Bitcoin Forum

https://blockchain.info/address/1CQodKNYzPSapLW31z8LbTUKZ4e1Mbvg4h

this is the address that stole my BTC ;-( it was off a vanity i created and had on blockchain.info.... guess i will be moving wallets to non online :-( i wanna cry :-(

I think yes , he/she is Girlscout.

If you created a vanity address,it may have been the creators of the address who took your private key. I will think that you would have created it with vanitygen so it may not be such a problem. Check your computer for malware.

yes :-( I guess electrum is safer wallet and will be trying to use it from now :-(

Can you explain better "what is happened"?

You're a mean old man.

Sorry to hear that op

I signed onto blockchain.info to send some BTCs somewhere and my balance said 0.00 i looked and thhat was the last transfer to that address every fkn coin ughhhhh this sucks

As CrackedLogic told , check your pc  (and for the moment generate a new address on a new clean computer).

im leaving right now to go get a new laptop throw this one away fk fk fk... i knew i shouldnt have kept so much in 1 spot :-( i know not alot for some people but its taken me a long time to finally get that :-(

Never ever keep more than 1btc in your online wallet. Your online wallet should be used for when you're out of the house/away From your wallet.

yep lesson learned sucks it cost $600 to learn it though :-(

Where did you create the vanity address? Did you have 2-factor set up? You don't need to throw out your comp but I wouldn't use it to store or send bitcoins unless you know its safe as you could have some keylogger malware.

Im throwing it away :-( i already have new one paid for i was about to go pick up before i seen this

Well if you're going to get a new computer, make sure to have extensive security measures installed.

hardware wallet more safer mate :)

Like a ledger wallet or a trezor. Paper wallets are cheap too.

That sucks.

blockchaininfo is pretty dammed secure. Did you have 2FA enabled? Do you use the virtual keyboard for withdrawal password?

Don't do business on pc you surf, download torrents, etc.

Use virtualbox with a linux OS just for business is even better.

call BTC and make a complaint LOL.

Well, you learnt a lesson. Do not store in BTC  more than you cannot afford to lose. keep the money in your bank account/card...not in BTC shit

blockchaininfo was hacked for many times. also, all the online wallets are unsecured. do not keep your money in BTC.

You have to create your security, it is not easy. What do you think  :-\ ?

OP where did you create your vanity address?

It's not the only option but it's very probably that was the weak point.

I recommend you using this app to store BTC for a long time:
https://bitcointalk.org/index.php?topic=811397.0

Can you please tell us which vanitygen u used ?

That sucks I hope that Bitcoin core will implement multi-sig sooner than later.
Easy enough from all the cases that stealing a single sig address is possible
Triple sig or double sig is the next step.

If you like so much the multiSign use https://greenAddress.it/en/ , this is the official thread here in the forum :

- https://bitcointalk.org/index.php?topic=521988.0

sorry to hear this girly. sucks when you work hard to earn and someone steals it out from under you. 2.5 coins is alot to people like us and itll take forever to recover from that. another reason i ditched my 1yahoo addy. hope your luck gets better

Matter of preference, Green address is good but I'm a core user although I didn't notice they used multi-sig
The only place using 3 sigs is bit-x to my knowledge so did have a relative knowledge it was being used but didn't see it for users only.
Thanks for the link

You must have clicked on a phishing link by mistake and then logged in to your account. It's unfortunate  :(

It's not safe to store so much BTC in your account and it is better to transfer the cash to your bank whenever possible.

eh it happens i still have back up funds, and if they would have waited a little longer good chance 10-20x that amount wouldhave been in there... you know me im a pretty giving person, and im also forgiving so if the person who stole his is lurking forums and sees this know im not mad and you are forgiven by me bu i do hope your soul finds peace away from hate. I just hope its going to good cause like feed some poor guys family and not just stolen out of greed.

no also https://www.therocktrading.com/ is using multiSign address ( if I'm not wrong).

