Bitcoin Forum

Just booted my PC and sync'd my Wallet, only to find I have been robbed.

Status: 310 confirmations
Date: 16/02/2014 03:43
To: 1JJewUpXpBHNDWVqzkKk7kWa7pQzRGfzpG
Debit: -11.24 BTC
Transaction fee: -0.0006 BTC
Net amount: -11.2406 BTC
Transaction ID: df776f8492caaee7004594f9e8b399342e24ce7febd8b79621ac7ded958b78ba

Anyone know of how this can be traced or should I just accepted I have been robbed and their nothing I can do.

Heeeeelp

C_C

Encrypted wallet?

Yep

16 Characters , Alpha, Numeric, Specials, upper and lowercase.

I'm thinking keylogger

http://answers.yahoo.com/question/index?qid=20080103002142AAzMuu9 (http://answers.yahoo.com/question/index?qid=20080103002142AAzMuu9)

Possible. But Not used the Wallet for over a Month, so not typed my Key(password) since 22/01/2014.

If I followed it correctly, your coins seem to have gone to 1QB8Ds5KbGYBLQa5RyDQ2sVUeSKWf7qgkZ, which I believe is bitmain's. Looks like your stolen coins are being used to buy antminers.

Contact bitmain??

It might happens only if someone had keys and password :)
as we know.

:( very sorry for your lost.

Cheers Avenger sent Bitmain a PM.

Nice :) hehe. Maybe little mistake will let you find a person :P :) that would be lucky (or not)

Follow it a bit further. It looks like a few transactions down it gets split three ways.

at least thief put 0.0006BTC fee :)

if wallet really belongs to bitmain, thats just them reusing the coins or cashing out

Was the wallet encrypted from day one? No chance of an forgotten unencrypted backup sitting in a Dropbox account?

Encrypted from day 1 with a Strong Password. Only backups are on two separate Pen drives.

Pen drives not moved or used since I did the backup.

If it was a Key-logger, I last entered the Key 22/01/2014 why wait so long to steal ?

May I ask what router you use?  I'm wondering if it's related to the Linksys Exxx router exploit.  The exploit was aired on hackernews.  If you have a Linksys router among those listed, the hacker could have gained access to the router then to your network.  Although if he hacked your very ling QT password then I suppose he could have hacked the router without the exploit.

The following story is only by way of rumor and probably isn't true.  There was this matoza ball soup shop and the owners were banking a nice penny every year like clockwork.  The owner had a safe in his bedroom.  Somehow the owner's daughter's boyfriend got the combination and removed a lot of cash.  He was found killed with a bullet to the head according to rumor.

Do you have a daughter with a boyfriend having computer skills?

I feel really bad for you, the advice I give is if you have coins in your wallet that you have no intention of using in the short term,
put them in a paper wallet.

I sometimes wonder about AI.  Consider the address: 1JJewUpXpBHNDWVqzkKk7kWa7pQzRGfzpG

How often would a string happen containing Jew and kkk?

Would having an encrypted wallet backup that one could drop onto the blockchain.info wallet recovery page be of any use in recovering the bitcoins?

Installed any random altcoin clients lately? Another member reporting that may be the culprit.

You should contact Augusto Croppo, he has helped members to detect and recover lost from CTS Miner cheating.
PM him at    https://bitcointalk.org/index.php?action=profile;u=50315

BTW, my Malwarebytes   sometimes block outgoing connections originated from Qt Client 0.8.6, for example:
IP-BLOCK   93.115.84.122 (Type: outgoing, Port: 56233, Process: bitcoin-qt.exe)

If anyone knows about this, please share your knowledge.
Thanks!

https://www.projecthoneypot.org/ip_93.115.84.122

Do you have a Mac? There's a bitcoin stealing trojan out there: http://www.securemac.com/CoinThief-BitCoin-Trojan-Horse-MacOSX.php. I'm sorry to hear about your loss, man.

PC Windows 8

Possible Malware in Maxcoin Clients that I had downloaded.

But still don't understand that if Malware / Keyloggers were the reason. Theses were downloaded after the last time I had used (sent some bitcoins) my QT wallet password.

Is there still a risk even if your wallet is encrypted , I need to think of some better security.

Router is a BT HomeHub 5.

Will be rebuilding PC later today or tomorrow.

At lease KNC are keeping my other coins safe for me ;-) hope they haven't spent them on anything foolish.

Paper Wallets are the safest way to go, and they are actually much easier than any video or instructions out there show.


On your loss: Follow your money on the blockchain, and Google every wallet number until it links with a verified account, then present the info to the proper authority, which varies upon geographical location.

also...   http://cseweb.ucsd.edu/~smeiklejohn/
she can help you by using a new btc tracking algorithm she is developing.

Good luck.

What make you think it is Bitmain? There is no evidence which shows Bitmain used this address, except if you know something which is far from Google search reach.

I found an indication the address is controlled by Bitmain:

Is there a list of alt coin clients that could be the culprit ?

Thanks,

did you get any reply about who was sending your money? :)

Let us know all of your alt coin clients you have installed becuase it seems one of them are a trojan.

The only Altcoin Clinets software that I have installed of Late.

Were CPUminer, Mined and QT wallet for Maxcoin. All of theses were downloaed from either github or via Twitter links on the Maxcoin release day.

No other software had been installed on my PC since I last used My Bitcoin QT wallet passs phrase to send a Transaction.

PC now rebuilt.

No answer to PM sent to Bitmain.

Big Lesson Learned. ;-)

Oh a Big lesson... Like 11 BTC :D
HUGE lesson :)

But don't be sad. Mark K. lost 4000BTC :)

I hope Bitmain will reply soon.

sorry about this man!you've probably been robbed. Well, at least it is your experience and you've learned something.