Bitcoin Forum

just now 1.49 BTC was stolen from me. this is why bitcoin is not safe.

my account was on blockchain. i had a very long password with randomized characters letters capital and so own.
i had google authenticator. and yet they compromised 1.49 btc(all my bitcoins)

im fuking sad. i feel lik the bitcoin world spit me out like a loser.....

Be smart with your shit. You had a keylogger and rat clearly on your shit. That is your fault. You can put all the security you want on anything but the best security is your brain.


But I don't mean to be hard on you, I went through something very very similar. Lost 3 bitcoins within the first month of me buying them many months ago due to my wallet.dat file being straight up stolen.

Wanna know how much I lost  :o

https://blockchain.info/tx/93d19be5e3a2242667c9283fc98b6ce0a9b0df616a9e5a3c5ba1e084b235f46c

How was your wallet stolen? It would help us noobies if you expanded answers so others can learn from others mistakes. No?  ???

i had 2 factor autentication. and also really strong password.

i think somehow they were able to piggyback my pc and dns relay to their phishing site. so i logged in and basically gave them my password.
really fuked up how i feel right now. i was going to buy an avalon tomorrow with this money. i feel fuked in the ass right now

thief info. which is basically useless now cause of the bitcoin nature. (temp wallet id)

he stole my btc to this wallet
1npXSUox9upXg9HVFrVmikxe9qBL6a17L

and than directly after that to this wallet:
15GEXsfUU3hexHiArbYmVusYartaVkreqT

You didn't enable sms notification at least?

i have push mail. same like sms notification. but that does not help once someone is in your account.

sorry for your loss. you should have researched and used a cold storage wallet. when you're using cloud storage, your fate is in the hands of someone else and not your own.

i was going to. but fuking idiot me. i thought im gonna wait till i get the miner... fuk......... my stomach fuking hurts of this...

I would suggest doing a virus scan and checking if you were password was keylogged or something. BlockChain is a pretty secure wallet.

yeah probably it was my pc. but its weird. i have firewall. i have vpn. i have fuking all the security you can imagine. i have to probably reinstall all my client in network. not trusting my shit after this anymore. now that i see how easy it is to hack wallets. im wondering which way is easier to earn. to mine or to hack...

Really unfortunate =/ but what kind of two-factor authenticator were you using? If you use something on your phone which generates a random number with 6 digits every ~20 seconds, it takes a lot for a keylogger to monitor your screen all day waiting for you to type in the authenticating code.

Sorry for your loss. Reinstall your OS.

Good trick is test everything with small BTC sums to check if your system is clear.

I'm also sorry for your loss.

Can you elaborate on what OS you used?
It does sound as if your own machine could be the issue.

i never use windows to log into my blockchain account.. way way too risky. windows is a dirty o/s with lots of vulnerabilities.

i was logged in already. and suddenly i was logged of.
they routed blockchain to other website. so i thought i was still on blockchain. and trying to log back in. they got all the shit they fuking needed. so me there trying to login. i got mail waller withdraw........fuck.
i checked with wireshark and it was indeed DNS reroute to other IP adress.

- going to reinstall All OSes in my network.
- change my static provider IP

problem with blockchain is its open as hell. you can follow every transaction to every wallet and see how much they have in there. and little more knowladge you can even track the user which is logged in the wallet.

look up electrum, multibit, or armory.. then you won't have to worry about anyone jacking your assets. for an newbie user, it takes maybe an hour or 2 to figure out, but in the end it'll save you a lot of worrying.

Sorry for your loss, but this was a mistake on your end.
Using a possibly compromised system.

Thought blockchain was pretty much as tight as a ducks arse?!?  :-\

no i had firewall. antivirus, vpn, and i surf standard on proxy. so in my mind i am anonymous.... but guess not. going to buy avalon in hand tomorrow for a good price. hope to mine back what i lost. and this time cold storage. i guess no online wallet is secure enough. any tips what cold wallet is the best? and how to combine it with deposit to other people when i want to spend??

armory is supposedly the best, but i didn't need the extra features so i like electrum.

i don't run anti-virus software.. damn shit is a nuisance

just remember that java is evil

i use norton internet security and it doesn't bother me much. i have no idea whether it's of any use to me though.

Which anti-virus software do you use?. McAfee and Norton are pretty much crap imho, heavy resource hungry rubbish who's realtime protection is meh.  I use ESET Nod32, very cpu/memory efficient, very good at blocking anything dodgy, especially when surfing different websites soon as it sniffs out something dodgy, be it a dodgy page or a dodgy ad it blocks it and lets you know.

Speaking of ads, its defo worth using adblock plus in whatever browser you use, not only does it get rid of annoying ads, but also blocks off ads with malicious code.

