My MtGox account was hacked.

[K.A.T]

 Hello,

After receiving an email that my account had been withdrwan from. I check and couldn't login. Even a 'Forgot Password' gave no result.

The withdraw info is:


There has been a withdrawal from your Mt.Gox account:

Transaction reference: 7e201d54-4109-4ba7-b87c-c02650a61adc
Date: 2011-12-25 14:51:43 GMT
IP: 84.19.169.232


After little investigation, the account seems to be a spammers IP address.

I contacted MtGox and they helped me recover the login mail. BUT and here's the catch my 4 BTC is gone!!!
Account balance is 0.000 BTC.

The account history is below to help people avoid dealing with this thief:

Sun 25 Dec 2011 02:51:43 PM GMT    Withdraw    Bitcoin withdraw to 1Bmd4BCamKMso6LymoGAHpq3y8nUFqmBfR   Amount 4 BTC   Balance 0.0000


Be careful guys I lost my coins and MtGox is not doing anything about although I had a good password in place.

[Raoul Duke]

That IP belongs to cyberghostvpn.com, a VPN service. Maybe they can help you.

[Tril]

K.A.T. are you sure there's not a keylogger on your computer?

Mtgox offers a Yubikey for cases where you must use bitcoins on unsecure computers.

EDIT: also, instead of a keylogger, your e-mail account could have been compromised, then your mtgox account taken
over by "recovering it" using your e-mail.  Make sure your e-mail is secure!

[K.A.T]

 Hi,

I'm using my own computers only.

With some discussion with Mt.Gox, I clicked on phishing mail masked as an Mt.Gox mail asking to review my account just before the withdrawal. MtGox did not send such a mail and I fell for it.

It's my mistake and I paid for it.

[N.Olmos]

Sorry to hear of your loss.

Unfortunately their are scammers everywhere.

Here is a link with more info:

https://bitcointalk.org/index.php?topic=55647.0

[K.A.T]

 Thanx for your comments.

[casascius]

A second withdrawal password would help with this.

I hear another popular Bitcoin-related site just started doing this.

[K.A.T]

 Totally with you casascius.

Or some 2-factor approval if possible.

[zer0]

Did you click the link in the spammer email and give them your login info?
I like how Pecunix is set up. You can still use it through Tor and they give you a 16-character PIK and without it withdrawing is useless.

[K.A.T]

 As I mentioned I did click the link.....

I think if we suggest a black list of BITCOIN addresses, would that be OK ?

So you don't send coins to suspicious addresses.....

[vuce]

Doesn't mtgox have support for some mobile phone two factor authentication? Why the hell are people not using that is beyond me...

[Fiyasko]

Doesn't mtgox have support for some mobile phone two factor authentication? Why the hell are people not using that is beyond me...

Psh, They think One mobile alert is too much effort and time wasted when "all i wanna do is make a withdrawl"

[senbonzakura]

[brox]

Tonight my MtGox acc was hacked as well (
Total of 35 BTC were withdrawn to 1B629eJKZQeQgbjwoTpkPGXmCs6psaN4WW