BTC-e being hacked. Watch your account.

[Singlebyte]

While reading this thread I was going to post my comments.  But LostDutchman posted exactly what I was going to post!  Thank you LD for saving me the time!

[LostDutchman]

While reading this thread I was going to post my comments.  But LostDutchman posted exactly what I was going to post!  Thank you LD for saving me the time!

Why thank you for your kind comment!

It just breaks my heart when internet noobs get it bad because the simply do not understand how to be secure on the net.

I wish I could fix things for them but after the fact, they are pretty much screwed!

Complicated passwords work well.

Lots of Upper/lower case switheces, punctuatin marks..............

Esamples:

An "I've got your ass!" password:

"password 90210".

BUSTED in about 10 seconds!

This will at least take some time and maybe get you alerted that someone is trying to hack you:

"90I&3Z*forL%Ah+?Rt2N1!*"

Just an example.

My $.02.

[keewee]

You probably have a keylogger. Sucks to be you! Don't keep more on an exchange than you can afford to lose.

What is a keylogger?

It is a type of malware that logs every key you press on your keyboard and passes it back to a server. Once this sequence is captured it is easy to extract usernames, passwords etc. This is why it's imperative that you use two factor authentication if it is available. You should also be using a password manager such as KeePass so that you can use complex passwords that you never have to type out, just copy and paste them.

[Denton]

Can one assume that a keylogger can be capable to read the clipboard data?

[LostDutchman]

Can one assume that a keylogger can be capable to read the clipboard data?

http://en.wikipedia.org/wiki/Keystroke_logging

Read it and weep!

"Software keyloggers may be augmented with features that capture user information without relying on keyboard key presses as the sole input. Some of these features include:

    Clipboard logging. Anything that has been copied to the clipboard can be captured by the program."

[keewee]

Can one assume that a keylogger can be capable to read the clipboard data?

I would say yes, some malware probably reads the clipboard too. I don't know of enough about particular keyloggers that might do this but at least strong passwords add an extra level of protection from account cracking and enable you to use a different long and complex password on every site you use

[keewee]

Can one assume that a keylogger can be capable to read the clipboard data?

http://en.wikipedia.org/wiki/Keystroke_logging

Read it and weep!

"Software keyloggers may be augmented with features that capture user information without relying on keyboard key presses as the sole input. Some of these features include:

    Clipboard logging. Anything that has been copied to the clipboard can be captured by the program."

Hmmm oh well. 2FA FTW! 

[chessnut]

Can one assume that a keylogger can be capable to read the clipboard data?

http://en.wikipedia.org/wiki/Keystroke_logging

Read it and weep!

"Software keyloggers may be augmented with features that capture user information without relying on keyboard key presses as the sole input. Some of these features include:

    Clipboard logging. Anything that has been copied to the clipboard can be captured by the program."

Hmmm oh well. 2FA FTW! 

wassup Keewee! join the club! where do you stay in New Zealand?

[keewee]

Can one assume that a keylogger can be capable to read the clipboard data?

http://en.wikipedia.org/wiki/Keystroke_logging

Read it and weep!

"Software keyloggers may be augmented with features that capture user information without relying on keyboard key presses as the sole input. Some of these features include:

    Clipboard logging. Anything that has been copied to the clipboard can be captured by the program."

Hmmm oh well. 2FA FTW! 

wassup Keewee! join the club! where do you stay in New Zealand?

I'm a jafa     And you? I think we must be part of a very small group in little ol' NZ although there has been a bit more activity on BitNZ lately

[adamstgBit]

 

i hope you did not lose your shirt.

its really sad hearing stories like this, at cavirtex they check your browser ( you have to confirm via email if you try to access your account from another computer ) and also 2 factor auth.... i wish all exchanges had the same kind of security, with these security features i feel safer, but still....

let this thread be a lesson for you less paranoid folk and turn on 2 factor auth! setup a secure saving wallet (paper wallets) and a secure spending wallet.

in the beginning poeple were getting hacked left and right. wallet services would disappear with everyones coins... i'm glad those days are over but clearly much improvements can still be made. until then its up to the users to try and minimize risks by taking every security procation they can.

[UnDerDoG81]

Damn man sorry for you 

Time to get my coins on a paper wallet...

[HairyMaclairy]

A key logger is a program that records your key strokes (password) and sends it to someone else.

[empoweoqwj]

I have 2FA via Google Authenticator on my phone turned on for everything; logging in, transfering money, changing details, etc.
And it needs to be confirmed via e-mail, and my e-mail has a separate 2FA (SMS), and a different password.

