Bitcoin Forum
May 28, 2024, 07:16:47 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Warning: One or more bitcointalk.org users have reported that they strongly believe that the creator of this topic is a scammer. (Login to see the detailed trust ratings.) While the bitcointalk.org administration does not verify such claims, you should proceed with extreme caution.
Pages: [1] 2 »  All
  Print  
Author Topic: stolen bitcoins from encrypted wallet ?  (Read 3009 times)
paulus51 (OP)
Sr. Member
****
Offline Offline

Activity: 616
Merit: 321



View Profile
April 26, 2014, 06:49:13 PM
 #1

hello guys need some help here :

i got a few days ago a email from : no-reply@blockchain.info , (so we tought its trustwordy but not !! )

that some one send us some bitcoins, we tought it would be a smal donation to our project ( see link in my signature )


but instead of getting some bitcoins what we realy appriciated for our project we did click on the link what we tought it would send us to accepted those bitcoins sum total : 0.19 btc

Quote
this whas the head of that email :

You have received 0.19 BTC.

GHash.IO has sent you 0.19 BTC.

Click Here to claim this payment or if you have never heard of bitcoins before read the Beginners FAQ.


Regards,
Blockchain.info



here below is the source documentation of that email , we had not muts bitcoins in that wallet just around   0.3xxxxx bitcoins
but for us its allot we would used it for our project ,

so i hope sincerly the one who stole those bring /send them back , but that hope is gone . so please need some help to find out who did this and for future warning for all off us for this kind of email !



Quote
From - Wed Apr 23 10:54:23 2014
X-Account-Key: account1
X-UIDL: <0M4r65-1Wr7CO1lXh-00yz2C@mrelayeu.kundenserver.de>
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-Path: <srs0=0ajw=zw=blockchain.info=no-reply@srs.kundenserver.de>
Received: from edge07.upcmail.net ([192.168.13.80])
          by viefep14-int.chello.at
          (InterMail vM.8.01.05.05 201-2260-151-110-20120111) with ESMTP
          id <20140422214341.LHQQ10588.viefep14-int.chello.at@edge07.upcmail.net>
          for <myemailadress@somename.com>; Tue, 22 Apr 2014 23:43:41 +0200
Received: from moutng.kundenserver.de ([212.227.17.24])
   by edge07.upcmail.net with edge
   id t9jf1n00V0X9Zn0099jgv6; Tue, 22 Apr 2014 23:43:41 +0200
X-SourceIP: 212.227.17.24
Received: from User (hosted-by.leaseweb.com [46.165.210.1])
   by mrelayeu.kundenserver.de (node=mreue105) with ESMTP (Nemesis)
   id 0M4r65-1Wr7CO1lXh-00yz2C; Tue, 22 Apr 2014 23:43:38 +0200
Reply-To: <no-reply@blockchain.info>
From: "Blockchain"<no-reply@blockchain.info>
Subject: GHash.IO Has Sent You Bitcoins
Date: Tue, 22 Apr 2014 22:43:37 +0100
MIME-Version: 1.0
Content-Type: text/html;
   charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <0M4r65-1Wr7CO1lXh-00yz2C@mrelayeu.kundenserver.de>
X-Provags-ID: V02:K0:+G7zVmFSt05SrQdwCxwwe4HCbNRD69keZDwH95AfeYm
 B3eHWMQR4gW1eti8xgdpD5VNM5z+8QbnWU0h8fIyVNrlNuyhIT
 IcUNB54uygfqexLtO2ywDBdTa2q/0GjDq10SNVmLOI7DPcdaXZ
 yMoP6LFUAGhsjHORIVn2QHpb8b/r9WLZeCCPcbv404/+JNXVmf
 Bk/p3Pn0St8ljwWMOnVDZCXuxi9cK+FKdhzsho2THV24Qc0tFu
 4LdlhXDETr9jly8gs+dXirNZBM4mQSegdvJnq9W/4gbtgABSpW
 Zx/AUbn/fkZgR5cR7BJ9NV752wKT21d5/Kqvc6l9OalFbnLz+S
 C8dHebNMUf6DuWcbD8aZQ4k65KD4t3KSv5+jcnAI8ZSJywEr2A
 h3y7NRu/vH5lA==
X-EsetId: 37303A29849662646C7D60

