11 btc gone from my account at 6:00 just a few hours ago, HELP!

[Come-from-Beyond]

Maybe you got bruteforced ...

Brute forcing SHA256 is out of the question, people.

SHA256? What is it?
I found out 5 passwords of blockchain accounts with only a 10 caracters password yesterday, just trying easy ones.
Both 5 accounts were 0 btc :p

Isn't it necessary to know wallet id (GUID) as well?

[1715210134]

1715210134

[1715210134]

1715210134

[1715210134]

1715210134

[BurtW]

yesterday i was sending identity conformation to BTCJAM and mtgox. i don't know if that is relevant to anything or not but i did check my btcjam acc and mtgox and they are not there. as i stated earlier i did not make any transfer as i was asleep.

Question:  did you have any other accounts?  StrongCoin for example?  Did you use the same password on any other accounts?  Mt Gox for example?

They may have gotten your password from another account if you use the same password any other place.

In Bitcoinland I use a different password for every single Bitcoin related account.

[Zaih]

Wow that really sucks. Don't give up on Bitcoins though, hopefully this won't occur again!

[BurtW]

Maybe you got bruteforced ...

Brute forcing SHA256 is out of the question, people.

SHA256? What is it?
I found out 5 passwords of blockchain accounts with only a 10 caracters password yesterday, just trying easy ones.
Both 5 accounts were 0 btc :p

Isn't it necessary to know wallet id (GUID) as well?

He may have an obvious alias (I know I do).

[mulletwang]

my allias is kinda obvious but somewhat obscure, how would that llow someone to take me coins?

[naphto]

Isn't it necessary to know wallet id (GUID) as well?

My wallet username was the same as my forum one, and my password was 1234567890.
I found out that the 1234567890 username had the same password. Same goes for 0123456789.

So, even if I had only 0.4 mBTC in my wallet (which is like 5 cents), I changed my password, and I put a confirmation by email on login.

[jackofspades]

Too bad BTC is untraceable, good hackers wouldn't do it if they weren't
good enough to think they weren't get caught, if someone stole it, its gone.

It sucks sorry dude, move on, acquire more and youll make youre money back when
BTC doubles in price within a month. Use more protection (auth)

[thoughtfan]

Another forum member reported someone attempting to guess his blockchain.info wallet password earlier today https://bitcointalk.org/index.php?topic=85687.msg1761904#msg1761904 .

Always use 2 factor folks.  Sorry for your loss.

[DeathAndTaxes]

Always use 2 factor folks.  Sorry for your loss.

This. This. This.

Sadly we see dozens and dozens of these reported cases and not a single one involving 2FA.  Granted 2 factor isn't a magical bullet.  With clever use of trojan/rootkit an attacker could trick you into giving them access to your wallet (or in the case of something like MtGox trick you into withdrawing BTC to their address) but the 2 factor greatly increases the security.

[proudhon]

Always use 2 factor folks.  Sorry for your loss.

This. This. This.

Sadly we see dozens and dozens of these reported cases and not a single one involving 2FA.  Granted 2 factor isn't a magical bullet.  With clever use of trojan/rootkit an attacker could trick you into giving them access to your wallet (or in the case of something like MtGox trick you into withdrawing BTC to their address) but the 2 factor greatly increases the security.

This is going to continue to be a big problem, I think.  Lots of the people getting into bitcoin right now are not well enough acquainted with good security practices regarding passwords, let alone 2 factor auth.

[crazy_rabbit]

Not to spread FUD, but I have the Javascript notification plug in and several times it's poped up a warning. It only did this when I was refreshing the page mid load (or something like that) but I'll tell them anyway.

I use blockchain to monitor accounts (watched addresses) and use two factor. Although I wish there was something like Yubikey support as well. If you steal my computer- I'm logged into my email.

[ninjaboon]

Windows PC?

[ninjaboon]

Another forum member reported someone attempting to guess his blockchain.info wallet password earlier today https://bitcointalk.org/index.php?topic=85687.msg1761904#msg1761904 .

Always use 2 factor folks.  Sorry for your loss.

+10

[TiagoTiago]

It would be nice if that blockchain online wallet service changed their name to not confuse newbies. That is a third-party service, not a part of Bitcoin proper...

[mulletwang]

ourch this bitcoin loss hurts when bitcoin keeps climbing~! 

[mulletwang]

up! Please read the update on original post.

[BurtW]

The 1 BTC in question are still here: http://blockchain.info/address/1LqYm5CM6T7QS9kDHRfPckMxZa2nfFN1wV
Log in to your Blockchain.info wallet.
Go to the "Spend Money" tab.
Click on "Custom"
There should now be a list of "From:" addresses in the Custom Transaction area.
Look through all the "From:" addresses.
Is 1LqYm5CM6T7QS9kDHRfPckMxZa2nfFN1wV listed?

Report back.

ALSO

Go to the "My Transactions" tab.
Navigate back in time to 2013-04-07 10:01:57 and see if there are any transactions around that time in your wallet.
Report back what it says about the transaction.

FINALLY

Go to the "Receive Money" tab.
Look through all the addresses listed there.
Is 1LqYm5CM6T7QS9kDHRfPckMxZa2nfFN1wV listed?

Report back.

Thanks!

[elgreco]

up! Please read the update on original post.

Dude. It's a watching only address. You can add any address there. You can't spend that. Add this address and your balance will be 111k.

http://blockchain.info/address/1933phfhK3ZgFQNLGSDXvqCn32k2buXY8a

[mulletwang]

The 1 BTC in question are still here: http://blockchain.info/address/1LqYm5CM6T7QS9kDHRfPckMxZa2nfFN1wV
Log in to your Blockchain.info wallet.
Go to the "Spend Money" tab.
Click on "Custom"
There should now be a list of "From:" addresses in the Custom Transaction area.
Look through all the "From:" addresses.
Is 1LqYm5CM6T7QS9kDHRfPckMxZa2nfFN1wV listed?

Report back.

ALSO

Go to the "My Transactions" tab.
Navigate back in time to 2013-04-07 10:01:57 and see if there are any transactions around that time in your wallet.
Report back what it says about the transaction.

FINALLY

Go to the "Receive Money" tab.
Look through all the addresses listed there.
Is 1LqYm5CM6T7QS9kDHRfPckMxZa2nfFN1wV listed?

Report back.

Thanks!

ALright you are right about it being a watch only, i cannot spend without the "private key". Any idea what this might be, or how i would figure it out. But yes i did see the address listed and also in the receive money it is listed, as a watch only address though

[BurtW]

If it is not listed in your "From" addresses then you do not have the private key.  So, you do not own the BTC.

Whoever has them has not moved them...  Interesting.