Help! My buddy's BTC were stolen!

[silverock]

Hi there,

I'm trying to set up a business across different countries and we decided to give Bitcoins a try, because it's much easier than dealing with banks, different countries regulations, etc. I sent the first payment to different people yesterday and one of them got their account apparently hacked and emptied today, before being able to exchange BTC for money.

Someone got into his account and sent all the BTC to this other address: 1969BjMnTqi6NwUjqRSBgh98RMA5eQ5cAb  BTC

Here's a capture: http://note.io/10Rcb76

Can that transaction be cancelled somehow? Is there anything else that can be done? Is there some way of reporting the hackers? I already recommended him to set up 2-step verification and to use a safer password for next time... but can we do something about that money, other than just get angry and/or cry?


Thanks in advance!

[DannyHamilton]

Unfortunately he either has malware running on his computer (in which case 2FA might not help) or he imported a private key that was not generated by blockchain.info (in which case 2FA will not help).

Either way, it is not possible to cancel a bitcoin transaction once it is confirmed (and extremely difficult, nearly impossible) to cancel a bitcoin transaction once it has been sent.

You can try reporting the hackers to your local law enforcement, but I don't know that they'll be of much help.

Getting angry and crying are most likely your best options at the moment.

If the hacker is very careless, it could be possible to track them down, but it isn't likely.

[notlist3d]

Sadly a transaction cant be canceled.  You can look at address and hope it goes to somewhere trackable but most likely it will go through mixer and you wont see it.

Do you know how it was stolen?  If virus on computer i would scan and remove.  

[forsakenpnut]

Sadly a transaction cant be canceled.  You can look at address and hope it goes to somewhere trackable but most likely it will go through mixer and you wont see it.

Do you know how it was stolen?  If virus on computer i would scan and remove.  

if its a virus you can track its ip to him... send me a pm.

[DannyHamilton]

if its a virus you can track its ip to him... send me a pm.

Viruses don't have IP addresses, and bitcoins aren't sent to IP addresses.

Be very careful about anything that forsakenpnut asks you in PM, since there is a chance that he could be a scammer attempting to take advantage of your misfortune.

Anything that he wants you to send him via PM should be asked about in open discussion such as this so that others can warn you if he is asking for something risky to provide.

[cp1]

...we decided to give Bitcoins a try, because it's much easier than dealing with banks, different countries regulations, etc.

...Can that transaction be cancelled somehow? Is there anything else that can be done? Is there some way of reporting the hackers?

Because you're not dealing with banks or any type of regulated currency the transaction can't be cancelled and there's nothing to do about it.  Choose one or the other.

[btcguys]

Transaction has been confirmed on the blockchain and as a result you will not be able to recover your Bitcoins. I know there is (was) a site that could intercept input of transaction BEFORE it is confirmed on blockchain to make it invalid transaction.

White at it, does someone know domain of that site or if it still exists in case someone has to intercept unconfirmed transactions.

[THoR1337]

Hi there,
the adress u posted also stole my bitcoins
well i don't know how the f*** this could happen...
i used the blockchain.info wallet with a pretty secure password (>10 characters, capital/small letters, special characters, numbers).
it was about 0.1 btc he stole me and my BTC-adress also is in the list posted above.

i guess they are gone and i can't really do anything about it, but what can i do to prevent this to happen again??

[virtualx]

Hi there,
the adress u posted also stole my bitcoins
well i don't know how the f*** this could happen...
i used the blockchain.info wallet with a pretty secure password (>10 characters, capital/small letters, special characters, numbers).
it was about 0.1 btc he stole me and my BTC-adress also is in the list posted above.

i guess they are gone and i can't really do anything about it, but what can i do to prevent this to happen again??

I think it's a trojan or spyware on your computer.
Which system are you using? do you have any anti-spyware logs?

[DannyHamilton]

Based on the addresses, it looks like the hacker that stole your bitcoins is the same as the hacker reported in this post:
https://bitcointalk.org/index.php?topic=588644.0

[DannyHamilton]

EDIT: As of 2014-10-09 00:44 UTC these are all the associated addresses that I was able to link to 1969BjMnTqi6NwUjqRSBgh98RMA5eQ5cAb

The person that owns the 1969BjMnTqi6NwUjqRSBgh98RMA5eQ5cAb address almost certainly also owns the following addresses:

12Pv74FVcNRwAjWZRxT1m5qboS3qKuAoov
139hLrgtvQpu1KReTmctMLhXH5dSA2EP4b
15HQcYndiq1ufiMrTY3UfzYcfpu3khsq9o
176TEGAEGzuuVoNr3Jix2Pq1AVCfr4YBMQ
1BU5BmnGTJ5S5t1PgxnNj9krmjiENNNstd
1FvtGTak1sBrWQovQX8F9yNzeyB8DxxVvp
1Joz85EP8moWYceaVnHejhEt2Zejj21L7w
1KRtbL86ynP25FB3cDLHTXEEXMYS4apoRv
1KtEwqRF9xnBwLg5kBcxdScXCpuiejzHMG
1LJYWbtSzfbAM98E2eUT8JQp2SRvFufrzq
1LQQkqtWWruiofuD8jkMHxD5jMdKk7Vuh6
1M1ApiVLjnpA4ke4pgUEMiBdmSjgEbUzCw
1P9ciM7gQfBLsFPynCtUNRe9yMmp2CzFCY
1PwtR4jK9Ke3G2oeyx9T7dZarwR9oCbyD9


