Bitcoin Forum
December 09, 2016, 07:23:05 PM *
News: Latest stable version of Bitcoin Core: 0.13.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 [20] 21 22 23 24 25 26 27 28 29 »
  Print  
Author Topic: Trojan Wallet stealer be careful  (Read 47127 times)
KTC
Newbie
*
Offline Offline

Activity: 3

You are actually reading this message.


View Profile
May 25, 2012, 10:37:25 AM
 #381

I prefere TrueCrypt, but thx for the warning.

Hello world !
Some PGP public keys you should import: theymos, BadBear, Sirius, Stefan, Wladimir, Gavin, Gregory, Jeff, Pieter
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
Dice
Member
**
Offline Offline

Activity: 69


View Profile
May 29, 2012, 12:50:33 PM
 #382

I have one of those clear rubber keyboard protectors and thankfully I've not had a virus since I put it on.

Classic.  Is it a trojan brand ? <grins>

To protect my BTC wallet, I encrypt, backup then put it on a usb drive, unplug then delete the wallet from the bitcoin folder.

kind regards
Does this need to happen everytime you recieve or are expecting to receive funds? Or does the backup only need to be created once, (when you are happy with the btc addresses you have) just incase malware effects your pc and destroys the private keys?

Kazimir
Legendary
*
Offline Offline

Activity: 1036



View Profile
May 29, 2012, 05:19:01 PM
 #383

To protect my BTC wallet, I encrypt, backup then put it on a usb drive, unplug then delete the wallet from the bitcoin folder.

kind regards
Does this need to happen everytime you recieve or are expecting to receive funds? Or does the backup only need to be created once, (when you are happy with the btc addresses you have) just incase malware effects your pc and destroys the private keys?
Once in the beginning (after creating your wallet), and then every time you send bitcoins. This will internally create new private addresses (well, depends on client, but the default Bitcoin-Qt clients does).

In theory, there's no difference between theory and practice. In practice, there is.
Insert coin(s): 1KazimirL9MNcnFnoosGrEkmMsbYLxPPob
Dice
Member
**
Offline Offline

Activity: 69


View Profile
May 29, 2012, 09:03:47 PM
 #384

To protect my BTC wallet, I encrypt, backup then put it on a usb drive, unplug then delete the wallet from the bitcoin folder.

kind regards
Does this need to happen everytime you recieve or are expecting to receive funds? Or does the backup only need to be created once, (when you are happy with the btc addresses you have) just incase malware effects your pc and destroys the private keys?
Once in the beginning (after creating your wallet), and then every time you send bitcoins. This will internally create new private addresses (well, depends on client, but the default Bitcoin-Qt clients does).

Thank you. Smiley

tazman
Member
**
Offline Offline

Activity: 69


View Profile
June 06, 2012, 01:52:33 PM
 #385

Scary!
farfie
Jr. Member
*
Offline Offline

Activity: 58



View Profile
June 07, 2012, 05:40:24 PM
 #386

Wait, this thing is still around? Anyway, the best way to "secure" your wallet without really securing it, is putting it on a computer that never gets used for anything. Build a computer, put an OS on it, then just put a wallet with whatever dependencies needed with it and there you go. If Windows, keep it updated through windows updates, linux with its package manager, but don't do anything else with it. Now it is (for the most part) only vulnerable to attacks from other computers on the network. But if it's also on its own network, then you're golden. Not immune, but it's a massive step forward, and encryption isn't even needed. Only turn the computer on when you need to take coins out of the wallet.

A barebones machine like this, that has never even opened a browser, would indeed be about as safe as you could get. More safe than any machine with any antivirus that has connected to the internet at some point.
mash
Newbie
*
Offline Offline

Activity: 9


View Profile
June 08, 2012, 01:07:05 PM
 #387

There is a (new?) trojan wallet stealer out in the wild ATM.

Plenty of script kiddies and scammers are going to be trying to get you to download and install it, what's more they'll be putting posts to do so (using lies obviously).

Don't install anything linked to on this forum, unless it's been found by someone with a good reputation to be legit. Assume everything is an attempt to steal your wallet.

You should also encrypt your wallet when not in use.
http://www.freeotfe.org/

Here is a portable apps version http://www.freeotfe.org/downloads/FreeOTFEExplorer_3_51.paf.exe

You have been warned.

Nefario

That's why we use a MAC Smiley
Jesehl
Member
**
Offline Offline

Activity: 91


View Profile
June 12, 2012, 01:49:29 PM
 #388

can avast prevent this?
Cray-1
Jr. Member
*
Offline Offline

Activity: 36



View Profile
June 13, 2012, 05:38:33 AM
 #389

Good info!!
Kazimir
Legendary
*
Offline Offline

Activity: 1036



View Profile
June 13, 2012, 06:05:28 AM
 #390

That's why we use a MAC Smiley
Nothing more dangerous than a false sense of safety.

