arsat14 (OP)
Newbie
 Offline
Activity: 29
Merit: 0
|
 |
July 10, 2017, 10:08:55 AM |
|
My chain of communication with Poloniex
----------------------------------------------------------------------------------------------- Hi xxxx, I am very sorry that this has happened to you, however we have not had any breach of security on our side and this incident is specific to your individual account. We can not be held responsible for any breach where the attacker has used your login details to gain access to your account. Your greatest risk is an account breach due to your login credentials being stolen through phishing or social engineering, which is most likely the case here. This is why it is so important to have 2FA enabled on your account. Also critical: the email address the account is registered under needs to be carefully protected as well, including a unique password and 2FA. Ideally, these accounts should be accessed either from a dedicated computer or a computer that is used for as little else as possible. Any sort of remote access software, such as Team Viewer or VNC, should be completely removed. It is not possible to reverse trades and if the funds have already since left our system/been withdrawn then unfortunately they will be gone forever due to the nature of blockchain technology. Our compliance team are investigating this particular matter however and if it surfaces that we can recover any or all of your funds then we would indeed inform you of this in due course. Thank you for understanding. Best regards, Kevin Poloniex Support Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/271818B xxxx, said 4 days ago Thanks Kevin, Please let me know how long will it take for your compliance team to investigate this particular matter. Also please send me the evidence of who traded against me (the thief) and the evidence if the funds have since left the system. And if the funds have not left the exchange have you made any effort to block the thief's account and recover my funds. I would need all that information in the legal proceedings to follow. I did not have any security breach at my end and all my passwords Were secure. At the end of the day I have been a victim of a crime and exchange should do all it can to recover funds. Thanks, xxx K Kevin, said 4 days ago Hi xxx, First of all, your account details were not leaked by us. We have never had any data breach on our system. This has arisen from the attacker knowing your login details, most likely due to phishing or social engineering, or possibly even something so simple as a malicious browser extension. With regards to your request, unfortunately we cannot disclose details of an account to a 3rd party without a subpoena from law enforcement. Best regards, Kevin Poloniex Support thats completely and utterly bulls"it, they have the power to freeze any account they like and they can easily track down who's account was doing this and freeze it, it seems to me they don't care about what this hacker is doing. Thats true, I sent them a screen shot of trading graph and exact time of the attack, on the very illiquid pair. They still have not investigated this from the looks of it! totally outrageous its beyond a joke. I've just updated my ticket to tell them my password was one of a kind, never used anywhere else, i never give my password to anyone, don't write it down anywhere, and Is used on a secure devise. if they was to actually bother they could freeze his/her account and recover the funds, they just can't be bothered. i still think these exchanges should insure everyones funds for such things, i would happily pay a monthly fee if they did such thing. Do you think we should start a legal action? I have lost a lot because of this |
|
|
|
|
|
maddox7
|
|
July 10, 2017, 10:15:46 AM |
|
I am sorry for your lost guys  I can remember there was a phishing website 2 or 3 months ago which was looking exactly the same as the official polo site but with ending .ru... Did you guys use that website in the past? |
|
|
|
|
alyssa85
Legendary
Offline
Activity: 1652
Merit: 1088
CryptoTalk.Org - Get Paid for every Post!