Also, the owners of the following addresses might know the owner of the 1969BjMnTqi6NwUjqRSBgh98RMA5eQ5cAb address since they either sent bitcoins to or received bitcoins from the owner of that address:

112WtjuiFzL7h7ADNAQ1fm6dKV1r4s1UAb
11ohjiVPjtBk3AxXYi6Hu1u1nDy46mnXY
11p6PuD3Lyq45V6C7FnEeVtmApX9Y2RZb
125UcZBAu9ASJEQaHfGbWDVhhT5xLX3Qn6
127q3f6vWfrScrRtYffnYdkFoCAVUkJf76
129hpd53K4xcptWFtrWdiJcN8pqVTk5T1E
12F9qN5Z6uavEjN2p1hks8e4irzWcKGaTp
12HdxpBhVXgUTWqRSxyh9HAibN5yrg6LR8
12KbaMismefGbgFEeCuHLNst9VTEfBBhRw
12TgDtkupfge5BTJawPjzi9NEkugFYzkfE
12VpshihM2PabdfPopyMxWGHh6jfitvvzh
12Xh5im7zGGtjSejicEt4unCx3EbNNWvdD
12ZZ8uXEcyLuYc1GjR7siLXuDXWuHoSXP9
12b3SGt1zpQbFQaFW9xX8N1TzuCqYJHo5c
12cSQd3yemu71oCoyBXmoB9DF7s5Te1ZpJ
12hMVMJgHYJkNnqguB3g53b8ZCJvCx2ZUH
12j1jULYhQAe48G5m784p8yT85MADcfQLh
12mz1VXhmXnGbTSqpUGnjcH9NhNdRs7QU5
12nt66Qj4jpaEwTcTgZtZdycAJUmtndu2w
12qpWUGigKxRg6z4pEbTVbTGoyLe9PF3vw
12uVq3TuG1SobZAbey1XEdSViXXkrz12nP
12vvuERdPJ9ocP6jdxojZnhMoq5YfL63TN
131esHiHLsss3Qhv5NFbREUNdEKemJxPu7
13286LT4ENtfwNsrN5YMAGxKfeGNCHmmaY
133jarXEGrvzyUtK2oAR72PysAMNy8555K
137oYBDfKSjHSeEQuRN8RoCJtSRcDPLk21
13XCRifeDS3tW8riQcESgBZ3V8qVHEgkMd
13hPQxXvF1jfe2EpzpQXusj4GyBwKGs8i8
13itfquZ5Gpi9VruvPxk7wnVL4wPMNfuL
13jfqeTJZE5ZSD8J2LTAdRBjjLxmGxjLch
13kFg9eRhKY8Bt2Q1mg7JyUXyNRws3PRsy
13mjSPvBo4kJvuHww3zhj71ZTHQLMJGvkd
13pTtd86NB3qxAwQVRkkRzLTT8HikBbyTs
13qjhdYHjs5uV686pZxvgnKhggpKs9iftF
13rNGMnfw6tRtyBCae5127r3fs2Vo8oVeE
13rZKcH1cyvwdA7XkSAMKv1MVkgZpYEQhW
13u8XgyNRGq28M5wPH3ThCrabntgPQkVhi
141fgdmhEeuCNtJNZEV8nsKXmQUY94Tb4X
143s5GKdaoXbd3xRXNzj9W4rQDniDcV4o4
148kCFFxQzTb4xA1tj4va1t3mEagtdSx6u
14DnmY4kC8wYMP6zk1qS2N6Pgy2e6wsrKd
14FCSjfgv7gTyPBJhN4s4WjM8zi2P7buZa
14GDaBzeTcMx6cdSPnZR7pjeuL4p3j9xr4
14GMEWnZomKL5si1u18CTv2QuRvdnUq6rm
14LQFb9655ztovRC55MiyRy21Gnt48i8ZU
14LWM8pXZoq4btxh5kmQYJzqFN7KwNDpgD
14NJ2AoSU1dfZBZX1ctenDUQSyYQ73P4kx
14PCQsmEDMzDza8PKWuxrVd1Agf54vqdug
14U2xWS2j31FSfK7hKTfvCn9yt8gAki59b
14UXBQUVjMUp9QkagfZVFoC2RekCNiWtPh
14Vt3Zx6jgSQPv8qJ7a8pYoUXy3jL479nn
14a3ji4cwnEMTkmMaoQ2i5NsGSTf2SUAXq
14cjd5ke63ajYoTZYrHBW4jPyj2t84eRY7
14isiVmKhA6Zc6qMSSDZMRrMHDjXPCqUea
14kXPLrvjPXTfT9iNXUiroQYNqrcKajxAP
14nZefzgW3V4yGaaG4qTnHRrvQXXG244xp
14nbT6jnc15rAv9HxVuSe7q1QAt4pg3dpT
14txQwGqcZ8VvbxW5HLp2yGRJCBtAT19Xn
14utsoKi3jziApJknBLspomDHvRmyjpJoj
14xwhdbav965oMb7Z2NsD7GjZnEQDbtHiN
151bYD2ygCTC7pKkBsLWXTi4fLHbGycjED
15H1AEFnaqpERBtVZD6VAHSX8pWDEfHYqN