Well the wallet is a file called wallet.dat in your appdata folder (Windows vista, 7, 8) and it can be taken if you're dumb enough to get some malware. It can be used on any computer without a problem if taken. They copied mine and deleted I guess. Such a pain in the ass.

Just know this, NO anti-virus is perfect. None. Viruses can be encrypted to go pass the virus scanner. I find them stupid anyway since the greatest anti-virus is your brain. I mean some things will just happen by accident like ransomware on a shitty torrent site or something but I rather not spend the $10(?) a month for something I feel is useless if you're smart.

reinstall OS

Sounds like a key logger but who knows sorry for the loss

put linux on a sd card or usb and format it so you run it off the removable device. Can use any wallet client. Make the wallet offline, write down address.

don't plug in your removable device in unless computer is off, make a copy of it on a fresh install of linux and keep 2nd copy in a bank deposit box or a very safe place.

use that address to receive pool payouts, lock that address to your pool acc (slush pool offers this).

only log in and connect to internet to make a transfer.

Sorry for your loss.
Most like a keylogger that takes your password.

Lost? How?

OP you should reinstall OS ASAP to avoid other personal stuff of yours to be compromised. Also, be warned the hacker knows all your mail passwords by now, so change them all.

I always use linux, maybe it had something to do with me logging with Windows and next thing you know, someone moved my bitcoin to another address. I dont know how the hell that happened, I used blockchain.info... it starting to make me feel like blockchain.info aint safe at all

sorry dude,
newbie here so I'm very interested in this subject
i have a blockchain wallet as well but i just downloaded multibit0.5.15 for windows and am going to try that...any BTC veterans have any better tested ways of keeping an offline wallet or cold storage would be greatly appreciated

Paper wallet or make a few backups of wallet.dat on a few USB sticks.

As a newbie this is all very interesting stuff to me. i feel glad that i use linux now hearing all there's horror stories.....hope it all goes well for you dude. 8)

So actually your wallet was not stolen, but some got access to your blockchain account and transferred all BTC from that wallet to another one.
Copying the wallet.dat to USB sticks does not change anything if the coins remain on an online account which is hackable/sniffable/compromiseable, etc...

For me it looks also like an attack for key logger or DNS spoofing. Your PC may be infected and other things you're doing with authentication your PC may be in danger.

Reinstall and check carefully what you're restoring (if you do so)

Why would you backup an empty wallet, or why would you backup your wallet.dat if you're using an online wallet?
Please re-read everything about bitcoin, before posting again. I doubt that you've correctly understood how everything works.

That's what I wanted to say. Thanks for the words.
PS: I know good how it works. Don't get me wrong, just because I registered now on bitcointalk does not mean that I had nothing to do with BTC until now  ;) So long...

You've expressed you're yourself very wrongly.
Keeping your BTC on your PC and then storing them offline is your safest bet.

it seems like a language barrier lol but if op refers to my post I think thats the safest way to go. Linux and offline unless you need to make transactions. Never plug in your removable device to a computer that is on/running windows. Make copies of your removable device on a fresh install on linux. If you need help setting this up PM me

What kind of proxy? Could proxy owner sniff your password?

Sorry to hear. Hopefully it all gets better  :(

How is it possible to get stolen if you had 2FA?
Sorry for your loss, but are you sure that you did not activate it after?

Sorry to hear that.  :'(

It's only digits

to be safe you need to put your wallet in a encrypted file on a virtual machine (like: virtual box,...) en encrypt the Vhhd of the virtual machine you cant be safe enough.

Yes but it is a lot of money (1500 usd....).

How the rerouting took place? Because of a virus?

Exactly!!
Why do the people think that the proxies make them more secure is beyond me. :o

Is it really that easy to steal from a blockchain wallet?

Did the OP download something malicious? or could it have been as simple as a bad link?

Ouch...that sucks...this is why it's very important to have an up-to-date AntiVirus and Firewall program. My recommendation is Comodo Firewall and Comodo Antivirus (google them). These are by far the most updated Internet security programs I've used and they're completely free. Sidenote: you might want to check all settings for Comodo Firewall, as it can scan files in the cloud, which if you're on a data cap, could cause some unnecessary usage. My secondary recommendations are AVG and Avast, both are free and do a decent job. Disclaimer I'm in no way trying to push Comodo/AVG/Avast, I genuinely use Comodo and recommend it to anyone that's looking for a free AV.

Edit: Nevermind I read that you were already using an AV and firewall...

Phishing attacks works well if you dont have two factor authorization for sending your BTC

 :o Oh no! Sorry, it would mean a lot to me too.

Having precious files or worse precious wallets on a Windows computer is almost asking to get stolen.
This remind me of my student time. If your where to plus a newly installed windows on the local network, you couldn't get the security update fast enough to have the slightest chance of keeping you system "ms-safe".

