Bitcoin Forum
November 01, 2024, 02:01:32 PM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 3 »  All
  Print  
Author Topic: 11 btc gone from my account at 6:00 just a few hours ago, HELP!  (Read 2944 times)
mulletwang (OP)
Member
**
Offline Offline

Activity: 110
Merit: 10


View Profile
April 07, 2013, 01:05:01 PM
Last edit: May 09, 2013, 02:50:19 AM by mulletwang
 #1

Hi i am posting because i had 11 BTC taken from my account just few hours ago. I am wondering if this is widespread or if maybe i have had a security breach of somekind. I have just over a bitcoin left in my account so the perpetrator did not clean me out, but near. Can someone help me out. i not too sure what can be done. i know almost nothing but i want to use this as a lesson. for myself and maybe others. Please let me know what information i can post to maybe shed some light on the situation.

Any help or input, other than trolling would be greatly appreciated.



*********UPDATE*********

RECOVERED MY BITCOINS!!!!!!!!!


This is how i did it. i went to import\export option in the blockchain website, after login in. I went to the "Add Watch Only Bitcoin Address" and inserted the bitcoin address where the coins were stored. It was this address for me 1LqYm5CM6T7QS9kDHRfPckMxZa2nfFN1wV. i added that address into that option an presto.... my balance update to the correct balance.



HORAY! Not too sure why this works or what happened but i am just happy all is well. maybe someone with technical knowledge can fill in the details. Thank you to everyone who contributed in this post and the community at large as i farmed the reddit r\bitcoin for info.

I am smiling from ear to ear.

 Cool Grin Cool Grin Cool Grin Cool Grin Cool Grin Cool

QuantumQrack
Sr. Member
****
Offline Offline

Activity: 337
Merit: 250


View Profile
April 07, 2013, 01:06:28 PM
 #2

Account where?
mulletwang (OP)
Member
**
Offline Offline

Activity: 110
Merit: 10


View Profile
April 07, 2013, 01:09:23 PM
 #3

i use blockchain to access my bitcoins and i got email notification as i woke up out of bed.



 Huh pissed.
chrsjrcj
Full Member
***
Offline Offline

Activity: 280
Merit: 102



View Profile
April 07, 2013, 01:10:25 PM
 #4

Do you use two-factor authentication?
moni3z
Hero Member
*****
Offline Offline

Activity: 899
Merit: 1002



View Profile
April 07, 2013, 01:12:03 PM
 #5

look at the transaction list
enable 2 factor auth cuz you are probably on a botnet and somebody is capturing all your logins
mulletwang (OP)
Member
**
Offline Offline

Activity: 110
Merit: 10


View Profile
April 07, 2013, 01:13:20 PM
 #6

 Cry no was using just my password. i just changed it to two factor. here is the address they were dropped into 1LqYm5CM6T7QS9kDHRfPckMxZa2nfFN1wV

and the transaction 123fba6d51ae901719ca7853cf86aed1a05657927b00d1247cc15beef0be5560
mulletwang (OP)
Member
**
Offline Offline

Activity: 110
Merit: 10


View Profile
April 07, 2013, 01:14:13 PM
 #7

look at the transaction list
enable 2 factor auth cuz you are probably on a botnet and somebody is capturing all your logins

not sure what you mean, can you elaborate...
moni3z
Hero Member
*****
Offline Offline

Activity: 899
Merit: 1002



View Profile
April 07, 2013, 01:16:20 PM
 #8

look at the transaction list
enable 2 factor auth cuz you are probably on a botnet and somebody is capturing all your logins

not sure what you mean, can you elaborate...


2factor ID means you use something else to verify besides just password. Obviously your comp is infected with virus/trojan/botnet and somebody stole your wallet login

https://blockchain.info/wallet/sms-two-factor
https://blockchain.info/wallet/google-authenticator
BurtW
Legendary
*
Offline Offline

Activity: 2646
Merit: 1137

All paid signature campaigns should be banned.


View Profile WWW
April 07, 2013, 01:21:30 PM
 #9

Well they are still at their new home as of now:  http://blockchain.info/address/1LqYm5CM6T7QS9kDHRfPckMxZa2nfFN1wV

2factor ID means you use something else to verify besides just password. Obviously your comp is infected with virus/trojan/botnet and somebody stole your wallet login

https://blockchain.info/wallet/sms-two-factor
https://blockchain.info/wallet/google-authenticator

He already did this (after the fact, but it is done):

i just changed it to two factor

Watch the new address and if they move you may (long shot) be able to see where they go.