|
|
July 10, 2017, 10:29:35 AM |
|
My chain of communication with Poloniex
----------------------------------------------------------------------------------------------- Hi xxxx, I am very sorry that this has happened to you, however we have not had any breach of security on our side and this incident is specific to your individual account. We can not be held responsible for any breach where the attacker has used your login details to gain access to your account. Your greatest risk is an account breach due to your login credentials being stolen through phishing or social engineering, which is most likely the case here. This is why it is so important to have 2FA enabled on your account. Also critical: the email address the account is registered under needs to be carefully protected as well, including a unique password and 2FA. Ideally, these accounts should be accessed either from a dedicated computer or a computer that is used for as little else as possible. Any sort of remote access software, such as Team Viewer or VNC, should be completely removed. It is not possible to reverse trades and if the funds have already since left our system/been withdrawn then unfortunately they will be gone forever due to the nature of blockchain technology. Our compliance team are investigating this particular matter however and if it surfaces that we can recover any or all of your funds then we would indeed inform you of this in due course. Thank you for understanding. Best regards, Kevin Poloniex Support Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/271818B xxxx, said 4 days ago Thanks Kevin, Please let me know how long will it take for your compliance team to investigate this particular matter. Also please send me the evidence of who traded against me (the thief) and the evidence if the funds have since left the system. And if the funds have not left the exchange have you made any effort to block the thief's account and recover my funds. I would need all that information in the legal proceedings to follow. I did not have any security breach at my end and all my passwords Were secure. At the end of the day I have been a victim of a crime and exchange should do all it can to recover funds. Thanks, xxx K Kevin, said 4 days ago Hi xxx, First of all, your account details were not leaked by us. We have never had any data breach on our system. This has arisen from the attacker knowing your login details, most likely due to phishing or social engineering, or possibly even something so simple as a malicious browser extension. With regards to your request, unfortunately we cannot disclose details of an account to a 3rd party without a subpoena from law enforcement. Best regards, Kevin Poloniex Support thats completely and utterly bulls"it, they have the power to freeze any account they like and they can easily track down who's account was doing this and freeze it, it seems to me they don't care about what this hacker is doing. Thats true, I sent them a screen shot of trading graph and exact time of the attack, on the very illiquid pair. They still have not investigated this from the looks of it! totally outrageous its beyond a joke. I've just updated my ticket to tell them my password was one of a kind, never used anywhere else, i never give my password to anyone, don't write it down anywhere, and Is used on a secure devise. if they was to actually bother they could freeze his/her account and recover the funds, they just can't be bothered. i still think these exchanges should insure everyones funds for such things, i would happily pay a monthly fee if they did such thing. Do you think we should start a legal action? I have lost a lot because of this You need to report it to the police (you should have done this straight way). They are the only ones able to compel Polo to release the details of the person who traded against you, and to pursue the other trader for the funds (and try them in court). It's no good suing Polo - they can prove you didn't have 2fa, and therefore they are not liable (especially as the terms and conditions when you signed up probably say something to the effect thay you are responsible for making sure your passwords are not stolen. |
|
|
|
arsat14 (OP)
Newbie
Offline
Activity: 29
Merit: 0
|
|
July 10, 2017, 10:57:06 AM |
|
My chain of communication with Poloniex
----------------------------------------------------------------------------------------------- Hi xxxx, I am very sorry that this has happened to you, however we have not had any breach of security on our side and this incident is specific to your individual account. We can not be held responsible for any breach where the attacker has used your login details to gain access to your account. Your greatest risk is an account breach due to your login credentials being stolen through phishing or social engineering, which is most likely the case here. This is why it is so important to have 2FA enabled on your account. Also critical: the email address the account is registered under needs to be carefully protected as well, including a unique password and 2FA. Ideally, these accounts should be accessed either from a dedicated computer or a computer that is used for as little else as possible. Any sort of remote access software, such as Team Viewer or VNC, should be completely removed. It is not possible to reverse trades and if the funds have already since left our system/been withdrawn then unfortunately they will be gone forever due to the nature of blockchain technology. Our compliance team are investigating this particular matter however and if it surfaces that we can recover any or all of your funds then we would indeed inform you of this in due course. Thank you for understanding. Best regards, Kevin Poloniex Support Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/271818B