Bitcoin Forum

This may not be the right board to discuss this but I wanted to make you guys beware of what I went through, a few days ago. I was actually sick a lot due to which I couldn't come up with this to you quickly, but I downloaded a cracked version of Quick heal Total security and did exactly as that guy told me. Nothing happened to Quick heal and its trial just expired, what happened ahead was more shocking. I lost my BTC as my laptop got hacked and I had my seed stored in it somewhere. I would urge you not to save your seed and not even your private key inside a PC that goes online by getting connected to the internet daily. If you have a spare PC and have a highly secured OS installed, then only keep these things in it and always let it remain offline. Though, I would not ask you even to do that and just write down these things on a paper and keep it in a safe place, or buy some hardware that can store your BTC or a hardware material which can store your paper wallet.

I think this board is right too, especially informing to members about fake/malware sites.

Sorry to hear that buddy, I hope you don't lost to much.
Maybe you can share about what's link you've download the crack? It will help any members to stay away about that's site

Obvious mistake #1: security software and "cracked version" shouldn't really go together.
Obvious mistake #2: Storing the recovery seed digitally, AND on your personal computer.

Very very amateurish mistakes to be honest; and based on your title, the second time already? Anyway, hope you didn't lose that much. Take the hard-learned lessons and make sure that this never happens again.

I don't really think what link it is matters that much. Downloading cracked software is risky in itself, and knowing that OP had bitcoin.

Using cracked software, and store private keys on the same computer. That are things never should be used.
Agree with you. A computer is used for trading, for web surfing, for experiencing new platforms, new softwares should never be the place to log in your important accounts, wallets, and store your important private details (private keys or passwords).
The computer that is used to store important backups should be kept offline if we don't need to upgrade wallets or make transactions. Paper backups are only other alternatives. I think we should make backups in different formats, in offline computer, on paper, or on metal cryptosteel, such as:
- https://billfodl.com/
- https://cryptosteel.com

What guy? And what did he tell you to do? Why were you downloading software from some unknown internet stranger who had been tampering with the code? As you've just discovered, unless software is open source you have absolutely no idea what code it might contain. You also shouldn't be blindly following the instructions of random people online, regardless of how safe you think the thing they are telling you to do is.

Not backing up your seed phrase or private keys electronically is bitcoin 101. There's a reason every good wallet tells you to write the seed phrase down on paper.

Security and cracked anything don't go together. If it's been cracked that means some unknown third party has inserted some new code in to it somewhere. That code could do literally anything. Even if you don't have any bitcoin related data on the computer you are using said cracked software on, it could be stealing your usernames and passwords, or it could even encrypt your entire hard drive and demand a ransom.

Sorry OP, always avoid cracked versions of software... 90% are laced with Malware. You are better of buying a paid version rather than lose all your money to a hacker.

I would also urge you to use Linux for your BTC related activities and apps as it's not so much targeted with Malware and hackers like Windows.

I must admit that you confused me with this at first  - "I was actually sick a lot" -> "I downloaded a cracked version of Quick heal Total security", but then it became clearer to me when I read the post to the end. I honestly would not expect from a member who has been in the forum for so long to make such beginner mistakes. Cracked software and crypto are by no means going with each other, and the backup should be encrypted when saved to the computer.

The next time you need a license for a program, I suggest you visit our Marketplace/Digital goods. I buy license for my security software there, at very reasonable prices. I suggest you format the disk and install a new OS - it looks like you have remote access trojan on your computer.

I hope you didn't lose a significant amount of coins, I'm sorry for your loss :(

I'd rather not use an antivirus at all than download some software that's been posted on Reddit or wherever else. Just because a post on Reddit about some cracked software has been upvoted, it doesn't mean that it's legit. A small percentage of users are using cryptocurrencies so it's obviously less often to have funds stolen.

Linux + Ledger/Trezor + Open-Source softwares only all the way (unfortunately, Ledger Live isn't open-source but AFAIK Trezor's software is). Completely free ones. :) We learn from mistakes. I hope you did not lose much; better learn the lesson earlier than later.

If you are still young and got no money, that's where you go to, cracked version of Softwares, at least, that's where I started from, and I didn't know anything about hacks and BTC back then, so I have nothing to worry about. As you get older, you would start to realize that nothing is really free, there's certainly a trade between the "crack" free stuff and the real stuff.

This should be a lesson learned, not just by the OP, but for everyone. Give respect to the developers by buying the actual software.

Pretty much. Hell, I don't even trust most security software, what more cracked security software. The only security software I run on my Windows device is Malwarebytes, and I don't even run it on the background. Pretty much just for occasional scanning purposes.

