Bitcoin Forum

Today at approximately 11:55 am I logged on to a site and created a invoice to make a payment , I send bitcoin payments here at least once sometimes twice a day, You type how much you want to add to your account and hit create, it tell you BTC address to send to ( which changes every-time) then it conversant the amount that you typed from usd to btc. I highlighted the address to send payment to as I do every time. Went to localbitcoin.com pasted the address into send to line then typed amount in BTC to send, and it said it was successful sent...i then notice payment is not showing up in my account and went back to bit only to find it had beed emptied adn the address the payment was to go to was not the one I originally sent payment to.I contaced customer support whom provided me with ip address that have logged in to my account
Transaction history shows the payment I sent and the right amount but wrong address I look at list of ips an notice as soon as I hit send on payment to the legit address there is a failed login attempt from some way off place and then immediately 2 more payments that depleted my bitcoin in full, See in in LA on business staying at a hotel The 2 unauthorized payments were sent from the same ip as my own. How is that possible? this means after I made payment the changed the receiving wallet address to make payment go to them then was able to make 2 other transfers...Does this mean someone in the same hotel broke into my account and stole my bitcoin?Ive changed password and scanned computer for virisis.. please help me understand how its my ip showing the coins were sent from but I am in a hotel how is this possible?http://login.nomadix.com:1111

There are complaints of malware / viruses that change the bitcoin address you put in when you submit it on localbitcoins. This has been complained about before, IE sending the coins to an address u didn't put in the box as you thought u did but yet did authorize. Scan your computer for viruses.

As mentioned above you probably have some kind of malware on your computer. Did you happen to download some program semi-recently?

The malware would probably use your own computer to request a withdrawal from LBC (or any other site you typed your password into since you became infected with malware) to an address that the author of the malware controls.

Using your own computer would make it so any site would not be suspicious when they get a withdrawal request from a computer with your IP address and from a browser similar to one that you use, and with cookies they know they gave to you on the browser

Likely malware, though public wifi connections are often unsecure so there could be something malicious there.

Thank you to everyone who replied, I have scanned my computer and I did find some stuff that said trojan , It was downloaded by my daughter off some software site. She did this right before I left town on Friday night so I am assuming since yesterday was the first time I logged into bitcoin that is why it happened at that time, I really appreciate it , I was extremely concerned as I have a new employee along on this trip, I almost feel bad I was actually wondering if this person was involved as they are the only other person in the hotel whom knows me and that I use bitcoin, Now I am concerned to even sign into any account what if they already have my passwords to like my email and other accounts, Should I reformat my hard drive or go to every account and change passwords? I enabled 2 factor authentication on local bitcoin, But my concern is I had my phone connected to my pc at one point. Dont mean to seem whining about my small loss , I seen some people have lost triple my little 500 but its sickening to know it happened

It is possible that some malicious public wifi provider was able to pull off some kind of MITM attack, however it would be somewhat unlikely considering that his browser should have given him a SSL cert warning unless he was connecting to LBC via something other then HTTPS which I would find unlikely (an attacker could be using some 0-day attack, however the amount is very small for a zero day attack and there are not more similar reports which would be expected)

This is why you should not share computers. Even though you obviously "trust" your children, they may not fully understand of the importance of computer security nor have the skills to properly implement proper security

You are absolutely right. Normally I would not especially on my work computer for that reason alone. But now I will never ever allow that again. I was about to load more bitcoin when I remembered I needed to make that transfer, I am so glad I waited , at least they were not able to take it all, Still bothers me that I allowed myself to be vulnerable. It shows the same amount I sent but it just shows a different wallet address, Then they first tried to log in from a ip other than mine, My research says its in albania but who knows, That login attempt failed. they then waited 20 minutes before logging in and taking the 500 i had left in there. It would be nice if localbitcoin sent a email when there was a failed login attempt especially since it was literally within seconds of me logging in. In fact I was still logged in when they did the failed login attempt. Now I will make sure to hit log out every time I am done at localbitcoin.  I recieve emails right to my phone so if I had received a failed log in attempt notice I would have known , yet still hopefully I never have to deal with this again. I am using avg now, If anyone knows of more or better security please advise,,

thanks again to everyone

bad luck. format and reinstall your computer

This is bad, I wonder if it was a malware or a bug in localbitcoins, my advice is you shouldn't use it as a wallet, just use it for trading if you must. And reformat the drive and do a clean install of the OS, or better yet. dual boot and keep the bitcoin stuff in one environment and use the other as regular.