xxxx, said 4 days ago Thanks Kevin, Please let me know how long will it take for your compliance team to investigate this particular matter. Also please send me the evidence of who traded against me (the thief) and the evidence if the funds have since left the system. And if the funds have not left the exchange have you made any effort to block the thief's account and recover my funds. I would need all that information in the legal proceedings to follow. I did not have any security breach at my end and all my passwords Were secure. At the end of the day I have been a victim of a crime and exchange should do all it can to recover funds. Thanks, xxx K Kevin, said 4 days ago Hi xxx, First of all, your account details were not leaked by us. We have never had any data breach on our system. This has arisen from the attacker knowing your login details, most likely due to phishing or social engineering, or possibly even something so simple as a malicious browser extension. With regards to your request, unfortunately we cannot disclose details of an account to a 3rd party without a subpoena from law enforcement. Best regards, Kevin Poloniex Support thats completely and utterly bulls"it, they have the power to freeze any account they like and they can easily track down who's account was doing this and freeze it, it seems to me they don't care about what this hacker is doing. Thats true, I sent them a screen shot of trading graph and exact time of the attack, on the very illiquid pair. They still have not investigated this from the looks of it! totally outrageous its beyond a joke. I've just updated my ticket to tell them my password was one of a kind, never used anywhere else, i never give my password to anyone, don't write it down anywhere, and Is used on a secure devise. if they was to actually bother they could freeze his/her account and recover the funds, they just can't be bothered. i still think these exchanges should insure everyones funds for such things, i would happily pay a monthly fee if they did such thing. Do you think we should start a legal action? I have lost a lot because of this You need to report it to the police (you should have done this straight way). They are the only ones able to compel Polo to release the details of the person who traded against you, and to pursue the other trader for the funds (and try them in court). It's no good suing Polo - they can prove you didn't have 2fa, and therefore they are not liable (especially as the terms and conditions when you signed up probably say something to the effect thay you are responsible for making sure your passwords are not stolen. I did report it to police straight away, though police has done nothing yet, I do not think police even understands the complexity of the issue |
|
|
|
|
trade-and-train
Member
Offline
Activity: 61
Merit: 10
|
|
July 10, 2017, 11:20:30 AM |
|
My chain of communication with Poloniex
----------------------------------------------------------------------------------------------- Hi xxxx, I am very sorry that this has happened to you, however we have not had any breach of security on our side and this incident is specific to your individual account. We can not be held responsible for any breach where the attacker has used your login details to gain access to your account. Your greatest risk is an account breach due to your login credentials being stolen through phishing or social engineering, which is most likely the case here. This is why it is so important to have 2FA enabled on your account. Also critical: the email address the account is registered under needs to be carefully protected as well, including a unique password and 2FA. Ideally, these accounts should be accessed either from a dedicated computer or a computer that is used for as little else as possible. Any sort of remote access software, such as Team Viewer or VNC, should be completely removed. It is not possible to reverse trades and if the funds have already since left our system/been withdrawn then unfortunately they will be gone forever due to the nature of blockchain technology. Our compliance team are investigating this particular matter however and if it surfaces that we can recover any or all of your funds then we would indeed inform you of this in due course. Thank you for understanding. Best regards, Kevin Poloniex Support Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/271818B xxxx, said 4 days ago Thanks Kevin, Please let me know how long will it take for your compliance team to investigate this particular matter. Also please send me the evidence of who traded against me (the thief) and the evidence if the funds have since left the system. And if the funds have not left the exchange have you made any effort to block the thief's account and recover my funds. I would need all that information in the legal proceedings to follow. I did not have any security breach at my end and all my passwords Were secure. At the end of the day I have been a victim of a crime and exchange should do all it can to recover funds. Thanks, xxx K Kevin, said 4 days ago Hi xxx, First of all, your account details were not leaked by us. We have never had any data breach on our system. This has arisen from the attacker knowing your login details, most likely due to phishing or social engineering, or possibly even something so simple as a malicious browser extension. With regards to your request, unfortunately we cannot disclose details of an account to a 3rd party without a subpoena from law enforcement. Best regards, Kevin Poloniex Support thats completely and utterly bulls"it, they have the power to freeze any account they like and they can easily track down who's account was doing this and freeze it, it seems to me they don't care about what this hacker is doing. Thats true, I