Its better to go without any security apps over the cracked versions because most of the time we never know what they are doing while they are running on the background.Even installing cracked versions of games becomes new trends of these hackers so never install any cracked apps and games on your PC if you got stored something important there.

I did the mistake due to the fear that I had some Trojan virus that got injected and I wanted a software which could run longer, I used to trust Quick heal and had a bought version. It ended later on and I didn't buy. Later, came this pandemic after which lockdown took place and I could not manage to use my funds for this which were then prioritized for food and other important necessities. So, I downloaded it from a website named ONHAX and that's where it started going wrong for me. About the guy, it is not usually some person who personally asked me to do anything, and 'was mistakenly written in that manner' but I meant that the website owner wrote a note inside the downloaded folder and asked to follow some instructions, like installing the security software first and then patch the crack later on by clicking on the provided crack exe file.

The fact it's the second time and you understand your mistakes only after you lose money tells that are quite far from really understanding how security works.
I recommend you consider buying a hardware wallet. A proper one starts at about 60 EUR (even less when there are special offers) and it worth it.
I think that you probably lost more than that already.

I am sure that the incident experienced by the OP is the most undesirable thing for everyone. For that reason, I am also grateful that with the OP is current experience, it should be a concern and consideration of all people who ignore security and should not act carelessly because in the crypto world a little mistake will cause a big impact, especially regarding security.

We as crypto users must continue to work to secure assets in the form of bitcoin or altcoin that we store in our wallets. Hackers work endlessly to find gaps and victims. When we make the wrong choice, it will have a big impact on the assets we have.

No matter how great or how strong our efforts are in securing our crypto assets, I must advise against storing them in one place. This effort is an option that is still worth considering to prevent us from losing all assets if at any time our security system is damaged.

Welp, unfortunately quite ironic that you're the one who ended up screwing yourself. With the installing crack software part, I might understand a bit because this is definitely something I could've done when I was like 15 or so. Where you mostly messed up is saving the recovery seed on your computer; especially in plain-text. That's probably one of the biggest sort of "bitcoin sins" that I wouldn't expect from someone in the forums since 2013. I literally couldn't count how much I've read and said "don't save your seed phrase digitally" inside and outside of Bitcointalk.

There are few questions which come to my mind.

Do you think the malware was in the cracked version of Quick heal which stole your private key or the instructions you followed by the guy?

How did you know your computer got hacked ? Did you give remote control of your system to that guy ? I mean there may be some other reason of your bitcoin lost.

Sorry for your loss BTC, I am worried a little, My little brother sometimes installing unknown programs on my PC and last time it was a virus. I am thankful Nothing was gone so far. If you have children guys or little brother/sister don't ever allow them to use your Desktop or Laptop if it has sensitive files put a password. I am not really sure if the "Quick heal Total security" is reason for the hack, have you tried scanning with Malwarebytes or similar program. I am using some crack software not all crack have malware but it is better to be safer don't just install any app that is found on google.

Sorry about your losses OP, I really hope it wasn’t a lot of money. You really should know better though, why the hell are you doing normal internet browsing or downloading any kind of program on a device that you store your damn bitcoin’s?

Like I said, I pray it wasn’t a lot of money but FFS, you need to be much more careful. I store most of my bitcoin’s on a laptop that never sees the light of day as far as normal internet activity goes.

This is a lesson to everybody, apologies once again :(

The number in BTC was not so big to regret 'and was ~0.008 btc', but everything got exposed 'or compromised' to the hacker - my private key from which I sign a message here as well as have in my profile. That is what I am highly worried about, I don't know if I should sign a new message from my old BTC address confirming that it is me if a situation arises where I may be asked to prove my identity?

I won't be smartass who will tell what a stupid mistake that you did. I just sorry for your loss. 0.008 BTC isn't that much, but it still sucks to lose money. It's almost $60 and for such money you can get Ledger Nano S hardware wallet, which would had protected your crypto from this and other scam attempts.
And it's never a good idea to download cracked programs, especially on PC where you keep crypto and login to your bank account. Offcourse, paid versions may be expensive, but you always can find free alternatives.

If you know this "guy" personally and you do want to get you BTC back you know he can be liable for letting you install cracked version of an anti-virus that has a malware. This might sound harsh if you are close to him but is their any possibility that he has a hidden agenda in mind? Like does he know you are storing your BTC in the laptop you will install the anti-virus from? If you value your friendship over your BTC then nevermind what I have said but if you have a distant relationship I would suggest that you go after him for your to find out the truth.

I think that’d be a good idea brother, it’ll stop the chances of anybody trying to impersonate you or something.
I’m glad it wasn’t a large amount, could have been much worse for you.

Maybe provide a new bitcoin address publicly here too so people can disregard the old one (once you’ve signed a message from it).

You should consider yourself very very lucky you only lost $60 and not $6000.