Our family was terrorized by Homeland Security.  Read all about it here:  http://www.jmwagner.com/ and http://www.burtw.com/  Any donations to help us recover from the $300,000 in legal fees and forced donations to the Federal Asset Forfeiture slush fund are greatly appreciated!
mulletwang (OP)
Member
**
Offline Offline

Activity: 110
Merit: 10


View Profile
April 07, 2013, 01:23:14 PM
 #10

soooooooo disappointing.  Cry
BurtW
Legendary
*
Offline Offline

Activity: 2646
Merit: 1137

All paid signature campaigns should be banned.


View Profile WWW
April 07, 2013, 01:24:14 PM
 #11

Fishy.

Why didn't they take them all from you?  Why did they only take 11?

Our family was terrorized by Homeland Security.  Read all about it here:  http://www.jmwagner.com/ and http://www.burtw.com/  Any donations to help us recover from the $300,000 in legal fees and forced donations to the Federal Asset Forfeiture slush fund are greatly appreciated!
alexeft
Legendary
*
Offline Offline

Activity: 854
Merit: 1000


View Profile
April 07, 2013, 01:30:51 PM
 #12

Fishy.

Why didn't they take them all from you?  Why did they only take 11?

Indeed!
BurtW
Legendary
*
Offline Offline

Activity: 2646
Merit: 1137

All paid signature campaigns should be banned.


View Profile WWW
April 07, 2013, 01:33:01 PM
 #13

Fishy.

Why didn't they take them all from you?  Why did they only take 11?

Indeed!
Are you SURE that you didn't transfer them somewhere?  BTCJam for example?

Our family was terrorized by Homeland Security.  Read all about it here:  http://www.jmwagner.com/ and http://www.burtw.com/  Any donations to help us recover from the $300,000 in legal fees and forced donations to the Federal Asset Forfeiture slush fund are greatly appreciated!
naphto
Sr. Member
****
Offline Offline

Activity: 392
Merit: 250


View Profile
April 07, 2013, 01:34:12 PM
 #14

Maybe you got bruteforced ...
Joost
Member
**
Offline Offline

Activity: 68
Merit: 10



View Profile
April 07, 2013, 01:45:32 PM
 #15

Maybe you got bruteforced ...

Brute forcing SHA256 is out of the question, people.
mulletwang (OP)
Member
**
Offline Offline

Activity: 110
Merit: 10


View Profile
April 07, 2013, 01:48:48 PM
 #16

yesterday i was sending identity conformation to BTCJAM and mtgox. i don't know if that is relevant to anything or not but i did check my btcjam acc and mtgox and they are not there. as i stated earlier i did not make any transfer as i was asleep.
naphto
Sr. Member
****
Offline Offline

Activity: 392
Merit: 250


View Profile
April 07, 2013, 01:55:47 PM
 #17

Maybe you got bruteforced ...

Brute forcing SHA256 is out of the question, people.


SHA256? What is it?
I found out 5 passwords of blockchain accounts with only a 10 caracters password yesterday, just trying easy ones.
Both 5 accounts were 0 btc :p
BurtW
Legendary
*
Offline Offline

Activity: 2646
Merit: 1137

All paid signature campaigns should be banned.


View Profile WWW
April 07, 2013, 01:56:16 PM
 #18

Maybe you got bruteforced ...
Bitcoin network not possible.

Password maybe.

Did you use a strong password?

Still, the most likely attack vector was a key logger as suggested above.  Check your computer for virus, key logger, etc.

Only thing you can do now is watch the address and see where they go next.

Our family was terrorized by Homeland Security.  Read all about it here:  http://www.jmwagner.com/ and http://www.burtw.com/  Any donations to help us recover from the $300,000 in legal fees and forced donations to the Federal Asset Forfeiture slush fund are greatly appreciated!
BurtW
Legendary
*
Offline Offline

Activity: 2646
Merit: 1137

All paid signature campaigns should be banned.


View Profile WWW
April 07, 2013, 01:57:31 PM
 #19

Maybe you got bruteforced ...

Brute forcing SHA256 is out of the question, people.


SHA256? What is it?
I found out 5 passwords of blockchain accounts with only a 10 caracters password yesterday, just trying easy ones.
Both 5 accounts were 0 btc :p
Interesting.  Why are you trying to hack into peoples accounts?  Are you a thief?

Our family was terrorized by Homeland Security.  Read all about it here:  http://www.jmwagner.com/ and http://www.burtw.com/  Any donations to help us recover from the $300,000 in legal fees and forced donations to the Federal Asset Forfeiture slush fund are greatly appreciated!
naphto
Sr. Member
****
Offline Offline

Activity: 392
Merit: 250


View Profile
April 07, 2013, 02:00:19 PM
 #20

Interesting.  Why are you trying to hack into peoples accounts?  Are you a thief?


no, was just curious to see if people would use the same username / password.
Pages: [1] 2 3 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!