How I lost 95 Bitcoin

[DirtyMartini]

REQUEST

Could the OP, or someone knowledgeable on this type of situation, speculate on the ACTUAL mechanism of this attack? What did the OP actually do, that gave away his private key? Was it stolen from the computer's clip board (copy/paste?)

Knowing HOW this kind of stuff happens will make it easier for other people to be more secure.
Thanks

I'm still investigating, I'll update when I find the exact mechanism.

I've also just realised that the attacker took 120 Litecoin from me on the 22nd of September, so my computer had been compromised for at least 18 days.

https://live.blockcypher.com/ltc/tx/852187add4e47fb1c25df7df7d6efd9c19f4ebf3bda0e4d1e5d7793bf1fc5e33/

Ouch man, that's shocking, 100 BTC hurts in anyone's book. You seriously need to speak to a lawyer and go to the authorities, at least for the formality of making a report. PS: These things are usually not random.. Unfortunately, most likely its someone you know.

The lesson for everyone else is: Any more than a couple thousand bucks in coins MUST be kept on a Ledger/Trezor.
And DONT use the same computer for Bitcoin wallets as you do for downloading torrents etc.. Too many people have been burnt this way.
Also do malware scans everyday. I use iObit Advanced System Care and iObit Malware Fighter and these have kept my computers clean for years, highly recommended!

I hope you get to the bottom of this 

[1714698248]

1714698248

[1714698248]

1714698248

[LFC_Bitcoin]

If the story is true, you should contact law enforcement. They could do forensics and issue supoenas to ISP's etc. A lawyer would be a good idea too.

Absolutely!

This is far too large a sum of money to not fight to the death over. Somebody needs to follow the trail & see if possible, where these bitcoin are sold.

OP do you download many files or programmes on your PC? I’m trying to wonder where you would have picked up this virus/malware.

[okissabam]

That's such a huge amount to loose but I was wondering how'd it happened when Ledger or any type of hardware wallet should supposedly be safe to use from. I wish you could get to the bottom of what really happened though, hopefully you'll earn back the money you lost too.

[daserpent]

Wow! That hurts to even read!!

I would suggest you make a police complaint so that, if incase in future, the keylogger is traced back to an entity, you will proof with a police complaint that the hacker owns 95BTC of yours.

Other than that, you can only try to find the source of the keylogger, where you got it from to begin with. That give you clues about who or where the hackers are from.

[Welsh]

I feel for you. I've only ever lost Bitcoin through bad investments so far, but have had a few people try and send various different malicious code to me through the years. But, this is why I've always sworn by paper wallets. Keeping a offline copy which was created on a offline computer and stored in a safe location is the best way for me to make sure everything is secure.

Obviously, I know for some people who need constant access it's much easier to store their wallet on their personal computer. But, if you are going to do that then it's best to keep very small amounts in different wallets and different computers if possible.

[BitcoinMarshal]

I can understand your feeling because one year back I lost only 1.5 bitcoins in a scam and never sleep for few days as this amount was too much for me and you lost 95 Bitcoins its very sad I don't think this can came back in your wallet but you still can try to approach blockchain and keep in touch with peoples can help you in this case hope you have some good news in near future

[zypa]

I hope you can recover them in a way but as much as I read it is impossible...

[diguyo]

That sucks, and a horrible thing for someone to do. I feel for you and hope you manage to find a resolution. Sad to hear this, I hate that this still happens and that people muddy crypto with this type of activity. Stay strong.

[DoublerHunter]

That is the worst case scenario for a bitcoin user who is holding bitcoin for long term and it is clear that we need more and more security for our computers so we can make sure that the viruses or any malwares will not get into our system or computer. It is better also to have a hardware wallet for keeping bitcoin because that is the simplest and safest way to keep bitcoin for me.

[Proton2233]

That is the worst case scenario for a bitcoin user who is holding bitcoin for long term and it is clear that we need more and more security for our computers so we can make sure that the viruses or any malwares will not get into our system or computer. It is better also to have a hardware wallet for keeping bitcoin because that is the simplest and safest way to keep bitcoin for me.

I don't use hardware store. It seems to me that my bitcoins safer if they are stored in the electronic wallet. But I have never had 100 bitcoins. I know a few people who have a huge amount of bitcoins. They keep their codes on paper in a safe. PC very unreliable place to store such a lot of money. It's not even just that there can easily be infiltrated by hackers. What to do if your PC will be infected with such virus as Petya?

[Sukut]

Wow, that's a huge amount. Hope the law enforcement tracks the keylogger back to the hacker. Please update us on what's happening.

[grermezter]

I bought my first few Bitcoins in 2012; eventually I got around 100 and managed to hold most of them until this point. Yesterday they were stolen from me. Shortly after I made a transaction, I left my PC with Electrum open, I believe there was a key logger waiting for me to type my password as when I returned an hour later, I saw my account had been emptied.

This happened shortly after receiving my hardware wallet (ledger), which I never got round to filling up. Obviously storing £350k(that hurts to type) on my daily computer was a moronic thing to do.

See the transaction here: https://blockchain.info/tx/220caec53bac39cc1a2d2692eecd385bca796fc1a839254ddd622b911344ae97

The Bitcoins were then split and are currently residing at these two addresses:
https://blockchain.info/address/18JCmLzKQoZydXspc6CPwovWVwYtUT7DCx
https://blockchain.info/address/16YiXuw4eaFVvpyhX7mYufwsj77LHrydUx
https://blockchain.info/address/18ZnbD5JQwdEJRwKrb34nXPu7J6pHN1CMR

I know I wont get these Bitcoins back but if anyone knows of a blockchain or malware analysis service or just want to give me advice, I would appreciate it.

