Bitcoin Forum

https://bitcointalk.org/index.php?topic=670920.msg7593697#msg7593697 is the first of the hacks. Do not regard any messages after that.

My original address is: 1HeroCCotNLtJzpEiWGrRkaFSFDBZkF1jG

I am going to PM Theymos with a signed message, he changed my email and address. He also hacked my Bitcoin Address and sent all funds to This address: 1LQY5R53z7TNcsG1vQCFZnZJAbZaBbNK4q.

I use 2FA for my blockchain.info wallet, and all om my funds are gone, I don't see how. Please help!
I only noticed today. I will post more info as I find it.

The hacker has sent me back my account, and claims that he did not hack my blockchain.info account.

I have my account back, and I am in the process of changing everything back.
Can verify, this is me.

What's to say that HeroCC wasn't hacked and that you're just the hacker posting from both accounts?

Why would the hacker use the original HeroCC's Bitcoin address? But, whatevs. Anything happens on BitcoinTalk, so that's a good theory.

EDIT:

leet, BITCHES!

I'm kind of wondering that too, it's a possibility.  We'll have to wait and see if there's a HeroCCC account created.

this doesnt make any sense

But what if somebody else creates HeroCCC and tries to dupe us into thinking that both HeroC and HeroCC have been compromised? :P

I suppose that's why users should prove themselves using signed addresses.

It is me, I signed a message to tysat from my address. It is strange, after he sent my account back, he said the blockchain.info thing was not by him and unrelated, and this morning I had to reset my password AGAIN and I got a message from David Chow saying:


Theymos can verify the IPs, I am me. Also, if you see this theymos, please let me know if the guy who logged into my account's IP address, or at least if he as any alts. I may be filing a police report soon. I have gotten 3 emails from blockchain.info saying that my identifier was trying to be used, but I cannot access my account to change it.

Which kind of 2FA did you use? Google Authenticator? SMS? Email?

I use Authy on my android CWM phone. I recently got it back, and the password was what it was before, so I no longer think it was that. I think it is an unencrypted backup from somewhere, so I am looking for that now. From now on, I'll use Coinbase  :)

Whelp, someone made HeroCCC, it is NOT ME. https://bitcointalk.org/index.php?action=profile;u=350265

Did you have one stored in your email account or on your computer anywhere? I was going to say it would be unlikely they got in through two factor.


That was bound to happen  :D.

Do you have any idea how you were hacked (passwords on multiple sites, easy passwords, phishing site)? Just wondering how so many accounts are getting hacked recently.

I do use passwords on multiple sites (changing that now), but it is not an easy password, and I think it is immune to dictionary attacks. I have not been to any phishing sites, I am good at spotting them. I connected to a public wifi the day that my account was hacked, but I don't think that has anything to do with it because I didn't visit the forums at all that day.

But how has the person be able to gain acces to your account?

Anyway, use like the strongest passwords you can think of, nothing is a sure thing in this world.

Better use the strongest passwords you can remember.
I have seen quite a number of persons forgetting their "ultra strong password" used in their bitcoin wallet...

Haha good call, I'm not a native English speaking guy so stupid mistakes as these happen with me, unfortunantly :P

There's such thing like writing it down and putting a copy in several secure places you know (in case one becomes unaccessible (fire, collapse, etc.)). You don'rpt need to remember it then.