MTGOX开通双重验证，依然被盗。盗取途径wow gold (to echopisces)

[hzjixiang]

我的比特币也被盗了，11.31个.虽然不多，但是黑客手段未见过。请大家重视！
我开通了提现google验证，实在想不通被盗的原因。
我的账户本来是不能提现的，昨天刚刚通过认证，可以提现了。
但是今天就被黑客盗走了。

  
提现身份认证的邮件日期
发件人：Mt.Gox <aml@mtgox.com>      
时   间：2013年7月22日(星期一) 中午11:33  
收件人：
 <649013194@qq.com>


今天被盗记录 （这些记录都不是本人操作） 疑点就是wow gold，难道不需要GOOGLE验证码？
2013/07/23 17:47:16   Withdraw      11.21000000 BTC   0.00118048 BTC
wow gold (to echopisces)
2013/07/23 17:46:48   Fee      0.01329975 BTC   11.21118048 BTC
BTC bought: [tid:1374572808423516] 2.41813700 BTC at $94.45000 (0.55% fee)
2013/07/23 17:46:48   In      2.41813700 BTC   11.22448023 BTC
BTC bought: [tid:1374572808423516] 2.41813700 BTC at $94.45000
2013/07/23 17:46:48   Fee      0.00051122 BTC   8.80634323 BTC
BTC bought: [tid:1374572808384355] 0.09294882 BTC at $94.44996 (0.55% fee)
2013/07/23 17:46:48   In      0.09294882 BTC   8.80685445 BTC
BTC bought: [tid:1374572808384355] 0.09294882 BTC at $94.44996
2013/07/23 17:46:48   Fee      0.00180084 BTC   8.71390563 BTC
BTC bought: [tid:1374572808332908] 0.32742459 BTC at $94.44994 (0.55% fee)
2013/07/23 17:46:48   In      0.32742459 BTC   8.71570647 BTC
BTC bought: [tid:1374572808332908] 0.32742459 BTC at $94.44994
2013/07/23 17:46:47   Fee      0.03044374 BTC   8.38828188 BTC
BTC bought: [tid:1374572807623005] 5.53522562 BTC at $94.44992 (0.55% fee)
2013/07/23 17:46:47   In      5.53522562 BTC   8.41872562 BTC
BTC bought: [tid:1374572807623005] 5.53522562 BTC at $94.44992
2013/07/23 17:45:45   Withdraw      0.10000000 BTC   2.88350000 BTC
Buy wow gold (to echopisces)

目前MTGOX给的回复
Marcus, Jul 23 20:29 (JST):
Hello Xiang,

Thank you for your email. We apologize for the inconvenience that this may have caused and looks like your funds where not withdrawn through a normal BTC address and we should research this further and we will keep you updated on the status once the research is completed.

Best regards,

Mt.Gox Team
https://www.mtgox.com

[Attention: Please protect your account using OTP to ensure that your funds are safe and secure. Failing to do so makes your information vulnerable to hackers.
Please visit https://mtgox.com/security]

[hzjixiang]

黑客先是小额测试，提现0.1BTC，成功后将账户全部BTC提走。

提现连个地址都没有，只查到两条这个信息：Buy wow gold (to echopisces)  和 wow gold (to echopisces)

事后我电脑全盘查毒了，没发现有木马。

我电脑系统为WINDOWS 8正版，装谷歌手机验证软件的是 IPHONE 4s

7月25日 更新

MTGOX让我报警，看来追回无望了！
Marcus, Jul 24 15:54 (JST):
Hello Xiang,

Thank you for your confirming the details.

As you have mentioned that this was not authorized by you we request you to change your email address password and Mt.Gox password immediately and we also request not to use the same username and password on different services. You may wish to use the Yubikey or Software Authentication on our Security Center to further secure your accounts. Unfortunately we will not be able to reverse the stolen funds.

Please file a police report in order for the police to investigate the case so that they can make an effort to retrieve the funds and once filing a police report, please send a copy of the police report and your official ID document to Mt.Gox. We will cooperate with the police authority in providing the necessary information for the investigation, but we are unable to reimburse any stolen funds.

Let us know if you have any other questions.

Best regards,

Mt.Gox Team
https://www.mtgox.com

[servicelabs]

有时真怀疑QQ邮箱的安全性！

[vanbollu]

关注。
难道有什么API漏洞？

[dingdingaus]

让更多人看到

我的比特币也被盗了，11.31个.虽然不多，但是黑客手段未见过。请大家重视！
我开通了提现google验证，实在想不通被盗的原因。
我的账户本来是不能提现的，昨天刚刚通过认证，可以提现了。
但是今天就被黑客盗走了。

  
提现身份认证的邮件日期
发件人：Mt.Gox <aml@mtgox.com>      
时   间：2013年7月22日(星期一) 中午11:33  
收件人：
 <649013194@qq.com>


