Stolen ETH from myetherwallet.com

[Draconus]

Yesterday i bought bitindia tokens. I added the new token to myetherwallet, checked the balance and after i saw my 1222 bitindia tokens in my wallet I turned off my computer and went to bed. Today I checked my balance and there are no tokens. There is a transaction 31 minutes after I turned off my computer where my bitindia are being transfered to another address. After that another transaction where 0.06 ether is also transfered at the same address. I can see the address at bitindia under token holders where it is listed with my 1222 bitindia tokens. The address is 0x799ffca55c7a9b7c0910799549a458066b2a5704.
Me buying
19 hrs 2 mins ago (Oct-11-2017 08:13:55 PM +UTC)
From:
0x85233fca620cec68ada9c3cd165d2dc418f3fb63
To:
Contract 0x90502eb2771ca5100e1e0e76f97741870822ae57 
  Contract 0x420335d3deef2d5b87524ff9d0fb441f71ea621f Internal Invoke
    1,122.58064516129032258 ERC20 (Bitindia) TOKEN Transfer From 0x90502eb2771ca5100e1e0e76f97741870822ae57 to 0x85233fca620cec68ada9c3cd165d2dc418f3fb63
 TRANSFER  2.9 Ether  to 0xad30f8bf12a80a86ee497228
Him stealing
18 hrs 28 mins ago (Oct-11-2017 08:44:43 PM +UTC)
From:
0x85233fca620cec68ada9c3cd165d2dc418f3fb63
Contract 0x420335d3deef2d5b87524ff9d0fb441f71ea621f 
 1,122.58064516129032258 ERC20 (Bitindia) TOKEN Transfer From 0x85233fca620cec68ada9c3cd165d2dc418f3fb63 to 0x799ffca55c7a9b7c0910799549a458066b2a5704

Any ideas how this happened? Myetherwallet account is new and only used to buy enjincoin a week ago. Enjin coin is time locked will i lose them too when they go live?

[rezurect]

Yesterday i bought bitindia tokens. I added the new token to myetherwallet, checked the balance and after i saw my 1222 bitindia tokens in my wallet I turned off my computer and went to bed. Today I checked my balance and there are no tokens. There is a transaction 31 minutes after I turned off my computer where my bitindia are being transfered to another address. After that another transaction where 0.06 ether is also transfered at the same address. I can see the address at bitindia under token holders where it is listed with my 1222 bitindia tokens. The address is 0x799ffca55c7a9b7c0910799549a458066b2a5704.
Me buying
19 hrs 2 mins ago (Oct-11-2017 08:13:55 PM +UTC)
From:
0x85233fca620cec68ada9c3cd165d2dc418f3fb63
To:
Contract 0x90502eb2771ca5100e1e0e76f97741870822ae57 
  Contract 0x420335d3deef2d5b87524ff9d0fb441f71ea621f Internal Invoke
    1,122.58064516129032258 ERC20 (Bitindia) TOKEN Transfer From 0x90502eb2771ca5100e1e0e76f97741870822ae57 to 0x85233fca620cec68ada9c3cd165d2dc418f3fb63
 TRANSFER  2.9 Ether  to 0xad30f8bf12a80a86ee497228
Him stealing
18 hrs 28 mins ago (Oct-11-2017 08:44:43 PM +UTC)
From:
0x85233fca620cec68ada9c3cd165d2dc418f3fb63
Contract 0x420335d3deef2d5b87524ff9d0fb441f71ea621f 
 1,122.58064516129032258 ERC20 (Bitindia) TOKEN Transfer From 0x85233fca620cec68ada9c3cd165d2dc418f3fb63 to 0x799ffca55c7a9b7c0910799549a458066b2a5704

Any ideas how this happened? Myetherwallet account is new and only used to buy enjincoin a week ago. Enjin coin is time locked will i lose them too when they go live?

Where did you generate your address? Either you went to a phishing site and generated a wallet there and they know your private key. Or your system is compromised in another way, did you download any other wallets recently?

[Draconus]

I only downloaded exodus wallet but I never used it. I traded on kraken so the only reason for using myetherwallet was to buy enjin and bitindia. How can I stop him from taking my enjin coins when they go live?
 I can't move them because they are time locked until the end of the pr-esale.

[Dudukian]

I only downloaded exodus wallet but I never used it. I traded on kraken so the only reason for using myetherwallet was to buy enjin and bitindia. How can I stop him from taking my enjin coins when they go live?
 I can't move them because they are time locked until the end of the pr-esale.

