BTC got stolen. Once again! :/

[2double0]

This may not be the right board to discuss this but I wanted to make you guys beware of what I went through, a few days ago. I was actually sick a lot due to which I couldn't come up with this to you quickly, but I downloaded a cracked version of Quick heal Total security and did exactly as that guy told me. Nothing happened to Quick heal and its trial just expired, what happened ahead was more shocking. I lost my BTC as my laptop got hacked and I had my seed stored in it somewhere. I would urge you not to save your seed and not even your private key inside a PC that goes online by getting connected to the internet daily. If you have a spare PC and have a highly secured OS installed, then only keep these things in it and always let it remain offline. Though, I would not ask you even to do that and just write down these things on a paper and keep it in a safe place, or buy some hardware that can store your BTC or a hardware material which can store your paper wallet.

[Jawhead999]

This may not be the right board to discuss this but I wanted to make you guys beware of what I went through, a few days ago.

I think this board is right too, especially informing to members about fake/malware sites.

Sorry to hear that buddy, I hope you don't lost to much.
Maybe you can share about what's link you've download the crack? It will help any members to stay away about that's site

[mk4]

Obvious mistake #1: security software and "cracked version" shouldn't really go together.
Obvious mistake #2: Storing the recovery seed digitally, AND on your personal computer.

Very very amateurish mistakes to be honest; and based on your title, the second time already? Anyway, hope you didn't lose that much. Take the hard-learned lessons and make sure that this never happens again.

Maybe you can share about what's link you've download the crack? It will help any members to stay away about that's site

I don't really think what link it is matters that much. Downloading cracked software is risky in itself, and knowing that OP had bitcoin.

[OcTradism]

I downloaded a cracked version of Quick heal Total security and did exactly as that guy told me. Nothing happened to Quick heal and its trial just expired, what happened ahead was more shocking. I lost my BTC as my laptop got hacked and I had my seed stored in it somewhere.

Using cracked software, and store private keys on the same computer. That are things never should be used.

I would urge you not to save your seed and not even your private key inside a PC that goes online by getting connected to the internet daily.

Agree with you. A computer is used for trading, for web surfing, for experiencing new platforms, new softwares should never be the place to log in your important accounts, wallets, and store your important private details (private keys or passwords).

If you have a spare PC and have a highly secured OS installed, then only keep these things in it and always let it remain offline. Though, I would not ask you even to do that and just write down these things on a paper and keep it in a safe place, or buy some hardware that can store your BTC or a hardware material which can store your paper wallet.

The computer that is used to store important backups should be kept offline if we don't need to upgrade wallets or make transactions. Paper backups are only other alternatives. I think we should make backups in different formats, in offline computer, on paper, or on metal cryptosteel, such as:
- https://billfodl.com/
- https://cryptosteel.com

[o_e_l_e_o]

but I downloaded a cracked version of Quick heal Total security and did exactly as that guy told me.

What guy? And what did he tell you to do? Why were you downloading software from some unknown internet stranger who had been tampering with the code? As you've just discovered, unless software is open source you have absolutely no idea what code it might contain. You also shouldn't be blindly following the instructions of random people online, regardless of how safe you think the thing they are telling you to do is.

Not backing up your seed phrase or private keys electronically is bitcoin 101. There's a reason every good wallet tells you to write the seed phrase down on paper.

Obvious mistake #1: security software and "cracked version" shouldn't really go together.

Security and cracked anything don't go together. If it's been cracked that means some unknown third party has inserted some new code in to it somewhere. That code could do literally anything. Even if you don't have any bitcoin related data on the computer you are using said cracked software on, it could be stealing your usernames and passwords, or it could even encrypt your entire hard drive and demand a ransom.

[JeromeTash]

Sorry OP, always avoid cracked versions of software... 90% are laced with Malware. You are better of buying a paid version rather than lose all your money to a hacker.

I would also urge you to use Linux for your BTC related activities and apps as it's not so much targeted with Malware and hackers like Windows.

[Lucius]

~snip~

I must admit that you confused me with this at first  - "I was actually sick a lot" -> "I downloaded a cracked version of Quick heal Total security", but then it became clearer to me when I read the post to the end. I honestly would not expect from a member who has been in the forum for so long to make such beginner mistakes. Cracked software and crypto are by no means going with each other, and the backup should be encrypted when saved to the computer.

