Multiple Bittrex accounts hacked everyone enable 2fa

[shkbits]

Sorry to hear this happened  That is a lot of btc.  This is a great reminder to everyone and myself to do 2F whenever offered.

Yeah man, I wouldn't sleep for 2 weeks if I have lost that much BTC.

leigh2k14,
You said you used to compile wallets from source, is that on windows or linux?

[leigh2k14]

Not me, but I just wanted to say that people reading this should really use 2FA before they also learn the same pricey lesson you and I did (it was a long time ago for me).

I was lazy and thought that nobody would hack me, damn I was wrong.

If your reading this and don't have 2fa set up, DO IT!

Yep, I was lazy to set 2fa too  
All the coins I had there were dumped and I can see a lot of "stupid" orders in my history...

What I can say? SET 2FA!!!

leigh2k14, have you been using the same password anywhere?

No, I only have one password for bittrex.

Did you lose much?

I'm going to format both my machines, I suggest you do the same mate.

I don't remember exact amounts, but it was about 1.5BTC in total, so not that much, fortunately!
No, it's not connected with the machines I'm using and the password is not that easy, so I'm wondering how could that happen at all  

Same here mate.

If any more people were to get hacked i'd say that bittrex had been compromised, but just two I would have to say no.

[leigh2k14]

Sorry to hear this happened  That is a lot of btc.  This is a great reminder to everyone and myself to do 2F whenever offered.

Yeah man, I wouldn't sleep for 2 weeks if I have lost that much BTC.

leigh2k14,
You said you used to compile wallets from source, is that on windows or linux?

Linux mint.

[shkbits]

I have never heard of a keylogger existing on Linux, maybe there is, I am not an expert. If you are using a complicated and unique password, bruteforcing would be difficult and also Bittrex uses captcha for every login, so brute-forcing will also be very slow.

[shkbits]

Have you logged into your Bittrex account from any other PC which you don't own?

[leigh2k14]

I have never heard of a keylogger existing on Linux, maybe there is, I am not an expert. If you are using a complicated and unique password, bruteforcing would be difficult and also Bittrex uses captcha for every login, so brute-forcing will also be very slow.

My password was only eight characters, one uppercase and two numbers.

Not the best.

[leigh2k14]

Have you logged into your Bittrex account from any other PC which you don't own?

No.

[target]

has this something to do with easy passwords? is your password easy to predict?

I hate setting up 2FA actually mobile isn't my thing. I wouldn't mind if I getto login to the site regularly but if not, I would simply avoid setting it up.
I don't login much to my bittrex account i just login in there once and got out since I prefer to buy coins on polo.

[shkbits]

Someone might have got your email and he might be bruteforcing manually. I don't know if there is any tool which can be used to bruteforce forms with captcha.

[andyatcrux]

Sorry to hear this happened to you. Yeah, 2FA is a MUST. But if you do have a keylogger you should probably get Spyshelter and then change all your passwords using a manager like Lastpass.

[Master_dandosha]

Sorry to hear this happened   That is a lot of btc.  This is a great reminder to everyone and myself to do 2F whenever offered.

Yeah man, I wouldn't sleep for 2 weeks if I have lost that much BTC.

leigh2k14,
You said you used to compile wallets from source, is that on windows or linux?

Linux mint.

I thought Linux is a free operating system from Trojan or keylogger or any similar hacking virus ?
is that possible ??

[leigh2k14]

Sorry to hear this happened   That is a lot of btc.  This is a great reminder to everyone and myself to do 2F whenever offered.

Yeah man, I wouldn't sleep for 2 weeks if I have lost that much BTC.

leigh2k14,
You said you used to compile wallets from source, is that on windows or linux?

Linux mint.

I thought Linux is a free operating system from Trojan or keylogger or any similar hacking virus ?
is that possible ??

If a key logger was used, they would only be able to install in my home folder, the rest of the OS needs root privileges.

[leigh2k14]

Someone might have got your email and he might be bruteforcing manually. I don't know if there is any tool which can be used to bruteforce forms with captcha.

I changed my password on my email just for good measure.

[rokkyroad]

Most likely a browser exploit but Mint linux was hacked a while back and a compromised iso was downloaded for a day or two.

http://www.pcworld.com/article/3035682/security/hackers-planted-a-backdoor-inside-a-compromised-version-of-linux-mint.html

[leigh2k14]

Most likely a browser exploit but Mint linux was hacked a while back and a compromised iso was downloaded for a day or two.

http://www.pcworld.com/article/3035682/security/hackers-planted-a-backdoor-inside-a-compromised-version-of-linux-mint.html

My copy pre dates Feb 20th.

[cryptoheadd]

Shit!
You lost 8 BTC.

Setting up 2FA on all of my accounts.

[alyssa85]

Someone might have got your email and he might be bruteforcing manually. I don't know if there is any tool which can be used to bruteforce forms with captcha.

There are email lists for bitcoiners - when Cryptsy was dying, I got a phishing email, but it was to an old email address that I'd had at Mintpal not the email address I actually used at Cryptsy. So i knew they hadn't been hacked. I'm pretty sure that people with accounts at mtgox are on a list somewhere too. If the password you are using is similar, then they probably tried a variation of that.

[traK4Ubitl]

hello.  im sorry about your coins.  id like to ask.  do you have teamviewer, vnc or skype installed in your computers?
it sounds like the attacks may have been local?

also have you installed https everywhere from eff? it is possible a browser or spoof attack

[leigh2k14]

Someone might have got your email and he might be bruteforcing manually. I don't know if there is any tool which can be used to bruteforce forms with captcha.

There are email lists for bitcoiners - when Cryptsy was dying, I got a phishing email, but it was to an old email address that I'd had at Mintpal not the email address I actually used at Cryptsy. So i knew they hadn't been hacked. I'm pretty sure that people with accounts at mtgox are on a list somewhere too. If the password you are using is similar, then they probably tried a variation of that.

I forgot about craptsy, my passwords are very similar.

[leigh2k14]

hello.  im sorry about your coins.  id like to ask.  do you have teamviewer, vnc or skype installed in your computers?
it sounds like the attacks may have been local?

also have you installed https everywhere from eff? it is possible a browser or spoof attack

I have skype installed. Do you know any hacks that can be used on skype?

No I don't have https everywhere, I used to.