rdonohoe (OP)
Newbie
 Offline
Activity: 37
Merit: 0
|
 |
June 19, 2011, 09:43:02 PM |
|
Gmail just told me unusual activity and text me. I had changed my password.
Salt cracked?
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Even if you use Bitcoin through Tor, the way transactions are handled by the network makes anonymity difficult to achieve. Do not expect your transactions to be anonymous unless you really know what you're doing.
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
zerokwel
|
|
June 19, 2011, 09:44:39 PM |
|
there are hacked passwords floating around... change anything that you have the same as that password. facebook/bank/porn site/ etc
|
|
|
|
|
|
dutt
|
|
June 19, 2011, 09:45:34 PM |
|
I use a completely different pass on my gmail, but I got the unusual activity too  |
|
|
|
|
IlbiStarz
|
|
June 19, 2011, 09:45:40 PM |
|
I got it too just now..it wasn't even the same pass as my Mt.Gox though. Maybe it thinks the email from Mt.Gox is suspicious?
|
|
|
|
|
DamienBlack
Jr. Member
Offline
Activity: 56
Merit: 1
|
|
June 19, 2011, 09:46:07 PM |
|
WARNING, IF THEY TOLD YOU IN EMAIL, THE EMAIL IS FAKE, DO NOT CLICK ON LINKS!
This is just a phishing attempt using your email address.
YOU CAN'T TRUST WHO IT SAYS IT IS SENT FROM
EDIT
This is legit, I wonder what they are detecting.
|
|
|
|
|
|
just_someguy
|
|
June 19, 2011, 09:46:55 PM |
|
Same thing here.
However, I extracted just my user info from the db and I'm running john the ripper on it.
It hasn't cracked it so my guess is someone is just going directly after the email accounts.
|
|
|
|
|
rdonohoe (OP)
Newbie
Offline
Activity: 37
Merit: 0
|
|
June 19, 2011, 09:47:12 PM |
|
I'd say it people trying the passwords from the CSV and not being successful but it still looks suspicious to Gmail.
|
|
|
|
|
Chick
Member
Offline
Activity: 70
Merit: 10
|
|
June 19, 2011, 09:47:37 PM |
|
There is no salt with the passwords. Seriously, I rented an Amazon high CPU instance and went crackin' away. These people deserved their accounts to be hacked, seriously. 123456 (fukipuki)
New160611 (New160611)
123456 (christian.fleischhacker@visual)
mkiskin (mkiskin)
123456 (ale4)
uteprv (uteprv)
123456 (nowater)
hello44 (hello44)
123456 (123qaz)
apple (apple)
Derkis (Derkis)
socash (socash)
apple (imac27)
123456 (memset)
apple (haozhou)
123456 (testbug)
frace112 (frace112)
elbio (elbio)
emcor (emcor)
123456 (jojo )
123456 (edgarnumbers)
fordid78 (fordid78)
123456 (sawam) |
|
|
|
|
just_someguy
|
|
June 19, 2011, 09:47:59 PM |
|
WARNING, IF THEY TOLD YOU IN EMAIL, THE EMAIL IS FAKE, DO NOT CLICK ON LINKS!
This is just a phishing attempt using your email address.
Its not in links, its after you directly log in to the site. |
|
|
|
|
rdonohoe (OP)
Newbie
Offline
Activity: 37
Merit: 0
|
|
June 19, 2011, 09:48:42 PM |
|
No it's not an email the gmail logs out and you get a seperate page then they have to text you and verify you. Pitty Mt wasn't this good
|
|
|
|
|
ElectroGeek007
Member
Offline
Activity: 79
Merit: 10
|
|
June 19, 2011, 09:48:59 PM |
|
I got a notification of that as well.  |
"And what the enemy will see, they will see the flash of our cannons, and they will hear the ringing of our swords, and they will know what we can do! By the sweat of our brow and the strength of our backs and the courage in our hearts! Gentlemen, hoist the colors!"
|
|
|
|
zerokwel
|
|
June 19, 2011, 09:50:02 PM |
|
gmail may have got wind of the list and tried to protect users on it ?. bit like what facebook did when lulzsec dumped that porn site database
|
|
|
|
|
dmiii
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 19, 2011, 09:52:23 PM |
|
There is no salt with the passwords. Seriously, I rented an Amazon high CPU instance and went crackin' away.
These people deserved their accounts to be hacked, seriously.
Lol  You should do that on your GPU farm  |
|
|
|
|
|
bitrebel
|
|
June 19, 2011, 09:53:29 PM |
|
I just posted about this, previously. It happened to my hotmail account once I signed up again for Mt Gox to post something to their massage page. It seems to have happened at the exact same time.
|
Why does Bitrebel have 65+ Ignores?
Because Bitrebel says things that some people do not want YOU to hear.
|
|
|
bitcoinaddict
Member
Offline
Activity: 75
Merit: 10
|
|
June 19, 2011, 09:53:50 PM |
|
I got this also, my andriod phone had a warning on it that it failed to sync with Gmail. So I logged in on a browser and lo and behold i had unusual activiy.
So not only has MtGox stolen 47.22 from me on a dwolla transfer on 6/5, they have negligently stored my personal details in an obviously insecure database.
Thank you Mt.Gox. Never doing business with you again.
|
|
|
|
bolapara
Member
Offline
Activity: 78
Merit: 10
|
|
June 19, 2011, 09:54:35 PM |
|
+1
The suspicious activity list doesn't show any logins from others so people must be trying (and failing) to access my account.
My gmail address was in the leak as well. I use unique passwords for all accounts, luckily.
|
|
|
|
|
|
jatajuta
|
|
June 19, 2011, 09:55:50 PM |
|
I got this message too when trying to log on gmail, but im not receiving any code by the telephone i provided so i just cant access my gmail right now.
My pass was very different from the one i used in MtGox so what could be causing this? Just are some people trying to access my account?
|
|
|
|
|
Astrohacker
|
|
June 19, 2011, 09:56:03 PM |
|
This happened to me too. Maybe Google has seen the compromised email list, and just as a security precaution is making everyone on the list change their password? (My password on Gmail was completely different than on Mt Gox; both were randomly generated.)
|
|
|
|
|
|
bitrebel
|
|
June 19, 2011, 09:58:02 PM |
|
But mine was a paypal notice and it was a phishing scam, not from paypal.
They claimed there was unusual activity on my account, but the return address was a spam mail addy.
|
Why does Bitrebel have 65+ Ignores?
Because Bitrebel says things that some people do not want YOU to hear.
|
|
|
tito13kfm
Newbie
Offline
Activity: 42
Merit: 0
|
|
June 19, 2011, 09:59:39 PM |
|
Same here. Good luck cracking my password.
I'll give you a headstart.
Listed salt $1$ZBJdbkqZ$
Listed hash MD/Ln/Ro/cOFIPpWYMHpA.
My password starts with a letter, ends with a number, has a symbol, and more than 15 characters.
If you crack it and post it here I'll send you the remainder of my mtgox funds ($500)
|
|
|
|
|
|
