ELECTRUM WALLET hacked on my computer -- HELP

[louli]

Less than 12 hours after I transferred in 4500 dollars worth of coin, the entire amount was transferred out.

How do I find out where it went?  shouldn't there be a transaction list - or a way to find this out?

Cannot contact Electrum people - there is no email on their website, I mean really??  This is so unprofessional and like dealing with being in the wild west.

Does anyone have any suggestions?  I am freaking out - I'm literally a disabled person and this money means a lot to me.

Thank you.

[TryNinja]

Less than 12 hours after I transferred in 4500 dollars worth of coin, the entire amount was transferred out.

How do I find out where it went?  shouldn't there be a transaction list - or a way to find this out?

Cannot contact Electrum people - there is no email on their website, I mean really??  This is so unprofessional and like dealing with being in the wild west.

Does anyone have any suggestions?  I am freaking out - I'm literally a disabled person and this money means a lot to me.

Thank you.

There is a transaction list. Open your wallet and see for yourself. It's the first tab, which is also called "History".



Another way arround is to just search your address in a blockchain explorer - such as Blockchain.info and check for the most recent transaction.
Make sure that there was really an unwanted transaction coming from your wallet. If your coins are gone, it's probably not Electrum's fault, and you most likely had a malware on your computer, which allowed a hacker to steal your coins. Therefore, it should be impossible to recover your coins, since Bitcoin transactions are irreversible.

Can you share here your Bitcoin Address?

[bL4nkcode]

There is a History tab/list on electrum where you can see all the transaction of your wallet (sent and received). _{Edited, answered already while I'm typing}

Are you sure that you send your bitcoins to the correct address of your electrum wallet?

Electrum wallet is not like web wallet that has its support, all activity happens will depend on its users and the device.

[Klausi]

There is a History tab/list on electrum where you can see all the transaction of your wallet (sent and received). _{Edited, answered already while I'm typing}

Are you sure that you send your bitcoins to the correct address of your electrum wallet?

Electrum wallet is not like web wallet that has its support, all activity happens will depend on its users and the device.

Yes that's right and if that user's device has poor security like it has no strong antivirus security for any hacker attacks like phising sites, it more vulnerable to problems like this. I think so that it has a wrong address sent by this transactions, because if its been doing safe transactions and the wallet is having secured access that will never be hacked. Maybe there's someone who found out you address private keys, that might have your transactions full details.

[cynical]

I am just thinking, i sent a payment from my electrum wallet yesterday but i had to input my password before it would finalize.
i am not sure that this is a standard feature but if so the transaction would need your password, thatt should not be easy to get.
there has to be a compromise in your security 

[HCP]

I am just thinking, i sent a payment from my electrum wallet yesterday but i had to input my password before it would finalize.
i am not sure that this is a standard feature but if so the transaction would need your password, thatt should not be easy to get.
there has to be a compromise in your security  

That would only be the case if the thief only had the OPs password protected wallet file... if the wallet file was not password protected, the private keys/seed/xprv are stored in plaintext.

Also, if the thief managed to get their hands on the seed or actual private keys, they wouldn't even need the original wallet file or it's password. They could just create a new wallet with whatever password they wanted.

[LiteDeluxe420]

same here!

0.79615079 BTC STOLEN!

by ADRESS:

13k7TnLmzvcvLncRyQm7uwVtLc6tLRApP2

is there anything I can do?

https://www.blocktrail.com/BTC/tx/3ef709fa84bd154aaf1d5e2822fe6ca73072e65ea930d03473100798bd29c778

[HCP]

same here!

0.79615079 BTC STOLEN!

by ADRESS:

13k7TnLmzvcvLncRyQm7uwVtLc6tLRApP2

is there anything I can do?

In a word, No.

BTC transactions are irreversible. If you did not create and/or authorise this transaction, then you coins have most likely been stolen by someone who managed to get your private keys, your wallet seed or your wallet file+password. If someone took your coins without permission, they're not likely to give them back.