sent them a screen shot of trading graph and exact time of the attack, on the very illiquid pair. They still have not investigated this from the looks of it! totally outrageous its beyond a joke. I've just updated my ticket to tell them my password was one of a kind, never used anywhere else, i never give my password to anyone, don't write it down anywhere, and Is used on a secure devise. if they was to actually bother they could freeze his/her account and recover the funds, they just can't be bothered. i still think these exchanges should insure everyones funds for such things, i would happily pay a monthly fee if they did such thing. Do you think we should start a legal action? I have lost a lot because of this i am from the U.K if you're also from U.K, i would defiantly be interested in starting legal action with you, i have also lost a lot due to this and its set me back a bit. |
|
|
|
|
trade-and-train
Member
Offline
Activity: 61
Merit: 10
|
|
July 10, 2017, 11:24:10 AM |
|
I am sorry for your lost guys I can remember there was a phishing website 2 or 3 months ago which was looking exactly the same as the official polo site but with ending .ru... Did you guys use that website in the past? hello, i always double check the url before signing in and i have poloniex bookmarked so i only ever access it by this means to make sure i never go on a fishing site, i just want a reply or statement from polo i don't think its to much to ask for if I'm honest |
|
|
|
|
arsat14 (OP)
Newbie
Offline
Activity: 29
Merit: 0
|
|
July 10, 2017, 11:25:05 AM |
|
My chain of communication with Poloniex
----------------------------------------------------------------------------------------------- Hi xxxx, I am very sorry that this has happened to you, however we have not had any breach of security on our side and this incident is specific to your individual account. We can not be held responsible for any breach where the attacker has used your login details to gain access to your account. Your greatest risk is an account breach due to your login credentials being stolen through phishing or social engineering, which is most likely the case here. This is why it is so important to have 2FA enabled on your account. Also critical: the email address the account is registered under needs to be carefully protected as well, including a unique password and 2FA. Ideally, these accounts should be accessed either from a dedicated computer or a computer that is used for as little else as possible. Any sort of remote access software, such as Team Viewer or VNC, should be completely removed. It is not possible to reverse trades and if the funds have already since left our system/been withdrawn then unfortunately they will be gone forever due to the nature of blockchain technology. Our compliance team are investigating this particular matter however and if it surfaces that we can recover any or all of your funds then we would indeed inform you of this in due course. Thank you for understanding. Best regards, Kevin Poloniex Support Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/271818B xxxx, said 4 days ago Thanks Kevin, Please let me know how long will it take for your compliance team to investigate this particular matter. Also please send me the evidence of who traded against me (the thief) and the evidence if the funds have since left the system. And if the funds have not left the exchange have you made any effort to block the thief's account and recover my funds. I would need all that information in the legal proceedings to follow. I did not have any security breach at my end and all my passwords Were secure. At the end of the day I have been a victim of a crime and exchange should do all it can to recover funds. Thanks, xxx K Kevin, said 4 days ago Hi xxx, First of all, your account details were not leaked by us. We have never had any data breach on our system. This has arisen from the attacker knowing your login details, most likely due to phishing or social engineering, or possibly even something so simple as a malicious browser extension. With regards to your request, unfortunately we cannot disclose details of an account to a 3rd party without a subpoena from law enforcement. Best regards, Kevin Poloniex Support thats completely and utterly bulls"it, they have the power to freeze any account they like and they can easily track down who's account was doing this and freeze it, it seems to me they don't care about what this hacker is doing. Thats true, I sent them a screen shot of trading graph and exact time of the attack, on the very illiquid pair. They still have not investigated this from the looks of it! totally outrageous its beyond a joke. I've just updated my ticket to tell them my password was one of a kind, never used anywhere else, i never give my password to anyone, don't write it down anywhere, and Is used on a secure devise. if they was to actually bother they could freeze his/her account and recover the funds, they just can't be bothered. i still think these exchanges should insure everyones funds for such things, i would happily pay a monthly fee if they did such thing. Do you think we should start a legal action? I have lost a lot because of this i am from the U.K if you're also from U.K, i would defiantly be interested in starting legal action with you, i have also lost a lot due to this and its set me back a bit. Yes, I am based in the UK as well, based in London, which city are you located in? |
|
|
|
|
trade-and-train
Member
Offline
Activity: 61
Merit: 10
|
|
July 10, 2017, 11:39:42 AM |
|
My chain of communication with Poloniex