15TmBtpCnJ6GvvfZWDSkBd4mqwwyhQvq2z
15bQeWckbHpRNM1qv5JnFNAAgpmaU4FB9X
15eSCMwnPM3dchmRWpmKHjQLdGK568zJby
15fCJY4wDN163rxfsP1BnL3ZRsf3GfuzC7
15o2ev6U8nrg8JAqdfjyuE7CsSDatVExWP
15oTjDzRnaXDbd9EiP8vbRTikeCrhH9GxG
15t6h9iRZn1JrCkpSk98Sj6zEvh8dLdwrT
15v1HrxTRWehi1Ru1G1qHdv9zYmDcRVhhD
15zrjVdn2D5kXYKAH5AFidAMn8eBwCKbpH
16A5Z3LoPNUUs99nWb3dhgbe8MU5Rkwdd3
16AyjGjoHTRTmyZLVMpEeHcxeT2JWht5Mx
16DhbBs9woj4bpc4DnKca4VrMMZsKtSMMH
16GFCUXiWHKf3XMZ2HfFDDLQFT9hSmeXV1
16KGohFd7NjWzotgXpuYBdoFWbpM1esSon
16LBbG9ovDAsXeQ6G7QBoh1Gmvjh7Ur7Ct
16MgJsxg1eZFCU4MtoRq8ddbdf87BsfEFJ
16RB5tKeux7X1YoPmUrYfKm8cXqBzYksum
16UDApyr8ibHXP8VHfJ711fog1tzfy1LV3
16Ve2ZH9xt7NxFZQPSvDKhh6kTN4369C7q
16a49wr4GFiSsEBRH5ZziLu6Lkq4k18Fr3
16avj79gtXW6H4kd1qjj26qTbKAcQzkB1k
16bLv4dEjvCESuMuW6rubCXtwZ2ATpaXdK
16g9Md586NvgoJBm8hCjfeqdhtuhJtFa4
16hxGdXbMm632YU6w31A8FZVDDNxxySwqD
16iBqaCgsn2sYjc9DPhxodNgqt1uxhx8gB
16kDtoGc55Q4snvTBTKzE832vLNnfhs1C8
16p6ACUUKwkGLECSprDdDypdvJP1Zqv1XK
16scQaUBp1dzuQju3DyHf9gUJ6k1oMxnjK
16uwyj8LK5y1BLTWGckE1vaoigzR5QsJmZ
16xXtZLCthQ886YQqwovafTN6NFygrXqqS
16y3B52ewqi7tupwH7Lscj4kLrNSAMZd7P
1727FsRDbAZu1phwXJjZTgBX5ECyWCeHT3
175XmAgYMTMyETyJE9cyR6DMfbgAuSDMNd
17819GMFDB6As3tZSRKTToHfxNVCyQZJYU
17BUTu3hw2SDku3nt6QsuLmmKKh7qga7Y7
17QPSUnfvtfTYo1d8LVNXMAVg2yw9YLwJ
17R9tsdm7Y3ocMH7zYgxj7yxeHiEiGbAkm
17UnwVGj6Qwy46uTzLwBUbyMz47X3AdPqu
17ViyZwVRHL1rGYaCgHDnecr8NsuBgzn9v
17Xok5vSdtfg4dSWfQxA9pZwAJA61mYF5y
17Y73BEZTNA5eMTaYpY2uEs2Cqfvyjw5kd
17ZvMj5yJrnzprDuKM8kPMXQd5wfKCZtPx
17aBr4K4dcRPp1A8BTK9V7zrzQ6DTW4WS7
17i5B5QkMKnxNA1f7h5T4MEX1G2gPLsxHC
17mUK8MMxfjrV2bkPgrE8wJe4DMUD9VRSy
17oQdDUPAEy2txMVRxqihGQza7u9LTT7kq
17qcoR2NasthVFJejn7z7ms4LUbXKM1fND
17xmX2WFgvaTWXfThU4QgazU7E5EUtVqk2
17yjWwBzL4S7R8M25mNEMhYjXWahQB5mdZ
1843sEFDbxHLb9XbALMn34rkCnjqtw6vqa
188Rm8xsKgycUWgt3d8rnojetQ6MDsk6Vn
18AsdsFL8H3B2Thdq9UdGM8Bbs31AJ7tro
18DoZk3T1W58mcYesi3XNAwzj82P58q7xg
18EqQKc6Theacipt8WTAKPZSXNHKR1vQLM
18PGZpdWU7emui1vrARKbBciG19xwrYf1F
18Q8DCs41Y336Yp4fMeGwWE3dSDAYe6e8Y
18QmKeojTjvSpXm19Vm4VZaV1BAivJcUG4
18XepHFzHjLwxNpFgP5ztijETERticHKiw
18Y67e4xufr5Prac2yeN3kpRY2GHGQqWBw
18daGTGqoU4kN81MTrHTheRPGkvk4EeXPD
18e9TxPoFEwJbnVC1HDkWgPDwLtDajxtyx
18j2dNhwGYQg1923vriVvX9W8gvo5SYK1x
18rfnoRW6i28vyX7tx2Csr8r9Q5qcmSMMh
18sCunuPssvET1rPNeujuPaQYjLtvdNhQ9
18sfxXnSBdYziWx7WBCBacZP7cGzhHNFn5
18sx2ZG32bpU2G6s4Db5VoN6FFzAgxVoUT
191TULiVHH6sJFp7unZ48FCfuaQ7SaFqoR
197XSUdfUqwERbmVy9PPpco4zjZQEAJVxo
