Someone hacking mybitcoin.com accounts: Proof

[nhodges]

I have the IP!!!!! MBC was at least smart enough to give me that. They were hacked and now won't do anything for us? A**holes. 24.184.196.101
Light em up, boys!

Nothing you really can do, just like someone can do a chargeback when you sell them WoW gold.

[1714136664]

1714136664

[jerfelix]

I have the IP!!!!! MBC was at least smart enough to give me that. They were hacked and now won't do anything for us? A**holes. 24.184.196.101
Light em up, boys!

Might want to check with the good folks at optonline.net.

Code:

C:\>tracert 24.184.196.101

Tracing route to ool-18b8c465.dyn.optonline.net [24.184.196.101]
over a maximum of 30 hops:

And remember, you can have better luck if you call as a network admin, talking to one of their network admins.  As soon as you get the police involved, they'll likely insist on a subpoena.  But if you call one of their network admins, and let them know the time and, if they won't give you the name of the user (I doubt they will), maybe you can have them set aside the name of the user for when the police come.  Preserve the records.

Not sure how you got the IP address, or how reliable that is, but that's what I'd do.

PS  I should add that this was advice given to me by local police about 8 years ago, when I was investigating a hacking incident where I was pretty sure I knew who the intruder was.

[aceman1011]

Ermmm... Not worth it. I am gonna try the remote access metasploit attack and see if I can steal this persons wallet later. Involving the police doesn't really seem worth it though. They're in Brooklyn, and the hacking incident occurred in servers in the West Indies. 

[NicholasBell]

24.184.196.101 is a Tor exit node according to https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=194.63.142.59&port=80, so it's almost impossible to figure out who it actually was. Good luck though for what it's worth.

[aceman1011]

24.184.196.101 is a Tor exit node according to https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=194.63.142.59&port=80, so it's almost impossible to figure out who it actually was. Good luck though for what it's worth.

Ummm... You entered the wrong IP. I did a port scan and it is dead. Definitely not Tor.

[tito13kfm]

I have the IP!!!!! MBC was at least smart enough to give me that. They were hacked and now won't do anything for us? A**holes. 24.184.196.101
Light em up, boys!
http://i53.tinypic.com/3463i2g.jpg

That's the IP of a TOR exit node.  It's not the person who hacked you.

[Clipse]

aceman101 do you even have any proof that it wasnt you making that transfer?

There is absolutely no way for this forum to know wether your intend is just to make mybitcoin.com look like shit.

[aceman1011]

Lol, look at all the other posts reporting stolen bitcoins going to the same address. People are reporting that their miner passwords are being changed, and they also have different MtGox passwords. The evidence is all around you, you're just too thick-headed to acknowledge it.

[BCEmporium]

aceman101 do you even have any proof that it wasnt you making that transfer?

There is absolutely no way for this forum to know wether your intend is just to make mybitcoin.com look like shit.

That much we know he didn't. Many mbc accounts were depleted to the same address, one of mine included.
Except in my case I know it was due to the mtgox db party, because it was an account matching mtgox's data, and most (except this guy actually) of the other users felt under the same situation of share a login between mtgox and mbc.

[Clipse]

uh I dont believe you, simple as that.

I had my mtgox password unchanged with 25BTC in mybitcoin.com at the time deciding if these rumours were true then someone would steal my coins.

None of it is gone, same password still.

All I can think is that you guys arnt being honest about using a shitty password at mtgox and the same shitty password at mybitcoin.com so it took the crackers <3hrs to find the password.

[EricJ2190]

24.184.196.101 is a Tor exit node according to https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=194.63.142.59&port=80, so it's almost impossible to figure out who it actually was. Good luck though for what it's worth.

Ummm... You entered the wrong IP. I did a port scan and it is dead. Definitely not Tor.

No, it isn't the wrong IP, unless you gave us the wrong IP. The IP address you posted is in the list. As to why your port scan comes up empty-handed, it could be filtering incoming connections, or just be too bogged down to handle your connection attempt.

[BCEmporium]

Beats me how the cracker got to a 14 char upper+lower+numeric salted password, but... he did.
Not blaming it on mbc thou.

@Eric,

Guess you would need to start by explaining to him what is Tor in the first place... 

[NicholasBell]

24.184.196.101 is a Tor exit node according to https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=194.63.142.59&port=80, so it's almost impossible to figure out who it actually was. Good luck though for what it's worth.

Ummm... You entered the wrong IP. I did a port scan and it is dead. Definitely not Tor.

No, it isn't the wrong IP, unless you gave us the wrong IP. The IP address you posted is in the list. As to why your port scan comes up empty-handed, it could be filtering incoming connections, or just be too bogged down to handle your connection attempt.

Right -- that is a list of some Tor exit nodes among which the offending IP is listed. That IP in the URL (194.63.142.59) was just part of the search result link from Google but that wasn't the important part.

[aceman1011]

I found it in the list now. Sucks, since Tor has evolved to the point where it is virtually untraceable. Who knows what kind of security MBC has, since most of these bitcoin sites were hastily thrown together. Once the hackers start sellin off their btc, bye bye bitcoins. At thus point, setting up an anonymous gold exchange makes much more sense. Let people stet mining and set up "pools" and unions.

[WilliamJohnson]

My balance on mybitcoin is now 0, too.

My bitcoins went to 1MAazCWMydsQB5ynYXqSGQDjNQMN3HFmEu as well.

I had only 0.84BTC, so I don't really care, but I just wanted to confirm what the OP said.

However, it is possible I used the same password for my Mt. Gox account (which I never really used. I had no $ nor BTC in Mt. Gox, so once again, I don't really care).

[TraderTimm]

My balance on mybitcoin is now 0, too.

My bitcoins went to 1MAazCWMydsQB5ynYXqSGQDjNQMN3HFmEu as well.

I had only 0.84BTC, so I don't really care, but I just wanted to confirm what the OP said.

However, it is possible I used the same password for my Mt. Gox account (which I never really used. I had no $ nor BTC in Mt. Gox, so once again, I don't really care).

But you cared enough to post.

CONTRADICTION COMPLETE.