Hate to wake you up, but you are by no means less vulnerable than Windows or Linux users, sir Smiley

In theory, there's no difference between theory and practice. In practice, there is.
Insert coin(s): 1KazimirL9MNcnFnoosGrEkmMsbYLxPPob
hoseen
Newbie
*
Offline Offline

Activity: 16


View Profile
June 14, 2012, 05:09:38 AM
 #391

this is why antivirus is key
Kazimir
Legendary
*
Offline Offline

Activity: 1036



View Profile
June 14, 2012, 12:43:34 PM
 #392

Does anyone have an actual, real, live sample of a trojan or virus that steals wallets and bitcoins? It would be great to submit them to antivirus producers.

In theory, there's no difference between theory and practice. In practice, there is.
Insert coin(s): 1KazimirL9MNcnFnoosGrEkmMsbYLxPPob
bangzilla
Newbie
*
Offline Offline

Activity: 2


View Profile
June 14, 2012, 01:56:04 PM
 #393

its pretty scary if you think about it.

you can have thousands of dollars and someone can steal it all
and nobody can help you

i just hope my 15 character alphanumeric password to all my bitcoin related accounts is enough  =D
jbcmine
Member
**
Offline Offline

Activity: 71



View Profile
June 18, 2012, 07:54:06 PM
 #394

That's why we use a MAC Smiley
Nothing more dangerous than a false sense of safety.

Hate to wake you up, but you are by no means less vulnerable than Windows or Linux users, sir Smiley

True, and this false sense of safety is why Flashback was so successful.

http://www.forbes.com/sites/adriankingsleyhughes/2012/04/06/mac-flashback-trojan-are-you-infected-how-do-you-remove-it/
malaimult
Hero Member
*****
Offline Offline

Activity: 658



View Profile
June 18, 2012, 10:34:35 PM
 #395

you can run but you can hide  Roll Eyes somewhere sometime somehow he will get you  Wink

jagallout
Newbie
*
Offline Offline

Activity: 29


View Profile
June 18, 2012, 11:57:53 PM
 #396

Does anyone have an actual, real, live sample of a trojan or virus that steals wallets and bitcoins? It would be great to submit them to antivirus producers.


I havn't read the entire thread, so please forgive me if there are any duplicate comments, but I wanted to address this question out of my experience.  Again, this is simply my take on the subject from only a few hours of research coupled with previous knowledge.

I am a programmer / network administrator by trade, and have close associations with a CEH certified pen tester.  Together in our spare time we theorycraft exploits and research this type of thing in a purely educational light.  After seeing some concept code for the bitcoin stealing wallet and I convinced of 2 things:
1. the antivirus company's are not oblivious - as the code from the prominent trojan a few months back, is actually published by the AV companies and
2. the code is deviously simplistic - once it makes it to your computer, there is very little you can do to prevent it from stealing your wallet.  That being said of course the thieves will need to get through your encryption (you are encrypted, right?), but getting the actual file off of your computer is unfortunately a "no brainer" in the eyes of a moderately skilled coder (this is of course once the malicious software has been downloaded).

I am not an expert at concealing bitcoin wallets, so I will defer to the other threads on the subject posted around this forum.  Some of the best generic advice I can give everyone is to be extremely cautious when downloading files, and honestly even following links on the web.  Any site that is dedicated to bitcoin (and even some that are not) are likely places for someone to attempt to social engineer an attack onto your computer.  Use NoScript (available for firefox at least), and use extreme prejudice when taking a websites word about what their linking you to, or having you download.  Remember you can normally mouse over links to investigate the "actual" target, this is a good habit to get into.

I am sure that as bitcoin gains speed, there will continue to be malicious people and computers out there trying to steal your hard earned/mined coinage.  Just make yourself aware of the possibility, as awareness is the first step toward prevention (wow, I sound like a cliche'd planned parenthood advocate)...

Hope this isn't too obvious of information and is helpful to at least one of you out there!
ALOIS
Jr. Member
*
Offline Offline

Activity: 33


View Profile
June 19, 2012, 05:45:34 PM
 #397

I'm always search name of program, before running it. I advise you guys to do the same. And always keep your AV up-to -date.
billybob
Newbie
*
Offline Offline

Activity: 5


View Profile
June 19, 2012, 07:08:34 PM
 #398

Thanks for the heads up OP.
zero3112
Hero Member
*****
Offline Offline

Activity: 546



View Profile
June 24, 2012, 05:11:16 AM
 #399

Doesn't the official bitcoin client have optional encryption built into it already?
Michail1
Hero Member
*****
Offline Offline

Activity: 719


Www.Michail.Com


View Profile WWW
June 24, 2012, 02:56:25 PM
 #400

I really like the idea of an offline wallet. (The netbook idea)
Did this already, but it was good to see it written.

I use a small thumb drive.  Since I have access to NEW computers all the time, I simply put the backup wallet on the new computer about once a month, just to update and get balance.
So far, so good.

Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 [20] 21 22 23 24 25 26 27 28 29 »
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!