Hackers steal Ethereum, who is hurt?

[lovesmayfamilis]

A recent post on reddit.com sounds about a request to check wallets, as hackers have withdrawn more than $1.1 million in Ethereum over the past 48 hours.

https://www.reddit.com/r/dogecoin/comments/n676ko/warning_please_help_us_to_find_out_how_eth_is/

The user is not a beginner and knows all the storage security measures. But he and other victims as well cannot understand the reason why their Ethereum being withdrawn.
Are there any victims among members of the forum?
According to the telegram channel @gfoundinshit, there is a leak from Apple devices, since all complaints come from the owners of these devices.

[ryzaadit]

-snip-

Hard to be check, there has several reason:
- Connecting wallet to such random website, because some type airdrop like UNISWAP
- Malware
- DNS Hijack

The one is really dangerous "DNS Hijack" because you can redirect to a phishing website even you visit the right URL and most of users who bookmarks and saves the website still can get this.

In not wrong, Pancake Swap is also one of the target of "DNS Hijack".

[Ucy]

Hope people stopped storing and controlling huge amount of coins with a single private keys. I don't even like the idea of coins controlled by single secret phrases either. If you have $10,000  worth of coins or huge amounts of coins you can't afford to lose, splitting it into multiple parts and have each part have its own unique private keys, then store the keys safely. Splitting the coin can help alot.
And it's important to do the splitting on secure devices.

[DaMut]

Hard to be check, there has several reason:
- Connecting wallet to such random website, because some type airdrop like UNISWAP
- Malware
- DNS Hijack

The one is really dangerous "DNS Hijack" because you can redirect to a phishing website even you visit the right URL and most of users who bookmarks and saves the website still can get this.

In not wrong, Pancake Swap is also one of the target of "DNS Hijack".

The user is not a beginner and knows all the storage security measures.
Only a beginner that would fall for those trick unlike these people, they know security measures. either it is because of sim swap or something more advanced that we do not know of, since technology keeps advancing.

another extra, we should not exclude the possibility of fault in their software since I have been hearing a lot of these things but on different network.

[kryptqnick]

Wow, that's a big robbery. If Apple is to blame, I hope some class-action lawsuit will be out in place, and the company will pay out the losses to the victims.
Luckily, I don't store any ETH, but I lost 0.6 ETH years ago to a hack as well. I was a newbie back then, though, so I've made a mistake of hodling my money in an online wallet that used to be popular back then, but with no access to private keys or anything.
Anyway, I hope the current story will receive a satisfying follow-up.
What's weird for me is that the post about ETH is on dogecoin Subreddit. If you didn't say this person weren't a noob, I would have certainly believed otherwise.

[pealr12]

A recent post on reddit.com sounds about a request to check wallets, as hackers have withdrawn more than $1.1 million in Ethereum over the past 48 hours.

https://www.reddit.com/r/dogecoin/comments/n676ko/warning_please_help_us_to_find_out_how_eth_is/

The user is not a beginner and knows all the storage security measures. But he and other victims as well cannot understand the reason why their Ethereum being withdrawn.
Are there any victims among members of the forum?
According to the telegram channel @gfoundinshit, there is a leak from Apple devices, since all complaints come from the owners of these devices.

that's huge! hackers don't let any slight opportunity slip by without utilizing it to the maximum, i hope all forum members can get to read this post and check their wallet to see if they fall victim, am still wondering what exactly was leaked in the device that lead to this, i guessing those apple users who have nothing to do with crypto won't be affected.

[ryzaadit]

The user is not a beginner and knows all the storage security measures.[/b]
Only a beginner that would fall for those trick unlike these people, they know security measures.

Did you read the Reddit?

Yes, he knows how to store the seed but he does not explain his activity only know he does not download any apps to his phone but you don't know using AMM Exchange doesn't need apps you only need a browser + connected your wallet.

And do you know how DNS Hijack works? you are visiting the legit site but since the site got DNS Hijack you are redirected from a real website into a phishing website this hacked is more dangerous than just regular phising. Even you as a person are not a beginner you still can get phishing because of this, let me bet after you clicked a link from your bookmark you will not check twice because you feel like the bookmark link is already the right link.

[herurist]

Hackers always have a way of erasing their tracks by going to a variety of different addresses and hoarding them over a period of time. so it's really hard to trace how we found out his identity. random attacks on Reddit so that anyone who stumbles upon Malware can't remember exactly when they accessed it.

[FatFork]

A recent post on reddit.com sounds about a request to check wallets, as hackers have withdrawn more than $1.1 million in Ethereum over the past 48 hours.
<cut>

Wow! That's a whole lot of ETH!

Based on etherscan, I noticed that the hacker started moving coins today, and some of his transactions are linked to the HitBTC exchange. Maybe some of the victims should contact their support to freeze funds if that is still possible.

[ecnalubma]

Probably its due to users unsafe internet behaviour. As much as possible I don’t store my crypto assets in single wallet, its better to divide funds in different wallets its free and we should take advantage of it. Even the pros are unsafe these days one wrong move could really devastating when someone got hacked.