   It seems you created your wallet on the fake site.   You need to stop using that wallet and switch the coins to point to another wallet.   If you cannot, you will need to check the wallet for the deposit and transfer them out before the scammer does.   I have been checking my old wallet everyday in case of a deposit coming in from my mining rigs before I redirected them. 

[Dudukian]

It seems it is still happening .  Someone lost 32 ether yesterday and another person lost 161 about 6 hours ago.  That's  $10,000 and $50,000 respectively.

[Quidat]

I tried to send eth to my other wallet, then after i press generate and send, it sent all to
0x4d517D272CE8D879D8891518E70153b49d2CDb96

https://etherchain.org/account/0x4d517D272CE8D879D8891518E70153b49d2CDb96
 
Anyone else got hacked ?

Would you mind on posting the site link or any informations either a software or something so that people on here would really be aware. Im completely sure that you do being phished and seeing on the transaction on such address there are lots who are victimized on this scheme and now hes accumulating lots of Ether.

[liseff3]

I tried to send eth to my other wallet, then after i press generate and send, it sent all to
0x4d517D272CE8D879D8891518E70153b49d2CDb96

https://etherchain.org/account/0x4d517D272CE8D879D8891518E70153b49d2CDb96
 
Anyone else got hacked ?

This is a departure from typical bitcoin phishing attacks that target known and active cryptocurrency users, Google Allows Phishing Sites to Steal Your Bitcoins Through Ads.

The new phishing campaign was spotted by security researchers from Cyren at the beginning June, when a phishing campaign using the domain blocklchain (as its web address began to spread using Google AdWords).

That even non-bitcoin users are falling for phishing scams that dangle the prospect of cryptocurrency riches in front of them.

[Bonanzacoin]

Most socalled hacks are simply phishing. Probably 95%. Actual hacks mostly only happen on major sites. Not on a single homepc... So if MEW was compromised we would know. The devs would know.... it would be massive. And probably... the hackers would not even get away with it since it would be so big it would probably come out someday who the perpetuators are. Then they wouldnt be safe the rest of their lives.

No matter how much it sucks for the victims of phishing its still their responsibility to be carefull. I must admit im scared if MEW actually still holds... but thats cause of Etherdelta. Which bookmarked my private keys... that is now fixed and my fear is slowly degrading.. but i still dont feel completely safe.

edit: just used mew.... AND ALL MY FN FUNDS ARE STOLEN THE FCK@!

jk

[EthereumPY]

the thief just transfered out huge amount of ether, beside their fkng manipulator government he/she shall go away with this amount of money thats so sad, i really hope to see this garbage person being in a death sentence shooting range of his stupid communist country very soon

the 2 wallets that hold the stolen eth now just to keep recorded

https://etherchain.org/account/0x9a9a78cbb2aecb59f34943354d80a5a8c4496667#txreceived

https://etherchain.org/account/0x057c6a2a5b474bf3115025d1fde01bfc46185673#txreceived

if there are exchange's representative following this topic with help of the community shall track down this, in order to hold his transactions being deposited somewhere specifically   

[wibschen]

Overhere the same problem. 2 days ago I wanted to buy bitindia. I have copied the address and I checked it twice if the address was correct but the ethereum was send to 0x4d517D272CE8D879D8891518E70153b49d2CDb96.
And indeed it was send from myethereunwallet.

What can we do? Hopefully we can get our ethereum back however.....

[Bonanzacoin]

Overhere the same problem. 2 days ago I wanted to buy bitindia. I have copied the address and I checked it twice if the address was correct but the ethereum was send to 0x4d517D272CE8D879D8891518E70153b49d2CDb96.
And indeed it was send from myethereunwallet.

What can we do? Hopefully we can get our ethereum back however.....

from where u opened the website?

[babykika2027]

well, this is a warning for all of us to be more careful in using the privat key of our wallet, already a lot of our friends are exposed to phishing, I think we do not need to display our wallet address on our bitcointalk profile, and not easily click the link of a shipment that is less clear, because it is so widespread theft like this, be careful guys

[keefryan]

Hi.  Can I say that I am genuinely sorry for anyone who has been scammed.  However I am still at a loss as to understand anyone that owns thousands of pounds or dollars of eth that has not invested in a hardware wallet. 
It would completely remove this threat , trezor actually allows you to confirm the amount and the address before it’s sent furthermore your private key never leaves the device so nothing leaves without you pressing the button.     Regards kr

[tanghere02]

My friend also lost his Ethereum and some other coins from a phishing website and said it really looked the same as the original one. I think it's better if you just bookmark the legit website to prevent this from happening again. So sorry for your loss OP but I think you can't retrieve back the coins you lost anymore.

