MTGOX account is hacked. Cash gone. No I did not have a Yubikey

[fuz9]

At 8:30PM PST tonight I received an email notification that money had been transfered out of my Mtgox account totalling $2777 USD. Somebody who accessed my account bought BTC at 128.9 and then transfered the entire contents of my account out except for $7.00 .I was logged into my own computer at the time in Bellevue,WA. The trade notification from MTGOX lists the IP as 63.141.253.124 which shows in the state of Kansas. I have opened three help tickets with MTGOX, two were closed with no notes or notification and no response in the last hour twenty.

My question for the forum;

Is there any recourse on my side?

Has this happened to anybody else?

Will I get my money back?

If i get my money back I will immeadiately purchase a Yubikey for some two-factor authentication

THanks,

[1714947097]

1714947097

[1714947097]

1714947097

[Remember remember the 5th of November]

That IP seems to have caused trouble for others too https://bitcointalk.org/index.php?topic=180746.msg1887735#msg1887735
In a nutshell, you might have been infected with a virus.

[tmbp]

That IP seems to have caused trouble for others too https://bitcointalk.org/index.php?topic=180746.msg1887735#msg1887735
In a nutshell, you might have been infected with a virus.

1. Epic username
2. There are plenty of trojans targeting Bitcoins these days (ESPECIALLY MT GOX)
3. Don't install and give full permission to crappy video players that ask you for a Java update on a bitcoin related website.

[QuestionAuthority]

You could call the Bitcoin Police and have them take a report. jk

This is about the equivalent of losing an unmarked envelope full of cash in a New York Subway Station.

[fuz9]

I uninstalled Java a couple months ago when the Department of Homeland Security issued a Java exploit warning, i recently reinstalled Java in order to get Vuze to work so I could see what the Mother of Dragons was up to this week. I've just uninstalled Java again...

Is there any way to nullify a transaction on the BTC network? Flag it as fraudulent somehow?

FWIW - the target wallet address out of MTGOX was 1yi3cas8bzR9ZPsB9Z33xknBWwhDCNpVC

[Remember remember the 5th of November]

That IP seems to have caused trouble for others too https://bitcointalk.org/index.php?topic=180746.msg1887735#msg1887735
In a nutshell, you might have been infected with a virus.

1. Epic username
2. There are plenty of trojans targeting Bitcoins these days (ESPECIALLY MT GOX)
3. Don't install and give full permission to crappy video players that ask you for a Java update on a bitcoin related website.

1. Thanks
2. It's likely the virus is still operating on his computer logging in keystrokes and whatnot, if he visited his e-mail, other exchange accounts he is likely compromised even further.

I uninstalled Java a couple months ago when the Department of Homeland Security issued a Java exploit warning, i recently reinstalled Java in order to get Vuze to work so I could see what the Mother of Dragons was up to this week. I've just uninstalled Java again...

Is there any way to nullify a transaction on the BTC network? Flag it as fraudulent somehow?

FWIW - the target wallet address out of MTGOX was 1yi3cas8bzR9ZPsB9Z33xknBWwhDCNpVC

No, the whole point of Bitcoin is no chargebacks.

[fuz9]

I've uninstalled Java and ran DRweb CureIt and MalwareBytes. I run AVG for my daily antivirus. What am I looking for exactly?

[Remember remember the 5th of November]

I've uninstalled Java and ran DRweb CureIt and MalwareBytes. I run AVG for my daily antivirus. What am I looking for exactly?

Open up Task Manager and try to find a suspicious process. Some have weird lettering like 6jmok65e.exe, others would disguise themselves as svhost.exe(the real being svchost.exe). Most system processes are located in C:\Windows\System32.

[fuz9]

C:\Users\"username"\AppData\Roaming\WinDir is listed in MSconfig, this OS is going down for the last time. Thanks guys! FML

[BenTuras]

You can also use Google Authenticator on your smart phone. Then you don't have to wait for the Yubikey to arrive.

[Remember remember the 5th of November]

C:\Users\"username"\AppData\Roaming\WinDir is listed in MSconfig, this OS is going down for the last time. Thanks guys! FML

Switching to Linux?

[🏰 TradeFortress 🏰]

I uninstalled Java a couple months ago when the Department of Homeland Security issued a Java exploit warning, i recently reinstalled Java in order to get Vuze to work so I could see what the Mother of Dragons was up to this week. I've just uninstalled Java again...

Is there any way to nullify a transaction on the BTC network? Flag it as fraudulent somehow?

FWIW - the target wallet address out of MTGOX was 1yi3cas8bzR9ZPsB9Z33xknBWwhDCNpVC

Nope. Reinstall Windows.

[crazy_rabbit]

You know if you are dealing with a couple thousand dollars it makes sense to buy a dedicated Linux laptop just to handle all your bitcoin stuff. They cost like 300$ probably the best investment you could make.

[Mike Hearn]

For something like this you don't really know what caused it. It could just as easily be phishing as malware.

[MPOE-PR]

Is there any way to nullify a transaction on the BTC network? Flag it as fraudulent somehow?

#23.What will you do about stolen coins ? How will you help the rightful owner ?
By definition the rightful owner of any coins is "he who can send them". If you take issue with that, please stick to fiat. You are not ready for Bitcoin yet.

[kgo]

Have you reported the crime?

[tmbp]

Have you reported the crime?

Report it to who? To the even bigger dumbasses?

[AceCoin]

do something secure, with money, in internet, without a OTP generator???  
you can gain hundred dollars and do not buy yubikey?
yubikey is not an insurance, but almost there...
is very very important, like a bank token, one thing to do absolutely when you are in mtgox, like account verification...

[DataPlumber]

Not sure how I can say this strongly enough:

Your entertainment computer is NOT the computer you use for real money transactions.

For clarity: BitcoinTalk counts as entertainment, and any computer your kids have touched is now an entertainment computer.

[Syke]

You must use 2-factor authentication. Google Authenticator is good, free, and on tons of platforms.

http://en.wikipedia.org/wiki/Google_Authenticator

And yes, MtGox supports it.