Did you recently attempt to claim Bitcoin Gold or Bitcoin Cash via a website or download some new wallet software that you put your private keys or seed into? There are a lot of scams going on at the moment with the various forks happening.

Did you store your seed and/or private keys on an online storage service like dropbox? did you store them digitally in a text file on your computer?

I would suggest that you scan your computer for viruses/malware at the very least... but a complete format and Operating System reinstall is probably the safer option. You should also consider your current Electrum wallet totally compromised and stop using it immediately and generate a new wallet with a new seed.

[Coin-Keeper]

Electrum always takes the reputation "hit" on these situations but its not the wallet's fault.  Used offline (private key wise) Electrum is solid as can be.  There is so much "crap" out there right now with all these forks and new coin types being hyped.  I wish the crowd would either go "cold" on software wallets, or acquire a nice hardware wallet.  At 7-8 thousand a coin they are cheap insurance!

[LiteDeluxe420]

If you follow the transactions my coins were deposit to this wallet

https://bitinfocharts.com/de/bitcoin/address/1LASN6ra8dwR2EjAfCPcghXDxtME7a89Hk

who is the owner? is it an exchange?

[HCP]

Impossible to tell who the owner is unless that address has been publicly posted somewhere... but based on the volume and size... it's either an exchange, a mixer or a gambling website

EDIT: Ok, so according to Bitcoin Who's Who? http://bitcoinwhoswho.com/address/1LASN6ra8dwR2EjAfCPcghXDxtME7a89Hk

That address is linked via this reddit thread: https://www.reddit.com/r/BitcoinMarkets/comments/4x3frd/will_somebody_confirm_here_when_they_actually/?sort=new

which leads to this transaction: https://blockchain.info/tx/ef1d5413f0ffb4b562365264f981f93d78f06867001a989091e14d223223d70b

and links the address with: 1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g

Which is apparently an address belonging to Bitfenix... so it's a good chance, that the coins ended up in Bitfenix. I don't think this really helps you at all... and I doubt Bitfenix will care.

[kgbinc]

I Lost $110,000 due to Electrum "Hack", I think Electrum stolen my Bitcoins. Here's why:

I opened my Electrum wallet today, January 18, 2007 and found out that on January 2, 2018 all my bitcoins (7.88014412 btc worth $110,682.86 USD) were sent to the following

Bitcoin address:1BhbPsVryBx9vBwLgaFRg2jY4Y1dh9i5vf

Electrum is claiming to have been hacked and my coins were stored in Electrum and there was no way anyone could access my computer as it stayed offline and powered down until I needed to access my bitcoins.


Here are the full details:
https://bitcointalk.org/index.php?topic=1489554.40

[audaciousbeing]

I Lost $110,000 due to Electrum "Hack", I think Electrum stolen my Bitcoins. Here's why:

I opened my Electrum wallet today, January 18, 2007 and found out that on January 2, 2018 all my bitcoins (7.88014412 btc worth $110,682.86 USD) were sent to the following

Bitcoin address:1BhbPsVryBx9vBwLgaFRg2jY4Y1dh9i5vf

Electrum is claiming to have been hacked and my coins were stored in Electrum and there was no way anyone could access my computer as it stayed offline and powered down until I needed to access my bitcoins.


Here are the full details:
https://bitcointalk.org/index.php?topic=1489554.40

After reading through I can only say this that no software is just perfect no matter how long they have stayed in the industry. When the vulnerability was discovered, in this January (though I agree that they should have been more proactive) it was advised that there should be an immediate upgrade of the version we are currently using but if our wallets are password protected, we should be less worried but not to open the wallet without upgrading and I think that is where your exposure comes because you never mentioned you upgraded before opening after the said date. Its really something that one should not have to witness.