[Draconus]

well finally some good news, notified the police and the cyber crime department of my country and his. They are monitoring the MEW adress as well as the adresses that everything ended in. Almost 1 million dollars there https://etherscan.io/address/0x4c34ae54dc716808e94af3d1d638b8ea3a23fa9b The bitindia stolen are in the original myetherwallet address that stole them from me https://etherscan.io/address/0x799ffca55c7a9b7c0910799549a458066b2a5704 and it belongs to bitcoin forum member saiful who used the same myetherwallet for facebook bounty as you can see in the spreadsheet under facebook bounty:  https://docs.google.com/spreadsheets/d/1VN61OS92gyZSHlYorDMfVVf90n3jl-HKTGbhBXVthNE/htmlview 
659
   05/07/2017 01:27:12   saiful   
https://bitcointalk.org/index.php?action=profile;u=858487;sa=summary
   
https://web.facebook.com/rijal.dimas
   1362   0x799FFca55C7A9b7C0910799549A458066B2a5704   Accepted   2   5   10   120.7729469   

It is a shame that phishing is done by members of this forum but there is still justice in the world. SAIFUL you should be more careful when stealing now pay the price (Indonesian law for stealing is very strict as Jakarta police informed me).

[ranman09]

well finally some good news, notified the police and the cyber crime department of my country and his. They are monitoring the MEW adress as well as the adresses that everything ended in. Almost 1 million dollars there https://etherscan.io/address/0x4c34ae54dc716808e94af3d1d638b8ea3a23fa9b The bitindia stolen are in the original myetherwallet address that stole them from me https://etherscan.io/address/0x799ffca55c7a9b7c0910799549a458066b2a5704 and it belongs to bitcoin forum member saiful who used the same myetherwallet for facebook bounty as you can see in the spreadsheet under facebook bounty:  https://docs.google.com/spreadsheets/d/1VN61OS92gyZSHlYorDMfVVf90n3jl-HKTGbhBXVthNE/htmlview 
659
   05/07/2017 01:27:12   saiful   
https://bitcointalk.org/index.php?action=profile;u=858487;sa=summary
   
https://web.facebook.com/rijal.dimas
   1362   0x799FFca55C7A9b7C0910799549A458066B2a5704   Accepted   2   5   10   120.7729469   

It is a shame that phishing is done by members of this forum but there is still justice in the world. SAIFUL you should be more careful when stealing now pay the price (Indonesian law for stealing is very strict as Jakarta police informed me).

This is great! so we are really able to track them down

[GreatArkansas]

I tried to send eth to my other wallet, then after i press generate and send, it sent all to
0x4d517D272CE8D879D8891518E70153b49d2CDb96

https://etherchain.org/account/0x4d517D272CE8D879D8891518E70153b49d2CDb96
 
Anyone else got hacked ?

Maybe you entered in the wrong website of MEW. There are many cloned website of myetherwallet that are scam. You should bookmark the real website of MEW which is https://myetherwallet.com/ and secured. You can check list of ethereum scams here in database ,check their website: https://etherscamdb.info/scams/

[mela65]

I saw this warning on myetherwallet. Perhaps it is related about this issue

Hey! Listen! MyEtherWallet is prepared for the Byzantium fork. You do NOT need to do anything.
Anyone who DMs you with some announcement on Slack is trying to steal your ETH!

[ultrloa]

I tried to send eth to my other wallet, then after i press generate and send, it sent all to
0x4d517D272CE8D879D8891518E70153b49d2CDb96

https://etherchain.org/account/0x4d517D272CE8D879D8891518E70153b49d2CDb96
 
Anyone else got hacked ?

Maybe you entered in the wrong website of MEW. There are many cloned website of myetherwallet that are scam. You should bookmark the real website of MEW which is https://myetherwallet.com/ and secured. You can check list of ethereum scams here in database ,check their website: https://etherscamdb.info/scams/

This one should need to be consider by the people since there are so many fake MEW websites and he should properly check wherever they like to log in their private key unto that site. Ang people need to be more careful since eth is no dispute option if we been compromised by those damn guys around, And also we should careful on where we put our private keys.

[Bonanzacoin]

I saw this warning on myetherwallet. Perhaps it is related about this issue

Hey! Listen! MyEtherWallet is prepared for the Byzantium fork. You do NOT need to do anything.
Anyone who DMs you with some announcement on Slack is trying to steal your ETH!

thats a scam site...   

jk