The next time you need a license for a program, I suggest you visit our Marketplace/Digital goods. I buy license for my security software there, at very reasonable prices. I suggest you format the disk and install a new OS - it looks like you have remote access trojan on your computer.

I hope you didn't lose a significant amount of coins, I'm sorry for your loss

[20kevin20]

I'd rather not use an antivirus at all than download some software that's been posted on Reddit or wherever else. Just because a post on Reddit about some cracked software has been upvoted, it doesn't mean that it's legit. A small percentage of users are using cryptocurrencies so it's obviously less often to have funds stolen.

Linux + Ledger/Trezor + Open-Source softwares only all the way (unfortunately, Ledger Live isn't open-source but AFAIK Trezor's software is). Completely free ones. We learn from mistakes. I hope you did not lose much; better learn the lesson earlier than later.

[crwth]

If you are still young and got no money, that's where you go to, cracked version of Softwares, at least, that's where I started from, and I didn't know anything about hacks and BTC back then, so I have nothing to worry about. As you get older, you would start to realize that nothing is really free, there's certainly a trade between the "crack" free stuff and the real stuff.

This should be a lesson learned, not just by the OP, but for everyone. Give respect to the developers by buying the actual software.

[mk4]

Obvious mistake #1: security software and "cracked version" shouldn't really go together.

Security and cracked anything don't go together. If it's been cracked that means some unknown third party has inserted some new code in to it somewhere. That code could do literally anything. Even if you don't have any bitcoin related data on the computer you are using said cracked software on, it could be stealing your usernames and passwords, or it could even encrypt your entire hard drive and demand a ransom.

Pretty much. Hell, I don't even trust most security software, what more cracked security software. The only security software I run on my Windows device is Malwarebytes, and I don't even run it on the background. Pretty much just for occasional scanning purposes.

[Findingnemo]

Its better to go without any security apps over the cracked versions because most of the time we never know what they are doing while they are running on the background.Even installing cracked versions of games becomes new trends of these hackers so never install any cracked apps and games on your PC if you got stored something important there.

[2double0]

Obvious mistake #1: security software and "cracked version" shouldn't really go together.

Security and cracked anything don't go together. If it's been cracked that means some unknown third party has inserted some new code in to it somewhere. That code could do literally anything. Even if you don't have any bitcoin related data on the computer you are using said cracked software on, it could be stealing your usernames and passwords, or it could even encrypt your entire hard drive and demand a ransom.

Pretty much. Hell, I don't even trust most security software, what more cracked security software. The only security software I run on my Windows device is Malwarebytes, and I don't even run it on the background. Pretty much just for occasional scanning purposes.

I did the mistake due to the fear that I had some Trojan virus that got injected and I wanted a software which could run longer, I used to trust Quick heal and had a bought version. It ended later on and I didn't buy. Later, came this pandemic after which lockdown took place and I could not manage to use my funds for this which were then prioritized for food and other important necessities. So, I downloaded it from a website named ONHAX and that's where it started going wrong for me. About the guy, it is not usually some person who personally asked me to do anything, and 'was mistakenly written in that manner' but I meant that the website owner wrote a note inside the downloaded folder and asked to follow some instructions, like installing the security software first and then patch the crack later on by clicking on the provided crack exe file.

[NeuroticFish]

I lost my BTC as my laptop got hacked and I had my seed stored in it somewhere

The fact it's the second time and you understand your mistakes only after you lose money tells that are quite far from really understanding how security works.
I recommend you consider buying a hardware wallet. A proper one starts at about 60 EUR (even less when there are special offers) and it worth it.
I think that you probably lost more than that already.

[skarais]

I am sure that the incident experienced by the OP is the most undesirable thing for everyone. For that reason, I am also grateful that with the OP is current experience, it should be a concern and consideration of all people who ignore security and should not act carelessly because in the crypto world a little mistake will cause a big impact, especially regarding security.

We as crypto users must continue to work to secure assets in the form of bitcoin or altcoin that we store in our wallets. Hackers work endlessly to find gaps and victims. When we make the wrong choice, it will have a big impact on the assets we have.

No matter how great or how strong our efforts are in securing our crypto assets, I must advise against storing them in one place. This effort is an option that is still worth considering to prevent us from losing all assets if at any time our security system is damaged.

