Bitcoin Forum

Somebody hacked my wallet on blockchain.info
The BTC has been sent to this address 14N7WYH2Sknxi4VGdG54WxiTVDtmWR5Eo6
He has sent 3 times - https://blockchain.info/tx/9ae600ca304969857a9cc7fa6927de1468af687319f47ff7e6a397d55707e44f (https://blockchain.info/tx/9ae600ca304969857a9cc7fa6927de1468af687319f47ff7e6a397d55707e44f)
                               https://blockchain.info/tx/a29e614bbb200785f2584c4c943a8e9c170e010fb282e992569ac5777b5d8c67 (https://blockchain.info/tx/a29e614bbb200785f2584c4c943a8e9c170e010fb282e992569ac5777b5d8c67)
                               https://blockchain.info/tx/97864126804819b9c0ff08bcab82d597432234ebb2e602af4f98d83328161ab6 (https://blockchain.info/tx/97864126804819b9c0ff08bcab82d597432234ebb2e602af4f98d83328161ab6)
My address was 1FCVxJwYSnaA2VfnKxwSxiCrZh8UQNX1Zk
He used this address for receiving  14N7WYH2Sknxi4VGdG54WxiTVDtmWR5Eo6
On that address is arround 3BTC.For sure he hacked more wallets.

For my luck i only had there 2$[dolars] worth of bitcoin.My other bitcoins are secured on my cold storage.

For the hacker i have a message ----> GO FUCK YOURSELF WITH MY 2$ WORTH OF BITCOINS!!!


  

Sorry for your loss.  That really sucks.  What was your password?

It`s not a big lost only 2$ [dollars].
My pass was 12 characters long.Was some complicated word from my country/Croatia.I have used that password only there.
Good that i have my other BTC on cold storage. :)

Any idea on how they were able to hack it ? What kind of setup did you have ?  Only a pw ? 2 factor authentication ?  Any chance someone has a keylogger on your computer ?

I haved only password.
0% that i have a keylogger on my PC.
One computer im using only for BTC and other for all games and that stuff.
Never used USB stick on my computer for BTC and never logged on other computers in my blockchain.info wallet.

It would be interesting to identify how you were hacked.. not sure if that's possible.
Did you visit any sites that are bitcoin related that could've installed something? A drive-by download. Or some phishing site pretending to be another?

You seemed to take every possible precaution, and yet you were hacked. I'm just trying to imagine how.

12 letters are really not enough, even without a dictionary attack.

So, the bottomline is BlockChain.info is not safe either

Dobar-dan fellow bitcoiner. Sorry for your loss. Crooks are scum, aren't they.  >:(

Maybe,somebody bruteforced my password i haved a easy alias to remember my identifier?
Or i got somethink from a pop-up ads?I visited few times http://bitcoin43.com there is many pop-ups.
Any more ideas?

What's not safe is weak passwords. Never were, never will be.

Dobar dan i tebi.

Yes,they are scums   >:(

It's no mystery  ::) Read what he's written. He used a dictionary word as his password! News flash: dictionary words, regardless of the language, are terrible passwords. Using a language other than English does NOT protect you.

Blockchain is pretty safe if you take the extra steps needed it to make it more secure.  Sounds like this was a case of someone using a very simple password that any basic dictionary attack would quickly solve and no other security measures in place if the password were to be compromised.

Anyways good learning lesson for both the OP and others to know about. Luckily it was only $2 so it's a cheap learning lesson :)

Particularly dictionary words or dictionary sequences of words.   Two factor security is important too.

Yes,blockchain.info is safe.

I haved that wallet there for 4-5 months,never used it much.Until few weeks,ago.
Yep,from today i will use only my wallet on computer.That`s the best for now. :)
Now,i changed on all sites password with longer and stronger passwords.Total 24 passwords to remember,again. :/
All the new passwords are long 18-21 characters.I`s it stronger now?Or change it to longers?

I lost ALL my coins this week to a Trojan, still crying ...  :o

Secure your coins now people!, the bad man is coming soon.

Sorry,for you lost.  :-\

Gentlemen, put your coins into a paper wallet and sleep well. While keeping my coins in Multibit / Cryptsy / MtGox, etc, I was constantly alert and concerned about security measures.
It's at the same time the best HODL strategy.

downloaded doge coin qt ?  ::)

Nope.I have used cryptsy.com and coinedup.com for that and other altcoins.

Not to sound rude but just based on the security measures you used on blockchain.info  I wouldn't recommend keeping your bitcoins on your computer if you aren't planning on spending them right now ,  you very well could be making some simliar bad mistakes on your own computer's security. 

I think the best advice (as others have mentioned)  is cold storage/paper wallet.  You can rest easy at night....so long as you don't have someone breaking int your house looking for that piece of paper to steal :).

I have some BTC in cold storage.But,also have some small amount in Electrum wallet,so i can spent them.
On my computer is installed avira premium antivirus with internet security.Got a discunt for that. :)
The real-time protection is activated all the time.Also,all that is on fresh installed windows 7 ultimate.

I would suggest a password manager. I use Lastpass (which I think is pretty secure with 2 FA authentication),  but if you are not comfortable with that, use offline manager like Keepass

On how many BTC sites have you created a new account in the past month?

Were the passwords the same?

Dudes, get serious.  NOTHING with a password that's in any human-language dictionary is safe.  It wouldn't matter even if you spoke a really obscure language like Quecha (what the ancient Mayans spoke).  If there's a dictionary, somebody is going to feed it through a password guesser before moving on to anything more difficult.

Why this question?

That's not entirely true. English language has about 770000 thousand words. If you pick 3 words randomly, and assume it takes a milisecond to decrypt the wallet, that would take about 770000^3*0.001s/2 = 7233483.39 years on average to bruteforce. One word however is not enough.

dont tell us how long the new passwds are :P
also keepass is good for passwd mgmt. I got no clue what any of my passwds are, well except for 1 or 2 massive ones.. just incase...
its only annoying if you go on holiday and wana login to something, but then i just change passwds to whatever sites. theirs a mobile version as well but didnt trust it running on my phone. who knows what phone is upto.

someone just got into my cryptsy and sold my pts and withdrew my btc. to the same addy as OP. whats killing me is how did they withdraw w/o sending me a confirmation email? i didn't use a simple password. its 2 words and some random numbers.

Lol! You again with this question...

Please let us know!!

another question i have...how did my withdraw get processed 1 minute before it was requested?????

Currency    Send to Address                                              Amount    Conf      Request Date
BitCoin    14N7WYH2Sknxi4VGdG54WxiTVDtmWR5Eo6    0.04269030 BTC    Yes    2014-01-19 17:11:28
Processed    TrxID: d9dc788c3bff11f3ac2f50ff0c0cb3538004b61cf383ab51e181986401a250e0 @ 2014-01-19 17:10:30

Block timestamps are up to the miners and do not need to be correct, as long as they follow certain rules. That is what the processed timestamp is, I presume.