Bitcoin Forum
June 18, 2024, 09:32:15 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Please crack my blockchain wallet and take my 16 cents  (Read 1818 times)
Waramp22 (OP)
Sr. Member
****
Offline Offline

Activity: 321
Merit: 250


View Profile
August 27, 2014, 05:03:43 PM
 #1

Here is the contents of my wallet.aes.json file from Blockchain that was recently hacked. Please crack it for me and take my 16 cents. Im using this is to learn from my mistakes.

I'm hoping it is encrypted with a 13 or 14 character pasword (I had 2 at blockchain) or i did something horribly wrong when setting up my blockchain account.

wallet.aes.json
Code:
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

Scammed by Black Arrow? See the consumer complaint thread here -
https://bitcointalk.org/index.php?topic=681965.0
SgtSpike
Legendary
*
Offline Offline

Activity: 1400
Merit: 1005



View Profile
August 27, 2014, 05:18:34 PM
 #2

13-14 chars isn't bruteforceable.  You probably had some malware.
Ayers
Legendary
*
Offline Offline

Activity: 2660
Merit: 1024


Bitcointalk Username: Ayers Bsc Wallet Address: 0x


View Profile
August 27, 2014, 06:38:13 PM
 #3

not worth it for just 16 cents

DiamondCardz
Legendary
*
Offline Offline

Activity: 1134
Merit: 1112



View Profile WWW
August 27, 2014, 06:52:35 PM
 #4

Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

BA Computer Science, University of Oxford
Dissertation was about threat modelling on distributed ledgers.
juju
Sr. Member
****
Offline Offline

Activity: 381
Merit: 250



View Profile
August 27, 2014, 08:19:03 PM
 #5

Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication?

If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory.

odolvlobo
Legendary
*
Offline Offline

Activity: 4354
Merit: 3262



View Profile
August 27, 2014, 09:28:47 PM
 #6

Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication?

If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory.

Blockchain.info doesn't hold any unencrypted data and it doesn't know your password. There are two ways a hacker can gain access to your blockchain.info wallet:

  • Run software on your machine that reads your wallet after it has been downloaded and decrypted by your browser.
  • Obtain your password and id from you.

 The latter case is by far the most common scenario.

Join an anti-signature campaign: Click ignore on the members of signature campaigns.
PGP Fingerprint: 6B6BC26599EC24EF7E29A405EAF050539D0B2925 Signing address: 13GAVJo8YaAuenj6keiEykwxWUZ7jMoSLt
Waramp22 (OP)
Sr. Member
****
Offline Offline

Activity: 321
Merit: 250


View Profile
August 27, 2014, 11:38:16 PM
 #7

not worth it for just 16 cents

I guess i am just wondering if someone would try to import it into one of the bitcoin clients to see if it is indeed password protected or not.


Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication?

If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory.



Yes, alot, but i had not logged into blockchain from January 12th until it was hacked on July 7th. I was too Paranoid of keyloggers/malware. My email does not have 2 factor authentication. The thief could have easily got my wallet file but then how could he have cracked it?

I made 4 cold wallets to keep it in. Now i am paranoid because although i disconnected the ethernet cable and saved the BIP38 encrypted paper wallet (PDF) directly to a usb drive, I had to type in the password which may have been picked up by malware. I think i am officially done storing my bitcoin on any computer, as there are too many points of failure. You need to have a dedicated laptop/printer that never touches the internet to store your money safely by printing out paper wallets and keeping them in a safe. Maybe a Piper bitcoin wallet printer?

Here is my public key.
https://blockchain.info/address/1K2sV195TPP3mUCeHxZxizWUFZFRAvBsHn

Scammed by Black Arrow? See the consumer complaint thread here -
https://bitcointalk.org/index.php?topic=681965.0
wasserman99
Sr. Member
****
Offline Offline

Activity: 476
Merit: 250



View Profile
August 28, 2014, 12:08:48 AM
 #8

Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication?

