My (and i think some others) blockchain.info wallet was hacked

[starik69]

I have a wallet on blockchain.info with address 1AeuWyXeQvdG1eDqht1hAc3w4t2duPU83G. Today i woke up and see that most of my bitcoins have gone with this transaction
https://blockchain.info/en/tx/c84f9ea080b9e6aad84af6daa7c6b018c62caf9615aa583ccfe5ead6228b3f7c

I never did it myself, so somebody guessed my 15 letters password and stole my coins, i think in one bunch among with 108.8BTC from other blockchain.info wallets.

Be careful!

[refaelsh]

I have a wallet on blockchain.info with address 1AeuWyXeQvdG1eDqht1hAc3w4t2duPU83G. Today i woke up and see that most of my bitcoins have gone with this transaction
https://blockchain.info/ru/tx/c84f9ea080b9e6aad84af6daa7c6b018c62caf9615aa583ccfe5ead6228b3f7c

I never did it myself, so somebody guessed my 9 letters password and stole my coins, i think in one bunch among with 108.8BTC from other blockchain.info wallets.

Be careful!

Dude, the link is in Russian, not every body understands Russian (I do :-)).

[z12]

Sorry for your loss.. So it seems bitcoin has gathered a lot of hacker attention.
It seems there is no need for goverments to waste millions to try to destroy bitcoins, hackers are doing it for them for free.
What Operating system were you using?

And change /ru/ to /en/ for english version

[starik69]

My system is W8 x64, chrome browser. I dont think t have some troyan or keylogger.

[Akka]

My system is W8 x64, chrome browser. I dont think t have some troyan or keylogger.

Blockchain Wallets with weak passwords get "hacked" all the time.

Did you use a weak password? 1 or 2 regular word and a view numbers for example?

[fr33d0miz3r]

My system is W8 x64, chrome browser. I dont think t have some troyan or keylogger.

Sorry for offtopic, but... are you from Tver?

[refaelsh]

I have a wallet on blockchain.info with address 1AeuWyXeQvdG1eDqht1hAc3w4t2duPU83G. Today i woke up and see that most of my bitcoins have gone with this transaction
https://blockchain.info/en/tx/c84f9ea080b9e6aad84af6daa7c6b018c62caf9615aa583ccfe5ead6228b3f7c

I never did it myself, so somebody guessed my 15 letters password and stole my coins, i think in one bunch among with 108.8BTC from other blockchain.info wallets.

Be careful!

I suggest that next time You use the LastPass plugin for Chrome and a 100 character password. That's what I do.

[starik69]

Yes, now i think my password may be weak, it was some non obvious words and i hoped it was difficult to bruteforce 15 letters.

I am not from Tver.

[🏰 TradeFortress 🏰]

Looks like possibly related to whiskers75?

[starik69]

Yes, whiskers75 address 1whiskD55W4mRtyFYe92bN4jbsBh1sZut is somehow related. It is also here - https://bitcointalk.org/index.php?topic=173134.0

[demzie]

And the two factor email auth? Dont you use that?

[starik69]

Nope, was only one password. Its not a big loss for me, i collected some free bitcoins from various sites that give them, so was not especially worried about security.

[dli7319]

me too, how??

[doobadoo]

how do they even get a copy of the wallet?  and a 15 character pass is pretty hard, unless you use a movie title, or  famous quote.   several random words is hard to beat, or am i wrong on that?

[starik69]

In my case words were not random, but it was not some recognizable or having some sense phrase.

[doobadoo]

In my case words were not random, but it was not some recognizable or having some sense phrase.

yeah then its impossible it was hacked cause it sounds random enough.  was it something like   dogpeesinfamilypot?  or samgoestothedrycleaners?

that might as well be as random as it gets.  and 15 char is a lot to brute force.  some one had ur key strokes and clip board with the link to blockinfo.

otherwise we are talking man in the middle, and thats just not very likely.

[dli7319]

I'm guessing wallets weren't encrypted

[starik69]

My passphrase had some short real words, not obvious, with no sense, but arranged in some simple algorithm. Now i think it could be guessed.
Another way could be not hacking password, but something like stealing session cookies, my bad i dont know much about such things.

[dli7319]

No way the passwords of that many ppl was guessed

[doobadoo]

did you click any links in the btc-e chatroom, or other bitcoin chatrooms while logged into blockinfo?

use firefox, use noscript