Technologov (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2014, 09:05:37 PM |
|
Hi, I found a leaked database from Mt.Gox. http://89.248.171.30/MtGox2014Leak.zipThe hackers claim, that the money possibly still in Gox. They also claim Gox has 950,000 BTC, and that Mark was lying when said that money was stolen. -Technologov
|
|
|
|
roslinpl
Legendary
Offline
Activity: 2212
Merit: 1199
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2014, 10:54:12 PM |
|
Hi, I found a leaked database from Mt.Gox. http://89.248.171.30/MtGox2014Leak.zipThe hackers claim, that the money possibly still in Gox. They also claim Gox has 950,000 BTC, and that Mark was lying when said that money was stolen. -Technologov Interesting - but too risky to download ;P
|
|
|
|
Technologov (OP)
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 10, 2014, 11:50:49 PM |
|
There is data, besides the .exe. And no, it isn't my.
|
|
|
|
likehiro
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 01:41:30 AM |
|
as simple as open it in a sandbox/VM ;O
|
|
|
|
joshua3m
Newbie
Offline
Activity: 56
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 01:43:25 AM |
|
as simple as open it in a sandbox/VM ;O
or just don't run exe ![Cheesy](https://bitcointalk.org/Smileys/default/cheesy.gif)
|
|
|
|
BCB
CTG
VIP
Legendary
Offline
Activity: 1078
Merit: 1002
BCJ
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 01:44:03 AM |
|
The csv files are save.
Just don't open the Tibbanebackoffice.exe file. That contains a bitcoin stealing malware for MS and MAC
|
|
|
|
likehiro
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 01:48:28 AM |
|
Backdoors can be binded in other filetypes, the .exe file could be just a bait for those who believe that trojans/worms (or any malware) are just binded with .exe, .bat, .scr, etc.
The better way to take a look securely is in a virtual machine or sandbox.
|
|
|
|
DieCommieScum
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 05:57:48 AM |
|
downloading in a sandbox, will keep you guys posted after a scan.
EDIT: Comodo Dragon wouldn't let it run and scrubbed it because it detected shit, now the the DL is slow and its over 700mb in IE. Fuggit.
|
|
|
|
Nagle
Legendary
Offline
Activity: 1204
Merit: 1002
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 06:09:14 AM |
|
See this post for what's in there. Along with the hostile code (which only runs if you explicitly execute the .exe or Mac executable files), there are some plausible, but possibly fake text files purporting to be Mt. Gox's account list and transaction list. Please see if you can figure out if that info is fake. Can you match it to the blockchain?
|
|
|
|
dimfot
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 12:06:11 PM |
|
ok so did anyone got anythin out of this issue?
|
|
|
|
|
roslinpl
Legendary
Offline
Activity: 2212
Merit: 1199
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 05:39:47 PM |
|
Perhaps sandbox the best but did you guys had a look at it already? Did you found anything really interesting? Mark K. is not yet arrested for stealing BTC
|
|
|
|
alex_bronco
Newbie
Offline
Activity: 33
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 05:53:01 PM |
|
So we should check if the info is not fake? I can't find it in blockchain ( sorry guys
|
|
|
|
EvilPanda
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 05:57:33 PM |
|
Perhaps sandbox the best but did you guys had a look at it already? Did you found anything really interesting? Mark K. is not yet arrested for stealing BTC His time will come. As for the file, it smells, don't run it.
|
|
|
|
rbillig
Newbie
Offline
Activity: 8
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 08:12:35 PM |
|
Checked web sites. For me, it s true
|
|
|
|
Wendigo
Legendary
Offline
Activity: 2604
Merit: 1036
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 11, 2014, 08:18:26 PM |
|
Checked web sites. For me, it s true
O rly?
|
|
|
|
rbillig
Newbie
Offline
Activity: 8
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 12, 2014, 01:08:12 PM |
|
When the web site was available, I checked my own balance and it was the right one. ( The one from the day before the final closure ).
So yes really ( at least for my own account ).
|
|
|
|
roslinpl
Legendary
Offline
Activity: 2212
Merit: 1199
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 12, 2014, 08:05:39 PM |
|
When the web site was available, I checked my own balance and it was the right one. ( The one from the day before the final closure ).
So yes really ( at least for my own account ).
Interesting .. but this is not enough yet to say who is guilty. If this is all true we will hear about it soon :] Cheers ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
|
|