[Lucius]

I Lost $110,000 due to Electrum "Hack", I think Electrum stolen my Bitcoins. Here's why:

I opened my Electrum wallet today, January 18, 2007 and found out that on January 2, 2018 all my bitcoins (7.88014412 btc worth $110,682.86 USD) were sent to the following

Bitcoin address:1BhbPsVryBx9vBwLgaFRg2jY4Y1dh9i5vf

Electrum is claiming to have been hacked and my coins were stored in Electrum and there was no way anyone could access my computer as it stayed offline and powered down until I needed to access my bitcoins.


Here are the full details:
https://bitcointalk.org/index.php?topic=1489554.40

I'm sorry for your loss,you really lost a big amount of money.

Can you tell us what version of Electrum you use and when you last time make update?How long you keep your coins in Electrum wallet?I am asking this just to try to determine in what way you get hacked.

If you are in the period before January 2 created this wallet and send coins to it,or if you are make update of wallet before that time is it possible that you are click on first result you get when you searching for "Electrum"?There is many fake Electrum sites which use Google ads and they appear on the top of search results.Unfortunately many people lose theirs BTC by downloading fake wallets from such sites.

[Spendulus]

....There is many fake Electrum sites which use Google ads and they appear on the top of search results.Unfortunately many people lose theirs BTC by downloading fake wallets from such sites.

So how can these activities be stopped or neutralized?

[Lucius]

....There is many fake Electrum sites which use Google ads and they appear on the top of search results.Unfortunately many people lose theirs BTC by downloading fake wallets from such sites.

So how can these activities be stopped or neutralized?

It is difficult to actually completely stop someone to make a malicious page and then pay advertisement to Google or any other search engine that the result of such a site appears in the first place.There is option to report such site which I do many times here : https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

But new pages of the same type appear again because it's a very lucrative job.Just based on reports here on forum a lot of people loses BTC in this way,and I think this i maybe only 5-10% affected users.

In every phishing report I explain and ask Google to ban all sites(except for a legitimate service) that are use "Electrum" in site name and not to allow them to use their advertising service.But it is hard to expect from them to do something about it,at least not in the near future.

[hoop]

I Lost $110,000 due to Electrum "Hack", I think Electrum stolen my Bitcoins. Here's why:

I opened my Electrum wallet today, January 18, 2007 and found out that on January 2, 2018 all my bitcoins (7.88014412 btc worth $110,682.86 USD) were sent to the following

Bitcoin address:1BhbPsVryBx9vBwLgaFRg2jY4Y1dh9i5vf

Electrum is claiming to have been hacked and my coins were stored in Electrum and there was no way anyone could access my computer as it stayed offline and powered down until I needed to access my bitcoins.


Here are the full details:
https://bitcointalk.org/index.php?topic=1489554.40

Are you sure that this original Electrum software you had, did you download this from Electrum official website?

people should take in consider to use bitcoin.org website to choose and download wallets from those wallets official websites.

[Spendulus]

....There is many fake Electrum sites which use Google ads and they appear on the top of search results.Unfortunately many people lose theirs BTC by downloading fake wallets from such sites.

So how can these activities be stopped or neutralized?

It is difficult to actually completely stop someone to make a malicious page and then pay advertisement to Google or any other search engine that the result of such a site appears in the first place.There is option to report such site which I do many times here : https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

But new pages of the same type appear again because it's a very lucrative job.Just based on reports here on forum a lot of people loses BTC in this way,and I think this i maybe only 5-10% affected users.

In every phishing report I explain and ask Google to ban all sites(except for a legitimate service) that are use "Electrum" in site name and not to allow them to use their advertising service.But it is hard to expect from them to do something about it,at least not in the near future.

What this means is something like a 2FA authentication of a downloaded software wallet is required, before the wallet will work. This should be possible with Electrum because it uses dedicated servers.

[HCP]

Electrum effectively already has such a system... with the digital signatures. The fact that people choose not to use it speaks volumes about how much they understand what "Be Your Own Bank" means.

Banks have Security and Risk & Analysis departments... If you want to be your own bank, you need to make sure you have also implemented bank level security and R&A.