silverock (OP)
Newbie
Offline
Activity: 1
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 08:52:20 PM |
|
Hi there, I'm trying to set up a business across different countries and we decided to give Bitcoins a try, because it's much easier than dealing with banks, different countries regulations, etc. I sent the first payment to different people yesterday and one of them got their account apparently hacked and emptied today, before being able to exchange BTC for money. Someone got into his account and sent all the BTC to this other address: 1969BjMnTqi6NwUjqRSBgh98RMA5eQ5cAb BTC ![Huh](https://bitcointalk.org/Smileys/default/huh.gif) Here's a capture: http://note.io/10Rcb76Can that transaction be cancelled somehow? Is there anything else that can be done? Is there some way of reporting the hackers? I already recommended him to set up 2-step verification and to use a safer password for next time... but can we do something about that money, other than just get angry and/or cry? Thanks in advance!
|
|
|
|
DannyHamilton
Legendary
Offline
Activity: 3472
Merit: 4790
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 09:19:17 PM |
|
Unfortunately he either has malware running on his computer (in which case 2FA might not help) or he imported a private key that was not generated by blockchain.info (in which case 2FA will not help).
Either way, it is not possible to cancel a bitcoin transaction once it is confirmed (and extremely difficult, nearly impossible) to cancel a bitcoin transaction once it has been sent.
You can try reporting the hackers to your local law enforcement, but I don't know that they'll be of much help.
Getting angry and crying are most likely your best options at the moment.
If the hacker is very careless, it could be possible to track them down, but it isn't likely.
|
|
|
|
notlist3d
Legendary
Offline
Activity: 1456
Merit: 1000
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 09:19:42 PM |
|
Sadly a transaction cant be canceled. You can look at address and hope it goes to somewhere trackable but most likely it will go through mixer and you wont see it.
Do you know how it was stolen? If virus on computer i would scan and remove.
|
|
|
|
forsakenpnut
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 09:28:11 PM |
|
Sadly a transaction cant be canceled. You can look at address and hope it goes to somewhere trackable but most likely it will go through mixer and you wont see it.
Do you know how it was stolen? If virus on computer i would scan and remove.
if its a virus you can track its ip to him... send me a pm.
|
|
|
|
DannyHamilton
Legendary
Offline
Activity: 3472
Merit: 4790
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 09:40:05 PM |
|
if its a virus you can track its ip to him... send me a pm.
Viruses don't have IP addresses, and bitcoins aren't sent to IP addresses. Be very careful about anything that forsakenpnut asks you in PM, since there is a chance that he could be a scammer attempting to take advantage of your misfortune. Anything that he wants you to send him via PM should be asked about in open discussion such as this so that others can warn you if he is asking for something risky to provide.
|
|
|
|
cp1
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 09:40:44 PM |
|
...we decided to give Bitcoins a try, because it's much easier than dealing with banks, different countries regulations, etc.
...Can that transaction be cancelled somehow? Is there anything else that can be done? Is there some way of reporting the hackers?
Because you're not dealing with banks or any type of regulated currency the transaction can't be cancelled and there's nothing to do about it. Choose one or the other.
|
|
|
|
btcguys
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 112
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 09:47:42 PM |
|
Transaction has been confirmed on the blockchain and as a result you will not be able to recover your Bitcoins. I know there is (was) a site that could intercept input of transaction BEFORE it is confirmed on blockchain to make it invalid transaction.
White at it, does someone know domain of that site or if it still exists in case someone has to intercept unconfirmed transactions.
|
|
|
|
THoR1337
Newbie
Offline
Activity: 4
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 10:20:38 PM |
|
Hi there, the adress u posted also stole my bitcoins well i don't know how the f*** this could happen... i used the blockchain.info wallet with a pretty secure password (>10 characters, capital/small letters, special characters, numbers). it was about 0.1 btc he stole me and my BTC-adress also is in the list posted above. i guess they are gone and i can't really do anything about it, but what can i do to prevent this to happen again??
|
|
|
|
virtualx
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 10:33:19 PM |
|
Hi there, the adress u posted also stole my bitcoins well i don't know how the f*** this could happen... i used the blockchain.info wallet with a pretty secure password (>10 characters, capital/small letters, special characters, numbers). it was about 0.1 btc he stole me and my BTC-adress also is in the list posted above. i guess they are gone and i can't really do anything about it, but what can i do to prevent this to happen again?? I think it's a trojan or spyware on your computer. Which system are you using? do you have any anti-spyware logs?
|
...loteo...
