"There has been a withdrawal from your Mt.Gox"

[Rluner]

Woke up to an email from Mt. Gox. “There has been a withdrawal from your Mt.Gox account.” And I’m poor again. (voice)

http://www.cryptocoinsnews.com/2013/11/30/woke-email-mt-gox-withdrawal-mt-gox-account-im-poor-voice/

[piramida]

Sorry about your loss. Did you have any account protection in place? Google authenticator or Gox token? I thought Gox made that a required option long time ago.

[piramida]

nevermind, found the original thread: http://www.reddit.com/r/Bitcoin/comments/1rs0bq/woke_up_to_an_email_from_mt_gox_there_has_been_a/

the guy didn't have 2FA so was keeping 12k laying open for anyone to take, probably that was a lesson learned. Bitcoin is very good in this regard, educating on basic computer security.

[goxed]

nevermind, found the original thread: http://www.reddit.com/r/Bitcoin/comments/1rs0bq/woke_up_to_an_email_from_mt_gox_there_has_been_a/

the guy didn't have 2FA so was keeping 12k laying open for anyone to take, probably that was a lesson learned. Bitcoin is very good in this regard, educating on basic computer security.

Btw how do these hackers get into MtGox account without knowing the passwords?

[Crazy]

It's my belief that Gox has been compromised several times and they have failed to disclose the fact. After my account was frozen for verification, I was informed that someone from an IP in China was accessing my account. Of course, at that same moment they began supporting OTP as a 2nd form factor of authentication so I added it. However, they didn't disclose this breach of security until I started submitting verification documentation. I imagine that there are thousands of accounts that have been breached, but the illiquid state of Gox has prevented a mass heist.

[Hawker]

nevermind, found the original thread: http://www.reddit.com/r/Bitcoin/comments/1rs0bq/woke_up_to_an_email_from_mt_gox_there_has_been_a/

the guy didn't have 2FA so was keeping 12k laying open for anyone to take, probably that was a lesson learned. Bitcoin is very good in this regard, educating on basic computer security.

Btw how do these hackers get into MtGox account without knowing the passwords?

Keyloggers.  They do know the passwords.  Thats why a yubikey is essential - without it, 10 minutes browsing while waiting for a plane can mean that you've a keylogger installed and both your pr0n and Btc stolen.