I never heard of them but your correct

“We’re pleased to be the first european exchange to support both multisignature and instant confirmation. Our users will be able to store their bitcoin in the most secure wallet, while instant confirmation let them being in control of Bitcoin funds until the last moment. It’s another step toward exchange trust.”

It's good to see more exchanges using this though reduces the simple risk of 1 key being broken into.

Without knowing how the bitcoins were stolen, it is hard to recommend a good solution.

It is unlikely that the source of the vanity address is the culprit because the address has been used for 6 months. It is much more likely that the JLynn171 is a victim of a phishing attack. blockchain.info users are a frequent target.

How did they steal your coins? Where was your weakness?

Don't worry too much about it. You can always earn more money and if you share your lessons you'll make the rest of us more protected. Consider it the cost of charity!

Hi GirlScout, i just read this new, it sucks :(

I remember you lol about my Linux, but please considerate it again, with linux you will have your btc safe. I feel really bad about this, 2.5 btc will be hard to recover  :-\

Send you XOXO and if you wan to install linux, me and stingleword can help you if you have some questions.

I went and got new PC how would i put linux on it?

Nice to see your philosophy. I like it. It would be great, if you tell us which VanityGen you used, so that people may get cautious about it.

You will need either a blank DVD or a USB drive you can erase. Head over to ubuntu.com and download it - huge file, will take a VERY long time. There are instructions on the site on how to make a bootable DVD or USB stick and make it work - should be pretty basic.

When you boot from the DVD/USB, make sure you "Try Ubuntu without installing" first, since installing will overwrite Windows permanently! (Yes, this is not technically true, but I'm trying to make this as easy as possible)

Make sure most basic things work - you should be able to open firefox and browse bitcoin talk at least. If you're satisfied it will work, go ahead and install. It'll take about 20 minutes.

If you need tech support for it, you can always write me (or BtcBoss, I would imagine). Just know what you're getting into before you do it!

Also, my condolences.

A vanity address? I can't but make sure to again and again point out to make sure how you get your vanity addresses. Where did you get it from??? If you let someone generate that address, you are in great danger of them having control over your coins! Only generate those addresses using a save version of vanitygen!

I said blockchaininfo was dammed secure earlier but WTF is going on with it now? Directs me to an onion addy for wallet access. Not cool. I don't do anything sensitive with ffnn tor.

If u r using Tor to connect blockchain.info, it is always better to use the blockchainbdgpzk.onion version.

That's why I never keep more than 0.1 in my online wallet

http://www.hollabackhealth.com/2010/12/five-reasons-to-stop-using-emoticons/

That's the thing. I'm not using tor and it won't bring up the regular wallet.  


So this tells me I have to use tor.

Blockchaininfo = fail.

i was pretty mad to see this too... it seems their normal wallet doesnt work on the clearweb anymore. then i tried to login and realized i changed a setting on my account so that people can't login to my blockchain.info wallet over tor. so basically, i can't access it anymore. luckily i had my private key stored so i didn't need blockchain to access the funds, but i'm pretty much done using them now.

Please answer this Qs.

Where did you generated your address? Did you use Vanitygen (https://github.com/samr7/vanitygen)? Did someone generated it for you? Did you used some website to do so?

that's terrible! have you used other wallets before? any that you actually recommend?

Yeah, you can write me if got any question or any problem with linux  ;)

Use linux is a nice solution but can be hard the first days, after some time you will love it.

Its very easy to use if you use something like Ubuntu.

pretty sure all those questions are answered in the original post

Oh wow this sucks. Sorry to hear this happened to you GirlScout :(

And y'all want bitcoin to go global… lol now what exactly is a clean computer and how do i keep it clean… I dusted it yesterday… Is that what you mean by clean… Keep dreaming you bitcoiners.

I am watching this space and I am hopeful we will get a security method that works, but THIS… is a problem.

No Sorry... Original post does not say anything about the vanitygen...


