BTC stolen

[ingonetcrypto]

Hello. Today i was about to send my btc to an exchange but my 0.0810672 btc were stolen.
They went to one new address and then to another one.

I don't have viruses or installed a new app this days.

What i can do?

this is the transaction

https://www.blockchain.com/es/btc/address/13dteWwmfQVDEDcms9Rhh7HKxvQEJUpbZp

I was using Electrum 3.2.3 Wallet version

[1715111693]

1715111693

[1715111693]

1715111693

[1715111693]

1715111693

[TryNinja]

From where did you download your Electrum wallet?

Please tell me that you didn’t get a message asking you to update your wallet and giving you a link to a github repo.

[ingonetcrypto]

I don't remember from where i downloaded my wallet. Maybe Github or Electrum main page. 99% of the time i use main page for wallet downloads. Today i did that when i downloaded the 3.3.3 version.
I downloaded the 3.2.3 version on semptember 4th 2018

And i didn't receive any message.

[TryNinja]

Hardly this is Electrum’s fault. You must have downloaded a fake wallet from somewhere or managed to get a malware. Can you check the Downlods History page of your browser for the file you downloaded?

[ingonetcrypto]

My historial is recorded from september 13th 2018.

Malwarebytes and Avast cant find a virus or ramsomware in my pc. Is there another program i can use to detect malware?

[bitdaric]

My historial is recorded from september 13th 2018.

Malwarebytes and Avast cant find a virus or ramsomware in my pc. Is there another program i can use to detect malware?

can you check PGP sign of 3.2.3 you had?

[ingonetcrypto]

Im downloading Gpg4win right now. Informing asap.

[ingonetcrypto]

I can't recover the 3.2.3 electrum wallet (i deleted it after i installed the new one).
I recovered but file was corrupted so meh.

[ingonetcrypto]

Now im checking a payment i did to a friend to coinomi and im watching the transaction to the thief wallet.
Is there a possibility that thief did that transaction with my electrum wallet open when i was using it?

[TryNinja]

Now im checking a payment i did to a friend to coinomi and im watching the transaction to the thief wallet.
Is there a possibility that thief did that transaction with my electrum wallet open when i was using it?

Do a clean reinstall of your OS in case you’re infected with a malware and afterwards, create a brand new wallet. You should consider both your wallet and PC as compromised.

[Abdussamad]

Now im checking a payment i did to a friend to coinomi and im watching the transaction to the thief wallet.
Is there a possibility that thief did that transaction with my electrum wallet open when i was using it?

The only thing the thief needs is your wallet seed. Once he has that he can steal from at anytime. He doesn't have to use your system to do it. These malware versions of electrum send the seed to the author as soon as you unlock your wallet i.e. enter your password.

[HCP]

Have you ever stored your Electrum 12 word seed mnemonic digitally? For instance, in a text file or screenshot on your computer, cloud file storage or email etc?

[ingonetcrypto]

Maybe i did when i started on Crypto. Now i store seeds in a safe place.

Just did a clean windows reinstall.
New electrum from https://electrum.org/#home.
New wallets, tons of 2fa.

This was a tough lesson but this is not stopping me.

Thanks for the help.

[TryNinja]

Don’t forget to verify the signatures of the file you downloaded - even if you are sure you downloaded it from the right website. Make that a habit and you will never download a fake wallet again.

Here is a quick tutorial for this: https://bitzuma.com/posts/how-to-verify-an-electrum-download-on-windows/

[HCP]

New wallets, tons of 2fa.

Just before you go down the "2fa" road... you realise that 2fa wallets on Electrum incur extra fees charged by the TrusteCoin service (2fa provider) right?

Make sure you have read and fully understood the implications of using 2fa on Electrum: https://api.trustedcoin.com/#/electrum-help

[Snillegutt]

When I checked my Trezor wallet today, 01.01.2022, I found that 1.0 BTC, everything that was there - was gone. It was stolen 2021.12.01, exactly one month ago. Only I have access to my Trezor. How is this possible? I was told Trezor Model T is 100% safe? Can I track it somehow? Probably no chance of getting it back.

[Lucius]

When I checked my Trezor wallet today, 01.01.2022, I found that 1.0 BTC, everything that was there - was gone. It was stolen 2021.12.01, exactly one month ago. Only I have access to my Trezor. How is this possible? I was told Trezor Model T is 100% safe? Can I track it somehow? Probably no chance of getting it back.

@Snillegutt, you should have opened a new topic, because your case has nothing to do with Electrum wallet.

First I will ask you where and in what way did you store your seed? Even if no one has physical access to your Trezor, anyone who would come into possession of your seed (backup) could steal everything on your hardware wallet. In addition, there is another vector of attack that requires physical access to the device, and you can read more about it at the following link.

As for tracking the transaction, it is possible if the hacker did not use the mixer and mixed the coins and thus obscure the trail. If you want you can post a link to the transaction here to determine if the hacker made the wrong move and maybe sent BTC to a centralized crypto exchange which could lead to establishing his identity. Although the chances of him being so stupid are not great, and besides, it's been 1 month since the hacking.

You can try to report the whole thing to the police, but don't hope too much.

[o_e_l_e_o]

There are a number of possibilities for how your coins were stolen.

• Your Trezor was pre-initialized when you received it, and someone else already knew your seed phrase. Did you generate a seed phrase yourself on the Trezor when you first received it?
• Your seed phrase has been compromised some other way. Did you import a seed phrase from elsewhere? Did you recover the seed phrase to any other wallet? Did you store the seed phrase electronically?
• Your Trezor device was physically accessed and the seed phrase was extracted, or someone knew the PIN and cleared out your accounts.
• You weren't paying attention and either made an incorrect transaction or approved a malicious transaction.

[Pmalek]

When I checked my Trezor wallet today, 01.01.2022, I found that 1.0 BTC, everything that was there - was gone. It was stolen 2021.12.01, exactly one month ago. Only I have access to my Trezor. How is this possible? I was told Trezor Model T is 100% safe? Can I track it somehow? Probably no chance of getting it back.

Trezor Model T is safe as long as proper precautions are taken. There is no such thing as 100% security, and usually a user error causes the loss of funds.

How long have you had your Trezor before this incident happened and where did you buy it?
Have you used or installed anything out of the ordinary on the PC  where you connect your hardware wallet to or where a seed phrase is digitally stored?