My Kaspa Web Wallet was hacked

[Echo8002]

First it's not 75k usd in crypto. And second yes my seed was on my Desktop and the hacker got it via remote desktop I found was installed a day ago before the hack

[1715337481]

1715337481

[1715337481]

1715337481

[1715337481]

1715337481

[1715337481]

1715337481

[1715337481]

1715337481

[P00P135]

How did they install remote desktop?

[JayDDee]

Blockchain analysis shows that around that time at 18.03.2023 around 75k USD of Kaspa tokens were stollen and send via multiple transaction ,divided by 2 after each transaction.

First it's not 75k usd in crypto.

If you say so. You should still be more careful where and how you store your crypto.

[arielbit]

when the pump comes this would hurt very very much. welcome to crypto and sorry for your loss, hard lessons comes and hope you learn from it.

this crypto place is filled with vile snakes 

[Echo8002]

Blockchain analysis shows that around that time at 18.03.2023 around 75k USD of Kaspa tokens were stollen and send via multiple transaction ,divided by 2 after each transaction.

First it's not 75k usd in crypto.

If you say so. You should still be more careful where and how you store your crypto.

Yes ,but not only mine. Check Kaspa Discord wallet-help section. Mine are 87k Kaspa tokens for around 1200 usd at the time.

[Echo8002]

when the pump comes this would hurt very very much. welcome to crypto and sorry for your loss, hard lessons comes and hope you learn from it.

this crypto place is filled with vile snakes 

This is not my first time getting hacked and I have learned my lessons. The problem is that no matter the fact we managed to get 1 million KAS for Ledger Nano development its been 4+ months and the app is not ready yet. Also I didn't expect paid Bitdefender antivirus on my PC and GitHub to allow malware apps on their site

[arielbit]

when the pump comes this would hurt very very much. welcome to crypto and sorry for your loss, hard lessons comes and hope you learn from it.

this crypto place is filled with vile snakes 

This is not my first time getting hacked and I have learned my lessons. The problem is that no matter the fact we managed to get 1 million KAS for Ledger Nano development its been 4+ months and the app is not ready yet. Also I didn't expect paid Bitdefender antivirus on my PC and GitHub to allow malware apps on their site

You got keylogged?

Another layer of security is a software keyboard like neo safekeys, unless you got videologged.

Make layers of security, make a mess so that even with remote access finding stuff is a head ache.

A software keyboard once saved a shitcoin i owned hehe

[FP91G]

Tangem added KAS to his wallet

https://tangem.com/en/

As you know, the latest beta version of the app include new blockchains — Ton, Kaspa (available for iOS+Android), Kava EVM (available only for iOS for now).
Get exclusive access to new features and help us improve our products. Don't miss out on this exciting opportunity!
https://t.me/tangem_news/95

[CochnocherCrypto]

Hey bud - very sorry to hear this happened to you. Lots of us know, all too well, there are lots of people that are spending a tremendous amount of time and effort to steal crypto that isn't rightfully theirs. What I recommend doing is the following:

Assuming you're using windows, close ALL browsers and anything in your system tray that is communicating with the outside world - open up the command prompt as an administrator and type "netstat -ano". This will bring up a list of all of your computer's current connections to outside machines. You want to look, specifically at the "ESTABLISHED" connections that show a FOREIGN address that is not local (ie.. doesn't start with a local IP like 127.x.x.x or 192.x.x.x etc.). Next - open up your task manager with ctrl/shift/esc and click on "Details". You will see a Process ID listed that will correspond with the PID's listed in the netstat -ano page.

This is where you can see if anyone is spying on the computer in question.

Anti-Virus software, of course, is important. But - don't always assume it catches everything.

Always, always, always super important to be vigilant in your personal cyber security!

[deedeeranged]

It is better to download all available wallets using links from the official website, and a link to the official website can be found on the coinmarketcap service. I mine those coins that have a hardware wallet, and if you have a lot of coins, then you need to use a cold wallet that you create on a separate computer.

Or you store your cold wallet in a VM and use another VM for web wallet if you actually need one.

I would never leave a Web Wallet open in a browser, same as normal browsing cannot understand those who keep tons of tabs open in whatever browser they have.

[FP91G]

It is better to download all available wallets using links from the official website, and a link to the official website can be found on the coinmarketcap service. I mine those coins that have a hardware wallet, and if you have a lot of coins, then you need to use a cold wallet that you create on a separate computer.

Or you store your cold wallet in a VM and use another VM for web wallet if you actually need one.

I would never leave a Web Wallet open in a browser, same as normal browsing cannot understand those who keep tons of tabs open in whatever browser they have.

For new coins, this method is not the best. Recent events with the IronFish wallet force us to look for other solutions. Now miners need to install a full node because the wallet is not available. If you sell new coins all the time, then you don't need strong security.

[osamneska]

this my waleet qzwk8fr58uc8eqr9tg4rcn72uqp69s04wss0mqlplssdnykq6la7gzxarsj5z

somon haked 2178 kaspa
2023-04-30 13:07:37
TRANSACTION ID
caeca1ec90c79c6629d3566c54643dd78e7c1a083ba5eec6f56c3e0e1d2a0507
AMOUNT
-2,178.158 KAS
VALUE
-57.07 $

OUTPUTS
Index
#0
Script Public Key Type
pubkey
Amount
+2,241 KAS
Script Public Key Address
kaspa:qp8zdhlg53y4q8zefww4hqd9xc69vs84vj24mpnnva2w0jatatvssfyht82qp
2023-06-04 13:23:36
TRANSACTION ID
d88be7f18927de6632f1ece8d0f9b08eeba351b234eabd4029df937f1f33be4f
AMOUNT
+5,514,433.8 KAS
VALUE
144,478.17 $

fuck kaspa

[FP91G]

This tutorial will show you how to create your first Ledger Kaspa (KAS) account with your Ledger device and the KasVault web app.

Before you start
Update Ledger Live through the notification banner or download the latest version.
Update the firmware on your Ledger Nano S / Nano S Plus / Nano X.
https://support.ledger.com/hc/en-us/articles/12665738333853-Kaspa-KAS?docs=true

Ledger has a lot of bad news, but storing mined coins on this wallet is most likely safe.