Bitcoin Forum
April 26, 2024, 09:00:06 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Was i phished?  (Read 285 times)
CryptGo (OP)
Newbie
*
Offline Offline

Activity: 11
Merit: 0


View Profile WWW
March 25, 2018, 04:47:00 PM
 #1

Yesterday i transferred BTC from from GDAX to binance.  I copied the address from binance and pasted it into GDAX to perform the withdraw.  After not showing up for 12 hours I looked and realized it is a different address than my binance address that i sent it to.  This is the second time this has happened transferring from gdax.  last time it happened i lost some litecoin.  How can i prevent this and is there a chance i am somehow hacked leading to this happened?
1714165206
Hero Member
*
Offline Offline

Posts: 1714165206

View Profile Personal Message (Offline)

Ignore
1714165206
Reply with quote  #2

1714165206
Report to moderator
1714165206
Hero Member
*
Offline Offline

Posts: 1714165206

View Profile Personal Message (Offline)

Ignore
1714165206
Reply with quote  #2

1714165206
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714165206
Hero Member
*
Offline Offline

Posts: 1714165206

View Profile Personal Message (Offline)

Ignore
1714165206
Reply with quote  #2

1714165206
Report to moderator
TryNinja
Legendary
*
Offline Offline

Activity: 2814
Merit: 6971



View Profile WWW
March 25, 2018, 04:52:20 PM
 #2

I can think of two things that may have happened:

1. The website you visited wasn't Binance.
2. You have a bitcoin address clipboard malware that changes the address that you have in your clipboard to the hacker's address.

Did you double check the address you pasted before sending the coins?
Can you run a malware scan to see if your computer is infected?
Can you check your browser history to see if you clicked in any fake Binance website?

.
.HUGE.
▄██████████▄▄
▄█████████████████▄
▄█████████████████████▄
▄███████████████████████▄
▄█████████████████████████▄
███████▌██▌▐██▐██▐████▄███
████▐██▐████▌██▌██▌██▌██
█████▀███▀███▀▐██▐██▐█████

▀█████████████████████████▀

▀███████████████████████▀

▀█████████████████████▀

▀█████████████████▀

▀██████████▀▀
█▀▀▀▀











█▄▄▄▄
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
.
CASINSPORTSBOOK
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀▀█











▄▄▄▄█
CryptGo (OP)
Newbie
*
Offline Offline

Activity: 11
Merit: 0


View Profile WWW
March 25, 2018, 05:25:22 PM
 #3

thank you so much.  im going to check those things.  the address i copied was definitely the address that "binance" showed.
crairezx20
Legendary
*
Offline Offline

Activity: 1638
Merit: 1046



View Profile
March 25, 2018, 05:52:49 PM
 #4

There are many cases the same as yours here in the forum always check the url or ask here in the forum about fake Binance and malware that could automatically paste other bitcoin or litecoin address to unknown address. Much better to use a bootable virus and malware scanner to scan the whole files in your computer to safely use for the cryptocurrency.

You may check this other cases here https://bitcointalk.org/index.php?topic=1527250.0

some reply from this thread is helpful to make sure to read them first.

And check this for fake binance https://bitcointalk.org/index.php?topic=2699331.0
buwaytress
Legendary
*
Offline Offline

Activity: 2786
Merit: 3437


Join the world-leading crypto sportsbook NOW!


View Profile
March 25, 2018, 07:07:33 PM
 #5

If you haven't already done so, it's time to use your personal user account on your web browser. Use it to store bookmarks of every website you frequent (after verifying they're legit of course), so you lower your risk of visiting a "fake" site / phishing link. If this is the second time it's happened, don't wait for the third.

There's probably more secure ways but it's a simple step to start with. I use a Google account on Chrome for most web-related things now - even my 2FA - so even if I lose my device, I've just restore my account from another. Password's all memorised too, mnemonic seed style, works for me.

██
██
██
██
██
██
██
██
██
██
██
██
██
... LIVECASINO.io    Play Live Games with up to 20% cashback!...██
██
██
██
██
██
██
██
██
██
██
██
██
CryptGo (OP)
Newbie
*
Offline Offline

Activity: 11
Merit: 0


View Profile WWW
March 25, 2018, 09:00:03 PM
 #6

I have checked through my history and there arn't any binance look alikes.  I remember thinking it wasn't the right address when it showed it but than i mistaking thought that it had generated me a new address but binance doesn't do that.  I'm going to read through the other posts and try to get to the bottom of this.  thanks all!!!
Thirdspace
Hero Member
*****
Offline Offline

Activity: 1232
Merit: 738


Mixing reinvented for your privacy | chipmixer.com


View Profile
March 25, 2018, 09:49:48 PM
 #7

I copied the address from binance and pasted it into GDAX to perform the withdraw.  After not showing up for 12 hours I looked and realized it is a different address than my binance address that i sent it to.
2. You have a bitcoin address clipboard malware that changes the address that you have in your clipboard to the hacker's address.

most likely what happened is what TryNinja said, you have a clipboard malware
it was a common issue a few months ago, do a forum's google search on "clipboard malware"
next time make sure to check the first 6 letters and the last 6 letters of the address before clicking send

bob123
Legendary
*
Offline Offline

Activity: 1624
Merit: 2481



View Profile WWW
March 26, 2018, 08:42:14 AM
 #8

most likely what happened is what TryNinja said, you have a clipboard malware
~snip~

I don't think OP is a victim of clipping board malware.
OP wrote that he is sure that the address he sent the coins to is the same as shown by binance:

..the address i copied was definitely the address that "binance" showed.


