Title: blockchain.info email Post by: southafricadude on February 12, 2016, 02:03:36 PM On the really rare occasion that I log back into my old blockchain.info account, I always get an email asking me to authorize the login by clicking the link. As far as I know, the only way I am usually able to login is with my Identifier and my password. Once I do that, I get an email, then I click the link to verify my browser and IP, and I am in.
So I just got an email like I usually do, but I was not trying to access the account. The IP and location says "IP Address: 92.38.78.23 (Czech Republic)", and browser is Iternet Explorer FFS, so definitely not me, not even the same country. So how could someone have my Identifier and password if I am the only one that has that? I do also have 2 factor authentication, and a secondary password for sending out, but still, its very odd. The email says if I did not try to login, maybe I was the victim of a phishing attack. No, very very very unlikely...and even then, it would involve me attempting to login which I have not done for ages. The only thing I have done recently at all that has anything to do with blockchain.info, is update the android apps for wallet and merchant that I have on my phone. Does anyone have any ideas? I am not really worried since I dont keep any coin there, but I still keep the wallet open because it is a public address I have used for years. Title: Re: blockchain.info email Post by: pedrog on February 12, 2016, 02:11:03 PM Did you set up an easy to remember alias for your account?
Title: Re: blockchain.info email Post by: franky1 on February 12, 2016, 02:14:05 PM sometimes its not a hack attempt. sometimes the email you received could be the Phish itself.
i hope you didnt click on the link and log in using the link from that email Title: Re: blockchain.info email Post by: -XXIII- on February 12, 2016, 02:14:24 PM On the really rare occasion that I log back into my old blockchain.info account, I always get an email asking me to authorize the login by clicking the link. As far as I know, the only way I am usually able to login is with my Identifier and my password. Once I do that, I get an email, then I click the link to verify my browser and IP, and I am in. So I just got an email like I usually do, but I was not trying to access the account. The IP and location says "IP Address: 92.38.78.23 (Czech Republic)", and browser is Iternet Explorer FFS, so definitely not me, not even the same country. So how could someone have my Identifier and password if I am the only one that has that? I do also have 2 factor authentication, and a secondary password for sending out, but still, its very odd. The email says if I did not try to login, maybe I was the victim of a phishing attack. No, very very very unlikely...and even then, it would involve me attempting to login which I have not done for ages. The only thing I have done recently at all that has anything to do with blockchain.info, is update the android apps for wallet and merchant that I have on my phone. Does anyone have any ideas? I am not really worried since I dont keep any coin there, but I still keep the wallet open because it is a public address I have used for years. Don't hesitate! Change all your passwords, email addresses, don't leave anything to chance here bud, if something smells fishy then there's probably fish around. or pussy, but not in this case it's definitely suspect activity on your computer that needs to be resolved. Title: Re: blockchain.info email Post by: el kaka22 on February 12, 2016, 02:28:11 PM I have always received this email when I login to my blockchain.info account (maybe because I have signed up the account from my old ISP IP address and I'm now using my new ISP). However I think this is a good security for my coins (though I have abandoned that wallet). Few days ago, I have received a mail of this kind from an unknown IP address (meaning that the account is being hacked). However the hacker can't take my keys away. So, security is more important than convenience, at least for me.
Title: Re: blockchain.info email Post by: Racey on February 12, 2016, 02:32:01 PM http://iplocationtools.com/92.38.78.23.html IP Address 92.38.78.23 Country Code BY Country Name Belarus Region Name Homyel'skaya Voblasts' City Name Homyel' Report Incorrect Location Coordinates 52°26'18"N 30°58'56"E (Latitude: 52.43826, Longitude: 30.98227) ISP Gomelsky RTSC Garant JSC Domain Name iptv.by Connection Type DSL Usage Type Commercial IDD Code 375 Area Code 023 Postal Code - Elevation 137 meters Local Time 12 Feb, 2016 05:29 PM (UTC +03:00) Weather Station Gomel' (BOXX0004) View Live Weather » MCC - MNC - Mobile Brand Name - Permalink http://www.iplocationtools.com/92.38.78.23.html This site includes IP2Location Lite data available from http://lite.ip2location.com. You can lodge a complaint for IP address 92.38.78.23 Report Abuse. This IP address 92.38.78.23 is located in Belarus, Homyel'skaya Voblasts', Homyel'. ISP of this IP address is Gomelsky RTSC Garant JSC. The area code is 023. The postcode is -. The IDD code of this country (Belarus) is 375. The current time is 12 Feb, 2016 05:29 PM (UTC +03:00). Title: Re: blockchain.info email Post by: ctlaltdefeat on February 12, 2016, 03:06:19 PM On the really rare occasion that I log back into my old blockchain.info account, I always get an email asking me to authorize the login by clicking the link. As far as I know, the only way I am usually able to login is with my Identifier and my password. Once I do that, I get an email, then I click the link to verify my browser and IP, and I am in. sent support and ask them to fix it,show your valid identity and dont open your account in other device,i also ever have same problem on coinbase.So I just got an email like I usually do, but I was not trying to access the account. The IP and location says "IP Address: 92.38.78.23 (Czech Republic)", and browser is Iternet Explorer FFS, so definitely not me, not even the same country. So how could someone have my Identifier and password if I am the only one that has that? I do also have 2 factor authentication, and a secondary password for sending out, but still, its very odd. The email says if I did not try to login, maybe I was the victim of a phishing attack. No, very very very unlikely...and even then, it would involve me attempting to login which I have not done for ages. The only thing I have done recently at all that has anything to do with blockchain.info, is update the android apps for wallet and merchant that I have on my phone. Does anyone have any ideas? I am not really worried since I dont keep any coin there, but I still keep the wallet open because it is a public address I have used for years. Title: Re: blockchain.info email Post by: Kprawn on February 12, 2016, 03:26:18 PM Do not click on these emails when you login to your account... rather go to the site directly {type in Url} and then login. Most of these emails are
trying to mimic the emails received from Blockchain.info and are most probably a phishing attempt. You have 2FA and a password on withdrawals, so they cannot do anything, if they cannot get hold of your cellphone to login. If you using a webmail service, it is most probably compromised. :( Title: Re: blockchain.info email Post by: BitcoinHodler on February 12, 2016, 03:38:03 PM you should check the sender of the email and the link that it contains the IP and etc are not important.
