I lost $8400 in my Mt account because the hacker and Mt's slow support service

[cupo]

My Mt account is cupo, and I found my account has been intruded in 2:08 29/4/2013(GTM+8). The attacker also hacked my email linked the account. I think I got a keylogger in my computer. I receive a password recovery email and quickly reply to infor Mt don't change the password which submit as a ticket to the support. Then I can't login my account and submit another ticket to the support to report this attack and hope they can block the account.

What make me angry is the attacker can't withdraw money untill 3:13 in 4.30 (GTM+8). Mt have 24 hours to block the account but nothing happened. I submit a ticket as soon as my account has been intruded at 2:08 in 4.29 (GTM+8), but the support didn't reply me until this morning (1/5/2013) which said "we can't locate your account". Of course the hacker change the email address, but no notice sent to my original email. I submit the ticket with my user name cupo and original email. If he response quickly and wisely, those loss can be avoided.

I just get help from MtGox AML, who is not a support and get my account back today(1/5/2013). I lost $8400 because of the support's delay, That's not a little money. I really disappointed to this service.
The hacker withdraw BTC to this address
1EY8G68whAjT46JgKvuBGyAqH9uvkzEb8v
1EATk7GW1NPcLvHcSYuQNfdRAcHpbxYZ3u

If Mt is a responsible exchanger, I think they should help me to get my money back. Obviously Mt have responsibility in this loss because of their slow service response.

My BTC-E account has been attacked the same time, the hacker change my money into btc-e code and exchange them to LR instantly. Though I didn't get my money back, but the support in BTC-e response and help me to block the excange soon after I notice him. Following is the order which the attacker exchange my BTC-e code into LR.
https://www.aurumxchange.com/order/view/74712/0835c04f379a34ab32b45d1ce548b095

I use Google Authenticator now to protect my account which seems so necessary for BTC is a big target to hackers now.

I appreciate if someone can help me or post this ticket to "Trading Discussion" for I'm a newbies.

[Zanatos666]

I feel ya.  I didnt lose nearly that much, just a few hundred dollars, but thats exactly why I do not keep my money in Gox anymore, I keep it in my own wallet, and only transfer coins to Gox the day I am going to sell them, as soon as they hit, I sell, then take my money and send them out to Dwolla. 

You may always want to get a Yubi Key from Gox as well.  At least they can do is hook you up with a free one because of their slow response.

[cupo]

Thank you for your suggestion. I left my money in Mt account because it's difficult to withdraw money to my account in bank. My careless made this loss, but the slow service of Mt make me really angry. It's not a good choice in service compared to BTC-e.

[Loozik]

You may always want to get a Yubi Key from Gox as well. 

If you order YubiKey from MtGox:
a) you pay the courier from the parcel company,
b) you pay MtGox in advance
c) you are billed later from your deposit at MtGox
d other?

Thanks

[Rayen]

Check this thread.
https://bitcointalk.org/index.php?topic=191842.0

[Zanatos666]

You may always want to get a Yubi Key from Gox as well. 

If you order YubiKey from MtGox:
a) you pay the courier from the parcel company,
b) you pay MtGox in advance
c) you are billed later from your deposit at MtGox
d other?

Thanks

Depends. If Gox covers you, then you have nothing out of pocket.  I got mine free.  They sent a friend of mine an email offering him a free one.  He didnt use it so he gave me the redemption code.  When I went to order it, I put in the code, and it paid for everything, including shipping.

[roxannemmorganB599]

I keep hearing this sad stories. What is the reason you are hacked? How did the attacker gain access to your pc? Are you using java?

[md34ma]

He must have downloaded something... Some sort of a virus that exploits a web browser or java vulnerability or sniffs for the passwords and then sends mail ^_^.

If you didn't download anything, you should have been safe... Nobody will remotely exploit your computer at random for your MTgox password. They'd have to know who you are and how much money you have....


So 99% you downloaded a virus and that was the end of it.

[Zanatos666]

He must have downloaded something... Some sort of a virus that exploits a web browser or java vulnerability or sniffs for the passwords and then sends mail ^_^.

If you didn't download anything, you should have been safe... Nobody will remotely exploit your computer at random for your MTgox password. They'd have to know who you are and how much money you have....


So 99% you downloaded a virus and that was the end of it.

While most of the time that is true, there are times where it isnt on the user.  Look back to last summer when Gox had a huge breach and a bunch of peoples accounts were compromised.  Wasnt anything I did, was all on their side.

[linms-bt]

I use dedicated machine for trading only, not for Internet browsing. That should avoid some Trojans...

[cupo]

I use dedicated machine for trading only, not for Internet browsing. That should avoid some Trojans...

That's a good idea, I am trying now.

[redemptor]

I use dedicated machine for trading only, not for Internet browsing. That should avoid some Trojans...

Yes,a good idea,How about partitioning harddrive , and running two operating system,does this work?

[CasinoBit]

Some website that phish Gox or other Bitcoin-related websites will offer you the option to play a video and ask you to download a Java application to do so. Do not allow any websites to download Java apps.

[Mazakguy]

I also use a trade only computer