198nm5qAvFxNFUG6zR4sC1fXBZBQxM8WdL
19FsxoyEWUobqi27tdMAp7n7G55nA3qyUb
19G1voRcRp5pzQp7niRapQgP7bgPpSXEjz
19KDWBs1EEVWe8Y46mFg4wdMwPaSFbWuXK
19LAurMRPLg6qPKPewRJ2F9dnPzJufYxiC
19LLu7miZCNifZZg2KvBCVntnid4CSKBv
19gkmmYj3XzpgJWru2ke3TqSMxj5djgo73
19iyRX8aQNWeYeVAHiPQEjVyR8R3AGftCG
19kmKADtPnn8zKH1Qq8ujJGdQ5zpfUsAgB
19kztQUWUtxhuRv5xGjetc4W9t9p2hZcV8
19rU8NRs9VYKHiKkpCRhLQsqUELU4jivb9
19s59fXGJxLZfKZdHTkprneQgEG6RRMfW1
19w3qBr7FQFPr9dmCSLX8UTFYWUW8h1MfY
19wfhymFnkqWNXWAEH64AqN8r1yJHqJw5a
19xtMKEuxoCW22k3QknfYhK28iCAginas
19y1EbyVE1LjHRDJZB4osj9wty2Zeno4pw
1A4XB6vvyRaGS3vurTQwCUC9mayadT7bzd
1ADVHK2pHUMgDKkPxSQDutCbKRtAv8mykb
1AHzUaTz38SMv8MzZwQc2CdHafVbu9rs4m
1AJG862AG86ujKBuRindBMzsy9B17nbXPw
1ASnsZb1nZoJ8RrsW3uzZuH5uQBHYSjmWf
1AW9PoxSMxRMDfrLscVJRhJh5TkFm9KEow
1AZK8q9tX9n6oFeP4LpJv83h6dp1ccWqoA
1AZKdi4NUu1ytrNHneaEHbie2s8Cymxax3
1Aeow8w4CNmFBpYWimGxGKsZ9vRxqb9Cxc
1AgVRVsmNupjncU9mKNZBKHz4G4WPNumbF
1AiPsJ1WzyyrNmTpCsB25NsHHxMEKRwvKA
1AmPH6Wtr3DPFjWqe7wE5fYTzV9hkePKqA
1AqRFNYh4wRk2MEWy81HgwbrRAjKwCkf9T
1AtaThmprk2UHovBvo68ABZeJPeDfQmSAb
1AuKshTvWctHLBwDY8AneEfFc2DVj9Y3jb
1B4VW6gWWG2ceV9yhurfQwhBdM2sSgDBpX
1B9deph26MQ641qdJLtxrpRETcDwLHAs5
1beYkgLtVxsZw1oFMYViaxaKx5ESoNCx7
1BMvk9JXy4N9RSR97SmTugUAuNTrPGFT7t
1BQ5FiXk6K6Fhxki6bcwQcJLpcoSL4caRK
1BQezWGH7SRJV1fD7oumhHRdBf7ocqvDZG
1BSmartoUnHz32AAdPKcc7cGGC3DiA4RSh
1BWDtZgaSiUbuAtVPpXTXWLTafwqm8epgj
1BrDh5faV8YrYakTsJPX2vaenBS2XNVsq4
1BstLz7SC3QddttZCB7hMNLiBuqJ295JJi
1C18RYbXPTRW2YCxAC6NmAk8aCzwb3u4zf
1C1cVE2q7Ed31nyBBBLp9hNRdLaiNtQPFN
1C27aptWWJdAnyTmzEVeNr7cdWqKry9vGs
1C2zKyP4Fz81cAJCvVsp6EU1K1Ei6PPTaD
1C6ZhPenStY6SeMSw7juv6WkPRXVGhLguw
1CALaK8z2TrvURmSawx7RMFSLovtxTnRgH
1CBtGQpeWB2Jq18ZuzshGXGbr5DXL3fkAa
1CKZqNnULjkC6cuMCYq6xW5NRVLsKrqj5G
1CLJkcdgirk4XKRxoZGhM5HDhSMZ8ctihb
1CNKuN7aHdrG2FvjdPTMhPQsvE1EPmSXQU
1CNubsaV79fuYHsMcmZQZJLtMPeDAnASe7
1CSXotnA8iadyX2g9fGHPK5BofM5m2ogQG
1CSo4kR7SHSN9YXHjZTLUmiV1tV6WHfh6y
1CU89JSk7QJHz9vQV8F6pR8JArDQ6K75mq
1CWwyqAEB65nxxhEx65do46iApnFMLTabm
1CZEZ3j9znRAvbABBT4dPguckCkQ7Jo85K
1CaW9gPQXSgRqFQ2eaJ571bu1Qdgk5q5dN
1CdBLQi2ULUhjr3eXxZUaXGQcuSy4yjTya
1CgK9hzM8MrnzF4h1TW4UeumwTBkoC89iH
1ChanxqrZz7ki4WjjdHp9Qj9Spgx7jmZxr
1CiHq3dAdQ8YUiU2esny3p7oogUWDucMNE
1Cjm6Sb4GK8q4pBvC3PfBBsdB6FfhEQC5h
1CksbyVEo4nowmSogr9b3D4KVw6jc6tYV
1CnpzYcjZoJxZyyaCEJC5DC389o73dX3EV
1CoSP6Ne7NDCcq46An3DNRAifRNYLx9yLp
1CrKQxN4mEafjLkK7eHifPNrZEEPzrsjMf
1CudjQUdtewcVFPXK2s9vvdTBneaM2yaFt
1CxFJBZu3xD8BE2gV4PMjTuNjia1gBZL7a