if the link leads to a site other than the legit site it is phishing attempt so do not click. if it is legit link contact blockchain.info immediately. Title: Re: blockchain.info email Post by: southafricadude on February 12, 2016, 03:56:20 PM It looks like a legit mail from blockchain.info, everything is correct, except that it was not me, so not clicking the link to approve.....I still have 2 factor sms to my phone and a second password so should be fine for now. I hardly use that wallet anyway, its just weird since I dont even know my identifier off hand, I have to click a bookmark to login, and somehow, this person knew what that was to be able to try login my account.
Title: Re: blockchain.info email Post by: gribble on February 12, 2016, 04:03:37 PM I think your computer has attacked by malware :-\
Title: Re: blockchain.info email Post by: Racey on February 12, 2016, 04:08:13 PM It looks like a legit mail from blockchain.info, everything is correct, except that it was not me, so not clicking the link to approve.....I still have 2 factor sms to my phone and a second password so should be fine for now. I hardly use that wallet anyway, its just weird since I dont even know my identifier off hand, I have to click a bookmark to login, and somehow, this person knew what that was to be able to try login my account. You really should save your identifier and all details in a safe place such as a usb pen, only plug it in when logging in to your wallet. If you lose your book marks through system failure, you would then have a backup. Title: Re: blockchain.info email Post by: southafricadude on February 12, 2016, 04:25:01 PM All good points for being safer thanks!
I have a windows 7 pc that I am using now for the last 2 months, before that I was always ubuntu. What is a good malware checker that I can try to use just to be 100% certain. I only started using this computer because I need to use photoshop and some other programs that only work on windows. I'll be safer with the blockchain account and do the usb pen thing, good idea. Title: Re: blockchain.info email Post by: Racey on February 12, 2016, 04:53:47 PM All good points for being safer thanks! I have a windows 7 pc that I am using now for the last 2 months, before that I was always ubuntu. What is a good malware checker that I can try to use just to be 100% certain. I only started using this computer because I need to use photoshop and some other programs that only work on windows. I'll be safer with the blockchain account and do the usb pen thing, good idea. Malwarebytes is free forever, I have the upgraded version, still good though https://www.malwarebytes.org/ For a free Antivirus scanner just a 30 day trial http://www.eset.com/us/free-trial/ but will do the job scanning the system, you can have both scanners running at the same time. Title: Re: blockchain.info email Post by: Patatas on February 12, 2016, 06:35:00 PM You could be a victim of a phishing attack.Because there is a phishing page of blockchain.info which was reported a few days back.They would have sent you a email in the name of Blockchain and as regular you thought its an official email and logged in.They can't really attack your private keys .Either key logger or a Remote Administration tool would have done the job if not phishing website.
Title: Re: blockchain.info email Post by: meadefreling on February 12, 2016, 08:02:46 PM It is obvious that someone is trying to gain access to your account, do all these steps as fast as you can, change the password and add 2FA and receive sms via your phone number.
