blockchain.info wallet hacked

[hargax]

I've just noticed 4.92BTC have been sent from my wallet to this one: https://blockchain.info/address/1JKJdYSZNrWSca1b9ajejdmjuqooE7TLFr

Just a heads up for everyone.


You Sent

4.92067098 BTC ($ 671.73)

Value at time of transaction $ 717.43


Horrible

[naphto]

Happens.
Bitcoins is unsafe, you should use it only at your own risks.

[Hiroaki]

keylogger...?

[MWNinja]

His blockchain.info alias matches his forum name, and it has no 2-factor authentication.  Attacker grabs the wallet and performs an offline brute force attack.  Guessing the password wasn't very good either. 

[hargax]

His blockchain.info alias matches his forum name, and it has no 2-factor authentication.  Attacker grabs the wallet and performs an offline brute force attack.  Guessing the password wasn't very good either. 

You're right, my password was lazy. Lesson learned.

[lophie]

$717.43 is the cost of this lesson. If you gave this amount to me I would vehemently teach you everything I know about cryptography  . Too bad you did not care enough to invest in learning basic security measures. I still feel bad for you man... well kinda....

[Razick]

I absolutely sympathize. Sure, you should know that strong passwords are necessary, especially for that much money, but I get tired of "Your fault for not securing." No, the shame is all on the no-life asshole who took it.

Sorry this had to happen.

[Wardrick]

I recommend you memorize a few different strings of letters and number and use those for your passwords. Then use lazy passwords for things that people would have no interest in or bother hacking (Sealswithclubs acct. , AurumXchange, etc) unless you're storing a lot of money in there.

The way hackers get your PW is by differentiating in a string of letters and numbers a lot of times, if you're password is a random string of letters and numbers there's no word or certain thing they can look for. I read about this on a bunch of sites, random letters and numbers are the way to go.

[justusranvier]

There is no excuse for using lazy passwords in 2013. Memorize a strong passphrase for a Lastpass account, then use it to generate random unique passwords for every website you use.