People are asking where did u get the vanitygen from ? Or did u use some website for vanitygen ? blockchain.info does not offer any vanitygen.

I've address from vanitygen
whether it is dangerous to use the address of vanitygen?

That's terrible another amount stolen

Is it safe tho? I dont feel safe putting sentitive information in tor like passwords and whatnot. Can the pass leak through a NSA node or some shit?

I tried  spamming the wallet with small tx's with a public note letting him know im forgiving but to please use the money and atleat buy homeless man 1 meal with it.... but dont think the public note iscoming up that i see

He stole the money.. i dont think the man has a lot of moral value, he'll probably hold it or gamble/invest with it, or blow it on hookers.

Just keep a offline wallet..Im sure it is safer than banks..! :P

I got new computer and  electrum

Why did you buy a new computer?

well i figure if i do have some kiind of virus getting a new computer would be easy way to solve that problem and be sure

https://www.bitcointrezor.com/ (https://www.bitcointrezor.com/)

ggrrr its sucks  >:(
sorry to hear that girls :(
yea should you used offline wallet for more safety

A less expensive and just as effective way to solve the problem would be to restore the computer to factory condition. Like a brand new computer without the cost.

I do not get it, if you will use it the same way as your old one then you will face the same problem soon  >:(. You can reinstall your old notebook from scratch, install Linux on it ... etc.

you can use a secure hardware-wallet:

https://bitcointalk.org/index.php?topic=899253.0

Girlscout seems to have been an active gambler.

https://www.betcoin.ag/dice

Sorry for your lost.

You shouldn't login into your wallet on Windows system or add the email to your wallet, that's not secure and when your email got hacked, you will lost your wallet too.

well yes the addy that got coin stole from had over22,000 gambling tx's and im known on most gambling sites and my sig is a gambling site...=-P gotta make a living some how :-P

oh damn girlish :( why u created vanity addy ?

Sorry to hear that. But did you feel like crying after someone stole $600 from you? We seem to get way too emotional with BTC. Probably we expect too much from it. When we stop expecting we begin to get some very pleasant surprises. Just two bits of borrowed wisdom.

oh my ! sorry to hear Girlscout ! now what ? can you recover it ?

Too late mate..Too late.! If only she used it b4..but anyways..it is really hard to steal BTC..I dont know how they did it.!

It's already late, but you should move to offline / hardware wallet
I recommend to use Bitcoin Core / Armory with Linux OS :)

It's pretty vague what happened- could you explain to us better what actually happened? The details?

You could have just reinstalled windows or whatever os u have.. or restore it to factory settings...it whould have functioned like a new PC.

$500 is a big amount... but now nothing can be done about it. It is time to forget about the past and move forward. Work hard, and within a month you will be able to collect a few coins.

You should figure out how does he steal your money and prevent the issue from recurring.

---

So you're the famous girlscout on luckybit  :o
I often see you betting  :)

I'm sorry for your lost.  :(

Every person that goes through this is a person that potentially will not be bothered to use BTC again..

I wouldn't say so. BTC is extremely safe if used right.

And we don't even know what happened. OP refuses to say how he generated the vanity address or give more information.

What's wisdom in that?!
2.5 is a lot of BTC! Losing that much really hurts! Sorry OP, that really stinks.

Bitcoin really is the modern day Wild West. If you haven't had your bitcoin stolen yet you're missing a life experience. But that doesn't mean it doesn't hurt to have it happen to you!

maybe it is the same story ever about people using blockchain.info in an unsafe way and blaming the online wallet. i mean using TOR, having keyloger, no 2fa ...

Not necessarily true. I've had a ton stolen - you learn what you did wrong and move on. If you get held up on the street and get your wallet stolen, does that mean you will never use cash or credit card again?

replace them as soon as possible so you dont get regrets
learn and move on

I don't believe this story.