[mk4]

I did the mistake due to the fear that I had some Trojan virus that got injected and I wanted a software which could run longer, I used to trust Quick heal and had a bought version. It ended later on and I didn't buy. Later, came this pandemic after which lockdown took place and I could not manage to use my funds for this which were then prioritized for food and other important necessities. So, I downloaded it from a website named ONHAX and that's where it started going wrong for me. About the guy, it is not usually some person who personally asked me to do anything, and 'was mistakenly written in that manner' but I meant that the website owner wrote a note inside the downloaded folder and asked to follow some instructions, like installing the security software first and then patch the crack later on by clicking on the provided crack exe file.

Welp, unfortunately quite ironic that you're the one who ended up screwing yourself. With the installing crack software part, I might understand a bit because this is definitely something I could've done when I was like 15 or so. Where you mostly messed up is saving the recovery seed on your computer; especially in plain-text. That's probably one of the biggest sort of "bitcoin sins" that I wouldn't expect from someone in the forums since 2013. I literally couldn't count how much I've read and said "don't save your seed phrase digitally" inside and outside of Bitcointalk.

[virasog]

This may not be the right board to discuss this but I wanted to make you guys beware of what I went through, a few days ago. I was actually sick a lot due to which I couldn't come up with this to you quickly, but I downloaded a cracked version of Quick heal Total security and did exactly as that guy told me. Nothing happened to Quick heal and its trial just expired, what happened ahead was more shocking. I lost my BTC as my laptop got hacked and I had my seed stored in it somewhere. I would urge you not to save your seed and not even your private key inside a PC that goes online by getting connected to the internet daily. If you have a spare PC and have a highly secured OS installed, then only keep these things in it and always let it remain offline. Though, I would not ask you even to do that and just write down these things on a paper and keep it in a safe place, or buy some hardware that can store your BTC or a hardware material which can store your paper wallet.

There are few questions which come to my mind.

Do you think the malware was in the cracked version of Quick heal which stole your private key or the instructions you followed by the guy?

How did you know your computer got hacked ? Did you give remote control of your system to that guy ? I mean there may be some other reason of your bitcoin lost.

[LbtalkL]

Sorry for your loss BTC, I am worried a little, My little brother sometimes installing unknown programs on my PC and last time it was a virus. I am thankful Nothing was gone so far. If you have children guys or little brother/sister don't ever allow them to use your Desktop or Laptop if it has sensitive files put a password. I am not really sure if the "Quick heal Total security" is reason for the hack, have you tried scanning with Malwarebytes or similar program. I am using some crack software not all crack have malware but it is better to be safer don't just install any app that is found on google.

[LFC_Bitcoin]

Sorry about your losses OP, I really hope it wasn’t a lot of money. You really should know better though, why the hell are you doing normal internet browsing or downloading any kind of program on a device that you store your damn bitcoin’s?

Like I said, I pray it wasn’t a lot of money but FFS, you need to be much more careful. I store most of my bitcoin’s on a laptop that never sees the light of day as far as normal internet activity goes.

This is a lesson to everybody, apologies once again

[2double0]

Sorry about your losses OP, I really hope it wasn’t a lot of money. You really should know better though, why the hell are you doing normal internet browsing or downloading any kind of program on a device that you store your damn bitcoin’s?

Like I said, I pray it wasn’t a lot of money but FFS, you need to be much more careful. I store most of my bitcoin’s on a laptop that never sees the light of day as far as normal internet activity goes.

This is a lesson to everybody, apologies once again

The number in BTC was not so big to regret 'and was ~0.008 btc', but everything got exposed 'or compromised' to the hacker - my private key from which I sign a message here as well as have in my profile. That is what I am highly worried about, I don't know if I should sign a new message from my old BTC address confirming that it is me if a situation arises where I may be asked to prove my identity?

[LTU_btc]

I won't be smartass who will tell what a stupid mistake that you did. I just sorry for your loss. 0.008 BTC isn't that much, but it still sucks to lose money. It's almost $60 and for such money you can get Ledger Nano S hardware wallet, which would had protected your crypto from this and other scam attempts.
And it's never a good idea to download cracked programs, especially on PC where you keep crypto and login to your bank account. Offcourse, paid versions may be expensive, but you always can find free alternatives.