Im just been attacked and robbed on my MT Gox account

[J.]

MTGOX uses https for auth.. so it is not like a man in the middle attack is trivial.

Also, it seems the user is not a noob running windows XP with sp2 or what not.

If I was MTGOX I would be taking this post oh so seriously as an attacker of the MTGOX
website would surely go about draining accounts in a slow methodical fashion versus going
all out and alerting many people at once.

If they were owned once.. it can happen again. Especially when an attacker knows there is
a currency that can be transferred anonymously.

The OP seems to have his bases covered unless, no offense, you are not telling us exactly
how you use this apple mac computer. Perhaps you like to view odd things online going to
several possibly malicious websites per day?

It is as I've written, I just ran a check on all my systems and programs ... no errors or viruses.

I have also just moved my bitcoin wallet onto another mac which is not online currently, so I did not lose all my bitcoins lying there ...

I do not know how the person came into my account, but when I was in on it, worked my code / password not and I had to receive an email from MT Gox before I could get in, and when I came in. I could see that all accounts were in both 0 $ and BTC

So I looked at the logs and could see there had been eliminated 100 BTC and that had subsequently been sold 19 BTC and then moved around. $ 320

[1713559611]

1713559611

[1713559611]

1713559611

[1713559611]

1713559611

[jondecker76]

It sucks to see these kinds of problems still happening.  I never have understood why people around here attack honest users that report problems.  I reported about my BTC being stolen on here and to MtGox in the days before the news of the big hack going public - we got the same ridicule and blame as you seem to be getting.  I too was using a secure password, running Linux and definitely not a noob to basic security.  What makes it worse is that I hounded MtGox for almost a solid month before I even got a response back from them - they didn't care that their security problems caused a lot of us to lose money, end of story.

The biggest thing I learned from my experience it to stay far away from MtGox. (There is a reason you see so many "GOXXED!" banners around here on the forums). While I believe that they are trying to run an honest business, they obviously are rookies when it comes to security, PR and support issues.  I now do my business at TradeHill and I've been pretty happy with them.  I'd suggest that you also look at other exchange options, which ever one you choose.

[fitty]

I just discovered that there is someone who has taken all my bitcoins + sold the last to move money from one account to another.

It all happened Thursday 28.07, I've been on vacation and have only just logged into my account now to see if it had bought for $ 8 which I had set it to

All my money is gone and so is my bitcoins ..

What the hell is happening to the safety of MT Gox ...

I've now lost $ 4000 because of their incompetence.

F. ...! I'm getting tired of it.

I don't see how it's not entirely your fault.

Who keeps money on these sites anyway? Paypal is owned by eBay, can be sued, located in the USA, used to transfer millions a day, I wouldn't leave $10 sitting in my paypal account. So now you talk about these fly by night 3 month old Bitcoin exchanges owned by god knows who, running from god knows where, and you'd leave $1000s sitting on there? Why?

I move BTC to the exchange, sell it, move money out. Takes about 30 minutes. I'd never leave .1 BTC or $1 sitting on any of these sites. It's just laziness. Not to mention leaving money on there while you go on vacation. If I left for a week, in my mind it's 50/50 is MtGox is alive/up when I get home. Nothing with them shocks me. I trust them an hour at a time and that's it.

Stop using these two bit hack job sites as banks. They're not banks. Your money isn't safe. There's no recourse if the money disappears. It's not a fucking bank. Stop using it like a fucking bank. If MtGox just decided to zero out your balance for shits and giggles, there's NOTHING you can do. So why exactly did you trust them to secure your money while you were on vacation?

Bitcoin wallets, exchanges, any site related to BTC, is not a real bank, it's not secure, don't expect them to act like a bank. Grow up, make better decisions and stop crying on a public internet forum it's embarrassing.

[tvbcof]

...

I've now lost $ 4000 because of their incompetence.

F. ...! I'm getting tired of it.

I don't see how it's not entirely your fault.