----------------------------------------------------------------------------------------------- Hi xxxx, I am very sorry that this has happened to you, however we have not had any breach of security on our side and this incident is specific to your individual account. We can not be held responsible for any breach where the attacker has used your login details to gain access to your account. Your greatest risk is an account breach due to your login credentials being stolen through phishing or social engineering, which is most likely the case here. This is why it is so important to have 2FA enabled on your account. Also critical: the email address the account is registered under needs to be carefully protected as well, including a unique password and 2FA. Ideally, these accounts should be accessed either from a dedicated computer or a computer that is used for as little else as possible. Any sort of remote access software, such as Team Viewer or VNC, should be completely removed. It is not possible to reverse trades and if the funds have already since left our system/been withdrawn then unfortunately they will be gone forever due to the nature of blockchain technology. Our compliance team are investigating this particular matter however and if it surfaces that we can recover any or all of your funds then we would indeed inform you of this in due course. Thank you for understanding. Best regards, Kevin Poloniex Support Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/271818B xxxx, said 4 days ago Thanks Kevin, Please let me know how long will it take for your compliance team to investigate this particular matter. Also please send me the evidence of who traded against me (the thief) and the evidence if the funds have since left the system. And if the funds have not left the exchange have you made any effort to block the thief's account and recover my funds. I would need all that information in the legal proceedings to follow. I did not have any security breach at my end and all my passwords Were secure. At the end of the day I have been a victim of a crime and exchange should do all it can to recover funds. Thanks, xxx K Kevin, said 4 days ago Hi xxx, First of all, your account details were not leaked by us. We have never had any data breach on our system. This has arisen from the attacker knowing your login details, most likely due to phishing or social engineering, or possibly even something so simple as a malicious browser extension. With regards to your request, unfortunately we cannot disclose details of an account to a 3rd party without a subpoena from law enforcement. Best regards, Kevin Poloniex Support thats completely and utterly bulls"it, they have the power to freeze any account they like and they can easily track down who's account was doing this and freeze it, it seems to me they don't care about what this hacker is doing. Thats true, I sent them a screen shot of trading graph and exact time of the attack, on the very illiquid pair. They still have not investigated this from the looks of it! totally outrageous its beyond a joke. I've just updated my ticket to tell them my password was one of a kind, never used anywhere else, i never give my password to anyone, don't write it down anywhere, and Is used on a secure devise. if they was to actually bother they could freeze his/her account and recover the funds, they just can't be bothered. i still think these exchanges should insure everyones funds for such things, i would happily pay a monthly fee if they did such thing. Do you think we should start a legal action? I have lost a lot because of this i am from the U.K if you're also from U.K, i would defiantly be interested in starting legal action with you, i have also lost a lot due to this and its set me back a bit. Yes, I am based in the UK as well, based in London, which city are you located in? Okay thats great! we should be able to set something legal up, i am based in Hampshire a few hours away |
|
|
|
|
arsat14 (OP)
Newbie
Offline
Activity: 29
Merit: 0
|
|
July 10, 2017, 11:53:14 AM |
|
Cool lets PM,
Anyone else in the region been a victim, the more the merrier, we could all join hands to start the legal proceedings
|
|
|
|
|
arsat14 (OP)
Newbie
Offline
Activity: 29
Merit: 0
|
|
July 10, 2017, 11:55:26 AM |
|
My chain of communication with Poloniex
----------------------------------------------------------------------------------------------- Hi xxxx, I am very sorry that this has happened to you, however we have not had any breach of security on our side and this incident is specific to your individual account. We can not be held responsible for any breach where the attacker has used your login details to gain access to your account. Your greatest risk is an account breach due to your login credentials being stolen through phishing or social engineering, which is most likely the case here. This is why it is so important to have 2FA enabled on your account. Also critical: the email address the account is registered under needs to be carefully protected as well, including a unique password and 2FA. Ideally, these accounts should be accessed either from a dedicated computer or a computer that is used for as little else as possible. Any sort of remote access software, such as Team Viewer or VNC, should be completely removed. It is not possible to reverse trades and if the funds have already since left our system/been withdrawn then unfortunately they will be gone forever due to the nature of blockchain technology. Our compliance team are investigating this particular matter however and if it surfaces that we can recover any or all of your funds then we would indeed inform you of this in due course. Thank you for understanding. Best regards, Kevin Poloniex Support Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/271818B xxxx, said 4 days ago Thanks Kevin, Please let me know how long will it take for your compliance team to investigate this particular matter. Also please send me the evidence of who traded against