1CxYr7ajsaAm6EfG5EdE4gMkH5qUYPdLDg
1CzTpytvUaF3Lmr66sj5VrSTPdtapyqBfB
1D1PydiUdB1A7j4CLBBGRrsbsTCgZmL8Bd
1D3s3A3K8T5TfBgyTpoj8nbStUq3pX9bYF
1D5J3oZPA3ooErR2tSojmB5k8vF4L9N7jV
1DDabZybW9tqQ7NFrk8R6Hqo8JzB2uH9PQ
1DG7AGnLR8qMGYBG7DRaZNFmDxuABsroWN
1DGPhKc1xCYuEkjDAorpxTAgFLTfCuyvdk
1DLQDtmLresgcjJGb9ERFsqM8JM1mzPkZT
1DRHhHBFNFCWspA2iJFk7592qxiVKggV5x
1DRUs9bABCxEnEiHSExzknzDQ1EAZehGsX
1DS7ytVDb7hDnUUkVn4hBnqxSTv1HXokdn
1DTocexv5CuPULCqccJVtFKsDcg1DPXdLW
1DamEsZyL4YnUscJ2HrXQ5j36BXBUMmGc2
1DavwTEFLQu4w18czbSv17dQeJWhMA7222
1Dc6Bv17BQh6pFBSp7AQD1RNexfXLCeX15
1Ddkt3c39duefEd2gDeyQ72s75dg6ChxeU
1DiheKVXa7JKC6pJ4dWs44otJV8tDEaUEN
1DjXAwR9XCzxzcwou6NphBPhnELKWjeHqU
1DjejF6jzeKE1b5NDZ4yYHPs3SxgMPpL6y
1DooFsBtpDDvbt49Si7JhJrk68z1EWP7DM
1Drxiic1SkFfHWeuj2GaiPgT8XTE9Gq9hQ
1DuCRwyV1CQXvGkCGc4dPYjDPHJswkWB3N
1Dz2nMgCft7Wf9MXinPHsVDxq7CtyCciWf
1E9HwqNpeL2xNqu9gk5cgZY8aXFytjD6bX
1E9VvExEERUkMvPsmcq9asFG4n4mJ8LF7F
1EHG3B7MmqNEeWiU9uV5YRWpikT1QGj6JH
1EJcTLZNfy9HALtgovGuUJbLi1ERmoo6uZ
1ELWsVsGjGTQu1a4xrLqW8LmGBft9pyUxN
1ELtfZtbEWDP585BpSQuRDSfGKTf6UCcBd
1ER9UDRrM6BT62TxHuYr9JqbXNimVm8hR9
1EVC6pEDTBG3hU47LFTRCRTC2ynzm8LuCS
1EW1h3PrbnXsLCHvB7ve4fjVx3GpCrhRL4
1EbA1oS2cBj6JfPoMwjmWGMbgmMighrYMa
1EbeqQUdsAAQYu49QuKE18S58ieogqJ3m
1EdDxVZJkgtF7XqeW9wDWENDw5R5vhV9go
1Eo8dji3UhDDHbWNFgbJTZNwkpZkGHgLMy
1Eru1qKJUqnRvhGPEkGBxjG3bcCgGuaFrj
1Eub8wkJHaxS7H1BC73Zg56zZhGqhwEj85
1EvqrXiRaQVURvBW8RS5gK2QpkgGMzKXq9
1F5aHtRi1pG2bYpVzcG5pxVCXQMEcbLgaH
1F5dK6ofzjs2QcZeRC6hZCXXpwM92zj4JY
1F6s3NAEqAKGTnaTE45JF83cMtLm7P3kkr
1F7fJWX9UhCUSUXhevpkXBHeaArBTxKc7X
1F93rmntM1LzF3VaUKHesKDiuF6s3eFd7j
1F9sSQnJeDpMW4wadbnL6FwhsYUUK5Quyp
1FLUsy94eiWAtZDsvV8tumfZ4rfswfnmxX
1FNmkGL7E4vasxduUTakX9s8Sc6mLFTR1U
1FRcbUrHdSuCLpxdGvjWvZRi8efxZYjGNN
1FZcNHvyzWuJt7ZijU5tA13wpWk4c8xCmA
1FcqdmM6HNR2KQ1XUR9X2Crgr6CfxPAh9d
1FhYyGnjEV4AN2QxNm7Pgw69TFUBQC4Tty
1FkPMdNVQcmD3zXoYseezUEt98KFM6FyH6
1FpVjRWKF4TmZikRVCZZY8AkadvjK6SncA
1Fr7f2B7DVVU2c261z4ixURfi3SdLsc49G
1FrFbGgXfLS7Trgqh5fcrbDBq24uJ4bshg
1FsrDRXaUmSyXfPzu2VuStCcuyHXzMCCi9
1FtVbBzh4QCoutAvbngEtXjfxyBwMX4gGk
1FvQaaSLsF7aY6Kxpw9jmYYRZJyRB4Qw9Y
1FxCdNdTXir6HJqXf6Cfm3CpMgYdD57FsA
1FyxyoP6jQg5imCkjrXfzrAjuHVmxyKHAH
1FzHDKgoUMJiPbSzJa8N5HuLY8FwT1GsGG
1G66xSzwpcLKVKW4WjL8s4BbHy4RDtQeeA
1GAgjodExDYqTRStjYaC24nL8mrDCv2VDH
1GJP1SGUgw7ZuYDwdqq4Q31e1MzaNMdQ9y
1GMNJibcHcVJjWcD5HEqbPpgRvCdPfcAFF
1GQERdoopFeBJUJdKKhA5aRKEq4jct7CiY
1GTNY7KYi2WwJ9ixnTM185hVxUjRv6qDpT