I want people to understand something. I am not totally against piracy and it has its role to play essecially with gaming. There is not ways in hell for example I will buy every single final fantasy game. I bought a few and I think its enough money for the company. The problem is when people profit off of the sale of cracked software.

However....

A few things you never do is. Used cracked security software of anykind. No keysavers/clipboardsavers/antivirus/antimalware/passwordsavers or anything related to the storing of sensitive data of any kind. You can lose all sorts of things. Your gaming accounts your accounts connected to currencies like paypal or bitcoin or skrill or anything else you make have that is worth something to someone. If you use cracks and things know the cracker. Don't just download anything. Know the crack team. Don't just be a dumbass and download anything that says crack in the title. I have never had any security issues on any of my computers for any reason. I have had attempts and password resets but nothing serious.

I believe if you need software but honestly have no funds to purchase it then using a crack is ok. But if you can afford it then support it. The best thing to do is use a cracked version until you make enough money to purchase the real version. I strongly recommend you buy the software you use since it stays up to date. WIth cracks you need to wait for the crack team to update and sometimes they never do. Even if the crack team has done nothing malicious the code they changed may have created an unintentional method of exploitation.

@Zionatin, thank you for your kind and helpful words. It was not just another site I downloaded it from, and I know I shouldn't argue at first. But ONHAX had been everyone's favorite which is why, I never thought that this could happen too.

Can any of you suggest me a good seller 'that has been voucher already' for me to buy such things from them? Can I buy licences for cheap here? Had never looked marketplace for these stuffs so it may be helpful for me if you have dealt with someone who can be a life savior for me.

Luckily you didn't have a big amount saved in your wallet. However, the feeling of being hacked really sucks. I've been there too.

Since your computer got compromised and you never know what data the hacker managed to get his hands on, make sure to change all your accounts passwords and run a full system scan or, even better, wipe your hard disk and reinstall the OS.

Thankfully it's not a life-wrecking amount, though it's definitely still a waste unfortunately.

Here's what I would personally do.

1. Do a fresh re-install of your operating system. You theoretically could just remove the malware, but better safe than sorry in my opinion.
2. Sign a message stating that you're going to change wallet addresses.
3. Stake the new address.

What operating system are you using in the first place? In my opinion the default Windows defender software is more than enough; and I just download the free version of Malwarebytes for the weekly malware scan.

It looks like having a good antimalware software isn't the problem in your case. You just need to stop doing risky stuff like downloading cracked software.

Also, make sure that you're OS is always up to date. Sure it's annoying to update frequently, but you wouldn't want to be missing out on the security updates.

I have to admit, that's how I started using programs, mostly looking for cracks and illegal licenses, but that has changed completely since I started using crypto. While I was using the pirated version of OS and Electrum, and some other pirated software - I have to admit that I did not sleep well, because I was always afraid of a possible hack. Then I decided to buy a hardware wallet, and use only the software I can pay for, but I'm sure it's clean and legal.

---

Each seller can be judged by their trust score and by someone who is vouched for him, although this may not always be 100% accurate, one should be cautious and preferably use an escrow. You can visit the Digital goods board, use the keywords "antivirus + antimalware" or anything else and get relevant results.

---

The paid version of Malwarebytes is a far better solution and costs only a few $. Prevention should always be emphasized, because it is better to prevent a computer from becoming infected than to deal with the consequences. I suppose none of us leave the door of our home open when it going outside or overnight, because thieves will notice it and take advantage of the situation. It is the same with unprotected computer, sooner or later something will do damage, sometimes difficult to repair.

With there being countless free and open source Linux distros available, there is no good reason to use a pirated version of an OS like Windows or Mac OS. It exposes you to a huge number of security risks unnecessarily, and Linux is generally just a better and more secure choice anyway.

If I remember correctly, I'm sure I saw OP mention in another thread that he uses a pirated version of Windows (please correct me if I'm wrong). If that's the case, that's a far higher risk to your coins than installing some cracked security software. A malicious operating system can give an attacker essentially complete control over your system and all the data on it. You should treat it like using a public computer in an internet cafe - you shouldn't even be logging on to your email on it, let alone storing bitcoin on it.

I think we have all been there. It's the same for me, having the thought at the back of my mind that the whole thing is pirated and the hackers could use that to their advantage and steal something you don't want to lose.

This is one of the best decisions, am I right? Others should too.

Sure it helps. But having anti-malware software can only go so far as the problem with cases like these(and with most) is that it's 95% mostly user error. It's like putting so much locks on your house but you were completely unaware that a thief could easily enter your window. Knowledge heavily outweighs software in this case.

Sorry for your loss OP. It is good that you at least shared your experience here so that most of us can beware before using any kind of app or any downloads.