Random8 (OP)
Newbie
 Offline
Activity: 31
Merit: 0
|
 |
June 18, 2013, 01:24:09 AM |
|
I installed Bitcoin-Qt on my iMac, put some bitcoins in it, and locked the wallet. When I wanted to make a new address to send some bitcoins to an exchange, it asked me to unlock my wallet. I entered the key, and the wallet application locked up. I had to kill the task. When I started it up, it said my wallet was corrupted. I restored my wallet from a backup, and discovered that all of my bitcoins (over 3 coins  ) had been transferred. They had been transferred to an address I've never used before. In fact, I've never transferred any bitcoins out of my wallet. Well, the fact that I lost over $USD300 in coins is bad, but I'll chalk that up to experience. What I'd like to know is how it was done. I can only guess that my computer has been infected with malware that was waiting for me to unlock my wallet so it could do a transfer. Is this a known hack? Thanks, Random8, bitcoin n00b |
|
|
|
|
Jord kim
Newbie
Offline
Activity: 7
Merit: 0
|
|
June 18, 2013, 01:32:12 AM |
|
damn
|
|
|
|
|
pedrog
Legendary
Offline
Activity: 2786
Merit: 1031
|
|
June 18, 2013, 01:33:19 AM |
|
That's quite disturbing!
|
|
|
|
Jord kim
Newbie
Offline
Activity: 7
Merit: 0
|
|
June 18, 2013, 01:36:22 AM |
|
Glad it wasnt me  |
|
|
|
|
Random8 (OP)
Newbie
Offline
Activity: 31
Merit: 0
|
|
June 18, 2013, 01:50:14 AM |
|
If a program that wasn't running on my Mac could connect to Bitcoin-Qt, it might be able to steal the coins, but I don't know how someone from the Internet could do it. I checked my router, and its firewall is running, which should prevent anyone from connecting to the wallet app from the Internet.
Random8
|
|
|
|
|
LizardBitCoin
Newbie
Offline
Activity: 12
Merit: 0
|
|
June 18, 2013, 01:57:50 AM |
|
Are you sure that your BTCs didn't get transferred to a change wallet? Perhaps you want to post the public keys so we can track the transactions on blockchain?
|
|
|
|
|
bongwater
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 18, 2013, 02:11:34 AM |
|
Seems like a user error, doubt you were hacked.
|
|
|
|
|
Random8 (OP)
Newbie
Offline
Activity: 31
Merit: 0
|
|
June 18, 2013, 02:12:20 AM |
|
Lizard,
Thanks for looking at this. The info for the transaction is:
Date: 6/17/13 19:42
To: 1HeAK9siHVWYfWGBVBcGz13WUZkYs5aUGx
Debit: -3.17115309 BTC
Net amount: -3.17115309 BTC
Transaction ID: c60852ef789ed44c4d7ff67e0e43c49a16eed18815b4001e3887e273a4b9a0a2
I notice that the address has been used once before.
Regards,
Random8
|
|
|
|
|
BurtW
Legendary
Offline
Activity: 2646
Merit: 1137
All paid signature campaigns should be banned.
|
|
June 18, 2013, 02:19:10 AM |
|
Did this totally clean out your wallet? I noticed 0.01 BTC left on 1Gi9WcK7gVufFf3eZ5jjK6nWRbPRcigLtH in this transaction. Strange they did not totally clean you out.
|
Our family was terrorized by Homeland Security. Read all about it here: http://www.jmwagner.com/ and http://www.burtw.com/ Any donations to help us recover from the $300,000 in legal fees and forced donations to the Federal Asset Forfeiture slush fund are greatly appreciated! |
|
|
Random8 (OP)
Newbie
Offline
Activity: 31
Merit: 0
|
|
June 18, 2013, 02:19:42 AM |
|
Seems like a user error, doubt you were hacked.
bongwater, That would seem like the most likely scenario, especially given that I'm a bitcoin (although not a computer) n00b. But, I've never even tried to send bitcoins, only received them. I have to make a correction to my original post -- I was trying to create a new RECEIVE key, in order to receive coins from an exchange. That's why I thought I was hacked. Random8 |
|
|
|
|
Random8 (OP)
Newbie
Offline
Activity: 31
Merit: 0
|
|
June 18, 2013, 02:20:34 AM |
|
Did this totally clean out your wallet? I noticed 0.01 BTC left on 1Gi9WcK7gVufFf3eZ5jjK6nWRbPRcigLtH in this transaction. Strange they did not totally clean you out.
Yes, they kindly left 0.01 BTC in my wallet. Random8 |
|
|
|
|
bongwater
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 18, 2013, 02:21:02 AM |
|
Seems like a user error, doubt you were hacked.
bongwater, That would seem like the most likely scenario, especially given that I'm a bitcoin (although not a computer) n00b. But, I've never even tried to send bitcoins, only received them. I have to make a correction to my original post -- I was trying to create a new RECEIVE key, in order to receive coins from an exchange. That's why I thought I was hacked. Random8 What address were the coins sent to? |
|
|
|
|
Random8 (OP)
Newbie
Offline
Activity: 31
Merit: 0
|
|
June 18, 2013, 02:22:30 AM |
|
bongwater,
They were sent to: 1HeAK9siHVWYfWGBVBcGz13WUZkYs5aUGx
The wallet transaction info is shown in another of my posts, above.
Random8
|
|
|
|
|
Random8 (OP)
Newbie
Offline
Activity: 31
Merit: 0
|
|
June 18, 2013, 02:23:45 AM |
|
bongwater,
They were sent to: 1HeAK9siHVWYfWGBVBcGz13WUZkYs5aUGx
The wallet transaction info is shown in another of my posts, above.
Random8
And, is it just coincidence that the address starts with 1HeAK? Sounds like "Hack"? Random8 |
|
|
|
|
bongwater
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 18, 2013, 02:26:56 AM |
|
yea you prob are infected. that sucks.
|
|
|
|
|
|
cp1
|
|
June 18, 2013, 02:29:11 AM |
|
What do you mean that you wanted to make a new address to send to an exchange?
|
|
|
|
Random8 (OP)
Newbie
Offline
Activity: 31
Merit: 0
|
|
June 18, 2013, 02:32:39 AM |
|
What do you mean that you wanted to make a new address to send to an exchange?
Sorry, my mistake. I meant to say that I wanted to make a new address to receive coins from an exchange. I was converting LTC to BTC. When I tried to create the new receive address, it asked me for the wallet password. I entered it, and that's when the hack occurred. Random8 |
|
|
|
|
bongwater
Newbie
Offline
Activity: 14
Merit: 0
|
|
June 18, 2013, 02:35:38 AM |
|
Maybe you restored the wrong wallet.dat?
|
|
|
|
|
Random8 (OP)
Newbie
Offline
Activity: 31
Merit: 0
|
|
June 18, 2013, 02:38:28 AM |
|
Maybe you restored the wrong wallet.dat?
No, it was the most recent backup, about 30 minutes prior, from my Time Capsule. Verified by the last modification date on the wallet.dat file. Random8 |
|
|
|
|
xfusvboq
Newbie
Offline
Activity: 9
Merit: 0
|
|
June 18, 2013, 02:42:35 AM |
|
I think It is hard to be hacked. may be you make a mistake
|
|
|
|
|
|