If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory.

Blockchain.info doesn't hold any unencrypted data and it doesn't know your password. There are two ways a hacker can gain access to your blockchain.info wallet:

  • Run software on your machine that reads your wallet after it has been downloaded and decrypted by your browser.
  • Obtain your password and id from you.

 The latter case is by far the most common scenario.
Another potential way would be if the OP had a plaintext version of his identifier and password somewhere on the internet (maybe a public dropbox file, or potentially in his email). If this was the case then an attacker could simply log into blockchain.info and create a TX that sends the OP's money to his own address.  

Waramp22 (OP)
Sr. Member
****
Offline Offline

Activity: 321
Merit: 250


View Profile
August 28, 2014, 12:22:18 AM
 #9

Another potential way would be if the OP had a plaintext version of his identifier and password somewhere on the internet (maybe a public dropbox file, or potentially in his email). If this was the case then an attacker could simply log into blockchain.info and create a TX that sends the OP's money to his own address.  

I did have a paper wallet in a PDF format in the downloads folder of my phone. I didn't know i had it at all. Makes you wonder why Blockchain.info would let you download a paperwallet showing the private key without BIP38 encryption. It was named bitcoibackup.pdf (typo) I never let anyone look at my phone and have a strong picture-password so im not sure what could have happened. Maybe something to do with when it syncs the media on my computer? I did a search for the file and can't find it anywhere.

Scammed by Black Arrow? See the consumer complaint thread here -
https://bitcointalk.org/index.php?topic=681965.0
montello
Full Member
***
Offline Offline

Activity: 126
Merit: 100


View Profile
August 28, 2014, 11:23:38 AM
 #10

All that stress for just 16 cents,its not worth it.

Sindelar1938
Hero Member
*****
Offline Offline

Activity: 490
Merit: 500


View Profile
August 28, 2014, 11:25:39 AM
 #11

16 cents? You gotta be kidding
I would assume that most of us value our time more than that

sandykho47
Sr. Member
****
Offline Offline

Activity: 252
Merit: 251

Knowledge its everything


View Profile
August 28, 2014, 11:43:29 AM
 #12

$0.16 is not worth
If you say 16 BTC this will worthy  Grin

And i think you need yo set blockchain.info very carefully

Kemampuanku Tidak semua orang memiliki dan dapat melakukannya . Tidak memakan kaum sendiri . dan mempunyai kode etik yang tidak masuk akal.
1Referee
Legendary
*
Offline Offline

Activity: 2170
Merit: 1427


View Profile
August 28, 2014, 12:00:41 PM
 #13

Cracking a wallet is not something you do in five minutes. It can take days, perhaps weeks. Definitely not worth if reward is 16 cent   Wink
Waramp22 (OP)
Sr. Member
****
Offline Offline

Activity: 321
Merit: 250


View Profile
August 29, 2014, 01:05:02 AM
 #14

$0.16 is not worth
If you say 16 BTC this will worthy  Grin

And i think you need yo set blockchain.info very carefully

16 cents? You gotta be kidding
I would assume that most of us value our time more than that

Cracking a wallet is not something you do in five minutes. It can take days, perhaps weeks. Definitely not worth if reward is 16 cent   Wink

See below!!!


I guess i am just wondering if someone would try to import it into one of the bitcoin clients to see if it is indeed password protected or not.

Scammed by Black Arrow? See the consumer complaint thread here -
https://bitcointalk.org/index.php?topic=681965.0
FFrost
Full Member
***
Offline Offline

Activity: 224
Merit: 100


View Profile
August 29, 2014, 09:46:04 AM
 #15

Your joking right? Why would someone even bother to hack it just a waste of electricity.
BitcoinBadger
Member
**
Offline Offline

Activity: 111
Merit: 10


View Profile
August 29, 2014, 10:22:24 AM
 #16

14 characters will take more than 700 years to bruteforce. Even with supercomputer, expect some years to crack..

