Blockchain hacked

[kingofbitcoin]

Somebody hacked my BTC account, and got the last 0.01 i had. Well i don't really care about the almost 3 USD, but i soon after entered Google Authenticator. What i want to ask, am i still not secure, cause i left password unchanged, as he cannot do anything with that password anymore???  My real question is is Google Authenticator my savior??? I add about 0.0004 BTC just to see if they will get stolen, but they aren't so far. What is the expert advice in this ?

[1714817560]

1714817560

[1714817560]

1714817560

[1714817560]

1714817560

[1714817560]

1714817560

[Josef27]

Make sure you really visiting https://blockchain.info/ and the sites secured by SSL


Many clones domain and website of blockchain that steal real blockchain information.
Sorry to hear that, but that is your fault.

[kingofbitcoin]

I know that is my fault, but what i am asking is :

Am i safe with google authenticator ,or should i just do something else, i normally don't think any better way to protect my account then a google authenticator code that changes every 30 seconds in my phone , or is there something better ?

[Mitchell]

I know that is my fault, but what i am asking is :

Am i safe with google authenticator ,or should i just do something else, i normally don't think any better way to protect my account then a google authenticator code that changes every 30 seconds in my phone , or is there something better ?

You should be safe with the Google Authenticator as it's a stand alone application on your phone. However, I highly recommend that you change your Blockchain.info password and on every website where you use this password as well.

[Josef27]

In my experience, Probably, depend on how you manage your Google Authenticator's account.
But I'm pretty sure it safer than none.

[Mr Moustache]

I know that is my fault, but what i am asking is :

Am i safe with google authenticator ,or should i just do something else, i normally don't think any better way to protect my account then a google authenticator code that changes every 30 seconds in my phone , or is there something better ?

You should be safe with the Google Authenticator, but I highly recommend that you change your Blockchain.info password and on every website where you use this password as well.

He should be safe but you should never solely rely on these things. I'd also scan your computer for malware and make sure you don't have a keylogger first, because if you do changing your password wont do much good as they'll immediately know it.

[Mitchell]

He should be safe but you should never solely rely on these things. I'd also scan your computer for malware and make sure you don't have a keylogger first, because if you do changing your password wont do much good as they'll immediately know it.

That is a pretty good point yeah. Should have included that in my original post, my bad.

[kingofbitcoin]

Thanks a lot for your replies. I use Linux so no need to scan my PC, i am sure i got phished in my work PC when i got hacked my gmail account also (that did the bad job to me, here also my fault leaving it without 2FA but know i have google sending me a message to my phone everytime i use a different pc then that of my home) , so i think i should be pretty ok now, anyway to change main password in Blockchain i have to move funds to another wallet so i need to create a new one. I think GA is best to use.  Thanks again for your answers.

[NeuroticFish]

Also if you think that the priv key (backup) may have leaked (ex if you keep it on cloud) make yourself a new address (and change the place of backup)

[Mitchell]

Thanks a lot for your replies. I use Linux so no need to scan my PC, i am sure i got phished in my work PC when i got hacked my gmail account also (that did the bad job to me, here also my fault leaving it without 2FA but know i have google sending me a message to my phone everytime i use a different pc then that of my home) , so i think i should be pretty ok now, anyway to change main password in Blockchain i have to move funds to another wallet so i need to create a new one. I think GA is best to use.  Thanks again for your answers.

You don't have to move the funds to a different wallet if you add a second password. Even if they have your password and get passed GA, they still need to find your second password (which is used when someone tries to transfer funds). They can't disable it either, unless they know your second password.

[kingofbitcoin]

Well i add a second password ,but i forgot it already. Any chance to recover it And yes you were right , i am scanning work PC via Eset smart security and already a lot of infiltrations, wow. That must have been it.

Thanks i just remembered my second password.

[Mitchell]

Well i add a second password ,but i forgot it already. Any chance to recover it And yes you were right , i am scanning work PC via Eset smart security and already a lot of infiltrations, wow. That must have been it.

Thanks i just remembered my second password.

I recommend you to use Malware Bytes' Anti-Malware as well. It works really good.

[waterpile]

Why not just make another wallet and enable the e-mail verification.. If you're going to use your old wallet then you're still giving the hacker a chance to hacked it,again

[kingofbitcoin]

Thanks i removed 22 out of 23 infiltrations. I want to use this same wallet, send the hacker 0.02 USD and send him a message to piss him off to the max.

That malware bytes is quite something, removed 484 threats, and many of them were keystrokers, or keyloggers , i am happy i post here about this problem.

[waterpile]

Thanks i removed 22 out of 23 infiltrations. I want to use this same wallet, send the hacker 0.02 USD and send him a message to piss him off to the max.

That malware bytes is quite something, removed 484 threats, and many of them were keystrokers, or keyloggers , i am happy i post here about this problem.

once your computer is infected there is no guarantee assurance that it is malware free. There are sneaky malware that an anti-virus can't detect it..

[Amph]

Thanks i removed 22 out of 23 infiltrations. I want to use this same wallet, send the hacker 0.02 USD and send him a message to piss him off to the max.

That malware bytes is quite something, removed 484 threats, and many of them were keystrokers, or keyloggers , i am happy i post here about this problem.

add malware exploit to it for better protection, and zeman for anti key logger, key-stroke protection, i'm using those tree and i feel like i'm in a bunker

[sgk]

Thanks i removed 22 out of 23 infiltrations. I want to use this same wallet, send the hacker 0.02 USD and send him a message to piss him off to the max.

That malware bytes is quite something, removed 484 threats, and many of them were keystrokers, or keyloggers , i am happy i post here about this problem.

484 infections is quite something to worry about.
There is no guarantee that your antivirus caught 100% of malware. It is possible some of them went undetected and still remain on your machine.

If you control that machine, I would suggest you format it and do a clean install of OS.

Also, once you're done pissing off the hacker with your old wallet, just get over it and create a new wallet with fresh email and password.
This time enable 2FA from start.

[abyrnes81]

It is impossible to hack any blockchain, it is possible to hack the various third services like online wallet and exchange.

[sgk]

It is impossible to hack any blockchain, it is possible to hack the various third services like online wallet and exchange.

OP is most likely talking about his hot wallet on https://blockchain.info/ website

[kingofbitcoin]

I want firmly to stay on my old wallet, although knowing the risks of this, GA is quite something, also added a very long second password, so i guess i should be safe for the time being. Can't change my wallet address as i have a website where i get paid in BTC (PAIDVERTS) so i receive some money from there. So yeah i am sticking to old wallet and don't care about the hacker now. Basically he can't just bypass GA, or at least i was reading on internet, there is not much possibility to bypass it.