-----BEGIN BITCOIN SIGNED MESSAGE-----
This is 56kbkid and I lost all my bitcoins on the 8th of October 2017
-----BEGIN SIGNATURE-----
1NndjYLXPgHmSFYEk5exCabGbcynzqpii4
G5UFrkVd1qGcbVlIyUw0yh0Zls/82K7Liuer6UNUK7yiE/I//7f4clNI70sD/w21vh0HJBkPUj3vvfioxIfj5U0=
-----END BITCOIN SIGNED MESSAGE-----



bitcoinrecovery2017@gmail.com
For information leading to the recovery, I can pay 3 BTC + 50% of the recovered bitcoins

This must clearly be an inside job, Someone knew you had the bitcoins and the person schemed to steal it. If you let other people use your personal computer then you should look into them. No one will install a keylogger on a PC jut like that unless he knew there was something he wanted to steal.

[xskl0]

WTF I felt bad losing less than  0.2BTC trading. This is a huuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuge lost

[xskl0]

DO YOU KNOW THAT MAYBE YOU ALREADY HAVE YOUR BITCOIN CASH?

CHANGE IT OF WALLET NOW[/b]

[faithupgrade]

OMG This is huge dude. These cyber criminals must be put into jail. You made a right thing to put a signed message. One day this transaction can be used to find the owner. Thanks Google for caching it.

I bought my first few Bitcoins in 2012; eventually I got around 100 and managed to hold most of them until this point. Yesterday they were stolen from me. Shortly after I made a transaction, I left my PC with Electrum open, I believe there was a key logger waiting for me to type my password as when I returned an hour later, I saw my account had been emptied.

This happened shortly after receiving my hardware wallet (ledger), which I never got round to filling up. Obviously storing £350k(that hurts to type) on my daily computer was a moronic thing to do.

See the transaction here: https://blockchain.info/tx/220caec53bac39cc1a2d2692eecd385bca796fc1a839254ddd622b911344ae97

The Bitcoins were then split and are currently residing at these two addresses:
https://blockchain.info/address/18JCmLzKQoZydXspc6CPwovWVwYtUT7DCx
https://blockchain.info/address/16YiXuw4eaFVvpyhX7mYufwsj77LHrydUx
https://blockchain.info/address/18ZnbD5JQwdEJRwKrb34nXPu7J6pHN1CMR

I know I wont get these Bitcoins back but if anyone knows of a blockchain or malware analysis service or just want to give me advice, I would appreciate it.

-----BEGIN BITCOIN SIGNED MESSAGE-----
This is 56kbkid and I lost all my bitcoins on the 8th of October 2017
-----BEGIN SIGNATURE-----
1NndjYLXPgHmSFYEk5exCabGbcynzqpii4
G5UFrkVd1qGcbVlIyUw0yh0Zls/82K7Liuer6UNUK7yiE/I//7f4clNI70sD/w21vh0HJBkPUj3vvfioxIfj5U0=
-----END BITCOIN SIGNED MESSAGE-----



bitcoinrecovery2017@gmail.com
For information leading to the recovery, I can pay 3 BTC + 50% of the recovered bitcoins

[Lucius]

This is a terribly big loss of BTC(if it is true) and warning to all users that we can at any time stay without our coins if we do not take the maximum possible safety measures.There are people who only try to find ways how to steal something and get easy money.Steal BTC or any other cryptocurrency is it becomes increasingly popular because of the ways in which traces can be hidden.I bet that these thieves are everywhere, even on this forum,and they use all available methods to find potential victims.I hope people will start to worry more about security and how to keep coins safe.

[BitcoinMuscle]

You cannot do anything now. They are gone and it is over. Even if you find how your bitcoin were stolen and by who you cannot prove that. Also you cant go to the police since bitcoin is anonymous and there is no way to prove that you owned that 95 bitcoins.
You have to think about every possible person who knew that you have 95 bitcoins in your wallet. Did you posted somewhere on the internet? Did you told your friends? Did you posted anything on the internet that can lead a hacker to you? If you are absolutely sure none of this happened ,it could be an inside job but there is a very small chance for that

[Opquar]

That was physically painful for me to read. If you don't mind me asking, what operating system were you using? For you to have been involved in Bitcoin this long, you should be quite adept at protecting yourself online. I guess it just goes to show that you can never be truly safe, especially if you get targeted specifically, which it looks like you were.

[zypa]

But how can you get a keylogger without yourself downloading manually a virus / keylogger?

[dreamer81]

ya know what? This smells fishy! You say you've been in bitcoin in years, and yet your account is only a newbie? Come on. How stupid do you think we are? Your signature is not even correct..

to others try yourself https://tools.bitcoin.com/verify-message/

1NndjYLXPgHmSFYEk5exCabGbcynzqpii4

This is 56kbkid and I lost all my bitcoins on the 8th of October 2017

1NndjYLXPgHmSFYEk5exCabGbcynzqpii4  G5UFrkVd1qGcbVlIyUw0yh0Zls/82K7Liuer6UNUK7yiE/I//7f4clNI70sD/w21vh0HJBkPUj3vvfioxIfj5U0=




it's another scam. Dont fall for this BS

remove '1NndjYLXPgHmSFYEk5exCabGbcynzqpii4  ' from the signature and it's valid.. I just tried on that website.

When I login with my original account (56kbkid), I get the message:
'Your account is locked because it sat inactive for years after the password hashes were leaked in 2015, and was therefore at high risk of being hacked. Email react-vdnp8@theymos.e4ward.com to get it unlocked.'

Why would I remove "your" wallet address? That is the whole purpose of signing messages! That you prove that you own that address. But obviously you dont own it, so you didn't loose any coins. You are just trying to scam! Unbelieveable how many in here is falling for your claims