I lost $8400 in my Mt account partly because Mt's slow support service

[cupo]

My Mt account is cupo, and I found my account has been intruded in 2:08 29/4/2013(GTM+8). The attacker also hacked my email linked the account. I think I got a keylogger in my computer. I realy surf some exchanger site that days which kaspersky warn phishing site now. some links on this site maybe infected
technocashier.com/?p=29&cur_from=CARDUSD&cur_to=OKUSD

I receive a password recovery email and quickly reply to inform Mt don't change the password which submit as a ticket to the support. Then I can't login my account and submit another ticket to the support to report this attack and hope they can block the account.

What make me angry is the attacker can't withdraw money untill 3:13 in 4.30 (GTM+8). Mt have 24 hours to block the account but nothing happened. Angry I submit a ticket as soon as my account has been intruded at 2:08 in 4.29 (GTM+8), but the support didn't reply me until this morning (1/5/2013) which said "we can't locate your account". Of course the hacker change the email address, but no notice sent to my original email. I submit the ticket with my user name cupo and original email. If he response quickly and wisely, those loss can be avoided. Mt make a restriction to block withdraw within 24 hours from the account which was changed password. It makes no sense for this slow service.

I just get help from MtGox AML, who is not a support and get my account back today(1/5/2013). The hacker withdraw BTC to this address 1EY8G68whAjT46JgKvuBGyAqH9uvkzEb8v
1EATk7GW1NPcLvHcSYuQNfdRAcHpbxYZ3u

If Mt is a responsible exchanger, I think they should help me to get my money back. Obviously Mt have responsibility in this loss because of their slow service response.

My BTC-E account has been attacked the same time, the hacker change my money into btc-e code and exchange them to LR instantly. Though I didn't get my money back, but the support in BTC-e response and help me to block the excange soon after I notice him. Following is the order which the attacker exchange my BTC-e code into LR.
https://www.aurumxchange.com/order/view/74712/0835c04f379a34ab32b45d1ce548b095

I use 2FA now to protect my account which seems so necessary for BTC is a big target to hackers now. It's realy an expensive lesson about the security.

[baracuda]

I use 2FA now

Good to hear.

[🏰 TradeFortress 🏰]

Why won't Mt Gox implement locking in withdrawal addresses?

[Kluge]

In the future.... You should (at least used to) be able to find Mark in the MtGox IRC room. That would've been a great time to talk directly to him. I'm not sure if he has the support team hang around in there.

Probably nothing Gox can do, now, and why Bitcoin's particularly susceptible to online theft. IP addresses are useless, police are useless... sorry for your loss -- don't forget the lesson (I had to learn the hard way with 800BTC, too - though not with Gox, I had the same issue where I desperately tried contacting admin and he could've stopped it, but didn't respond in time).

[Kluge]

Why won't Mt Gox implement locking in withdrawal addresses?

AFAIK, nobody does this, and I have absolutely no idea why. It's way more likely that someone's online account will be compromised than someone accidentally deleting their wallet, or having it stolen/decrypted.

[cupo]

Why won't Mt Gox implement locking in withdrawal addresses?

when Mt Gox response to me, everything has been done.

[cupo]

In the future.... You should (at least used to) be able to find Mark in the MtGox IRC room.

Is that IRC room exist now??

Probably nothing Gox can do, now, and why Bitcoin's particularly susceptible to online theft. IP addresses are useless, police are useless... sorry for your loss -- don't forget the lesson (I had to learn the hard way with 800BTC, too - though not with Gox, I had the same issue where I desperately tried contacting admin and he could've stopped it, but didn't respond in time).

Yes, few people aware that the attacker is easy to infect their account. The exchangers don't admit their fault on security and won't pay any compensation to the victims. That's not regular for any other responsible merchant. Maybe the exchanger in Bitcoin are all newbies in web service and regardless of the responsibility.

[naphto]

You lost btc not fiat. Nothing you can do

[Kluge]

You lost btc not fiat. Nothing you can do

Pretty sure he lost fiat, not BTC. If someone steals your cash and buys goats with them, we wouldn't say you lost your goats.