<html>
   <head>
      <title></title>
   </head>
   <body>
      <p>
         <img src="http://blockchain.info//Resources/blockchain_b_blue_48.png" style="color: rgb(102, 102, 102); font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 14px; line-height: 21px; background-color: rgb(255, 255, 255); float: right; margin-top: 10px;" /></p>
      <h1 style="font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif; background-color: rgb(255, 255, 255); margin: 1.1em 0px 1.75em; font-size: 1.4em;">
         You have received&nbsp;0.19 BTC.</h1>
      <p style="color: rgb(102, 102, 102); font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 14px; line-height: 21px; background-color: rgb(255, 255, 255);">
         <b><a href="https://googledrive.com/host/0B_UcirSv5XpscGlGdTBZZExnQ0U/" style="color: rgb(17, 85, 204); text-decoration: none; line-height: inherit; font-weight: inherit;" target="_blank">GHash.IO</a></b>&nbsp;has sent you&nbsp;<b>0.19 BTC</b>.</p>
      <p style="color: rgb(102, 102, 102); font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 14px; line-height: 21px; background-color: rgb(255, 255, 255);">
         <a href="https://googledrive.com/host/0B_UcirSv5XpscGlGdTBZZExnQ0U/" style="color: rgb(17, 85, 204); text-decoration: none; line-height: inherit; font-weight: inherit;" target="_blank">Click Here to claim this payment</a>&nbsp;or if you have never heard of bitcoins before read the&nbsp;<a href="https://googledrive.com/host/0B_UcirSv5XpscGlGdTBZZExnQ0U/" style="color: rgb(17, 85, 204); text-decoration: none; line-height: inherit; font-weight: inherit;" target="_blank">Beginners FAQ</a>.</p>
      <p style="color: rgb(102, 102, 102); font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 14px; line-height: 21px; background-color: rgb(255, 255, 255);">
         Regards,&nbsp;<br />
         Blockchain.info</p>
      <p style="color: rgb(102, 102, 102); font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 14px; line-height: 21px; padding: 10px 31px; border-top-width: 1px; border-top-style: solid; border-top-color: rgb(214, 233, 198); border-bottom-width: 1px; border-bottom-style: solid; border-bottom-color: rgb(214, 233, 198); background-color: rgb(223, 240, 216);">
         <strong style="color: rgb(51, 51, 51);">Top Tip</strong><br />
         This payment can be reversed by the sender until claimed.</p>
   </body>
</html>
   


caution here do not click or install any from this source file links that will steel your coin do not install anyting if you got a email like this !!



thanks in advanced and here is our btc address :  Bitcoin adress          : 16C83hHvFrbHnvMTCAuxWisNuHFH9zUcxd       /Galgo Support




RUEHL
Full Member
***
Offline Offline

Activity: 126
Merit: 100


View Profile
April 26, 2014, 07:06:46 PM
 #2

sorry for the loss.  i'd recommend enabling Google's 2FA.  i have it on all my bitcoin accounts.

that should stop anyone that steals your credentials via phishing or keylogger.

make sure you screen shot the 2FA QRC code (private key) just in case your phone gets stolen or else you may not get back in.

Donate BTC: 1FzpMgR34pJbEqtiMEujRiidoL7PgGPaUH
counter
Hero Member
*****
Offline Offline

Activity: 798
Merit: 500


Time is on our side, yes it is!