Not that much, I think you can afford, just treat as you pay the lesson

hey buddy sad to hear that, I hope lb coming soon and could slightly recover your balance :)

better to lose a parlay, rather than hacked very painful :)

by: gelar24

As for me, what I do is use Linux.

Linux's software installation model prevents you from getting infected by malware and viruses.

When you know how to use it  ...

This almost true.

It is more accurate to say that Linux' software installation model insulates you from infections. It doesn't prevent it, and a poor decision by a computer's user will always bypass even the most strict security model.

There is no automated system capable of preventing a user from being tricked.

LOL, do you know that Linux has now graphical installers right? It's not hard anymore. That was a valid argument 10 years ago.

Lol i tried to send that address a public note saying I would pay him another .25 btc if he just let me know how he did it and that im not even mad just curious

lol yes because im a dishonest person and didnt post the txid for proof of and just made this story up to pass time you are correct ding ding ding we got a winner...

I've been wondering about this. I've tried both, Ubuntu and Windows, and Ubuntu would take getting used to for beginners, but it is pretty easy. People had to get used to Windows 8, same deal.

If 75% of people decided to switch to Ubuntu (if they weren't already using it), would there be a way for hackers to start targeting them, as they always target the majority of users to get the most bang for their buck, so to speak.

How hard would it be, for the hackers to start targeting Ubuntu users if a bunch of newbies to Linux started to use it (Because they heard it was fool-proof)?

Linux is *not* without [malware](http://en.wikipedia.org/wiki/Linux_malware). It hasn't been so as soon as it became popular.

The only reason there are not more linux exploits out there is because of the very low percentage of people using it. As it gains popularity expect more trouble.
Security risks are always at the user level when questionable attachments are opened and suspect software installed.

No operating system is immune to browser exploits.

Thanks hhanh00 and rokkyroad, that's what I figured. It's really just best to keep money in a paper or hardware/offline wallet.

I urge anyone to use VirtualBox. Great way to try operating systems as well as utilize them. Most modern computers have enough resources to run VB. I have 4 VB operating systems on a linux host.

I do all my work on VB OS without ever touching or putting my main OS at risk.

A sweet and lightweight linux OS is Linux Lite. Ideal for Virtualbox usage.

https://www.linuxliteos.com/

This is basically the problem for some people here using btc. Why would you keep such a high number of coins in a wallet that is always connected to the internet? You don't need to throw that laptop though. Just check for some spywares and malwares that may have caused the disappearance of your coins. Hope you've learned a lesson from this, though a very expensive one. Sorry for your loss.

If you say this then you don't understand the difference between opensource and propietary software, basically.

There are 2 ways in which one person can be infected by malware/viruses:
a) By a vulnerability of the operating system. In this case, Linux is superior to proprietary operating systems because the code is open, then anyone can develop a fix, and as a consequence of this, the updates to fix vulnerabilities are normally provided faster in Linux or other opensource operating systems. However, with Windows or Mac, you rely on how fast Microsoft and Apple want to provide you with an update. Not to mention that, as Mac&Windows are not opensource, there could be easily backdoors that these companies know about, and we don't, because they are the only ones that have access to the code.
b) By installing infected software. In proprietary operating systems, it's easier that these happens because normally when you install Mac or Windows you need to look for software that you manually download and install. Users are not good at differentiating who they can trust (in terms of providers of software) so they end up installing programs that contain Malware or viruses. In opensource operating systems, however, this is not usually the case, because the operating system (i.e. Ubuntu) includes ways to install software that comes from trusted sources (i.e. Ubuntu package repositories), which are compiled from opensource software. The possibility of an opensource program to be infected by virus or malware routines is next to zero, because being opensource, all programmers have access to the code and could detect this before the software gets packaged.

So my point is, of course there have been viruses and malware that affect Linux, but as http://en.wikipedia.org/wiki/Linux_malware already states, most of them are not dangerous anymore (because they were only risky at the moment that a vulnerability was found and not yet patched), or only affected brave/ignorant users that went ahead and tried to install software in their Linux OS outside of the network of trusted repositories (which, is, BTW, hard to do, so it's not very likely that it happens).