me (the thief) and the evidence if the funds have since left the system. And if the funds have not left the exchange have you made any effort to block the thief's account and recover my funds. I would need all that information in the legal proceedings to follow. I did not have any security breach at my end and all my passwords Were secure. At the end of the day I have been a victim of a crime and exchange should do all it can to recover funds. Thanks, xxx K Kevin, said 4 days ago Hi xxx, First of all, your account details were not leaked by us. We have never had any data breach on our system. This has arisen from the attacker knowing your login details, most likely due to phishing or social engineering, or possibly even something so simple as a malicious browser extension. With regards to your request, unfortunately we cannot disclose details of an account to a 3rd party without a subpoena from law enforcement. Best regards, Kevin Poloniex Support thats completely and utterly bulls"it, they have the power to freeze any account they like and they can easily track down who's account was doing this and freeze it, it seems to me they don't care about what this hacker is doing. Thats true, I sent them a screen shot of trading graph and exact time of the attack, on the very illiquid pair. They still have not investigated this from the looks of it! totally outrageous its beyond a joke. I've just updated my ticket to tell them my password was one of a kind, never used anywhere else, i never give my password to anyone, don't write it down anywhere, and Is used on a secure devise. if they was to actually bother they could freeze his/her account and recover the funds, they just can't be bothered. i still think these exchanges should insure everyones funds for such things, i would happily pay a monthly fee if they did such thing. Do you think we should start a legal action? I have lost a lot because of this i am from the U.K if you're also from U.K, i would defiantly be interested in starting legal action with you, i have also lost a lot due to this and its set me back a bit. Yes, I am based in the UK as well, based in London, which city are you located in? Okay thats great! we should be able to set something legal up, i am based in Hampshire a few hours away Cool lets PM, Anyone else in the region been a victim, the more the merrier, we could all join hands to start the legal proceedings |
|
|
|
|
bernardk
Newbie
Offline
Activity: 19
Merit: 0
|
|
July 10, 2017, 12:50:44 PM |
|
The exact same thing happen to me yesterday. Around 5000 EUR was drained out of my account.
First everything was transferred to BTC->XMR and afterwards traded on pairs with almost no liquidity.
I was completely sure my account was secure. Still have no idea how someone could access my password.
It doesn't help that Poloniex requires you to click a link in an email to withdraw. This gives you a false sense of security.
I was considering this to be my 2FA and never taught about this attack vector with low liquidity pairs.
I'm sure many more people fall victim to this attack that are not posting here. It's also a bit discouraging that Poloniex doesn't show even a bit of interest in fixing or informing users that this can happen. There are many simple things that they could do, just requiring an email confirmation when you first time trade something "strange". They have insight into the whole system, fraud detection should be one of their priorities. This looks like the most common attack right now.
I was lucky as I will survive without this money, but many others could have their lives destroyed. It's also sad to see the community react in such a victim blaming way. Saying, you should have done this or you should have done that. Why are you not as smart as me? Don't keep your money on an exchange!
This is not really helping anyone. We are all humans. Sometimes we forget to set up something (I should definitely change the brake-fluid in my car) or make mistakes. Why don't we work together to try to fix problems and save others? It's not someones fault to assume he is not going to get robbed.
|
|
|
|
|
arsat14 (OP)
Newbie
Offline
Activity: 29
Merit: 0
|
|
July 10, 2017, 01:40:01 PM |
|
The exact same thing happen to me yesterday. Around 5000 EUR was drained out of my account.
First everything was transferred to BTC->XMR and afterwards traded on pairs with almost no liquidity.
I was completely sure my account was secure. Still have no idea how someone could access my password.
It doesn't help that Poloniex requires you to click a link in an email to withdraw. This gives you a false sense of security.
I was considering this to be my 2FA and never taught about this attack vector with low liquidity pairs.
I'm sure many more people fall victim to this attack that are not posting here. It's also a bit discouraging that Poloniex doesn't show even a bit of interest in fixing or informing users that this can happen. There are many simple things that they could do, just requiring an email confirmation when you first time trade something "strange". They have insight into the whole system, fraud detection should be one of their priorities. This looks like the most common attack right now.
I was lucky as I will survive without this money, but many others could have their lives destroyed. It's also sad to see the community react in such a victim blaming way. Saying, you should have done this or you should have done that. Why are you not as smart as me? Don't keep your money on an exchange!
This is not really helping anyone. We are all humans. Sometimes we forget to set up something (I should definitely change the brake-fluid in my car) or make mistakes. Why don't we work together to try to fix problems and save others? It's not someones fault to assume he is not going to get robbed.
