Bitcoin Forum

I am so sick right now.

I won the big btc last night on seals. Won 12.5 BTC

Transferred 10 BTC to my blockchain. Went to sleep.

Woke up to a google email saying someone ACCESSED my email last night but google blocked them because of a suspicious IP

Monday, September 16, 2013 10:52:38 AM UTC
IP Address: 109.163.233.194 (foto.ro1.torservers.net.)
Location: Unknown


SCAM TRANSACTION :
 https://blockchain.info/tx/80961f94275c58bd12c0e3f79c20132e0fc259692deea6970b6a4ce4d4c6d1d6

SCAM WALLET :
 https://blockchain.info/address/12TzqdKToJB9hiHQnzCw7BVBFrrAFDZ8Fv

What can I do?? I am disgusted..

Sadly there's nothing you can do, bitcoin transactions are final.  You may want to try contacting blockchain.info support, but I doubt you'll get anything out of it.

Use two-factor-authentication (2FA) from now on. Don't trust non-trivial amounts of money to services that don't offer 2FA.

This, or even better, use offline wallets.

I sent an email to support at blockchain. It seems the BTC is still unspent. What if any are my options???

It doesn't matter if they're unspent in the attacker's wallet. You cannot reverse Bitcoin transactions. This is by design. Sorry for your loss, but it's your fault for not securing your addresses properly.

its strange its happen to me also but good luck I have nothing in my wallet I have this message from google also

Tuesday, September 10, 2013 11:01:23 PM UTC
IP Address: 77.247.181.165 (politkovskaja.torservers.net.)
Location: The Netherlands

I got a PM from a member saying blockchain has been hit hard the last few days.

Either way I know deep down I am fucked and it really hurts. Secure youre passwords people!!

Doesn't help. Get 2FA to another device or you're gonna get boned.

bitcoin is almost physical in a sense; when someone robs you, the only way you can get your money back is if you find the criminal in question ( make no mistake stealing any amount of bitcoin from anyone is Criminal ) and press charges hope he hasn't pissed away all the funds.

I think their are some safer e-wallets out there, its just a matter of finding the right one... I personally don't use ewallets only small account on seals with clubs, things like...

and when I do use e-wallets its 2 factor auth. its really not hard to setup and you can have relative peace of mind even with a larger sum in your account.

but a paper wallet you generate offline  is the only way to go for larger sums.

I have been scammed myself once or twice 200$ gift card for 40$ of BTC... type thing, learnt my lessons and moved on.

This has really left a sour taste in my mouth with BTC. I should of researched a bit I just cant believe I had it for all of ~ 9hrs. Was I that fucking vulnerable?

I had gotten an email from blockchain about a month ago saying someone had my identifier code, tried to access my blockchain but didn't get the password. I researched that a bit and most people said not to worry about it.

Im going to take a few days and re read all the newbie shit because I feel like I skipped over so much when it comes to securing a wallet.

Tell us a bit about the password you used on blockchain.info.  Not the password itself (unless you change it first, then you can give us the actual password).

Main questions are:

How long is it?
Did you use it on any other sites?
Is it a word or based on a word or words that may have some of the letters changed (example p@ssw0rd)?

My best guess is that someone guessed your password and stole your BTC.

The password was a Norwegian professional snowboarders last name (non mainstream snowboarder) with two numbers at the end. No capitals, no weird symbols.

The password was the same as my gmail password. That and my SwC password were all the same. (Ive changed my passwords now obviously)

I don't think anyone could of guessed that on a whim in a few hours.

At 5:52am my email was breached however google claimed to of blocked them out.

At 6:51am payment was sent from my blockchain to attacker.

59 minutes it took them.

I'm guessing:

a) your computer is compromised
or
b) blockchain.info/SwC was compromised

Could you ask the owner of seals with clubs for login logs for your account?

I dont think SwC was breached because I had over 2btc in that account and nothing happened. They strictly went for blockchain.

Edit: Seems they moved it to here now https://blockchain.info/address/1Kc3bn3syspZqHoMRabK3CqEsc8H1WuiAo

https://blockchain.info/tx/3a08179c713aa989f19e271a165d631a4e38aac4f20c1dccaedcfb34ebbeb4fe

IP : 98.206.149.87 ???

http://bgp.he.net/ip/98.206.149.87



EXPOSE THIS FUCKER?

.5 BTC if you can help

You should run a virus scan, it seems to definitely be a personalized attack. Something is on your system.

Have you downloaded anything recently?

If you can find the .exe, it may be possible to analyze the .exe file and see where it is sending logs to.

The password was the same as my....

*********


There in lies the problem.

It doesn't matter if it was a 24 character alpha/numeric/symbol mixed password if you use at two places.


~BCX~

+1

A hard lesson to learn. I'm sorry for your loss.

I really honestly doubt it was someone that knows me. Im not much of a high roller by any means, I got lucky by winning the big btc.

I told my brother about me winning the btc. He knows nothing about BTC.