Title: Re: blockchain.info email Post by: unent on February 12, 2016, 10:00:43 PM All good points for being safer thanks! I have a windows 7 pc that I am using now for the last 2 months, before that I was always ubuntu. What is a good malware checker that I can try to use just to be 100% certain. I only started using this computer because I need to use photoshop and some other programs that only work on windows. I'll be safer with the blockchain account and do the usb pen thing, good idea. Malwarebytes is free forever, I have the upgraded version, still good though https://www.malwarebytes.org/ For a free Antivirus scanner just a 30 day trial http://www.eset.com/us/free-trial/ but will do the job scanning the system, you can have both scanners running at the same time. Some viruses can only be detected and removed when an infected windows isn't running. You can use a live cd to detect and remove them like the one from Avira antivirus. The download link to the Avira antivirus live cd and its user manuals is here. http://www.avira.com/en/download/product/avira-rescue-system These quotes are from its manual. First it tries to download the latest virus definition updates, if it can't connect to the internet it uses the virus definitions included on the cd. Quote In the first instance, the scanner updates the Virus Definition File (VDF) and the scan engine. If no Internet connection is established, the scanner searches for infections with the VDF and engine versions found on the ISO file. After its finished scanning it shows you whether your computer was infected. Quote The Results area shows whether your system was completely cleaned and repaired. By clicking the Report button, details about the detections will be displayed. Title: Re: blockchain.info email Post by: Racey on February 12, 2016, 10:41:47 PM All good points for being safer thanks! I have a windows 7 pc that I am using now for the last 2 months, before that I was always ubuntu. What is a good malware checker that I can try to use just to be 100% certain. I only started using this computer because I need to use photoshop and some other programs that only work on windows. I'll be safer with the blockchain account and do the usb pen thing, good idea. Malwarebytes is free forever, I have the upgraded version, still good though https://www.malwarebytes.org/ For a free Antivirus scanner just a 30 day trial http://www.eset.com/us/free-trial/ but will do the job scanning the system, you can have both scanners running at the same time. Some viruses can only be detected and removed when an infected windows isn't running. You can use a live cd to detect and remove them like the one from Avira antivirus. The download link to the Avira antivirus live cd and its user manuals is here. http://www.avira.com/en/download/product/avira-rescue-system These quotes are from its manual. First it tries to download the latest virus definition updates, if it can't connect to the internet it uses the virus definitions included on the cd. Quote In the first instance, the scanner updates the Virus Definition File (VDF) and the scan engine. If no Internet connection is established, the scanner searches for infections with the VDF and engine versions found on the ISO file. After its finished scanning it shows you whether your computer was infected. Quote The Results area shows whether your system was completely cleaned and repaired. By clicking the Report button, details about the detections will be displayed. You can do all this with ESET http://www.eset.com/int/support/sysrescue/ http://support.eset.com/kb3509/ Title: Re: blockchain.info email Post by: septian44 on February 13, 2016, 03:35:05 PM blockchain lose your wallet .... I never like you ..... until now my wallet locked
Title: Re: blockchain.info email Post by: pedrog on February 13, 2016, 03:58:35 PM Just checked my email, I also got one log-in attempt from Lebanon, I ain't even near Lebanon.
Someone is trying to breach blockchain.info accounts en mass. Title: Re: blockchain.info email Post by: BTCLovingDude on February 13, 2016, 04:21:37 PM i usually receive Emails like this one. nothing to worry about, it is just a way of scamming people to steal their password. just enable 2fa and never click on a link in your email
Title: Re: blockchain.info email Post by: erikalui on February 13, 2016, 05:27:04 PM I have never received any email after logging in blockchain nor was aware of these emails. May be I disabled this option.
Did you try changing your password (if it was possible) after you received this mail or your account cannot be accessed now? Title: Re: blockchain.info email Post by: jambola2 on February 13, 2016, 06:49:13 PM It's not necessarily phishing, and not necessarily something to worry about. I recently got the same mail and just found this thread on it. All links in the email I received link to blockchain.info. Gmail reports that the email was signed by mail.blockchain.info, also owned by blockchain.info.
What caused this? Most likely the fact that I used a really really easy to bruteforce alias (6 chars long I think?). This does not mean anyone has your password , I tried using a VPN and logging in, blockchain.info asks for a verify email after only providing alias How do you prevent this from happening again? Change your alias to something longer. I don't know how to remove an alias, so I've changed it to something arbitrarily long that I won't remember but won't be bruteforcable either. (You can do this if you want to remove it, make it long and random) Title: Re: blockchain.info email Post by: Racey on February 13, 2016, 07:41:05 PM Just checked my email, I also got one log-in attempt from Lebanon, I ain't even near Lebanon. Someone is trying to breach blockchain.info accounts en mass. Check if you have an account that has been compromised in a data breach If your e-mail is out there on the internet, you can check if https://haveibeenpwned.com/ One my mine has Title: Re: blockchain.info email Post by: pooya87 on February 14, 2016, 04:11:23 AM I have never received any email after logging in blockchain nor was aware of these emails. May be I disabled this option. ~~ if you log in your blockchain.info account from a new browser (something except what you always use) they won't let you log in until you verify you are the owner by clicking on the email they send you. Title: Re: blockchain.info email Post by: southafricadude on February 14, 2016, 09:19:16 AM I think maybe someone is just going around trying to get into tons of accounts. I get the exact email every time I login, but that might be because my pc does not store any web info I would guess. Maybe my alias is too easy....
Title: Re: blockchain.info email Post by: Emersonnets on February 14, 2016, 11:40:27 AM The thing that you shouldn't do is click on the link that's in the email. Hopefully you didn't try to log on with that link.
I use blockchain.info as well but never got an email like that. Title: Re: blockchain.info email Post by: MrBig on February 14, 2016, 05:32:22 PM I just got the same email less than an hour ago, with someone from India trying to access my account. I hadn't accessed the account since early 2015 and the link in the email goes to blockchain.info, so I think someone is brute-forcing the aliases like Jambola said. Regardless, I've transferred my remaining balance into a paper wallet for now. Better to be safe than sorry.
|