Many thanks mate as this was my point of the original post not to say this and that but to help, as I said earlier 2FA is not mandatory and this may exactly be the same person who has robbed me. Makes me wonder if poloniex has done anything to stop this sort of attack. I suspect they have not even looked at my case where I sent them all the evidence to block the thief's account to recover my funds, what a shame |
|
|
|
|
|
|
|
sksaddam
|
|
July 10, 2017, 03:37:18 PM |
|
I do not think poloniex can do anything for you....
|
|
|
|
trade-and-train
Member
Offline
Activity: 61
Merit: 10
|
|
July 10, 2017, 04:25:56 PM |
|
thank-you very much! i shall report this now |
|
|
|
|
|
fistfullofbtc
|
|
July 10, 2017, 09:25:20 PM |
|
the modus operandi does seem honed, i as well as the other poster thought my account would be safe due to the email withdrawal, i never thought they could do such a thing. ive not lost any money as stopped using them a few weeks back, but very sad, as it clear it is a organised gang or someone with either insider knowledge or stolen data.
|
|
|
|
|
|
silvermetal
|
|
July 11, 2017, 02:40:27 PM |
|
Somebody know who to contact in the Netherlands? |
|
|
|
|
topter
Newbie
Offline
Activity: 1
Merit: 0
|
|
July 18, 2017, 01:05:43 PM |
|
My chain of communication with Poloniex
----------------------------------------------------------------------------------------------- Hi xxxx, I am very sorry that this has happened to you, however we have not had any breach of security on our side and this incident is specific to your individual account. We can not be held responsible for any breach where the attacker has used your login details to gain access to your account. Your greatest risk is an account breach due to your login credentials being stolen through phishing or social engineering, which is most likely the case here. This is why it is so important to have 2FA enabled on your account. Also critical: the email address the account is registered under needs to be carefully protected as well, including a unique password and 2FA. Ideally, these accounts should be accessed either from a dedicated computer or a computer that is used for as little else as possible. Any sort of remote access software, such as Team Viewer or VNC, should be completely removed. It is not possible to reverse trades and if the funds have already since left our system/been withdrawn then unfortunately they will be gone forever due to the nature of blockchain technology. Our compliance team are investigating this particular matter however and if it surfaces that we can recover any or all of your funds then we would indeed inform you of this in due course. Thank you for understanding. Best regards, Kevin Poloniex Support Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/271818B xxxx, said 4 days ago Thanks Kevin, Please let me know how long will it take for your compliance team to investigate this particular matter. Also please send me the evidence of who traded against me (the thief) and the evidence if the funds have since left the system. And if the funds have not left the exchange have you made any effort to block the thief's account and recover my funds. I would need all that information in the legal proceedings to follow. I did not have any security breach at my end and all my passwords Were secure. At the end of the day I have been a victim of a crime and exchange should do all it can to recover funds. Thanks, xxx K Kevin, said 4 days ago Hi xxx, First of all, your account details were not leaked by us. We have never had any data breach on our system. This has arisen from the attacker knowing your login details, most likely due to phishing or social engineering, or possibly even something so simple as a malicious browser extension. With regards to your request, unfortunately we cannot disclose details of an account to a 3rd party without a subpoena from law enforcement. Best regards, Kevin Poloniex Support thats completely and utterly bulls"it, they have the power to freeze any account they like and they can easily track down who's account was doing this and freeze it, it seems to me they don't care about what this hacker is doing. Thats true, I sent them a screen shot of trading graph and exact time of the attack, on the very illiquid pair. They still have not investigated this from the looks of it! totally outrageous its beyond a joke. I've just updated my ticket to tell them my password was one of a kind, never used anywhere else, i never give my password to anyone, don't write it down anywhere, and Is used on a secure devise. if they was to actually bother they could freeze his/her account and recover the funds, they just can't be bothered. i still think these exchanges should insure everyones funds for such things, i would happily pay a monthly fee if they did such thing. Do you think we should start a legal action? I have lost a lot because of this i am from the U.K if you're also from U.K, i would defiantly be interested in starting legal action with you, i have also lost a lot due to this and its set me back a bit. Yes, I am based in the UK as well, based in London, which city are you located in? Okay thats great! we should be able to set something legal up, i am based in Hampshire a few hours away Cool lets PM, Anyone else in the region been a victim, the more the merrier, we could all join hands to start the legal proceedings Any updates? Maybe some victims from US, can make collective lawsuit in local court against Poloniex? |