I am going to clean my computer today as best as I can but this seriously has me freaked.

Lol if seals have used your password to login into your online wallet but didn't steal from your account on their website to not expose the scam.

Use multiple levels of passwords:
Level 1 - 15 random characters/letters/numbers - Swiss bank/local bank/Paypal/Bitcoin offline wallets
Level 2 - 12 random characters/letters/numbers - Online wallets/important email accounts etc
Level 3 - 8 random characters/letters/numbers - Crappy casinos, spam websites, WoW accounts, Apple MacIGiveACrap and whatever.

My password seems to have been changed without my authorization..

No way to reset password?

I believe this was part of a much larger security compromise.

SWC either is unaware it has happened or is keeping it under wraps.

https://bitcointalk.org/index.php?topic=295414.0

Looks like your computer was compromised, and keystrokes logged -- the attacker probably combined information from two sources: for example, knew your google password form one source, and found out your wallet address from another (like this forum?).

inputs.io + 2Factor FTW!!!

Sorry for your loss. BTC is not like fiat. Please be more careful of your funds.

Also consider that if you login anywhere on any other system (phone, someone elses computer, etc) to any accounts using this password, their system could've compromised you.

Jenger - that really does suck :(

I watched most of that FT you dominated.  

I believe it's quite clear Seals had nothing to do with this and it was a case of poor personal computer security.  

Jenger if you'd like to msg me personally at micon@sealswithclubs.eu I can help you lock your shit down in the best way I know how, and refer you to others that know much better that I learn from.

Yo Micon, can I get some help here too? :( https://bitcointalk.org/index.php?topic=295414.0

Things aren't adding up either. It doesn't look like a user was compromised, it looks like the server was.

Haven't received a reply from email support yet. My email address was attached to my account.

For more information on champbronc2/poopguy32 see:

https://bitcointalk.org/index.php?topic=295414.msg3167960#msg3167960

Laffo.

Talk about putting you on major tilt!

False.
He used the same password at Seals and his email. It would be easy to hack the email and steal the funds without getting caught if you were Seals...

Strong passwords +2FA

This. 2FA can also rule out botnets/keyloggers. Which are really not to be forgotten!

Very sorry for your loss hopefully you figure out how they got taken.

Did you click a link in this email? log in to the linked site with your shared password?

Why?  A password safe can store 15 characters just as easily as it can 8.  Use 16+ random characters for everything.  Only use shorter passwords when the authenticator does not allow the full length, and seriously consider simply not using anything that doesn't allow at least 12 characters.

Oh, and never, ever, ever use the same password more than once.

If you can remember a password, it is probably insecure.  If you can remember several of them, it is a certainty.

I like where you are going with this.

Did you save the email mentioned above?

It was a legit google notification. My funds were transferred out of my blockchain before I even woke up, so they were gone before I clicked any email.

I spent all day yesterday scanning my computer, found trojans and a bunch of PUPS. I always had norton and now I remember it expiring and saying to myself ill renew it, ill renew it. Well, never did, time got the best of me and Ive been running probably a year or so now without any real protection.

Problem is, I still live with good old mom and dad and my mother loves to hop on this computer and download and print a bunch of coupons, and BS software that she never uses.

Although, in order for them to go after my btc wallet specifically makes me think it was something I did or must of downloaded being that I am the one who would be on bit coin related sites.

I cant recall downloading ANYTHING recently.

Computer says I am clear now, I still don't feel safe. I am going to look into secure wallets (I suppose offline is the way to go?) because I keep increasing my BTC usage and now I am starting to deal with more serious amounts of money. A few grand would wipe me clean out while a couple hundred would hurt, but mostly be a real downer.

This was my $1409 lesson.

Now lets see how I do in next weekends big btc  :P

Question, what should I do with that blockchain wallet? Is there a way I can properly close it or do I just leave it as is and forget about it?

Id like to change my email, but I have so many things attached to that email it would be difficult. I am safe now that I have cleaned my computer, I should be able to remain safe if I change the PW again now?

Also, if I followed my money correctly, I believe I end at this address

1betPecXE3Y85xsuontnTf1JdeNuKuwdu

Sounds like a dice address. Can anyone confirm?

I get that address and this address

1QAHVyRzkmD4j1pU5W89htZ3c6D6E7iWDs (almost 50k BTC, any clue whats up with this wallet?)

Sorry to hear about your loss. I hope you can get it all back.

Install dual boot linux in that computer and use it for the serious stuff. Leave the other OS for Mom, Pop and games.

This thread made my day. Couldn't have happened to a better person, you fucken cunt, Jenger.

Do not use unsafe currency like bitcoins for huge amounts of money.
Do not use unsafe websites ...

Fuck you fat joey. Envy my poker skills, ill win again. You and your whore cher wannabe mother will get yours.

Consider it a bad beat.  Your a poker player, I'm sure your aces have been cracked before.  Rebuild buddy.