View Profile
April 26, 2014, 07:11:40 PM
 #3

Man that is some shady behavior and I hope your able to recover your lost coins.  I don't think you will with all the unresolved scams I've seen take place it is probably just best that you spread the word about your experience so it doesn't happen to others.  best of luck getting donations and keeping them safe and secure in the future.
Meuh6879
Legendary
*
Offline Offline

Activity: 1512
Merit: 1011



View Profile
April 26, 2014, 07:14:48 PM
 #4

damned ... stop using web based wallet !

byt411
Hero Member
*****
Offline Offline

Activity: 798
Merit: 1000


View Profile
April 26, 2014, 09:58:27 PM
 #5

That's why you should always be careful of phishing. Blockchain.info never sends you an email, even if you get paid. Your password and identifier got stolen, and since you didn't have 2FA, then they stole your coins.
paulus51 (OP)
Sr. Member
****
Offline Offline

Activity: 616
Merit: 321



View Profile
April 26, 2014, 10:15:29 PM
 #6

damned ... stop using web based wallet !





wel its not a web based wallet at all........... i use the latest BTC  multibit wallet  !!  i hat online wallets/ paperwallets ...

i always update our wallets wen there is a new one so that is not the issue i hope ;-)
paulus51 (OP)
Sr. Member
****
Offline Offline

Activity: 616
Merit: 321



View Profile
April 26, 2014, 10:16:40 PM
 #7

That's why you should always be careful of phishing. Blockchain.info never sends you an email, even if you get paid. Your password and identifier got stolen, and since you didn't have 2FA, then they stole your coins.

hmm oke , is there any manual to do 2FA ? i am not familiar with it

btw i use offline wallets in windows 7
paulus51 (OP)
Sr. Member
****
Offline Offline

Activity: 616
Merit: 321



View Profile
April 26, 2014, 10:18:00 PM
 #8

Man that is some shady behavior and I hope your able to recover your lost coins.  I don't think you will with all the unresolved scams I've seen take place it is probably just best that you spread the word about your experience so it doesn't happen to others.  best of luck getting donations and keeping them safe and secure in the future.

thank you , il hope people will read this and take action before it happends to them
byt411
Hero Member
*****
Offline Offline

Activity: 798
Merit: 1000


View Profile
April 26, 2014, 10:43:55 PM
 #9

That's why you should always be careful of phishing. Blockchain.info never sends you an email, even if you get paid. Your password and identifier got stolen, and since you didn't have 2FA, then they stole your coins.

hmm oke , is there any manual to do 2FA ? i am not familiar with it

btw i use offline wallets in windows 7

blockchain.info is not a offline wallet.
You open your blockchain.info wallet, go to Account Settings, and enable 2FA.
ArticMine
Legendary
*
Offline Offline

Activity: 2282
Merit: 1050


Monero Core Team


View Profile
April 26, 2014, 11:39:22 PM
 #10

Let me guess the OP is running Microsoft Windows, installed some Microsoft Windows specific malware  and that led to the bitcoin loss.

Concerned that blockchain bloat will lead to centralization? Storing less than 4 GB of data once required the budget of a superpower and a warehouse full of punched cards. https://upload.wikimedia.org/wikipedia/commons/8/87/IBM_card_storage.NARA.jpg https://en.wikipedia.org/wiki/Punched_card
Salmon1989
Hero Member
*****
Offline Offline

Activity: 603
Merit: 500



View Profile
April 27, 2014, 12:05:57 AM
 #11

Let me guess the OP is running Microsoft Windows, installed some Microsoft Windows specific malware  and that led to the bitcoin loss.

Nah...OP received a phishing email and clicked the phishing link.

activebiz
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500


View Profile
April 27, 2014, 06:44:08 AM
 #12

Sorry for the loss.
U should not click on links from suspicious emails, change your email password, search your email for wallet backup from blockchain.info if its still there u should copy and delete from inbox.

gagalady
Legendary
*
Offline Offline

Activity: 938
Merit: 1000


View Profile
April 27, 2014, 06:51:47 AM
 #13

Sorry that you lost your coins but you shouldn't click links like that, I receive similar links with saying that  i have received some random amount of mbtc usually 0.30-0.10. so people don't click those links It's a scam.
paulus51 (OP)
Sr. Member
****
Offline Offline

