aforum.bitcoin.org%2Findex.php%3Ftopic%3D19929.0

Great work.

Please do keep us updated.

Note: That is probably note the actual hacker of mtgox, but the bastard spammer who tries to steal your bitcoins via email because of all the recent mtgox hype.

yeah, please do. Mt Gox claimed the attack originated from Hong Kong.

How come nobody else has been able to do this yet?

Because MtGox_client.exe was not the "thing" or "person" responsible for hacking MtGox. Only sending spam emails.

I asked the whole forum for the file and no one gave it to me :'(. This file was sent to everyone's e-mail that was leaked. I downloaded the attachment and decompiled it. This is all the information I got from it. I'm browsing the site to see if I can get in. I'll keep you updated.

The hacked email list was publicly released.  Anyone could've sent that virus.

Do you think this hacker cares?

He's kicking back and laughing at the fake currency he stole and got paid thousands for which will in all likelihood keep him a nice lifestyle for at least a decade.

the 'hacker' and the spammer with the .exe are not the same.

I understand that, but this was sent before the database was leaked. Meaning, this person had to know who had the database and who could have hacked mtgox.

The hacker didn't really get away with that much... less then $1000 worth.

No is wasn't. I got the email after I got the database.

How are you sure though? He could have done it when he got the databse, it isn't that hard. Why not send a stealer and have an online currency?

I got the e-mail before the database...  ???

$1000 worth of bitcoins at 0.001 each?  

$1000 at $0.01 each... he's got to sell 'em, though.  Keep eyes out for someone itchy to sell big lots for cheap.

Not that he'll ever get caught. 

a 'nice' lifestyle for about 200 coins? maybe nice compared to some little african tribe somewhere, but not by the standards of most of the world, at least at at any exchange rate we have seen thus far.


Maybe try running thru this short checklist when you think you may have something worth posting:

Have you thought about what you are going to post?
Does it makes sense?
Do you think it could be useful to others?

If the answer is 'yes' to all of these, then post.

Try not to talk out of your ass, according to mt gox he got them at about 4.50 each. not a penny. the 1000$ limit is at the weighted price, not the days low, that would be stupid b/c then anybody at anytime could set the low to a penny by selling 1 coin and then be able to cash out a shitload. Does the keyboard really make your fingers feel that good that you must post any random BS you can think up?

I'm sure, from experience, that the $1000 limit for bitcoins used a 24 hour average. The 24 average after the huge sell off was about $4. That is 250 bitcoins, which lines up with reports.

Instead of backseat-modding, you should probably just hit "report" and be done with it.  No one is impressed.

go jhfire! go geet 'em!

Do the sums mate. $1,000 worth of coin at a price of 0.1. He could have as much as 10,000 BTC. Assume a price of $15 per BTC and that is $150,000.

Do you have any idea how long $150,000 will last in Vietnam? Even if the estimate is out, he can still live like a king there for a long time.

Why is all this such an interesting, addictive drama? I need to do something else, good night all...

Report me for what precisely?

Updated post with e-mail and link to where I has found it :o. If you visit vnnic.net.vn it has something on there about BTC and mass mailing. I'm not sure what it says, cause it is a different language.

There was a sell order for ~263k BTC @ $0.01 each, so whether they all sold or not - the guy only withdrew $1000, and the rest will be rolled back.

-> Somebody should look for a transaction of ~ 10.000 btc in the blockchain, so that we know that the hacker was so clever as we think. maybe he was not and the only amoumt was much smaler.

 

Uhum...you're off by a factor of 10. It's 100,000 bitcoins valued at 1.5 million at $15 each.
But we will only know the outcome of that after Mt Gox reopens and people see what is in their accounts that they can withdraw. Then, we'll know if bitcoins were actually stolen and approx how many.

Mt Gox claimed they had their bitcoins spread out into different accounts, but then also claimed they moved the 432,000 coins for protection off of their site. So, which to believe? We'll see.

I know, from experience, that the $1,000 btc withdrawn limit is based on the 24 hour average. After the sell off, the 24 hour average was about $4. That is only 250 btc.