So, if OP checked the address before sending and he copied the right address, i only see 2 options at the moment:

1) Phishing site
2) Malicious wallet installed

1) is self-explanatory
2) OP, what wallet were you using? Are you sure your wallet is a trusted one? Did you check the signature to verify its not a fake (malicious) wallet?





Thirdspace
Hero Member
*****
Offline Offline

Activity: 1232
Merit: 738


Mixing reinvented for your privacy | chipmixer.com


View Profile
March 26, 2018, 12:41:16 PM
 #9

I don't think OP is a victim of clipping board malware.
OP wrote that he is sure that the address he sent the coins to is the same as shown by binance:

..the address i copied was definitely the address that "binance" showed.
---snip---
2) OP, what wallet were you using? Are you sure your wallet is a trusted one? Did you check the signature to verify its not a fake (malicious) wallet?
he said 2 conflicting statements, he is sure copied what binance showed but then said he realized it is a different address??
he's not using any wallet, I believe he's transferring between exchanges Binance and GDAX

... I copied the address from binance and pasted it into GDAX to perform the withdraw.  After not showing up for 12 hours I looked and realized it is a different address than my binance address that i sent it to.  This is the second time this has happened transferring from gdax.
how did you realize it? by looking your withdraw history or checking your transaction on an explorer?
remember addresses on exchanges are not yours, you shouldn't check transactions from your GDAX deposit address
if you send from GDAX to binance, check your deposit address on binance, the sender could be any address own by GDAX

Maricel2017
Full Member
***
Offline Offline

Activity: 448
Merit: 103



View Profile
March 26, 2018, 12:49:27 PM
 #10

I can think of two things that may have happened:

1. The website you visited wasn't Binance.
2. You have a bitcoin address clipboard malware that changes the address that you have in your clipboard to the hacker's address.

Did you double check the address you pasted before sending the coins?
Can you run a malware scan to see if your computer is infected?
Can you check your browser history to see if you clicked in any fake Binance website?
This things you should consider before proceeding your transaction, there are some instances that you click wrong site instead of legit site you click is phishing site. Hope you will learn for your mistakes and will not happen again make extra careful of handling our fund also always double or multiple check the address which we are copied and paste.

reflector
Sr. Member
****
Offline Offline

Activity: 826
Merit: 263



View Profile
March 26, 2018, 06:37:50 PM
 #11

From Bob123 to others did not notice the confirmation by the op I think. There in last he confirms that issue on his side and thanked for Tyrantt since op does not used the right address mate.

I do not know why you know not checking the Op's reply in technical assistance thread and all.
Suggestion for op: Please look into the address multiple times when you want to transfer from the one wallet to another whether it exchange or other wallet. Please applies the same for all dude. Hope others would reply the other suggestion since the issue confirmed up.
r1s2g3
Sr. Member
****
Offline Offline

Activity: 742
Merit: 395


I am alive but in hibernation.


View Profile
March 27, 2018, 04:20:33 AM
 #12

I have checked through my history and there arn't any binance look alikes.  I remember thinking it wasn't the right address when it showed it but than i mistaking thought that it had generated me a new address but binance doesn't do that.  I'm going to read through the other posts and try to get to the bottom of this.  thanks all!!!

You are not the first one that observed this, we already have a thread for this.

Since you are sure that site is indeed binance then your system might be affected by Coin RPG Malware or Faux Paste Malware.

Some time back , I mentioned about this in one of my post


11. While copy pasting your wallet address , recheck the address that is pasted is same what you copied. (you might be affected by Coin RPG malware)


I am alive
Mrt2018
Jr. Member
*
Offline Offline

Activity: 41
Merit: 1


View Profile
March 27, 2018, 10:23:24 AM
 #13

Are you sure you were in Binance website?

There are several fake Binance websites that have other characters like the one in this article for example:
http://thecompletecoinguide.com/no-hack-binance-like-a-boss/
crypto-bit
Full Member
***
Offline Offline

Activity: 333
Merit: 100


View Profile
April 01, 2018, 07:44:26 AM
 #14

Based on what i read regarding on your case.I think that you did not double check your address before sending your coin or maybe you are in hurry that why you forgot to check the correct addresses.I suggest that always double check before sending out your coin and you should check always the domain name of the website if it is correct so that you will not got to chaos.
 
milewilda
Legendary
*
Offline Offline

Activity: 3094
Merit: 1127



View Profile
April 01, 2018, 10:11:11 PM
 #15

I have checked through my history and there arn't any binance look alikes.  I remember thinking it wasn't the right address when it showed it but than i mistaking thought that it had generated me a new address but binance doesn't do that.  I'm going to read through the other posts and try to get to the bottom of this.  thanks all!!!
I guess theres no need to look for further post since the best answers and advise is already being given which is actually right.If you sure that you copied the right address on where binance do give and when you paste it out into withdrawal input bar and shows others non-familiar address then definitely you are having a malware into your computer which this issue is already being experienced back in the past victimizing lots of people losing out lots of money.For now the suggestion would be either a complete scan of your pc if the problem persist then better to do a full wipe or reformat.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!