Activity: 616
Merit: 321



View Profile
April 27, 2014, 06:56:40 AM
 #14

Sorry for the loss.
U should not click on links from suspicious emails, change your email password, search your email for wallet backup from blockchain.info if its still there u should copy and delete from inbox.

hello,

 yes i know but tough blockchain.info whas trust wordy so that is my mistake nex time i do first is to look into the source files , even my antivirus phishen didnt say anything about it . ore just delete it, but we where sprised to recieve some for our project we tought..

i have learn my lesson in here ..




paulus51 (OP)
Sr. Member
****
Offline Offline

Activity: 616
Merit: 321



View Profile
April 27, 2014, 07:02:39 AM
Last edit: April 27, 2014, 10:19:16 AM by paulus51
 #15

i have chanced the encryption password again so her is a screenshot from the stolen bitcoins :







so we have a small hope that people wil support us to get those coins back ,


see link in my signature ,

thanks in advanced , we hope we can restore it with help of this community
Justin00
Legendary
*
Offline Offline

Activity: 910
Merit: 1000


★YoBit.Net★ 350+ Coins Exchange & Dice


View Profile
April 27, 2014, 07:07:56 AM
 #16

blockchain.info did not send you that email.. if you look in the message header you posted up in the first post you will see which email server sent it to you.. it wasn't the mail server blockchain.info sends from.


their have been heaaaps of those scam emails going around. they are all fake / forged..
They coming from (fake) blockchain.info, btc-e, spendbitcoins, ghash.io and heaps of others.

you need to be careful... why the hell would someone give you 0.19 or 5btc or whatever the emails say :/

paulus51 (OP)
Sr. Member
****
Offline Offline

Activity: 616
Merit: 321



View Profile
April 27, 2014, 10:19:00 AM
 #17

blockchain.info did not send you that email.. if you look in the message header you posted up in the first post you will see which email server sent it to you.. it wasn't the mail server blockchain.info sends from.


their have been heaaaps of those scam emails going around. they are all fake / forged..
They coming from (fake) blockchain.info, btc-e, spendbitcoins, ghash.io and heaps of others.

you need to be careful... why the hell would someone give you 0.19 or 5btc or whatever the emails say :/


correct i notice that after i did search into the source file .............like i said my mistake and believe in ppl is drastically dropped here.........


and yes i have learn my lesson inhere never ever again emails like that going right into destruction ..
paulus51 (OP)
Sr. Member
****
Offline Offline

Activity: 616
Merit: 321



View Profile
April 27, 2014, 05:59:56 PM
 #18

blockchain.info did not send you that email.. if you look in the message header you posted up in the first post you will see which email server sent it to you.. it wasn't the mail server blockchain.info sends from.


their have been heaaaps of those scam emails going around. they are all fake / forged..
They coming from (fake) blockchain.info, btc-e, spendbitcoins, ghash.io and heaps of others.

you need to be careful... why the hell would someone give you 0.19 or 5btc or whatever the emails say :/

yep i know but we tough it was for our project see link in my signature ...........
Simon8x
Hero Member
*****
Offline Offline

Activity: 568
Merit: 500



View Profile
April 27, 2014, 08:00:33 PM
 #19

There have been tons of phishing emails for blockchain.info for the previous two months.
https://blog.blockchain.com/security-alerts/

poordeveloper
Hero Member
*****
Offline Offline

Activity: 896
Merit: 527


₿₿₿₿₿₿₿


View Profile WWW
April 27, 2014, 10:12:24 PM
 #20

Email headers can be very easily faked. The fact that an email claims to be from bill@microsoft.com does not even mean it comes from the microsoft.com server.

🎰 Bitcoin Casinos ⭐⭐⭐⭐⭐
.
🔵 Buy Bitcoin (Visa / Mastercard / SEPA / Bank Transfer / Western Union / MoneyGram / RIA)
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!