1GTYUnvmuQkoBbNLnae9aCwGbdcwQMMYi8
1GVFQiC1VhGQ1CLsucPgPiFoG72oxzcQH3
1GXaqGYU8gf5KPCo8DcqZYt6MVy8gxmxtD
1GYM7WhgLaRcAgHc9opy75X5VmM3AUwgKe
1GZfJD6ebFWh8KyZBiu2aovpL2fMG5SmgG
1GcPSudchZybLaXiPRrcmMAj8k1VJfJGvW
1GfiHzq4U4AzZVZBjuEYZqsWCJxRGQiF8B
1GgFNGTQrxVrvoKTdNiFQQx8wuxLt6aZRD
1GhGz4FNvEriSxbwCSgt4KsdQP9jNCbcVk
1GjEEEG2mTuN4TdPAv8xvpYXt4KSbEELm9
1Gszj2zB3hEWAvpM1kvzCLJmFpev9TGPo9
1Gv6zn1p49z1t92RFStzhjmYx6wqao7sN8
1GwpPXr2WDrGrr6gcLVK8TCnA5XfTmAQ5V
1H2fT7HfuPCcQxFyGm5sg2twNdWAE36mh4
1HAwdi2jyopge8kQbWtwjhbgiTMWBnTJ2n
1HC9AoGsnL6g6ejpK1CtQfGCqCSHTMJwsU
1HCBHeLVGveSeVmfMLigLRvpbd3A3TRNjW
1HEBVxWhBREeeCkoKdEZdt5abNAtd2BDYu
1HKTEtMtxt4RJyS6EL5RjGdMKSRoMJ72au
1HN3TiGT8Ly9rMWAR2erkNd84ZeLKfRQ3
1HQnNnxXP2xSkXiHTL1cawzLVHHAbiJGTf
1HSf1VJdXCMZqdEDWhkmkn47SinkYCbDwb
1HcBow5woVXDJNrVKyCqLjHGuiF2e6z7dQ
1Hi8nZqxeXSPUJjkqf5LMmvkWLUoHrhHpA
1Hir3As91BEVS55mEU1sh79sKuoYSFwhSV
1HvYgUpPgV5T9mWbao3i3n8oNLvAs5732V
1J1riHhcvDEhMAwT7GSVkfGAR8aF2R5A9S
1J47dg6JydZov92QMdPcRqGZNoM7qu2UNA
1J8LcMftJRasbWy2VzX4idpBBxkVK3vLmo
1JB67uo3ra2nC6xwgHGG3awHsKtBaUXWsm
1JCRA5arPabfLAcoyGWfE2aUJovf8YcqDt
1JCjxxBUgMzvBcWVgFcgkjqZ8J2MAUxAPN
1JFCtVCshX8Rxa2tNUvmc4nuRx6RZi31UN
1JNoKktgwS2h8VkH8zRRXHrEFVCwbuJbJK
1JTkqqw25vWBPfEXo4H9bsGuVmcfxbDSTA
1JUY5f1R9nUWznm36n6YVnidDKfX4r74L7
1JX5EayawGXohUs2pbG54MggL543kZBRXV
1JYwZYnUQ5U2FwKyYe5MT9LzoB62EyrfDE
1JZHfKJ8QVg8LZTVEDghzmHPwzY3szhbUo
1JZNJ2hs4Wt1Wer2Cw9n3DRL2ye2qBr8ki
1Jc2sFk2cDK8xmoL5nWei9kLFy97JgtvS
1JpRveBFhH22MyKtzQqZdLjssmXmBhusfy
1Js1AKg5FLxoT3mJ79yXLrGeuqUzqktghE
1JucotA6xqAhZk23LJiLZjW3hSfvFduaaE
1K1S7PBKoNZN32LBaAGKswMHmKbDXKjQmD
1K3fjXg3PCQKhq1sXtE2hkBirxanuzFoEj
1K4hW7rqTLZ2szF9PAkBuatSTxX4yoVAd
1K7mCfzveAUtwB9Vuao5vz2nHTSxQ6nXvM
1KGyTQXWbZ8FjrXHumvteBfegGsm676N2j
1KKKXTtcKXpqAw6bEPosmpumtaGf7ZYtcC
1KMN8thP4j8eDpkVGHAsyhjkSUdvcsmtzc
1KV67mr6MM1NxNANudzK9jSfrcfH6NEyGP (this is your friend's address, right?)
1KW6NbSbdjVR4Ts69jVu5bneZSLReu2XfJ
1Kar2XwnX1ZaxQazjXSpkZCcQdXJniosqP
1Kg9f9Neng33EHMziD7bZqeECRvsYqPLXr
1Kh5yBT245JFQTFG7VPjKzbJc7fgqRzN7E
1KkskJDD8pVGyoAJvUGNXtU6RUuKQj1njM
1KqNkGZQcHPFf7kSMDyUzMgUbyBrKGZZxf
1KwXG3QxgBaqhbAN2XUqnW1xtonBu5mRa
1L2T398t4NRNHyzre72fEFy8Nwn7wAhzy
1L4dKeU25HutGqhLBhcY18cCv8Euqmn1cm
1L4z4t5BASXcfmq6Wk2DUUFwqzS14FhnTJ
1L76W74eTtvhmtsjmuPJvCRPNdgy6DPTPe
1LABt7dj3314J9ipzUSdKxR85JheWVPi25
1LAEeH7npq4cnJ1PMb2Tv5BfW4rNTjD8HS
1LAUVDBYqVHT7es2o2VhcjWuuNdtVwParM
1LAqimBkmHoWFB5WFptFWXBy71ZVQyeXW2