Sorry mate Smiley, keep wallet safer next time Smiley
wasserman99
Sr. Member
****
Offline Offline

Activity: 476
Merit: 250



View Profile
August 29, 2014, 03:23:32 PM
 #17

Another potential way would be if the OP had a plaintext version of his identifier and password somewhere on the internet (maybe a public dropbox file, or potentially in his email). If this was the case then an attacker could simply log into blockchain.info and create a TX that sends the OP's money to his own address. 

I did have a paper wallet in a PDF format in the downloads folder of my phone. I didn't know i had it at all. Makes you wonder why Blockchain.info would let you download a paperwallet showing the private key without BIP38 encryption. It was named bitcoibackup.pdf (typo) I never let anyone look at my phone and have a strong picture-password so im not sure what could have happened. Maybe something to do with when it syncs the media on my computer? I did a search for the file and can't find it anywhere.
They "let" you have the private key in unencrypted format because you are in 100% control of your keys at all times. You can also download your private keys in an unencrypted format after acknowledging a warning.

Microbit001
Member
**
Offline Offline

Activity: 63
Merit: 10


View Profile
August 29, 2014, 06:44:32 PM
 #18

Here is the contents of my wallet.aes.json file from Blockchain that was recently hacked. Please crack it for me and take my 16 cents. Im using this is to learn from my mistakes.

I'm hoping it is encrypted with a 13 or 14 character pasword (I had 2 at blockchain) or i did something horribly wrong when setting up my blockchain account.

wallet.aes.json
Code:
7mCJu30U6SpAxej55JmtGqD6CGs7v4HGz2n3el/NTs6m5dvuNMLgKGU+hgReVVQHvHFmGEc3mJlFnI0q37KiOf3DJoD1zCK/4ykiBfibdL9t9Yr5NB2c95rbrfwNTMMad7pndTTIxL2GTxoJswy6ksa78ugl3GlapH4RncTxxBZglub2bafaDPgTqy4iMw3XxSxX/sX+EwXrG8niaHCYeXvTofkc74CDsRIxUnM5ziVmDdvd+yJCBuD2yb9gf1Italun4Tk028TFmzU1vZtqNIitwYSK3K37Yf2ACq6k36hGDEULv6RVZR681Obbk6mHG4ROJKTZntms+YJWePVvCg6z7Pnv3OV6kkgikJB065sqioLvQay4xTMUxnoZA9ZnCLuu67Y0dRiFfDLKg771n/w+gokkD9M/r9Vhl0CBHzV9+3T3spsCkC3MwztPAdMragqLsPEk+J2ou/wmKFb/H81N2TjsJFYlNOs2sHzYOKD2tBorBqlDaq1+JGmJFlsKAgZo3QaZM2jdLKNuSOWiJiQ1R+fuSn3PM2ruVmZIGXoDQOWkwgwTgdL2D4YLLR8JsuCWIPVZ/COJ8qbivR5wSqsfOYU70ZPin5hqFND5H1JNUZCgInWOAdo9lTFyCSlOjzXMhsexDvfRjyNZ+17OZB6TDGur4fnaUnZNbXJRz5zaztptcZ1X77y/XtgrZ2gFXvyLyRTF4OJJNEAXU9l160w73m69E6hVQjUHrPDIodgMKKg1OqKpvFYUll7VWlo2OSd/pjId5bvjfP6NHLug3GyQjlmPk/p0vWKOFiOpkTB/ZbHLWHW0LrdKgzAiDfTpYPRYFJtrJd+vG9B4c5gt3tL5OHuRnspM9RZPeU32PkKUI3f4dkJi3SmCOvFKESGU+2mFLgIpRXq7Mn1mWASdww==
Machines aren't gotten so smart to crack such a encryption in so short period of time.It would take a lifetime and even more to do so
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!