Bitcoin Forum

Well, I lost around 8 btc after my account on mybitcoin.com was hacked... I had a unique password that was known only by me. If was 13 characters long and filled with upper and lower case letters and numbers. The address is 1MAazCWMydsQB5ynYXqSGQDjNQMN3HFmEu. I looked it up in blockexplorer, and it transferred 4000 btc within a few days. Please reimburse me?

Where's the proof?  ???

http://ezzegames.webs.com/photos/Fail/fail28.jpg


If this is genuine, which I dont think it is....


Keylogger.

I check and that happened to me too: account 1KLahQtqDNAXvrjNyfvgSBtAhwco5ZxLp4
http://blockexplorer.com/address/1KLahQtqDNAXvrjNyfvgSBtAhwco5ZxLp4

I just lost 432,000BTC, please reimburse me

Here it is:


Busted!

Yeah, everyone who shared his user/pass with MtGox @ Mbc had seen their btc there went up with the wind.

Nothing to do about it, but I hope the thief get touched by your request... let me know how it ended up, so I may try the same to get mine as well.

Not joking, I'll take a pic when I get my PC working again(this is from my IPod). Judging by how that addressis receiving then sending so many bitcoins, could it be part of mybitcoin? I know 8 btc ain't a lot, but it was all I had and I was proud of it... It couldn't have been stolen by keylogger since I have multiple AVs and I test everything I run with Sandboxie or in a VM. I know a LOT about computer security... Is there some way I can trace this guys IP with his address? if I can, I will DDOS the crap out of him and then run s metasploit remote IP attack on him for his wallet.dat. My password and account name on MtGox were different anyway...

Strange, because everyone who got hit by that jackboot, were hit to very same address and share account info with MtGox. I've several mbc accounts, all of them are untouched, except the one that shared that info.

I didn't even have a MtGox account until today, and it has a different pass. MBC also said they changed the password on accounts with leaked MtGox passes.

Wow. And they offer no help... Don't use MBC guys! This is how it started with MtGox! I think MBC is either getting pwned, or they're stealing btc... What can I do with this guys address? Can I trace, or at least get an IP? Boycott!

Sure would be nice to have some signed receipts for all such stuff.
Like Fellow Traveler's Open Transactions system for example, or just openpgp or something.

You didn't have a mt gox account until today? How did you set one up while their site is down?

Back when the site had that green background, there was a register/login button in the top right hand corner. I made one so I wouldn't have to go through claims.

Oh, that isn't for mt gox, just their support site.

Something weird at mybitcoin.com tho, just tried login and the username entry is *starred out while typing?

Is this by design now?

Seams like, they changed username to a password instead of text field. Not a bad idea actually.

Hi,

what's mybitcoin.com about? Can't find information on there page.

It was a typo, fixed.

http://forum.bitcoin.org/index.php?topic=20533.0

I have the IP!!!!! MBC was at least smart enough to give me that. They were hacked and now won't do anything for us? A**holes. 24.184.196.101
Light em up, boys!
http://i53.tinypic.com/3463i2g.jpg

Nothing you really can do, just like someone can do a chargeback when you sell them WoW gold.

Might want to check with the good folks at optonline.net.

And remember, you can have better luck if you call as a network admin, talking to one of their network admins.  As soon as you get the police involved, they'll likely insist on a subpoena.  But if you call one of their network admins, and let them know the time and, if they won't give you the name of the user (I doubt they will), maybe you can have them set aside the name of the user for when the police come.  Preserve the records.

Not sure how you got the IP address, or how reliable that is, but that's what I'd do.

PS  I should add that this was advice given to me by local police about 8 years ago, when I was investigating a hacking incident where I was pretty sure I knew who the intruder was.

Ermmm... Not worth it. I am gonna try the remote access metasploit attack and see if I can steal this persons wallet later. Involving the police doesn't really seem worth it though. They're in Brooklyn, and the hacking incident occurred in servers in the West Indies.  :-\

24.184.196.101 is a Tor exit node according to https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=194.63.142.59&port=80, so it's almost impossible to figure out who it actually was. Good luck though for what it's worth.

Ummm... You entered the wrong IP. I did a port scan and it is dead. Definitely not Tor.

That's the IP of a TOR exit node.  It's not the person who hacked you.

aceman101 do you even have any proof that it wasnt you making that transfer?

There is absolutely no way for this forum to know wether your intend is just to make mybitcoin.com look like shit.

Lol, look at all the other posts reporting stolen bitcoins going to the same address. People are reporting that their miner passwords are being changed, and they also have different MtGox passwords. The evidence is all around you, you're just too thick-headed to acknowledge it.

That much we know he didn't. Many mbc accounts were depleted to the same address, one of mine included.
Except in my case I know it was due to the mtgox db party, because it was an account matching mtgox's data, and most (except this guy actually) of the other users felt under the same situation of share a login between mtgox and mbc.

uh I dont believe you, simple as that.

I had my mtgox password unchanged with 25BTC in mybitcoin.com at the time deciding if these rumours were true then someone would steal my coins.

None of it is gone, same password still.

All I can think is that you guys arnt being honest about using a shitty password at mtgox and the same shitty password at mybitcoin.com so it took the crackers <3hrs to find the password.

No, it isn't the wrong IP, unless you gave us the wrong IP. The IP address you posted is in the list. As to why your port scan comes up empty-handed, it could be filtering incoming connections, or just be too bogged down to handle your connection attempt.

Beats me how the cracker got to a 14 char upper+lower+numeric salted password, but... he did.
Not blaming it on mbc thou.

@Eric,

Guess you would need to start by explaining to him what is Tor in the first place...  ::)

Right -- that is a list of some Tor exit nodes among which the offending IP is listed. That IP in the URL (194.63.142.59) was just part of the search result link from Google but that wasn't the important part.

I found it in the list now. Sucks, since Tor has evolved to the point where it is virtually untraceable. Who knows what kind of security MBC has, since most of these bitcoin sites were hastily thrown together. Once the hackers start sellin off their btc, bye bye bitcoins. At thus point, setting up an anonymous gold exchange makes much more sense. Let people stet mining and set up "pools" and unions.

My balance on mybitcoin is now 0, too.

My bitcoins went to 1MAazCWMydsQB5ynYXqSGQDjNQMN3HFmEu as well.

I had only 0.84BTC, so I don't really care, but I just wanted to confirm what the OP said.

However, it is possible I used the same password for my Mt. Gox account (which I never really used. I had no $ nor BTC in Mt. Gox, so once again, I don't really care).

But you cared enough to post.

CONTRADICTION COMPLETE.