DIGITAL ERA LOTTERY | ║ ║ ║ | | r | ▄▄███████████▄▄ ▄███████████████████▄ ▄███████████████████████▄ ▄██████████████████████████▄ ▄██ ███████▌ ▐██████████████▄ ▐██▌ ▐█▀ ▀█ ▐█▀ ▀██▀ ▀██▌ ▐██ █▌ █▌ ██ ██▌ ██▌ █▌ █▌ ██▌ ▐█▌ ▐█ ▐█ ▐█▌ ▐██ ▄▄▄██ ▐█ ▐██▌ ▐█ ██▄ ▄██ █▄ ██▄ ▄███▌ ▀████████████████████████████▀ ▀██████████████████████████▀ ▀███████████████████████▀ ▀███████████████████▀ ▀▀███████████▀▀
| r | | ║ ║ ║ | RPLAY NOWR
BE A MOON VISITOR! |
[/center]
|
|
|
|
DannyHamilton
Legendary
Offline
Activity: 3472
Merit: 4790
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 11:17:34 PM Last edit: October 09, 2014, 12:44:59 AM by DannyHamilton |
|
EDIT: As of 2014-10-09 00:44 UTC these are all the associated addresses that I was able to link to 1969BjMnTqi6NwUjqRSBgh98RMA5eQ5cAb
The person that owns the 1969BjMnTqi6NwUjqRSBgh98RMA5eQ5cAb address almost certainly also owns the following addresses:
12Pv74FVcNRwAjWZRxT1m5qboS3qKuAoov 139hLrgtvQpu1KReTmctMLhXH5dSA2EP4b 15HQcYndiq1ufiMrTY3UfzYcfpu3khsq9o 176TEGAEGzuuVoNr3Jix2Pq1AVCfr4YBMQ 1BU5BmnGTJ5S5t1PgxnNj9krmjiENNNstd 1FvtGTak1sBrWQovQX8F9yNzeyB8DxxVvp 1Joz85EP8moWYceaVnHejhEt2Zejj21L7w 1KRtbL86ynP25FB3cDLHTXEEXMYS4apoRv 1KtEwqRF9xnBwLg5kBcxdScXCpuiejzHMG 1LJYWbtSzfbAM98E2eUT8JQp2SRvFufrzq 1LQQkqtWWruiofuD8jkMHxD5jMdKk7Vuh6 1M1ApiVLjnpA4ke4pgUEMiBdmSjgEbUzCw 1P9ciM7gQfBLsFPynCtUNRe9yMmp2CzFCY 1PwtR4jK9Ke3G2oeyx9T7dZarwR9oCbyD9
Also, the owners of the following addresses might know the owner of the 1969BjMnTqi6NwUjqRSBgh98RMA5eQ5cAb address since they either sent bitcoins to or received bitcoins from the owner of that address:
112WtjuiFzL7h7ADNAQ1fm6dKV1r4s1UAb 11ohjiVPjtBk3AxXYi6Hu1u1nDy46mnXY 11p6PuD3Lyq45V6C7FnEeVtmApX9Y2RZb 125UcZBAu9ASJEQaHfGbWDVhhT5xLX3Qn6 127q3f6vWfrScrRtYffnYdkFoCAVUkJf76 129hpd53K4xcptWFtrWdiJcN8pqVTk5T1E 12F9qN5Z6uavEjN2p1hks8e4irzWcKGaTp 12HdxpBhVXgUTWqRSxyh9HAibN5yrg6LR8 12KbaMismefGbgFEeCuHLNst9VTEfBBhRw 