Sorry for your loss man..
The way i do is the follow.. I backup my appdata/roaming/multibit and program files/multibit to some usb and when i want to do a transaction i put the maps on my pc and after the transaction i delete it (also the trashcan). In the beginning i had an account on blockchain, but wasnt really related to something.. just registered without any use but i forgot the pass there.. is the account on blockchain important? and do i use a proper way of backup/using?

sorry for your loss

realy sick !  seems hard to get a safe bitcoin for the average user

Sorry to hear that, your post makes me realise the importance of security and how i am not yet ready to buy bitcoins (need to learn more first). So you had a password generator for the site you were trading on and they still figured that out somehow?

I new to BitCoin and I don't have many though but even so I keep them save like my eye.. I had old PC which windows I rewrited in order to clear HD from key logers and so on. And I only use it to acess my wallet acc.. :)

i think ill do same as Yntro :(

Im sorry to hear that, hopefully everything will work out, good luck

Do you have the same password as any other account that you have?

It seems that he entered his username and password in a phishing site. Doesn't matter in how many accounts he is using the same pass.

I had 3.6 bitcoins stolen from my mt gox account before the security update requiring verification etc. The biggest tragedy for me by far is selling 650 btc for $20 a piece in feb. AAAAAAAAAAAAAAAAHHHHHH!!!!!!!!!!!!!!


Try using a separate computer that is not online all the time to store your bitcoins, and also backup the wallet .dat file ( maybe on a usb drive). Do not leave your computer on unattended, I have seen my computer "surf" the web on its own, so people know how to use your computer when you're not there.

Another trick is to use several wallets you belive to be secure, ie. store the bulk of your coin offline and have some in a "hot wallet" for spending. But thruth be told, I recommend not spending bitcoins for a while, would like to see the price hit $10,000 or more per BTC. Refer back to this post when that day comes and be like "yeah, $10000, sweet, glad I stored my coins for a loooong time"

What you wanted to say is how dangerous bitcoin can be when their owners are not careful.
It sounds like you downloaded some crazy shit, and got a key-logger on your computer.  That's the fault of your own./


That... is pretty fucking stupid.

Well something like that happened just 2 days ago for thousands of bitcointalk.org accounts. Ofc it was a dns server side hack but still anyone can fall victims of hackers no matter how clever they think they are.

Hi there im new here sorry to hear that, its a good warning for us noobs!

Can you explain more in detail? You mean thousands of people enter into the wrong website?

Where do all of you get infected with keyloggers?

LOL

Easy, download some free bitcoin software....

I wouldn't trust your wallet on any external server, even encrypted. Do frequent checks on your PC or media that you're storing your coins on.Keyloggers, well they say common sense is the best anti virus...

Well, thats the point.
You need to very careful with the stuff you D/L

as said here before, the best security is to keep the password only in your brain,
and beside that, bitcoin is now going main stream, that will mean people will need more and more security, i am sorry for what happened to you, i think people need to be more aware now of their computers as money holders, that is, if we dont want it in our bank..

The most secure client would be armoury i just set it up - it took 2 to 3 days for it to sync up.  You can also use it to start a cold storage system.  It also helps to use another os (linux) as they are alot harder to hack.  Theres even a page on how linux is more secure on ubuntus website.  It sounds like a man in the middle attack - hope this thread helps show people that online wallets are unsafe for large amounts of money.   

Tough shit, this happened to me once too long ago
Brush yourself off, move on, don't look back

I agree, hardware wallets might be solution to average people, but still not available...

 no password is secure. especially when you're on line.  The biggest drawback with passwords is the fault of the owner.  :-\

when are people gonna learn?

USE linux, there's no viruses for linux

keep your coins stored on a wallet on YOUR computer

NEVER trust a website with more than .01btc unless you plan on using it very quickly

I feel sorry for you and I'm afraid this would happen to me as well. Coldstorage and sweeping the drive for malware/virus as often as possible. Try to see it from the bright side, it wasnt more! :O

It may sound ironical, but newbies really should not use Windows.

yeah that hurts but it's not the end of the world, just a little lesson, just be glad you got it out of the way now with such a small sum. Imagine if you would have had say 20k lost.

The only good thing is hopefully he and others will learn from this and not repeat his mistakes.

I know that feel bro

http://www.youtube.com/watch?v=U1it45QagN8

 :'( :'( :'( :'( :'( :'(

If your password is strong then this means your computer is most likely compromised,what type of anti-virus are you using?
it's true that bitcoin is irreversible and this is why paper wallet offline are recommended for money you don't intend to spend immediately.

Does that mean I should keep everything on my Android phone?  Because it's linux, you know that right?  And there's noooo viruses on Android, right??

Man - I'm sorry to hear that. 

Get a mac.  I know it sounds stupid, but you're just SO much safer.

Well now you know better to keep your computer safe from virus and malware bro

Did you have 2-factor enabled?

There are viruses on linux and android isn't linux per se it's just based on the linux kernel.