Bitcoin Forum

I no its not a lot but someone stole 2.45BTC from my cavirtex account. I was planning on cashing them out  to buy stroller and other things  :'(
Hope they are happy

If you are reading this, I am pleading to you to return them. I know there is a slim chance of this happening, but please think about it

That's a bummer man. Stealing from a baby.  :-\

It might help others if you could figure out how you were compromised. Any idea?

Around the same time another person said their coins were stolen, https://bitcointalk.org/index.php?topic=433522.msg4845149#msg4845149

Possibly related?

I really have know clue, it might be a keylogger. He got into 2 of my email account. My btc-e account which had another 0.90BTC.
My wife is really upset over this as this was our little saving  :-[

Were you using 2FA authentication?  Even without 2FA, cavirtex still requires browser authentication via email.  

To steal your coins without 2FA, someone would need to:

1.  Try to login to your account at cavirtex (knowing your username and password).
2.  They would receive a notice that your browser has not been authenticated and they would send out an email that allows you to authenticate this browser.
3.  So now the thief would also need to have access to your email account, in order to authenticate his browser.
4.  Finally, he can re-login to cavirtex and steal your coins.

With 2FA enabled it would be much more difficult.  He'd need to "guess" your 2FA code to even get cavirtex to send the browser authentication email.  He'd have to guess it again to log-in to your account.  


That being said, I wish cavirtex also required a 2FA code prior to withdrawing coins, and allowed you to "lock-down" a withdrawal address and set user-specified withdrawal limits.  

Yes, he got into my email too.

Under transaction history this was the address: 1835BjmXj2GER2sMdBbewhyS2Hm6v8JbB6

My first question is what Operating System was the OP using to log into CaVirtex?

Thanks for the info.  Did you have 2FA enabled?  

No , I did not. Dam this has given me a fever

no 2fa?

fail

make sure both the btc-e account, coinbase, whatever AND email has 2fa

meaning

to log in to your e-mail, you need a code from your phone
and same thing for your bitcoin acct (btc-e, coinbase etc.)

just wanted to add

for example, blockchain has 2fa+ main password

AND a second password (different from the main) to send the coins

so you would need 2 passwords+ a way to steal the 2fa text msg to my phone to access the funds.

not only that, you should have more than 1 wallet.

so if by any miracle, someone was able to access my account with 2 passwords +2fa, it would only have 1 btc max. instead of all in 1 wallet...

I'm sorry for your loss.  

Since 2FA was not enabled, the thief required your login credentials at cavirtex and for your email.  So, key-logger, phishing site, weak passwords, etc could all have been the cause.  

That is a painful sum of coins to lose, for sure, but it could have been a lot worse.  I really hope everyone starts to understand the importance of 2FA.  Once you set it up once, it's pretty easy to use.

I'm starting to realize the true magnitude of what just happened. I know to some of you guys its a minor amount, but its all I really had

I'm sorry for your loss.

Why did you ignore the countless thefts that have occurred before? Didn't you think that with such an important amount of money you should have invested some serious time into learning how to properly secure it?'

These might seem like rude or difficult questions, but perhaps as a community we can start to understand why some people ignore all of the amazing tools available for securing bitcoins. Once we understand, maybe we can raise awareness.

I couldn't imagine leaving such an important amount of money at some exchange. That's just asking for trouble. :(

I know. I am extremely depressed

I was using windows 8.1

DON'T STORE bitcoin in a virtual wallet !
ALWAYS TRANSFER to the bitcoin-QT !

 ::)

If It's more than you can stand to lose keep it offline on a usb stick or paper wallet.

Sorry to hear this maybe you should store it on a cold wallet next time and only transfer when you need to otherwise this could always happen I hope you recover.

@OP Was it all you had or do you have a little more left?

First of all sorry for your loss.

My take is that the Windows OS was compromised by a keylogger virus that compromised both your CaVirtex password and the browser cookie that CaVirtex uses identify the browser. Furthermore the fact that your email may also being compromised supports my suspicion. I have seen and removed Windows malware designed to steal bitcoins since 2011, and quite honestly I do not trust Microsoft's security or that of commercial anti virus / anti malware solutions.

The massive amount of malware combined with the reality that when it comes to security the Windows ecosystem is primarily designed to 1) up-sell consumers and 2) protect the interests of groups such as the MPAA and the RIAA via DRM, makes it in my opinion totally unsuited to do anything related to finance, be it Bitcoin, or fiat banking.

If I may makes a suggestion here it is:
1) Accept your loss of 2.4 BTC
2) Contact all financial institutions that you have accessed using your compromised computer, starting of course with CaVirtex, but also include other crypto currency exchanges, banks, credit card companies etc. This is critical to prevent further damage.
3) Ditch Microsoft Windows and switch to GNU/Linux. This is critical for two reasons: a) First GNU/Linux is less likely to get attacked is this fashion by a factor in the order of 1 million or more. b) By switching to GNU/Linux one can easily save way more than your loss over a few years by replacing expensive propriety software, needless computer upgrades, up sells, annual fees for security software with very high quality and very secure Free Libre Open Source Software that has zero cost. I switched to GNU/Linux back in 2006 and have saved over the years more than your loss in unnecessary computer upgrades and software license fees. To place things into perspective I still use a laptop over 10 years old running GNU/Linux  for my bitcoins. . My main desktop system I built in 2008 and it is still going very strong.

If there is one suggestion I will make here is: Do not use Microsoft Windows for anything related to Bitcoin, another crypto currency or fiat banking. Use GNU/Linux instead.

Thank you all for your replies. .Unfortunately there won't be a next time for me. I cannot afford to buy any coins anymore.  This will be it

Yes that was all I had

If you let me have your address, I'd like to make a small gift to your baby.

I feel really sorry for you, but it wasn't really smart to invest money in bitcoin that you couldn't afford to lose.

Donation sent. It's a small amount, I discovered the Bitcoin world just three weeks ago and for now that's all I can afford, but I'm happy to donate it to your baby.

Maybe this is related to the incident where public keys are hashed to find the paired private key? the guy who sells the software for 2BTC?

No. This guy in fact is just scamming buyers of his "software". It can only break a very tiny amount of keys generated on purpose.

I am a pretty down to earth, honest person, but this has showed be that there are some really cold-hearted people who don't care for anyone but themselves.

No problem, really. I really think we, as a community, should help each other.

Yes you are right

If there is anything you need or would like help with. I will be more than happy to assist you.

Thank you again

Nothing for now, thanks. But if I need something, I'm glad to know I'll be able to count on you :)

I will next time. I have now also setup a blockchain.info wallet, with 2 passwords and 2 step authentication. Thanks for all your advice.
What would be the best way to create a cold storage wallet.

I hate to be so pessimistic, but this guy is probably lying about this entire situation in order to get free BTC.  Every one of his posts in this thread has something to the effect of:
I'm depressed
I'm poor
This is all I had
Please donate to this address

People are very naive. 

Should someone who got robbed of every single BTC they owned be supposed to be happy? We're not talking about a newbie with 0 activity.

And BTW it was my decision to send him a donation without him asking for anything.

Its people like him danieldanie I am talking about. They have a very narrow minded vision of their fellow humans

http://i62.tinypic.com/2621nx1.gif