Who keeps money on these sites anyway?

...

I agree that it's silly to keep more than one needs on any exchange at this point in time.  That goes double for MtGox by virtue of their reputation.

But I disagree that it is 'entirely' the guy's fault.  If he used good practices as he described then it was almost certainly yet another internal breach or system error.  That is fairly unacceptable.  I must trust my exchange with several k$ at a time if I want to do the type of business I am interested in.

A site which has been breached and/or is careless in one way or another could lose that money in 1 microsecond and that is completely unacceptable.  I choose my exchange(s) as best I could with this in mind, and I would consider myself partially to blame in the event of a loss by virtue of not choosing carefully enough, and partially my fault for being involved in Bitcoin at all, but certain not 'entirely'.

[fitty]

...

I've now lost $ 4000 because of their incompetence.

F. ...! I'm getting tired of it.

I don't see how it's not entirely your fault.

Who keeps money on these sites anyway?

...

I agree that it's silly to keep more than one needs on any exchange at this point in time.  That goes double for MtGox by virtue of their reputation.

But I disagree that it is 'entirely' the guy's fault.  If he used good practices as he described then it was almost certainly yet another internal breach or system error.  That is fairly unacceptable.  I must trust my exchange with several k$ at a time if I want to do the type of business I am interested in.

A site which has been breached and/or is careless in one way or another could lose that money in 1 microsecond and that is completely unacceptable.  I choose my exchange(s) as best I could with this in mind, and I would consider myself partially to blame in the event of a loss by virtue of not choosing carefully enough, and partially my fault for being involved in Bitcoin at all, but certain not 'entirely'.

I agree.

It's "entirely" because he was on vacation. Leaving 4k in the hands of MtGox while on vacation is stupid.

[SgtSpike]

I just discovered that there is someone who has taken all my bitcoins + sold the last to move money from one account to another.

It all happened Thursday 28.07, I've been on vacation and have only just logged into my account now to see if it had bought for $ 8 which I had set it to

All my money is gone and so is my bitcoins ..

What the hell is happening to the safety of MT Gox ...

I've now lost $ 4000 because of their incompetence.

F. ...! I'm getting tired of it.

I don't see how it's not entirely your fault.

Who keeps money on these sites anyway? Paypal is owned by eBay, can be sued, located in the USA, used to transfer millions a day, I wouldn't leave $10 sitting in my paypal account. So now you talk about these fly by night 3 month old Bitcoin exchanges owned by god knows who, running from god knows where, and you'd leave $1000s sitting on there? Why?

I move BTC to the exchange, sell it, move money out. Takes about 30 minutes. I'd never leave .1 BTC or $1 sitting on any of these sites. It's just laziness. Not to mention leaving money on there while you go on vacation. If I left for a week, in my mind it's 50/50 is MtGox is alive/up when I get home. Nothing with them shocks me. I trust them an hour at a time and that's it.

Stop using these two bit hack job sites as banks. They're not banks. Your money isn't safe. There's no recourse if the money disappears. It's not a fucking bank. Stop using it like a fucking bank. If MtGox just decided to zero out your balance for shits and giggles, there's NOTHING you can do. So why exactly did you trust them to secure your money while you were on vacation?

Bitcoin wallets, exchanges, any site related to BTC, is not a real bank, it's not secure, don't expect them to act like a bank. Grow up, make better decisions and stop crying on a public internet forum it's embarrassing.

If he's a day-trader, it's entirely necessary to keep funds in one's account.  At least $$$ funds.  The bitcoins can be transferred in and out easily enough, but dollars or other currencies often take days.

I don't think it's reasonable to expect an active trader to move funds in and out of their mtgox account every day.  MtGox SHOULD be secure.  If they are not, then we should stop using them.