Happens to the best of us man.. Everyone gets screwed at one point or another :(

Gosh, that's terrible. You should always run the vanity generator offline and using trusted sites source code like bitaddress. Guess it's too late right now to do anything but at least take corrective actions and steps to prevent from happening again.

OP has to learn the fact that every second your coins are outside your local wallet they are in danger. And even then, if your computer is online, there is still risk (paranoid mode).

How did you pay you pay for the laptop,sir?

This is a big problem, like it has been said before, everytime you lose bitcoins potentially the person will not risk it again... with fiat usally theres SOMETHING that can be done, with btc if the robber is smart there is no damn way to get him.

reload the os on it and use it as an offline pc to sign offline transactions for your cold storage wallet.

add keypass vault...........    http://keepass.info/       ... to your offline pc as well too store all your online passwords (this well help you use more than one different passwords per website and stronger pws too) .

you can keep your keypass file on a flash drive as well so you can access it from any pc you install keepass on ..

back all this up onto another one or two flash drives you put into hard storage (you will have to update the keypass files every now and then as u add more pw's to it) .

if you use the same password on different websites you could be compromised this way too .

Linux is no different than Windows and people should really stop thinking that there is something magical about it. You don't need to install software as root to infect your machine with malware. Obviously, if you do it the malware has full access to the machine but running a trojan with your own credentials is enough to steal your wallet data. Conversely, if you run with UAC you will have a secure prompt before being able to install software.

I am sorry, OP. On the brightside, this is a relatively cheap lesson.

how was it? you should have secured it in a trezor...

Trezor for storing BTC2.5?

Would you spend BTC1 for storing BTC2.5?

If you are having large quantities of BTC, then Trezor is a very good option. But for someone who is having just 2 or 3 coins, it won't be a good idea to spend half his coins to store them securely.

There will be cheaper units available in the near future, though I'd just stick to keeping my coins offline and just keeping a small amount on my computer for swift access.

I don't think this is true. There are ways to protect yourself and it's not that difficult if you know what you're doing but you have to be very aware of what you're doing and the computers you're using.

I'm sorry to hear that.
I hope you can get it back to your wallet  ;)

No one just gets their stolen coins back in their wallet.
They are stolen for a reason.

aii i am sorry to hear that. hope you will get your bitcoins back  8)

That, to begin with, is utterly wrong. The big difference between Linux and Windows is that it's open source. (Remember: bitcoin is opensource too, and if it wasn't, it wouldn't have been so successful.)


I've never brought up magic in the conversation. I tried to explain why opensource software is more secure, in technical terms.


I never brought up the subject about root vs non-root permissions (which BTW it is something that is better designed in Linux, compared to Windows), but about the way that users install software. Remember, you can only be infected by installing software (documents cannot infect viruses, except for rare occasions in which the document contains executable macros). And you have to analyze how people typically install software in Linux, versus how they do it in other operating systems.

That's pretty bad. If i were in your shoes and would like to use online wallets. I would split the coins into smaller amounts and keep them in several separate addresses. Also, would try not to move them that often. Of course, have a hard copy of the keys and such. Hope this is the only time.  :)

The best is having a brain wallet so you dont have to worry about hosting files.

OK, I see where you come from. But you don't get infected just by installing software. Anyway, if you prefer Linux it's your choice. The latest major security vulnerabilities were not on Windows though.

Well, sorry for not being specific. You get infected by *running* infected software, be it installed or uninstalled. The thing is, in order to run software, you need first to *download* it.

So then, what you have to examine is the typical workflow of a user when he wants to download new software. In Linux, you normally do it from a "sandbox" of packages, which have been curated by the community. In Mac&Windows though, it is the job of the user to find the software on the web (or on the store, but this case we discard it because AFAIK nobody has sold infected software in a physical store), and this is where the majority of infections come from. If you deny this fact, this conversation ends right here.