|
|
|
|
arsat14 (OP)
Newbie
Offline
Activity: 29
Merit: 0
|
|
July 18, 2017, 04:10:29 PM |
|
My chain of communication with Poloniex
----------------------------------------------------------------------------------------------- Hi xxxx, I am very sorry that this has happened to you, however we have not had any breach of security on our side and this incident is specific to your individual account. We can not be held responsible for any breach where the attacker has used your login details to gain access to your account. Your greatest risk is an account breach due to your login credentials being stolen through phishing or social engineering, which is most likely the case here. This is why it is so important to have 2FA enabled on your account. Also critical: the email address the account is registered under needs to be carefully protected as well, including a unique password and 2FA. Ideally, these accounts should be accessed either from a dedicated computer or a computer that is used for as little else as possible. Any sort of remote access software, such as Team Viewer or VNC, should be completely removed. It is not possible to reverse trades and if the funds have already since left our system/been withdrawn then unfortunately they will be gone forever due to the nature of blockchain technology. Our compliance team are investigating this particular matter however and if it surfaces that we can recover any or all of your funds then we would indeed inform you of this in due course. Thank you for understanding. Best regards, Kevin Poloniex Support Ticket: https://poloniex.freshdesk.com/helpdesk/tickets/271818B xxxx, said 4 days ago Thanks Kevin, Please let me know how long will it take for your compliance team to investigate this particular matter. Also please send me the evidence of who traded against me (the thief) and the evidence if the funds have since left the system. And if the funds have not left the exchange have you made any effort to block the thief's account and recover my funds. I would need all that information in the legal proceedings to follow. I did not have any security breach at my end and all my passwords Were secure. At the end of the day I have been a victim of a crime and exchange should do all it can to recover funds. Thanks, xxx K Kevin, said 4 days ago Hi xxx, First of all, your account details were not leaked by us. We have never had any data breach on our system. This has arisen from the attacker knowing your login details, most likely due to phishing or social engineering, or possibly even something so simple as a malicious browser extension. With regards to your request, unfortunately we cannot disclose details of an account to a 3rd party without a subpoena from law enforcement. Best regards, Kevin Poloniex Support thats completely and utterly bulls"it, they have the power to freeze any account they like and they can easily track down who's account was doing this and freeze it, it seems to me they don't care about what this hacker is doing. Thats true, I sent them a screen shot of trading graph and exact time of the attack, on the very illiquid pair. They still have not investigated this from the looks of it! totally outrageous its beyond a joke. I've just updated my ticket to tell them my password was one of a kind, never used anywhere else, i never give my password to anyone, don't write it down anywhere, and Is used on a secure devise. if they was to actually bother they could freeze his/her account and recover the funds, they just can't be bothered. i still think these exchanges should insure everyones funds for such things, i would happily pay a monthly fee if they did such thing. Do you think we should start a legal action? I have lost a lot because of this i am from the U.K if you're also from U.K, i would defiantly be interested in starting legal action with you, i have also lost a lot due to this and its set me back a bit. Yes, I am based in the UK as well, based in London, which city are you located in? Okay thats great! we should be able to set something legal up, i am based in Hampshire a few hours away Cool lets PM, Anyone else in the region been a victim, the more the merrier, we could all join hands to start the legal proceedings Any updates? Maybe some victims from US, can make collective lawsuit in local court against Poloniex? Indeed, please PM me if you want to join in, I will be starting legal action soon |
|
|
|
|
|
saqwe
|
|
July 19, 2017, 09:14:52 AM |
|
I do not intend to shock you but this is too much of a loss.
You have some blames though because poloniex use to send you an email with the login details including the ip address of the location that they login in from, you either not checking your email or poloniex account frequently.
This also happened to me but a little bit different, the hacker login into my account and sold off my altcoins to btc then moved my btc into the loan section whereby the funds no longer appear for trading but i can view it in my balance; i then reverse everything and change my password.
Lawsuit against poloniex might be a better option but you need to read their TOS first in order not to be blamed at the end of the judgement.
I am really sorry for your loss but take heart and dont get depressed because you can make more than that if you help yourself to stay alive.
|
|
|
|
|
|