[rouhaud]

if you doing all your transfert from your unique ip adress, you can say to mtgox to see log, and the "transfert " of 4000 $ dont come from your ip, your ip can be in some time an proof of identity.
try to see the mtgox react !!! and post them response

[paraipan]

nice thread you have here, and you haven't posted one single proof of what you're saying ...

[elements]

I just discovered that there is someone who has taken all my bitcoins + sold the last to move money from one account to another.

It all happened Thursday 28.07, I've been on vacation and have only just logged into my account now to see if it had bought for $ 8 which I had set it to

All my money is gone and so is my bitcoins ..

What the hell is happening to the safety of MT Gox ...

I've now lost $ 4000 because of their incompetence.

F. ...! I'm getting tired of it.

I don't see how it's not entirely your fault.

Who keeps money on these sites anyway? Paypal is owned by eBay, can be sued, located in the USA, used to transfer millions a day, I wouldn't leave $10 sitting in my paypal account. So now you talk about these fly by night 3 month old Bitcoin exchanges owned by god knows who, running from god knows where, and you'd leave $1000s sitting on there? Why?

I move BTC to the exchange, sell it, move money out. Takes about 30 minutes. I'd never leave .1 BTC or $1 sitting on any of these sites. It's just laziness. Not to mention leaving money on there while you go on vacation. If I left for a week, in my mind it's 50/50 is MtGox is alive/up when I get home. Nothing with them shocks me. I trust them an hour at a time and that's it.

Stop using these two bit hack job sites as banks. They're not banks. Your money isn't safe. There's no recourse if the money disappears. It's not a fucking bank. Stop using it like a fucking bank. If MtGox just decided to zero out your balance for shits and giggles, there's NOTHING you can do. So why exactly did you trust them to secure your money while you were on vacation?

Bitcoin wallets, exchanges, any site related to BTC, is not a real bank, it's not secure, don't expect them to act like a bank. Grow up, make better decisions and stop crying on a public internet forum it's embarrassing.

If he's a day-trader, it's entirely necessary to keep funds in one's account.  At least $$$ funds.  The bitcoins can be transferred in and out easily enough, but dollars or other currencies often take days.

I don't think it's reasonable to expect an active trader to move funds in and out of their mtgox account every day.  MtGox SHOULD be secure.  If they are not, then we should stop using them.

+1

[Phinnaeus Gage]

Perhaps I can shed a little light on the subject: https://bitcointalk.org/index.php?topic=10099.msg281979#msg281979

[RandyFolds]

Perhaps I can shed a little light on the subject: https://bitcointalk.org/index.php?topic=10099.msg281979#msg281979

Yeah, that is unfortunate. That's a lot of info to hand the script kiddies.

[J.]

I just discovered that there is someone who has taken all my bitcoins + sold the last to move money from one account to another.

It all happened Thursday 28.07, I've been on vacation and have only just logged into my account now to see if it had bought for $ 8 which I had set it to

All my money is gone and so is my bitcoins ..

What the hell is happening to the safety of MT Gox ...

I've now lost $ 4000 because of their incompetence.

F. ...! I'm getting tired of it.

I don't see how it's not entirely your fault.

Who keeps money on these sites anyway? Paypal is owned by eBay, can be sued, located in the USA, used to transfer millions a day, I wouldn't leave $10 sitting in my paypal account. So now you talk about these fly by night 3 month old Bitcoin exchanges owned by god knows who, running from god knows where, and you'd leave $1000s sitting on there? Why?

I move BTC to the exchange, sell it, move money out. Takes about 30 minutes. I'd never leave .1 BTC or $1 sitting on any of these sites. It's just laziness. Not to mention leaving money on there while you go on vacation. If I left for a week, in my mind it's 50/50 is MtGox is alive/up when I get home. Nothing with them shocks me. I trust them an hour at a time and that's it.

Stop using these two bit hack job sites as banks. They're not banks. Your money isn't safe. There's no recourse if the money disappears. It's not a fucking bank. Stop using it like a fucking bank. If MtGox just decided to zero out your balance for shits and giggles, there's NOTHING you can do. So why exactly did you trust them to secure your money while you were on vacation?

