Bitcoin Forum

 I don't know who and I don't know how but someone tried to log into my blockchain , it send me an email if I authorize it and I deleted the email and did not authorized anything but it kinda scared me , what should I do now? Is everything alright or should I do something about it?

Everything's fine. I you didn't authorize it they couldn't get in.

Do you have 2FA enabled?

you can try to transfer the fund to another blockchain accout, or get them out from them directly, if you feel unsafe

There's no reason to do this. The only information the attacker has is OP's short name. They don't even have his UUID.

 I did a full check on my computer , there seems to be no virus or anything malware involved ( not that I understand anything like that , I had avast and did a full check :D ) so hopefully it was a one time thing.

 btw , I do not have alias , I only have the full numbers and letters , so they cant have my alias . Not sure how they found out about my identifier tough. That was the scary part.

You don't have an alias? So they do have your UUID?
They're still far away from getting into your account but I wonder how they got that.

In this case at least make sure you have 2FA and you may consider creating a new wallet with a new UUID.

 Yeah that was the scary part , I will do that but still , if they got my identifier , what else do they have ? if I have no virus or malware shown , how did they got that and how can I block it? Thats what worries me . I need to reset my online presense I think.

It's impossible for us to know how they got that.
I guess you didn't share it anywhere?
Do you think it's possible the accessed your email?
Or did you log in from a shared computer?

İ dont knot but its scary

That is scary. You are being targeted. If I were using a windows machine and the BTC amount was large I would dump it and install Linux. Even a clean virus scan does not mean you are safe. I know that seems paranoid, but paranoid is good thinking when you know someone is out to get your coins.

I dont even have that much coin i only have like 0.06 left right now afrer
İ bought some stuff . Would a formating help? I dont want to yse linux it sounds complicated buy i have win 7 and this could be great time to upgrade to win 8 . I am not sure if that would help tough would it? The thing in mind is they couldnt get to my coins but what if they have something else?

I don't think upgrading from windows 7 to windows 8 would help.
You need to decide whether your information is worth switching to Linux.

I think it would possibly fix any malware you have and may buy you some time. The problem with winxx is that you don't know what it can do. It is closed source and so you don't really own it. Using linux is not a guarantee either. But being open source it can be trusted more.
If Microsoft has a backdoor for whatever reason and the black hat hackers find out... All windows computers would be at risk. The amount you have is not a huge incentive, but since stealing BTC is a crime one will get away with it is still a risk.

Check out Ubuntu. It's free and you can install it along with windows and select it at boot up. It is no harder to use than windows. About as different as Mac is from windows.
http://www.ubuntu.com/

Even tough i do not have that much valueable stuff ( couple facebook some websites etc nothing financial more like personal stuff ) i am thinking about getting rid of my old computer and getting a new one that sounds easier then linux . That would definetly work right?

Do you mean a new computer with Windows?

You would definitely get rid of any malware you may have now but again you'd be on a closed source OS so you may have the same problem in the future.

Examples of cases that can be found, the A promised gift to the B 0008 BTC / wallet, to get the gift Person A asks private key wallet made before the month of May, and yougive the private key of your wallet to him then do not be surprised if the contents of your Bitcoin will expire or be reduced gradually as the A already has the private key of your wallet on which heimported into his wallet services so your wallet is already in the hands of A, if person A wants to take or send Bitcoin is in your wallet to wallet address other then the A can do so without the need to go into your wallet service account. Never give the private key of your wallet

Just ditch your BC wallet and start using Electrum or other wallet. Someone is trying to steal your funds.
I think someone has made a script or something to guess UUID?

Edit

Yes. Unless they have your online credentials rather than a spy on your computer. But I would say it's worth trying an Ubuntu install next to Winxx. I say this because it's free and simple, and it is a much better OS. It will make your old computer sing like new. I'm typing this on a ThinkPad I bought used for $75. That was 4-5 years ago? Unlike Windows, Linux does not junk up over time and slow down. I tried it and now I never use win. When I have to do something on a win computer I am reminded how slow and inefficient it is. Winn is always doing something? The HDD is screaming away doing God knows what. With Linux it does ONLY what I tell it to do. It's miles ahead.

The problem is different here. OP doesn't have an alias, that was my first guess too.
So somebody got his long UUID.

Yeah i think we have the "how" locked down i told my wife about it and she said someone send her facebook friend request and she clicked the email and it forwaeded to a phising website but she says she saw that and did not put her email and password in just closed the tab and deleted the email. Would someone get this by just clicking email?

I don't think so, unless something got installed. If she really just closed the page immediately I don't see how it could steal any information.

Sounds like a phising email to me. Never click the links directly if you're not sure. Use a bookmark so you know you've got the correct address.


Well that wouldn't help if he downloaded malware keylogger.

The best thing to do is to enable 2FA if you want to continue using your blockchain account. If you are getting worried that much, then go and transfer the wallet balance to a wallet that you have the complete control of. In that way you'll feel secure and whatever happens to your coins, it is already your fault.

He's not sure if he has downloaded a keylogger as he said his wife opened a phishing link and closed it immediately and has a antivirus installed. So, I highly doubt there's a keylogger installed.

Antivirus can sometimes be annoying, but most of the time they are helpful. Good thing that there are no keyloggers installed or whatsoever. And as for such links, don't click those immediately and think about it before clicking as it may or might harm your computer and your funds as well.