I am safe from being hacked, right? 

Not necessarily unfortunately. You get still get "session hijacked" via cookies if you have your account open and open something dodgy in the same browser. Use different browsers for your trading sites vs "normal browsing"

[outofservice]

I lost a few coins but they were just my "trading coins" (still it hurt and is a lesson learned), I kept my load on an encrypted external. I am thanking my brother for talking me into that because I used to have them all online.

I tried to set up the 2key on btc-e, they are set up on my other accounts, but the page to do so on btc-e is in russian. It also asks for a once time code. I have no idea what that code is. I've kept all emails from them and scowered them word by word looking to see if it had been sent and it had not. I emailed them about it and never heard back.
My cell is linked to all and the others you have to verify through the cell, just not btc-e because I didn't have that code to set it up.

The guy who hacked had to do work because my password was scrambled letters, numbers and symbols. Years ago I had simple passwords... until my bother showed me how easy he could crack mine. He's computers and math and I'm history and science. We all have our strengths and weaknesses. Mine just happens to be understanding detailed info about computers.

Funny thing is... I read 3 ppl ranting about getting hacked in the trollbox the last two days and as I read it I said to myself, man, that sucks, hope it doesn't happen to me.
It did and it seems to be happening to others as well. Those of you on btc-e, make sure your security is set.

[Denton]

Keyloggers are also capable of capturing your screen... don't know if they can do it undetected though. Keyloggers are the only thing i fear on the internet. 

[empoweoqwj]

I lost a few coins but they were just my "trading coins" (still it hurt and is a lesson learned), I kept my load on an encrypted external. I am thanking my brother for talking me into that because I used to have them all online.

I tried to set up the 2key on btc-e, they are set up on my other accounts, but the page to do so on btc-e is in russian. It also asks for a once time code. I have no idea what that code is. I've kept all emails from them and scowered them word by word looking to see if it had been sent and it had not. I emailed them about it and never heard back.
My cell is linked to all and the others you have to verify through the cell, just not btc-e because I didn't have that code to set it up.

The guy who hacked had to do work because my password was scrambled letters, numbers and symbols. Years ago I had simple passwords... until my bother showed me how easy he could crack mine. He's computers and math and I'm history and science. We all have our strengths and weaknesses. Mine just happens to be understanding detailed info about computers.

Funny thing is... I read 3 ppl ranting about getting hacked in the trollbox the last two days and as I read it I said to myself, man, that sucks, hope it doesn't happen to me.
It did and it seems to be happening to others as well. Those of you on btc-e, make sure your security is set.

Not sure how you can say "your security is set" on btc-e if you don't have 2fa enabled. Without 2fa your risk of being hacked goes up considerably.

[atc1]

It sounds like your password got stolen, not neccesarily btce itself hacked.

This is one department I'll admit that hodlors have a clear advantage.

Isn't stolen and hacked the same thing?

Uh, no.......................................

Quote from: outofservice on Today at 20:10:55


Quote from: BitcoinAshley on Today at 20:08:53

You probably have a keylogger. Sucks to be you! Don't keep more on an exchange than you can afford to lose.


What is a keylogger?

Oh boy..............................................



Thanks, your replies have been so helpful.

http://en.wikipedia.org/wiki/Keystroke_logging

A program can record your keystrokes and send it to the person who designed it. If you have one of these,all your passwords may have been compromised. But,damn...

[empoweoqwj]

It sounds like your password got stolen, not neccesarily btce itself hacked.

This is one department I'll admit that hodlors have a clear advantage.

Isn't stolen and hacked the same thing?

Uh, no.......................................

Quote from: outofservice on Today at 20:10:55


Quote from: BitcoinAshley on Today at 20:08:53

You probably have a keylogger. Sucks to be you! Don't keep more on an exchange than you can afford to lose.


What is a keylogger?

Oh boy..............................................



Thanks, your replies have been so helpful.

http://en.wikipedia.org/wiki/Keystroke_logging

A program can record your keystrokes and send it to the person who designed it. If you have one of these,all your passwords may have been compromised. But,damn...

That's why 2fa is so important. It changes every time.

[sickpig]

You probably have a keylogger. Sucks to be you! Don't keep more on an exchange than you can afford to lose.

What is a keylogger?

http://bit.ly/tadhtb

[BitCoinNutJob]

im noticing msot hacks are people without 2fa