Bitcoin wallets, exchanges, any site related to BTC, is not a real bank, it's not secure, don't expect them to act like a bank. Grow up, make better decisions and stop crying on a public internet forum it's embarrassing.

If he's a day-trader, it's entirely necessary to keep funds in one's account.  At least $$$ funds.  The bitcoins can be transferred in and out easily enough, but dollars or other currencies often take days.

I don't think it's reasonable to expect an active trader to move funds in and out of their mtgox account every day.  MtGox SHOULD be secure.  If they are not, then we should stop using them.

I had no money mentioned, maybe $ 20, but idiot has sold a lot of my bitcoins and subsequently transferred the money he got for it out of my account ...

I had approx. 120 bitcoins standing, they were purchased for $ 22 piece

The person who took it sold much of one for $ 13-10 a head for getting money out, and the rest of my bitcoins may have sent to an address which is not my.

So try just taking a breather all together .... I know that it is not my fault and could actually just wanted to warn others, causing it was the way it started last time.

and yes it may well be that I have been an idiot and trusted MT Gox, but I've taken mine safety rules has 3 wallet that uses several exchanges, moves continuously mine bitcoins for a wallet is not online ...

But frankly, it ought not be right that you should spend so much time trying to ensure its funds ....... Bitcoins will never be successful as long as people think it is entirely in order that you must do so many things to ensure himself and his money.

and stop now to call anyone who has a minor problem for novice and losers, it is them to focus on if you want Bitcoins to have a chanche in life ... it is not because of you that it exists, but because new user and investors.

 if this one day be worth much money and is used by many or all, you have to find a more secure solution, otherwise it dies before the project even has started.

[J.]

nice thread you have here, and you haven't posted one single proof of what you're saying ...

what proof do you want?

[J.]

Perhaps I can shed a little light on the subject: https://bitcointalk.org/index.php?topic=10099.msg281979#msg281979

the information should not be able to give anyone access to my MT Gox account ... maybe my wallet, but it is not the one who has been hagget, so it's just a lot of these details.

also requires it's also that there is a virus or something on my computer, but there is no ..

[bcearl]

Have you been physically hurt? No? Then it is stolen, not robbed.

[J.]

Maybe you were drunk and sold all the coins for USD to get hookers and blow? 

Yes you're right that's probably what happened,,, thank you just might make me aware of it .. that I had never even thought of

[J.]

Have you been physically hurt? No? Then it is stolen, not robbed.

If your biggest problem is if I use the right words, then can we all the same just be happy and satisfied, this is not funny you idiot ...

[J.]

J, Aug-05 02:51 (JST):
my account has been hagget, my code did not work more because I wanted to go today, so may have sent an email with a new code .... HEVEDERES what happens to your ridiculous shitty site ...

119 bitcoin stolen and
300 USD.

what the hell is this bullshit.

send to this address:
Thu 28 Jul 2011 04:56:57 PM GMT   withdraw   Bitcoin withdraw to 1LxTV74oksinziDR3fgvvLUf6jdsnwSUiP   100.00000000 ฿TC

Thu 28 Jul 2011 05:15:42 PM GMT   withdraw   Generate redeem code: MTGOX-USD-4K7SA-UYVH8-UH85P-50E3D   $305.49932

Accound balance$0.00000
Accound balance BTC 0.00000

it also seems that there have been several sales and purchases in the last few days where I have not been inside ... it can not be true ... I expect all my money and bitcoins is back on my account.

Otherwise, the refund all my $ 4000 which I have added to your shitty site and lost because of your incompetent security.