今天被盗记录 （这些记录都不是本人操作） 疑点就是wow gold，难道不需要GOOGLE验证码？
2013/07/23 17:47:16   Withdraw      11.21000000 BTC   0.00118048 BTC
wow gold (to echopisces)
2013/07/23 17:46:48   Fee      0.01329975 BTC   11.21118048 BTC
BTC bought: [tid:1374572808423516] 2.41813700 BTC at $94.45000 (0.55% fee)
2013/07/23 17:46:48   In      2.41813700 BTC   11.22448023 BTC
BTC bought: [tid:1374572808423516] 2.41813700 BTC at $94.45000
2013/07/23 17:46:48   Fee      0.00051122 BTC   8.80634323 BTC
BTC bought: [tid:1374572808384355] 0.09294882 BTC at $94.44996 (0.55% fee)
2013/07/23 17:46:48   In      0.09294882 BTC   8.80685445 BTC
BTC bought: [tid:1374572808384355] 0.09294882 BTC at $94.44996
2013/07/23 17:46:48   Fee      0.00180084 BTC   8.71390563 BTC
BTC bought: [tid:1374572808332908] 0.32742459 BTC at $94.44994 (0.55% fee)
2013/07/23 17:46:48   In      0.32742459 BTC   8.71570647 BTC
BTC bought: [tid:1374572808332908] 0.32742459 BTC at $94.44994
2013/07/23 17:46:47   Fee      0.03044374 BTC   8.38828188 BTC
BTC bought: [tid:1374572807623005] 5.53522562 BTC at $94.44992 (0.55% fee)
2013/07/23 17:46:47   In      5.53522562 BTC   8.41872562 BTC
BTC bought: [tid:1374572807623005] 5.53522562 BTC at $94.44992
2013/07/23 17:45:45   Withdraw      0.10000000 BTC   2.88350000 BTC
Buy wow gold (to echopisces)

目前MTGOX给的回复
Marcus, Jul 23 20:29 (JST):
Hello Xiang,

Thank you for your email. We apologize for the inconvenience that this may have caused and looks like your funds where not withdrawn through a normal BTC address and we should research this further and we will keep you updated on the status once the research is completed.

Best regards,

Mt.Gox Team
https://www.mtgox.com

[Attention: Please protect your account using OTP to ensure that your funds are safe and secure. Failing to do so makes your information vulnerable to hackers.
Please visit https://mtgox.com/security]

[9l]

mtgox 本身被人黑了吧

[jl2012]

如果只有提現認証, 但沒有security centre認証, 也是沒有用的

我的比特币也被盗了，11.31个.虽然不多，但是黑客手段未见过。请大家重视！
我开通了提现google验证，实在想不通被盗的原因。
我的账户本来是不能提现的，昨天刚刚通过认证，可以提现了。
但是今天就被黑客盗走了。

  
提现身份认证的邮件日期
发件人：Mt.Gox <aml@mtgox.com>      
时   间：2013年7月22日(星期一) 中午11:33  
收件人：
 <649013194@qq.com>


今天被盗记录 （这些记录都不是本人操作） 疑点就是wow gold，难道不需要GOOGLE验证码？
2013/07/23 17:47:16   Withdraw      11.21000000 BTC   0.00118048 BTC
wow gold (to echopisces)
2013/07/23 17:46:48   Fee      0.01329975 BTC   11.21118048 BTC
BTC bought: [tid:1374572808423516] 2.41813700 BTC at $94.45000 (0.55% fee)
2013/07/23 17:46:48   In      2.41813700 BTC   11.22448023 BTC
BTC bought: [tid:1374572808423516] 2.41813700 BTC at $94.45000
2013/07/23 17:46:48   Fee      0.00051122 BTC   8.80634323 BTC
BTC bought: [tid:1374572808384355] 0.09294882 BTC at $94.44996 (0.55% fee)
2013/07/23 17:46:48   In      0.09294882 BTC   8.80685445 BTC
BTC bought: [tid:1374572808384355] 0.09294882 BTC at $94.44996
2013/07/23 17:46:48   Fee      0.00180084 BTC   8.71390563 BTC
BTC bought: [tid:1374572808332908] 0.32742459 BTC at $94.44994 (0.55% fee)
2013/07/23 17:46:48   In      0.32742459 BTC   8.71570647 BTC
BTC bought: [tid:1374572808332908] 0.32742459 BTC at $94.44994
2013/07/23 17:46:47   Fee      0.03044374 BTC   8.38828188 BTC
BTC bought: [tid:1374572807623005] 5.53522562 BTC at $94.44992 (0.55% fee)
2013/07/23 17:46:47   In      5.53522562 BTC   8.41872562 BTC
BTC bought: [tid:1374572807623005] 5.53522562 BTC at $94.44992
2013/07/23 17:45:45   Withdraw      0.10000000 BTC   2.88350000 BTC
Buy wow gold (to echopisces)

目前MTGOX给的回复
Marcus, Jul 23 20:29 (JST):
Hello Xiang,

Thank you for your email. We apologize for the inconvenience that this may have caused and looks like your funds where not withdrawn through a normal BTC address and we should research this further and we will keep you updated on the status once the research is completed.

Best regards,

Mt.Gox Team
https://www.mtgox.com

[Attention: Please protect your account using OTP to ensure that your funds are safe and secure. Failing to do so makes your information vulnerable to hackers.
Please visit https://mtgox.com/security]

[digger]

应该是mtgox的漏洞

[yecan0317]

买个YUBIKEY吧。。。。。。。。登陆动态密码 至少可以很大程度的排除个人原因