Even when utilizing a single device, there are still various options available to ensure the security of your assets. One option is to set up a dual boot system, another is to use a Live OS from a USB drive or other external media, and as a final alternative, you can also consider installing free virtual PC software and use a secondary OS that way.
Thanks for the tips. I'll look into it.
That's one scary malware. Thanks for the info.
You said you wrote down the seed phrase in your personal notebook, correct? Did you also write the seed phrase for your hardware wallet in the same notebook? How securely is that notebook stored? Did you leave it out somewhere where someone could have seen it? You seem to be confident that the funds in your Ledger wallet are safe, how can you be so sure? You mentioned that you only have alts stored in the Ledger, it may be just a matter of time before the thief finds those accounts too.
Until you can answer the question of how this happened to your hot Electrum wallet, you should assume that all your seed phrases and all your funds are compromised.
That notebook is totally secure, no one else but myself knows where it is within our home. I'm 100% sure no one else has access to it. So those seed phrases are secure.
As I've previously mentioned in this thread, the blame was on me for having a crappy system that I've been using for a long time without a care for its security.
Use a Linux system, but you will have to install the applications yourself from the package manager, and only use portable apps if you verified the release or trust the vendor.
The chances of stock malware breaking into an X Windows desktop on Linux is nil, because they're all written for Windows. You would have to be specifically targeted like Dashjr was in order to be at risk.
But whatever you do, do not install WINE with Electrum, or at the very least, disable or uninstall WINE, as it enables running Windows programs on Linux including malware. Not that many hackers are aware of that, but still.
Thanks for the tips. I'll make sure to remember this.
After what happened to OP, I spent the whole night checking my PC since I'm also using Electrum to download additional anti-virus and checked all unused applications, OP opened our eyes to the fact that we must have a conscious effort to safeguard our system.
Yes. At the very least, some are made aware (again) that this incident could possibly happen to anyone. Man, I only wish I was not made an example though, too late.
But one question:
Why so much funds were held on your wallet? 5k USD are a lot of money, enough for several weeks of payouts?
Normally, allocations are much smaller, lasting for around 4 weeks, not more?
Or am I just having a wrong impression?
I'm not Bounty Manager of course.
All of those funds are only for 1-week worth of signature campaign. It just became a big amount as the number of participants on Yo!Mix was suppose to be 40 per week. 10 for Coinomize.
First suggestion for OP is to think about installing Linux OS on his computer instead of using wInd0wS, and always use ledger wallet connected with Electrum in future.
Linux is much safer if used correctly and attack surface is much less, but even dual boot (win/linux) would be acceptable solution.
Yes. I've just installed a clean windows OS and currently looking a way to dual boot Linux on it.
Than I would like to see a realistic plan posted by him, explaining how exactly he is going to pay money back to companies that paid him.
I don't know if that is going to be borrowing money from people he trusts, or selling his stuff, but this would be the only way towards fixing his reputation.
My plan is simple.
As I've previously mentioned on this thread, I've got a motorbike, probably cost around $1,000 if I sell it which I will. That should cover the lost funds for Coinomize ($1,000). Although it might take a while for it to get sold so I'll start sending whatever amount I can gather for now.
Also, a portion of my upcoming bounty management fees will be used to pay these debts that I now owe to Coinomize and Yo!Mix. For starters, I just launched another campaign yesterday for which I was paid $400 to manage it for 4-weeks (
here); I've already informed both project teams (Coinomize & Yo!Mix) that they'll be refunded with $150 each for now. I still need $100 for my family's expenses which isn't much but we will try and make do for the rest of the month.
Any means of additional income I get, a portion of it will be sent to these project teams. Signature payouts, management fees, etc.
The $320 BTC management fee from Yo!Mix that they've also sent upfront prior to the incident will also be returned to them today.
I just need both parties to confirm the BTC addresses they've given (through private messages) here on this thread so the whole community would know that I'm sending out refunds to correct wallet addresses and not to just some random wallet address that I made up.
Coinomize:
Great Thanks ;)
BTC Address: 17fd4FLbj7rQCCPhRo3yqdZQPtKggs7mqc
Yo!Mix:
hello, sorry we have only btc
bc1q5xzdzzdagmtny5n285q02hfczjcm6hpdwu6mr3