_______________________________________________________________________________ __________________________________

Jasmine, Aug-05 10:39 (JST):
Hello,

I apologize about your recent theft. We do not have the ability to "reverse" any transfers. The IP addresses of both transactions are 115.133.198.86 and 64.120.79.136. At this point, I strongly advise you to change your password to a more secure one; using at least one upper case, number, and special character will prevent anyone and any computers from guessing your password. Also, please change the password to any connecting email addresses.

I also strongly encourage you to obtain a Yubikey, which we can offer it to you for free. Unfortunately, that is the only thing we can do for your situation. You may file a police report, which we can try our best to cooperate with the investigation.

I apologize for any inconvenience this has caused.

Thanks,

MtGox.com Team

The IP addresses of both transactions are 115.133.198.86 and 64.120.79.136.
MY IP Adress i 192.168.2.103

I strongly advise you to change your password to a more secure one, using at least one upper case, number, and special character will prevent anyone and any computers from guessing your password.
Me password was (have been changed) J08-uU33-1604-82-xXx

_EDIT_______________________________________________________________

Hello J,

I apologize for the recent loss you experienced. I believe our administrator informed you that a third party was able to access your account through getting access of your email account. It is important to have a strong secure password for email accounts associated with your Mt.Gox account. We try our best to provide you a secure account on Mt.Gox, but we can not be responsible for all security measures outside of your Mt.Gox account, such as your email account in this case. We have been providing security options such as Yubikey for our users, and having one might have protected you from this hack. Again, I apologize for your loss.

Thanks,

MtGox.com Team

_______________________________________________________________________________ _________________________

I can understand that, you want to disclaim responsibility for my loss but my emai address, user name, password, etc. has only been announced today, due to your lack of security. I have just learned that all user account information has been posted online, so it means that all my information has been announced on the web because of your past mistakes.

I have not received an email or a warning from you by whether that information was announced from the time your page was hacked, otherwise I probably changed my password to my mail.

so whether it has happened because there is someone who has had access to my mail and then be able to receive a new password

and thus could empty my MT Gox account, it's still your fault and your responsibility.

in addition, if 2 IP addresses that are not mine or not even in the country I live in allowed accessing my account ... it in I might not coexist on the same day can be accessed from an IP address in Malaysia and the United States and that the user who owns the account lives in Denmark?

it works as completely out of the forest that you not having more control on your security.

But if not you have thought to replace my loss, I will spend my whole network to create negative publicity regarding. your company and website ...
I will use all the social media I know and write articles in forums and blogs on the web ...

it can not be really in time and again, you stupid and then you deny any responsibility

it can be only one responsibility and that is your .. it is you who has since it's you who've made the rules, it is you who have chosen to do bitcoins for your business, then it is also your responsibility to protect people's funds and ensure that it can not be theft. [# ]

I have now seen several places on the forum that people are shocked that it's so easy to access the accounts just to receive a new code ..

YOU have chosen to make the kind of business and be in the industry in is in, so must also act after the ...

So I sincerely hope that you have thought you to cover my losses. as in earning a lot of money that people use you and trusts that your funds are secured.

it is fine enough that it can be wrong, but we must make amends, it's no good just to write 'if you had used it and the program this was not happend ... it has happened and now may have to make amends ..

it's not small change we're talking about ... I have lost almost $ 4000 to join your side ......

if i really believe that you are a legitimate business and want to be the biggest and best in doing so it is time to act like a professional company ...

and frankly, it's small change for you and especially now that the price is so low as it is .. you can buy it back below $ 1000 which I paid $ 2100-2200 for the time ..

[Djao]

MY IP Adress i 192.168.2.103

That is your IP within your home LAN or WLAN. When you surf the web or chat in IRC or whatever, you will have an IP address assigned to you by your ISP. Check a page like http://msv.dk/ms302.aspx to see your IP.

@topic: new day, new drama ... I love this board

[repentance]

I just tried connecting to both of those IPs.  Got a log in screen asking for a username and password on 115.133.198.86 with the message "the server says TD-8817".  The other IP didn't resolve for me.