1LDVvgBQh5fyXZQX8GMaYxcgxYxTxmZQ4c
1LDxzycj8vCuymKfvFNbYfjGsxL7K6Z3v3
1LH2WRDFjo9XuWEe5s6WoiDPSW2SoLb2rV
1LRtetxZdwoE3BRtdJ4L2PSrMac9bMif5Q
1LYS54d3Vagtsv4QGneDexAeVVKnY62bBv
1Lc9VZx9CdEXmhqqd1xUYzHgJg5grbXxtJ
1LeaZVGxFL6sxGCk6hPVMXdbLPKYVczz9d
1LemJtZikmKw1k9QHQvGk3G5sUVfGLAUnX
1LhZihe6eryQVGnvnU4y7H5PUg51hwyDQj
1Lmtu9MCFMTqqRgoA8kPeMd1pitRRHvGWY
1LnR1foZqMvDazsGXMLiVghAp93FKRdu1m
1LwbCU6nGBYGeP2KAhGEjT5J8G8GSX7WkQ
1M8tRwEQ1odWAoU7rwK2pM4yCWikDjE1it
1MB9jx5JopdZH65kDvJMbwYhQP2WLfpMi6
1MEgF1PmDhVRkt8m4qkNHMNG7jzVEX6msj
1MHATVGTeCZoF4pistCSBEoGxc9hnbSz79
1MPkVrXT7t9Zdcozv7CXBq8VXchvovs9Se
1MS4iMgkJoNYiLFs9bEesU6n9BM8AZG7Nn
1MVLHLanK38tpRLwWFBTPrBfWd54sJR4DY
1MZ66Vgc3eVgcdLqYvX97S5HuwmuERCGm3
1MZ7WKUaJe9cSiQYFZaVG64EU9NEBw4ZgV
1MZQYmtYu5t6N9fkAQdbgFyd3EHBqxXhT9
1Mb72Qo6sJS35UH2UD2yqWTjkyWAjYCiJF
1MbzEhwFSuUoT8u7sAKBjS8viq5yrsmbos
1MgMspmMfUZfudmdPh8fRaZgq56NcQ8kQ3
1Mka8LhiYsXZNAk1oqqyMWNMb33mE5mMro
1MneaALEr4qkanypiGKb2kQhcB9QoMpH8n
1MpdqgANARdFnxCs9L6HsceTzWXKjCHi6j
1MpiPuHZza7WCEXTZEk7F2wMFsDbnGnmrN
1Mv4RKeEFhhHVT58E9NUyBvVjNZanhc41g
1NCP2sKXjMMXHieQ7gzeT1ZLhVT2reFxmJ
1NCRz7Wg2PH3QjVtXzZkRxbYUFrj6ao8Rf
1NDbYaDw89yXQ5eqW8FHhvB641XkYF3epF
1NXrnyBVDGHAbjcL1RzfHbjoSbawBH6hcZ
1NYWVApRbtVCmSBbE6SbVjH5tSQRqvwsmE
1NbEjS1GKf5bDneXdEq4p33GEsdQp9tnPL
1NkpPZWQK9gbv2jqBiTAD8uVmCSZrqrqCw
1Np9vLz5qxKqpRdUicbDToJp2P72bDTNaM
1NrLkxMABhWTadmCQpD8XX1iq8jrLRqj83
1NsYVwzDAsSo7rHPrhHDGD3QhA9TNBYDir
1NvASDTVRSXBcyHaP4LSeFyonLd9RzjvfQ
1P1Vu9JgMQBsEECE4eTPKdJxyLbzaLCeVY
1P2iZMGjdZLUJwdaT37UeuJcUiZfiv5UuF
1P94G479idtoJfxFygbjEcwU4dxNE1Ma5q
1PEPvU9srGh8waD8csaeVtdxfRYKj2haJb
1PKGtwApzqo3c3SKnyyEJ4UqwypA9VfHcs
1PPNYaQ5ihJc5miDdqGENjKEcLSfETgnqX
1PXpQb9F3xphXQ8bkBMCyccDd2zxGs42zd
1Pcv18E1FrQM4cQYrg8mmYGKe52rv7Zzhv
1PdE9uhSn5g6jVRdNx1y7C48oKf33r2fJ9
1PdL2qBdctWnfYAAjYmXy45RJyo9W3wF71
1PfmtEsXdts58NLWesHVYVJwcjKSMfW3kU
1PifRoSVU9wZJq96FwYk2AAFZ7GYD1gMBm
1PpJYMGDRiioEfW55d8qJkHMznPmv4S1vf
1PxJCGrJSbx8LDKUgmP1zc7LHkiKZD1zvo
1Q1RExnLNqXUjkkASLNoBQyHEiBYe9Q8wd
1Q7i1QrRRgop8KjGREZjmghWGkXbdL8Qxx
1qeB4CmcAiybjZdoEzFKN8vQBGir29HkU
1QFBftMa7R4NxEbHWdVGAA9Bko6ADdX1yn
1QJLsWiWYD3DNikL7DnypUTatV1GAbx6Ej
1QJyx9MWnrfz9kyBmPoyYo3me95b9qKjLw
1TJCJjnhKZWZteZuEiioTwpDzGxh5jvvB
1uYSPV7Vtsf56U2389Hw1SaDf4C2UiTTE
1WsbphDFxGV6561SsN8ZUJSHDyrbwKRgp
1XdmJie3nogNwjFZUjBHmCeyYSmDd62D5
1xJ8QknQ82zydPC5rKwcVTMuozQvHmWm2
1YQofpiYR4FZDxN6ZsWzyF5dwUqjKDyNC
1Zs8mdhfeXzzqbvgzYhq2dw2VaQV3TYkC

