WALLET HACKED

[evangelosm]

hI,
i was hacked. I log in and i see a transaction i did not made. What can i do? Please help. I offer a reward of 3 bitcoins.

[evangelosm]

I was hacked in another pc. Accidentaly i i downloaded a malicious software. When i realized i went to another pc and restored from seed. But now btc gone. How did this happen since i went to another pc?

[Abdussamad]

because your wallet was also on the PC with the malware. all malware needs is the seed. doesn't matter if they get it on PC A or PC B

[evangelosm]

Thank you for your answer. And what should i have done to avoid the loss  since i knew i downloaded malware?

[mocacinno]

Thank you for your answer. And what should i have done to avoid the loss  since i knew i downloaded malware?

Since you seem to keep +3BTC, in hindsight, you should have invested 100 bucks for a hardware wallet... Or at least keep the bulk of your funds on a paper wallet, generated on a clean, airgapped PC.

If you were asking what you could have done after you realised you downloaded malware? If the malware created and broadcasted a transaction that emptied your wallet, you *could* have tried to double spend one or more of the unspent outputs used in the stealing transaction... But that's about it. Creating such a transaction is rather technical, and hard to do if you have little experience in manually creating transactions, it is also a longshot without any guarantee of recovering your funds whatsoever.

Once a transaction is confirmed, there is no way of recovering your funds (so, on average you only have ~5 minutes to react before your money is gone forever).

Sorry...

[evangelosm]

I understand. Thank you for answering.

[Abdussamad]

In addition to restoring your old wallet on the second PC i.e. the clean PC you should have created a new wallet and then moved the bitcoins from the old wallet to an address in the new wallet. The old wallet was compromized so keeping bitcoins in it was no longer safe.

[evangelosm]

Thanks Abdussamad for info. So transaction is irreversible. But is there a way to trace where the money have gone? Who received them? Please help if you know.

[xaviervilla]

hI,
i was hacked. I log in and i see a transaction i did not made. What can i do? Please help. I offer a reward of 3 bitcoins.

I do not want to call you dumb or anything but sad thing is, i jave already said it. I know this would he the last thing you would wanna hear after losing such a huge amount but you have to hear it. Becausdn bruh?! This has happened so many times to lots of people over and over again! And a good nimber of them have been sharing their experiences here and on other websites. You should've been more careful and stored important data far from an electronic device that you often use! Let alone a pc that you use to download loads of stuff.

But what's done is done. I hope you learned your lesson and that others learn from this story too.

[mocacinno]

Thanks Abdussamad for info. So transaction is irreversible. But is there a way to trace where the money have gone? Who received them? Please help if you know.

Sort off... If you look up the transaction on a block explorer like blockchain.info, you should be able to follow where your funds are going to.
However, if the thieve uses a mixer, deposits the funds to the hotwallet of a casino, exchanges your BTC for a more anonymous crypto currency, the trail will end.

You can follow the trail as long as possible, and look up the addresses in the trail on https://www.walletexplorer.com, bitcointalk.org and/or google you *might* find more information about the thief... Chances are slim you'll find the culprit tough, they're usually smart enough to avoid any traces.

[evangelosm]

Thank you again for your answers. I see that my funds are now to address 1LQnt3FZ9NZEv5fwCgPj2xHwVJs8LbXBDj
Is there a way to block them?

[mocacinno]

Thank you again for your answers. I see that my funds are now to address 1LQnt3FZ9NZEv5fwCgPj2xHwVJs8LbXBDj
Is there a way to block them?

Nope... The only option you got is keep on tracking and hoping that at one point, the funds can be tied to an addres whose owner is known. At this point you can report said owner to the police....
But don't get your hopes up, chances that this will happen are very slim. Usually hackers will launder the money very fast.

Wait: if the funds are now @ that address, this means that this is your address: https://blockchain.info/nl/address/113cesQ3HJxEkzZ9iRXg3jMoFgKMXhiCgA

Why are you depositing funds to a hacked/compromised wallet!!!

This is a ver bad idear

[evangelosm]

mine was 1ANivXndigqi7bEGinxyV25E8PjATXa843 actually. Thank you one more time for your kind intention to help.

[mocacinno]

mine was 1ANivXndigqi7bEGinxyV25E8PjATXa843 actually. Thank you one more time for your kind intention to help.

I see... The hacker stole your fubds, moved it to a temp addres, then moved to the addres it's currently on... Never mind my warning then...

I'm very sorry for you... 29 btc is a lot of money to lose.
Just in case you'te somebody who has even more btc: a trezor hw wallet costs 100 bucks and should protect you from hackers and virusses

[sunsilk]

That's a lot, this is what I've been worrying before that I shouldn't open my wallet into other PC especially if I don't own that unit.

I feel sorry for your lost mate, mocacinno is right. If you have this big amount of bitcoin you should invest and take a pinch on your fund and buy your own hardware wallet.

Security is what you needed most and even it costs an amount, you will be fine with it and you are assured that your funds are protected.

[jerry0]

Do you know how you got hacked?  This is very serious since electrum seems to be the preferred wallet for most etc.


How do electrum wallets get hacked?

[HCP]

Do you know how you got hacked?  This is very serious since electrum seems to be the preferred wallet for most etc.

As the OP stated... He downloaded malware... It wasn't a security flaw in Electrum

How do electrum wallets get hacked?

Through poor security practices by wallet owners... For instance, downloading infected software that installs viruses/trojans/malware...

Insecure/non-updated operating systems that have unpatched bugs that allow hackers access...

Once the malware is on the machine, there are various ways they can leak the info to the hacker, some detect certain programs and send screenshots, so they can see when your seed/private key is displayed... Some scan for wallet files... and then log keystrokes so they can detect passwords etc

Some just trick you into sending coins to the wrong address but replacing addresses detected on the clipboard with their own

[Cereberus]

Do you know how you got hacked?  This is very serious since electrum seems to be the preferred wallet for most etc.


How do electrum wallets get hacked?

It is not Electrum fault if the user didn't used already discussed security measures here. First and foremost the user should install Electrum right after they have formatted their hard drive and made a clear installation of their OS. Next they should go to the official website and download Electrum wallet. Then save the seed in some safe place. Last they install a very powerful antivirus or internet security suite and only then they continue to work normally. This way Electrum is as safe as a hardware wallet. I am keeping a great part of my bitcoin in Electrum although I have a ledger HW.1 hardware wallet. I have taken security measures so I cannot be hacked by amateurs hackers on the internet.

[blockman]

Do you know how you got hacked?  This is very serious since electrum seems to be the preferred wallet for most etc.

It's very easy to know if you have been hijacked or your wallet has been hacked. You'll only see the balance on your wallet "0" or if there are remaining most of your funds are stolen and sent to other address. Electrum is trustworthy and they are aware of these things that's why there are guidelines on their main website.

How do electrum wallets get hacked?

When you logged in/export your private key in other computers that you have no idea on what's being installed there.