12TgDtkupfge5BTJawPjzi9NEkugFYzkfE 12VpshihM2PabdfPopyMxWGHh6jfitvvzh 12Xh5im7zGGtjSejicEt4unCx3EbNNWvdD 12ZZ8uXEcyLuYc1GjR7siLXuDXWuHoSXP9 12b3SGt1zpQbFQaFW9xX8N1TzuCqYJHo5c 12cSQd3yemu71oCoyBXmoB9DF7s5Te1ZpJ 12hMVMJgHYJkNnqguB3g53b8ZCJvCx2ZUH 12j1jULYhQAe48G5m784p8yT85MADcfQLh 12mz1VXhmXnGbTSqpUGnjcH9NhNdRs7QU5 12nt66Qj4jpaEwTcTgZtZdycAJUmtndu2w 12qpWUGigKxRg6z4pEbTVbTGoyLe9PF3vw 12uVq3TuG1SobZAbey1XEdSViXXkrz12nP 12vvuERdPJ9ocP6jdxojZnhMoq5YfL63TN 131esHiHLsss3Qhv5NFbREUNdEKemJxPu7 13286LT4ENtfwNsrN5YMAGxKfeGNCHmmaY 133jarXEGrvzyUtK2oAR72PysAMNy8555K 137oYBDfKSjHSeEQuRN8RoCJtSRcDPLk21 13XCRifeDS3tW8riQcESgBZ3V8qVHEgkMd 13hPQxXvF1jfe2EpzpQXusj4GyBwKGs8i8 13itfquZ5Gpi9VruvPxk7wnVL4wPMNfuL 13jfqeTJZE5ZSD8J2LTAdRBjjLxmGxjLch 13kFg9eRhKY8Bt2Q1mg7JyUXyNRws3PRsy 13mjSPvBo4kJvuHww3zhj71ZTHQLMJGvkd 13pTtd86NB3qxAwQVRkkRzLTT8HikBbyTs 13qjhdYHjs5uV686pZxvgnKhggpKs9iftF 13rNGMnfw6tRtyBCae5127r3fs2Vo8oVeE 13rZKcH1cyvwdA7XkSAMKv1MVkgZpYEQhW 13u8XgyNRGq28M5wPH3ThCrabntgPQkVhi 141fgdmhEeuCNtJNZEV8nsKXmQUY94Tb4X 143s5GKdaoXbd3xRXNzj9W4rQDniDcV4o4 148kCFFxQzTb4xA1tj4va1t3mEagtdSx6u 14DnmY4kC8wYMP6zk1qS2N6Pgy2e6wsrKd 14FCSjfgv7gTyPBJhN4s4WjM8zi2P7buZa 14GDaBzeTcMx6cdSPnZR7pjeuL4p3j9xr4 14GMEWnZomKL5si1u18CTv2QuRvdnUq6rm 14LQFb9655ztovRC55MiyRy21Gnt48i8ZU 14LWM8pXZoq4btxh5kmQYJzqFN7KwNDpgD 14NJ2AoSU1dfZBZX1ctenDUQSyYQ73P4kx 14PCQsmEDMzDza8PKWuxrVd1Agf54vqdug 14U2xWS2j31FSfK7hKTfvCn9yt8gAki59b 14UXBQUVjMUp9QkagfZVFoC2RekCNiWtPh 14Vt3Zx6jgSQPv8qJ7a8pYoUXy3jL479nn 14a3ji4cwnEMTkmMaoQ2i5NsGSTf2SUAXq 14cjd5ke63ajYoTZYrHBW4jPyj2t84eRY7 14isiVmKhA6Zc6qMSSDZMRrMHDjXPCqUea 14kXPLrvjPXTfT9iNXUiroQYNqrcKajxAP 14nZefzgW3V4yGaaG4qTnHRrvQXXG244xp 14nbT6jnc15rAv9HxVuSe7q1QAt4pg3dpT 14txQwGqcZ8VvbxW5HLp2yGRJCBtAT19Xn 14utsoKi3jziApJknBLspomDHvRmyjpJoj 14xwhdbav965oMb7Z2NsD7GjZnEQDbtHiN 151bYD2ygCTC7pKkBsLWXTi4fLHbGycjED 15H1AEFnaqpERBtVZD6VAHSX8pWDEfHYqN 15TmBtpCnJ6GvvfZWDSkBd4mqwwyhQvq2z 15bQeWckbHpRNM1qv5JnFNAAgpmaU4FB9X 