[Gallah]

How did you find out all that information?

That's a truckload of addresses.

Can you find them out by software to look at transactions through the blockchain and where BTC was sent/received?

[THoR1337]

I think it's a trojan or spyware on your computer.
Which system are you using? do you have any anti-spyware logs?

well i use windows 7 64bit and as anti-virus software i use avast, always up to date for sure.
i don't think i got any logs. i checked avast and there are no protocols.

i just installed malwarebytes now and checked my system. there were some potential threats detected but how can i know if they are somehow related to this bitcoin thing?

Edit: wow that's such a enormous list of adresses... and he probably stole money from all these people 

[DannyHamilton]

How did you find out all that information?

That's a truckload of addresses.

Can you find them out by software to look at transactions through the blockchain and where BTC was sent/received?

Just looked through the block explorer at blockchain.info.

I used to have a program that would search for addresses this way, but I haven't run it in a long time. I don't remember where I stored it, so I'm jsut pulling these by hand.  I'll probably have 4 more updates or so before I'm done.

[DannyHamilton]

I think it's a trojan or spyware on your computer.
Which system are you using? do you have any anti-spyware logs?

well i use windows 7 64bit and as anti-virus software i use avast, always up to date for sure.
i don't think i got any logs. i checked avast and there are no protocols.

i just installed malwarebytes now and checked my system. there were some potential threats detected but how can i know if they are somehow related to this bitcoin thing?

The two most likely issues are:

• A browser plugin that got installed and which captures your wallet information when you log into your wallet.
• Some freeware or torrented software that you are running on your computer that has a wallet stealer embedded in it.

Either one of these can slip past virus scanners and malware scanners if they are written well and aren't yet known to the scanner creator.

Edit: wow that's such a enormous list of adresses... and he probably stole money from all these people 

Possibly, but if he has ever used any of the stolen coins carelessly or used his wallet for anything other than theft, then there is a chance that the owners of one of those addresses might actually know who he is.

[cp1]

Was this an online wallet, like blockchain.info?  There have been phishing attempts where people have put up fake websites, say blockchaln.info and paid for google advertising to put them on the top of the list, so that people click that, think they're on the real website, and then input their password.

[DannyHamilton]

The list has been updated with all the associated addresses that I was able to find as of now.

[Peter882]

Was this an online wallet, like blockchain.info?  There have been phishing attempts where people have put up fake websites, say blockchaln.info and paid for google advertising to put them on the top of the list, so that people click that, think they're on the real website, and then input their password.

Yup it seems the hackers are targeting the bc.i wallet users.
OP (shown in screen capture), THoR1337 (in post #8) and the victims in https://bitcointalk.org/index.php?topic=588644.0 (in post #10) are all using bc.i wallet.

[THoR1337]

yes i also used the blockchain.info wallet.
also i don't think i had been on a faked site, i typed it in by myself, not clicking any link on google or something.
luckily i spent like 90% of my btc a couple hours before... so damage was not THAT big.

browserplugin... mhm ... i got these and none of them is new
http://abload.de/image.php?img=pluginswdfsx.jpg

i really think it's bc.i's fault, well besides not having a 2FA 

[DannyHamilton]

yes i also used the blockchain.info wallet.
also i don't think i had been on a faked site, i typed it in by myself, not clicking any link on google or something.
luckily i spent like 90% of my btc a couple hours before... so damage was not THAT big.

i really think it's bc.i's fault, well besides not having a 2FA 

The cause is most likely one of the following, there isn't much blockchain.info can do about any of these if they are on your computer:

• A malicious browser plugin
• Freeware that you have installed on your computer
• Pirated software that you have installed on your computer
• A virus or other malware on your computer

browserplugin... mhm ... i got these and none of them is new
http://abload.de/image.php?img=pluginswdfsx.jpg

Not sure if Pando is the cause of the bitcoins being stolen, but it definitely isn't trustworthy software.  If you have that running, then I suspect you may have other malware on your computer as well.

http://en.wikipedia.org/wiki/Pando_%28application%29

Pando shut down its servers and ceased business on August 31, 2013.

As of February 24, 2014 the Pando Media Booster has been hijacked and unsuspecting persons who install a prompted update have their internet browsers hijacked and a virus called the "Sweet Page" browser virus is installed on their machine.