That's approx the amount Mt Gox claimed they actually lost.
We'll see. You could be spot on.

Didn't they just get done saying that they took them at ~$4.50....

Yes, approx. or $5.00

not to everyone ;-)

A smart hacker would have created 1000 accounts and used them each to withdraw $1000 of coins...

That would have been smart. Fund each one with a bitcoins. Sell at $16, try to buy at $.02, then transfer out. Most likely they did not expect the price to crash so hard. I don't think it would have if the system didn't lock up and stop letting buy orders in. I know I would have offered more resistance if I could, and other people would have as well.

A very smart hacker would have shown all exchangers that hacking is a very possible threat, and security is of utmost importance, he would not have merely said he got in b/c nobody would believe him, and yet would not have wanted to make a massive blow to the system, he would have done exactly what he did for the good of bitcoin, the community, and the world. This 'attack' was not carried out by a malicious entity, but rather by someone who feels that what is in their best interest is what is in the best interest of us all.

You people do realize that MTGox was going to give all it's users info over to the Department of Justice, right?!!

If it's only 250 BTC, this attack was a warning not to go after Silk Road.

Now that's the silliest thing I have read on the forums so far.

lol, somebody sure likes their new shroom dealer.   :D

link?

What happened to the thread this linked to? It's gone for me.

I presume the mods didn't like a thread about using bitcoins to pay for hackers to hack a random IP with tenuous links to the mtgox hacks? It's not gonna be good rep for bitcoin if it only gets used for soliciting illicit hacking.

Who was paying me to hack? I was taking it upon my self to do it. You could have donated to me if you wanted to. I could have cared less. It could also be of all the nubs who reported the thread. You guys really don't understand what bitcoins are used for. Go to the deepweb and you'll wonder what bitcoin is really used for.

I'm selling 13,000 BTC for 14 cents each nothing wrong with that  :-X lol  jk

Hmm did I once specify in that post that I was implying people were paying you to hack? I don't think I was!! I was merely pointing out that bitcoin vigilante justice is [n]nothing but bad press[/b] especially if it ends up with someone paying someone else in bitcoins to hack this potentially innocent guy.

Innocent? I saw like 9k botnets on his site. That isn't being innocent.

Hey jhfire, I support your efforts, but i have no bitcoins yet. I'm waiting for my dwolla account to clear.
I am thinking of taking up a more serious interest in computer knowledge and hacking, myself, inspired by your efforts. Can you tell me where would be a good place to learn from, and save myself time and trouble? I know it's not a fast learn or anything, but i can pick things up quick when I want to. Maybe I can find a new interest in this. Any suggestions for where to study?

Give em hell brah!  wait wha 9,000+ botnets?
Definitely give the bastard HELL, and keep the doors locked.

I learn all by myself ;D. Just go to Google and type it in. Watch out for viruses though, some sites full of hackers will bind their viruses to the program you want. If you really want to go into hacking, you need to watch out. Good luck cause it is a mission.

"Hacking" isn't particularly difficult, whether it's making XSS injections or decompiling programs. Amusingly, most of these hackers think they're the greatest and smartest person ever.

I'll buy a separate computer then for that purpose.
Thanks.

Hacking is a big ass term that has a lot of different meanings. Many people think it is hard, thus hackers think they're the shit. Me personally, I just do it for fun. Decompiling that attachment, sql injecting the site, and then crashing the site was peer joy to me. I do this sometimes for fun and this happen to cross my path. I don't care if people look up to me, cause it doesn't make my ego bigger in anyway. I just know what I'm doing and do this as a hobby. Sometimes I fail, sometimes I succeed as I did yesterday.

Let us bump this?

more details here: http://forum.bitcoin.org/index.php?topic=20222.0

I was right, what do you know ::).

why not use a virtual machine?

1. because there are ways to break out of Virtual Machines (VMs)?
2. if you get root access to the guest, it is usually pretty trivial to detect if it is a VM, especially if it is Windows based or otherwise has guest addons installed?
3. if it is on the same network as computers you care about, the VM could launch an attack on computers you do care about from within the network?

I don't know much about hacking, but those would be my guesses