That is like saying that bitcoin is a failure because of the latest price drop.

I went and got new PC how would i put linux on it?
[/quote]

I would recommend just putting Linux on the old machine instead of throwing it away. If you are paranoid, you may want to make it an offline machine with no network access.

OP, learn from your mistakes so it never happens again. Think thatyou are still light years beyond all the clueless plebs that haven't heard about Bitcoin. Still plenty of time to get a decent amount before it explodes.

Agree, Linux in the old machine will fix it and make it faster.

By the way, looks like karma is paying you back GS  ;) hugs for you!

Are you sure you are completely safe from malware with linux?
If you use linux do you need any protection software?
what is the best distro to use? how about mint cinnamon??

Too old topic and the op forgot to lock topic but she is happy she recovered some lose from poker :)

Trezor is less than half a bitcoin.
I think I'd recommend getting one for storing 2.5btc (and all future btc acquired). The peace of mind is worth it to me.

LOL...

are you serious? People are holding millions in Bitcoins and you are telling to do not store money in BTC :D...

Your bank account can be compromised too I just want to say.

If you are following security instructions while storing your coins nothing bad will happen. Chance is as little as that your bank account will be compromised.

How can you explain all the hacked bitcoin exchanges though? Looks pretty convenient to me.

There is Mac and even Linux-specific malware out there.

The reason most hackers target Windows, however, is simply because it is the most common OS. A hacker would probably rather spend months creating a virus that targets 90% of all PC users.

paper wallet is the best solution i guess, but that will be only usefull if you are holding it for a long time and not using it  ;D

Yeah and you would look funny taking out that paper wallet to pay for your dinner at the swanky restaurant.

If BTC goes 100K you just lost 0.5K in something that could be replaced with a hard disk/usb and common sense. No thanks Jeff.

Vanity is definitely my favorite sin - Al Pacino in Devil's Advocate

What did happen, these coins are still on that address as final balance. Or you've lost access to it?

The op's link is to the thief. The OP had a vanity address here: https://blockchain.info/address/1GScoUti9fXiBhHrAWLSKAtwg6xoUEh5S5 G Scout for Girlscout.

Oh i see now, thank you for the explaination. That sucks dude but atleast he did not loose 10+ but only 2 coins.

Have you heard news for example about this one? :
Bank Hackers Steal Millions via Malware   --    http://www.nytimes.com/2015/02/15/world/bank-hackers-steal-millions-via-malware.html?_r=2


If you lie to yourself that bank account is a safe money storage idea you are completely not reading the news about bank hacks which are on the way every year.

Yes - I understand that Bitcoin Exchanges are under attacks. You though they will be not? Why? Hackers will walk around without seeing a chance to steal millions? Well some cases proved that hackers are not always needed when we have an inside job. But, thing is there will be always some security issues and same thing is with any digital good made to storage your money.

You are the one who can make your money more secure by choosing the best way to storage your coins/money.
You are always under some risk of losing it. In all of the cases whatever you will think about. :)

Best regards.

I assume you meant $50k?
But I would have gained 200k on the rest, and probably rebought the .5btc before then anyway so the total gain is $250k - $120. :)
Not even counting the gains on extra btc i woulda bought because i had no security worries.

If that is your concern, then there is a very simple solution: you use 0.5 BTC to buy the Trezor, and then you buy another 0.5 BTC.

In 2013, I had bought 3 USB sticks for $10 ($3.33 a piece). I think that storing my coins in a USB drive is much better than spending $100 for Trezor.  ;D

If you're dat files are ever loaded on an online computer, they aren't safe anymore....

Trezor very safe? comparable with the price of $100? right?

I had used my old computer. And immediately after creating the backups and storing them in the USB sticks, I formatted the hard disk.

Uhm, you should have done that before, not after ;)