Show Posts
Thank you for sharing this on forum and also we have a Bitcoin event in couple of weeks ahead, so can you please share this experience with the audience?
Please email @ avinashrp2@gmail.com to confirm.
Look forward to hear from you.
Thanks,
Avinash
Folks,
I just thought I'd share my experience so others don't make the same mistake.
I transferred $1500 from my HDFC bank to Bitstamp (www.bitstamp.net)
I received an email from them saying my funds were deposited. Within an hour of that, someone logged into my account, bought bitcoins, transferred them to their wallet AND THEN changed the password.
Clearly this wasn't an insider and NOT malware as I have no dodgy apps on my office laptop and also have Symantec Antivirus running.
See log (please read bottom-up):
2013-12-28 12:29:01 173.254.216.67 Logged in
2013-12-27 17:34:47 209.222.8.196 Opened bitcoin withdrawal request for 0.025 BTC to 14hF8K4h7u4MAZsEJs5aRjXGVti6YBLTEn
2013-12-27 17:33:55 209.222.8.196 Opened limit buy order (amount: 0.025 BTC, price: $718.00)
2013-12-27 17:31:47 96.47.226.22 Changed user password
2013-12-27 17:29:27 96.47.226.22 Opened bitcoin withdrawal request for 2 BTC to 14hF8K4h7u4MAZsEJs5aRjXGVti6YBLTEn
2013-12-27 17:28:20 176.240.210.83 Opened limit buy order (amount: 2 BTC, price: $724.18)
2013-12-27 17:26:07 96.47.226.22 Logged in
2013-12-27 10:32:48 122.172.192.2 Logged in
2013-12-27 04:26:28 122.167.73.30 Logged in
2013-12-26 12:16:25 122.178.240.51 Logged in
2013-12-26 03:14:24 122.178.198.77 Logged in
As you can see all 122.*.*.* are timestamps where I logged-in. Suddenly on 27th Dec, someone logs in from a diff IP, TRANSACTS in my account (buys/ transfers to wallet) AND THEN LATER changes password.
Here is where the fun begins. There is no support number provided on www.bitstamp.net So I logged a support ticket and then someone replies to my email with a phone number. I call that UK number & after a few attempts...somebody answers the phone & I speak to somebody called Marko Rogan who does not have an employee ID! Guess why?? They are are limited liability company (LLC) incorporated in UK with a capital of just 1000 pounds! The "director" is a 24 year old Slovenian who does not have a contact number that he can be reached on!
http://www.companiesintheuk.co.uk/ltd/bitstamp
Marko tells me that a password reset can be done & the temporary password will be mailed to the registered mail ID i.e. my email ID has been compromised. So I then raise a support request with Microsoft on www.outlook.com the mail ID that was "compromised" asking for details of all mails received/sent/deleted on 27th dec.
I have reported the crime to the UK police http://www.actionfraud.police.uk/ The crime reference number CRN is NFRC131200484131. I will also be reporting this to the cyber crime police in Bangalore.
Request you to please promote this post & ensure others don't fall prey. Also gather momentum to get the UK police to investigate this case and punish the guilty.
Please DO NOT send funds or transact on www.bitstamp.net
-Mahesh
I just thought I'd share my experience so others don't make the same mistake.
I transferred $1500 from my HDFC bank to Bitstamp (www.bitstamp.net)
I received an email from them saying my funds were deposited. Within an hour of that, someone logged into my account, bought bitcoins, transferred them to their wallet AND THEN changed the password.
Clearly this wasn't an insider and NOT malware as I have no dodgy apps on my office laptop and also have Symantec Antivirus running.
See log (please read bottom-up):
2013-12-28 12:29:01 173.254.216.67 Logged in
2013-12-27 17:34:47 209.222.8.196 Opened bitcoin withdrawal request for 0.025 BTC to 14hF8K4h7u4MAZsEJs5aRjXGVti6YBLTEn
2013-12-27 17:33:55 209.222.8.196 Opened limit buy order (amount: 0.025 BTC, price: $718.00)
2013-12-27 17:31:47 96.47.226.22 Changed user password
2013-12-27 17:29:27 96.47.226.22 Opened bitcoin withdrawal request for 2 BTC to 14hF8K4h7u4MAZsEJs5aRjXGVti6YBLTEn
2013-12-27 17:28:20 176.240.210.83 Opened limit buy order (amount: 2 BTC, price: $724.18)
2013-12-27 17:26:07 96.47.226.22 Logged in
2013-12-27 10:32:48 122.172.192.2 Logged in
2013-12-27 04:26:28 122.167.73.30 Logged in
2013-12-26 12:16:25 122.178.240.51 Logged in
2013-12-26 03:14:24 122.178.198.77 Logged in
As you can see all 122.*.*.* are timestamps where I logged-in. Suddenly on 27th Dec, someone logs in from a diff IP, TRANSACTS in my account (buys/ transfers to wallet) AND THEN LATER changes password.
Here is where the fun begins. There is no support number provided on www.bitstamp.net So I logged a support ticket and then someone replies to my email with a phone number. I call that UK number & after a few attempts...somebody answers the phone & I speak to somebody called Marko Rogan who does not have an employee ID! Guess why?? They are are limited liability company (LLC) incorporated in UK with a capital of just 1000 pounds! The "director" is a 24 year old Slovenian who does not have a contact number that he can be reached on!
http://www.companiesintheuk.co.uk/ltd/bitstamp
Marko tells me that a password reset can be done & the temporary password will be mailed to the registered mail ID i.e. my email ID has been compromised. So I then raise a support request with Microsoft on www.outlook.com the mail ID that was "compromised" asking for details of all mails received/sent/deleted on 27th dec.
I have reported the crime to the UK police http://www.actionfraud.police.uk/ The crime reference number CRN is NFRC131200484131. I will also be reporting this to the cyber crime police in Bangalore.
Request you to please promote this post & ensure others don't fall prey. Also gather momentum to get the UK police to investigate this case and punish the guilty.
Please DO NOT send funds or transact on www.bitstamp.net
-Mahesh