The point is not only the coins its all passwords , the thing is we do not know how much information the hacker has maybe he only had the blockchain or maybe he has a whole lot more and the last one scares me . Blockchain one is easy i will just move the coins to a new one but if he is too deep inside he might have everything and maybe even will have the new ones as i change it

KEyloggers can be downloaded and installed within seconds and anti-viruses will not protect you against all threats. In fact, they wont protect you very well at all from sophisticated programs so I wouldn't think you're safe just because you have an anti virus installed.

Yeah i know unfortunatetly . Lets say i have a keylogger (thiugh this person only tried to access my wallet only all other websites are untouched) would win7->win8-> formatting would help? I am considering getting a new vomputer anyway . Eventually this looks like it is definetly be over if i get a new computer right?

Either re-formatting or getting a new computer will solve it for now.
The problem is you could get it again, or it's even possible you have malware in the backup files you get and you may pass it to your new computer when restoring your files :(

Yeah i wont move anything to the new computer other then some pictures and documents in word and excel . Is there any possibilty of pictures or documents be contiminated? I dont think so but it doesnt hurt to ask.

Also if he has something sophisticated to find my identifier why hasnt he touched anything else?that suspense is right out of /r/nosleep for me.

If somehow Keyogger has been installed on your PC it will affect only your current system. If you format it  with a CD/DVD and install a fresh copy of windows then you're safe.

Yes, you won't have any problem unless you mistakenly visit any malicious/Phishing website.

Scan those files before moving to new PC. You can also scan file on virustotal.com (Online Scanner up to 128mb).

Have you been trying to point this towards the CLAMS giveaway by Justdice?
It seemed doubtful to me too that why would they ask someone's private key in chat to be able to check whether the address was fund before so and so month, and will give some CLAMS at their site itself, but yes, I credit them based on them processing withdrawals of those CLAMS.

Usually pict or video not effected, maybe the hacker give your computer some malware or something scary from pishing site. Better to install anti-keyloger, clean your pc or better to backup your data, transfer your btc to safe wallet, too many blockchain complain from user better to move your coin to desktop wallet or hardware wallet.


~iki

Reformatting will do the trick. It's like having a brand new computer. You could use ubuntu instead as well. Very unlikely you'll get any viruses or keyloggers on that so your coins will be much safer than on windows.

still there is some chance, that his e-mail can be stolen in the future, better to take extra precautions and move those btc from there

 I don't think so , he could just log into my email and authorize himself so he could get all my coins anyway? The thing that kept him was authorization at first and he can get that from my email anyway?

 I came back home to check everything else , he still seems to not logged into anything other then just trying to get into my coins once at that time. There is no possibility that someone happened to know my identifier somehow right? There must be some keylogger or malware or whatever must be involved?

 If someone knows my private key , can he know my identifier?

 Also I get them to a safer location now.

 Thanks everyone for your helps.

Before getting all paranoid and following ridiculous and unhelpful advice, please consider this:


The scammer send the emails to thousands of bitcoin users and hopes that someone will use the links in the email to log in to their account.

This is real possibility.

OP could you share the exact email you got? Remove exact links and leave just domain names.

 Unfortunately like I said she deleted the email , even from the deleted section.

No. I mean the email you got from blockchain asking you to authorize the access.
What we're saying is it's possible that wasn't really from them.

 No it is blockchain mail , it comes from no-reply@blockchain.info

 Said

Authorize log-in attempt
An attempt to login to your blockchain.info wallet was made from an unknown browser. Please confirm the following details are correct:

Time: 2015-03-11 12:50:07
IP Address: 66.249.93.137 (United States)
Browser: Robot/Spider
User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Web Preview) Chrome/27.0.1453 Safari/537.36
Please check the ip address and browser carefully. If the above details are correct click the following link to approve the request:

 and the link which starts with https://blockchain.info/wallet/authorize-approve?toke..... etc etc you got the rest figured out by now.

This is very interesting:
And if you look for the IP 66.249.93.137 you can see it belongs to Google.

So it seems the link with your UUID is published on some website and Google's spiders just followed it.
Any idea where that link could be published?

 I have no idea , I did not published it anywhere as far as I know :D why would I write my identifier anywhere at all :D

Now that we have narrowed down the access attempt to Google spider, I don't think there is much reason to panic.
Nobody is going to login into your account and steal your Bitcoins.

The only worry you should have is where the spider got the link to your username.

The best you could do now is create a new account on Blockchain and transfer funds from old wallet to new one.
If the funds are very large, I would suggest moving most of it to cold wallet and keeping only a small amount on Blockchain.

 It is not that large and the most important thing right now is , I am not hacked , my computer is not hacked . It is just google spider that found it. I am nto going to get paranoid about it from now on.

 My funds are transfered already :D One of the first things I did.

Somone tried to do the same on mine some days ago
SEE (http://prntscr.com/6fr2z7)
But i never clicked authorize , strange though , how can someone have my wallet identifer to try to login at first place

Seems i found solution to my problem too.
Though i never ever posted my identifier or link anywhere .
But well! idk, it happened the same day when i tried to authorize it from my new laptop.
I think first i tried from my laptop , it wasn't working so i did it from my mobile, maybe that's why ?