[DaMut]

~snip

I did and yes I know it, but it did not happen these past couple of days which mean it is out of the possibility or am I missing something here?
the latest I heard about DNS Hijacking was around two or three months ago and it happened on Pancakeswap while he is using Ethereum.

Wow! That's a whole lot of ETH!

Based on etherscan, I noticed that the hacker started moving coins today, and some of his transactions are linked to the HitBTC exchange. Maybe some of the victims should contact their support to freeze funds if that is still possible.

HitBtc will not respond to that, they are not doing any better either.

[akirasendo17]

This is why clicking a link from a browser of your computer or mobile phone should be cautious because we don't know what really is on the site or there is a script that will run once the link is open, see people who lose their funds while just watching, the thing is avoiding opening links, and emails sent by unknown people, some people when you ask if they open a link or an email will try to deny it, especially if they are years in the industry because they don't want people to tell them what happened is their fault instead they will just say it's just happened, more or less the cause of this hack is due to links that have been run to trust wallet or there is a link click and there is a script maybe that run and gather all the information and sent it to the hacker's server.

[semobo]

People consider Apple devices are entirely safe but no device is safe when it connects to the internet, so people who are holding huge amount of cryptocurrencies should dedicate a device for their cold storage and better never connect internet into it and what type of wallet they are making also has to be considered when these type of hacks occur.

[oemar bakrie]

I am surprised that currently there are more and more thieves who target bitcoin or ethereum assets and other coins in different ways ..
whether the perpetrator is a network I don't know ..
because a year ago I had my wallet hacked and there were not a few losses at that time, good tokens were taken, and only left tokens that were worthless..
In the beginning, I gave a link to a project that has the same shape as MEW, and there I entered with a private wallet, that's where it didn't take hours for my token to disappear..
I really feel sad, but it has all become a lesson for me to always be careful..

[maydna]

That is a lot of money.

How can the hacker withdraw all of the ethereum? While assuming the user knows how to protect their wallet.

Perhaps, that is because of a leak from the Apple devices, and the hacker used it to steal the ethereum. But if there is no further explanation or details from the user on how they can get hacked, we can assume that can be their mistake because they are not a beginner in crypto.

It is from the Trust wallet moderator on that Reddit page.

Code:

A Trust wallet moderator told me that the theft must be my own fault and that there is no systemic fault in their app or seed generation.

Perhaps, his Apple or his iPad Pro have leaks, so the hacker used it to steal his ethereum.

[aemma]

This is a big problem and no one might know actually what happened or how the victims played around or uses their wallets, that is, which website did they connect their wallet and so on, because nowadays a lot of projects are coming up with airdrops in which one of the requirements or steps is connecting wallet to the website, wherein it might be hard to tell which is genuine or which have scam intentions.
In a bid to add, it is wise to have a separate wallet where you can connect to any random website all in a bid to participate in their airdrop, that is if you are an airdrop kind of person. Secondly, it is also wise to have more than one wallet where you can store your assets, at least splitting assets in more than one wallet looks more secure. And lastly, do not save personal information like private keys on your phone.

[Anonymous100]

A recent post on reddit.com sounds about a request to check wallets, as hackers have withdrawn more than $1.1 million in Ethereum over the past 48 hours.

https://www.reddit.com/r/dogecoin/comments/n676ko/warning_please_help_us_to_find_out_how_eth_is/

The user is not a beginner and knows all the storage security measures. But he and other victims as well cannot understand the reason why their Ethereum being withdrawn.
Are there any victims among members of the forum?
According to the telegram channel @gfoundinshit, there is a leak from Apple devices, since all complaints come from the owners of these devices.

We are not sure that a wallet like MEW was hacked. However, a malware attack on their computer could result in the backup of the private key being taken. So that someone can easily enter a wallet. We always anticipate malware attacks on computer systems. Pirated antivirus can also retrieve computer data when it is scanned and the entire contents of the computer are read by the antivirus.

[zasad@]

You need to store your coins in hardware wallets, this will give you great protection against viruses. It is possible to draw tokens in the Ethereum ecosystem if you give permission for untrusted smart contracts to interact with your wallet.
I still don't understand how the ethereum was stolen. The only way is to steal the seed phrase.
For the operations with the seed phrase, I plan to use a separate computer that will never connect to the Internet. This is the best protection, and a hardware wallet is difficult to hack with a computer virus.

[Botnake]

It will be investigated, if it's the fault of Apple, then it will not result good to their business. Actually, AFAIK, apple is more secured than other OS, so how come this happens? If their system is compromised then probably its time to see more pump in crypto as investors will fly in crypto from apple.

However, I really thought it's just an isolated case where the problem is mostly coming from the user, not the system itself, but I could be wrong.
I'll follow the development of this and hear your opinion guys, this should be not be taken lightly, I'm an apple user too.

[khaled0111]

However, I really thought it's just an isolated case where the problem is mostly coming from the user, not the system itself, but I could be wrong.

This is the hacker's address according to the reddit post linked above:
https://etherscan.io/address/0xc940eda1fbe83db6e11d48eecad6f0de07915ffe
It has received many transactions in the last couple of days. So, I don't think this is an isolated case. The first transaction it received was two days ago. OP suspects that Trust wallet might be vulnerable but I think it's too early to draw conclusions.