15eSCMwnPM3dchmRWpmKHjQLdGK568zJby 15fCJY4wDN163rxfsP1BnL3ZRsf3GfuzC7 15o2ev6U8nrg8JAqdfjyuE7CsSDatVExWP 15oTjDzRnaXDbd9EiP8vbRTikeCrhH9GxG 15t6h9iRZn1JrCkpSk98Sj6zEvh8dLdwrT 15v1HrxTRWehi1Ru1G1qHdv9zYmDcRVhhD 15zrjVdn2D5kXYKAH5AFidAMn8eBwCKbpH 16A5Z3LoPNUUs99nWb3dhgbe8MU5Rkwdd3 16AyjGjoHTRTmyZLVMpEeHcxeT2JWht5Mx 16DhbBs9woj4bpc4DnKca4VrMMZsKtSMMH 16GFCUXiWHKf3XMZ2HfFDDLQFT9hSmeXV1 16KGohFd7NjWzotgXpuYBdoFWbpM1esSon 16LBbG9ovDAsXeQ6G7QBoh1Gmvjh7Ur7Ct 16MgJsxg1eZFCU4MtoRq8ddbdf87BsfEFJ 16RB5tKeux7X1YoPmUrYfKm8cXqBzYksum 16UDApyr8ibHXP8VHfJ711fog1tzfy1LV3 16Ve2ZH9xt7NxFZQPSvDKhh6kTN4369C7q 16a49wr4GFiSsEBRH5ZziLu6Lkq4k18Fr3 16avj79gtXW6H4kd1qjj26qTbKAcQzkB1k 16bLv4dEjvCESuMuW6rubCXtwZ2ATpaXdK 16g9Md586NvgoJBm8hCjfeqdhtuhJtFa4 16hxGdXbMm632YU6w31A8FZVDDNxxySwqD 16iBqaCgsn2sYjc9DPhxodNgqt1uxhx8gB 16kDtoGc55Q4snvTBTKzE832vLNnfhs1C8 16p6ACUUKwkGLECSprDdDypdvJP1Zqv1XK 16scQaUBp1dzuQju3DyHf9gUJ6k1oMxnjK 16uwyj8LK5y1BLTWGckE1vaoigzR5QsJmZ 16xXtZLCthQ886YQqwovafTN6NFygrXqqS 16y3B52ewqi7tupwH7Lscj4kLrNSAMZd7P 1727FsRDbAZu1phwXJjZTgBX5ECyWCeHT3 175XmAgYMTMyETyJE9cyR6DMfbgAuSDMNd 17819GMFDB6As3tZSRKTToHfxNVCyQZJYU 17BUTu3hw2SDku3nt6QsuLmmKKh7qga7Y7 17QPSUnfvtfTYo1d8LVNXMAVg2yw9YLwJ 17R9tsdm7Y3ocMH7zYgxj7yxeHiEiGbAkm 17UnwVGj6Qwy46uTzLwBUbyMz47X3AdPqu 17ViyZwVRHL1rGYaCgHDnecr8NsuBgzn9v 17Xok5vSdtfg4dSWfQxA9pZwAJA61mYF5y 17Y73BEZTNA5eMTaYpY2uEs2Cqfvyjw5kd 17ZvMj5yJrnzprDuKM8kPMXQd5wfKCZtPx 17aBr4K4dcRPp1A8BTK9V7zrzQ6DTW4WS7 17i5B5QkMKnxNA1f7h5T4MEX1G2gPLsxHC 17mUK8MMxfjrV2bkPgrE8wJe4DMUD9VRSy 17oQdDUPAEy2txMVRxqihGQza7u9LTT7kq 17qcoR2NasthVFJejn7z7ms4LUbXKM1fND 17xmX2WFgvaTWXfThU4QgazU7E5EUtVqk2 17yjWwBzL4S7R8M25mNEMhYjXWahQB5mdZ 1843sEFDbxHLb9XbALMn34rkCnjqtw6vqa 188Rm8xsKgycUWgt3d8rnojetQ6MDsk6Vn 18AsdsFL8H3B2Thdq9UdGM8Bbs31AJ7tro 18DoZk3T1W58mcYesi3XNAwzj82P58q7xg 18EqQKc6Theacipt8WTAKPZSXNHKR1vQLM 18PGZpdWU7emui1vrARKbBciG19xwrYf1F 18Q8DCs41Y336Yp4fMeGwWE3dSDAYe6e8Y 18QmKeojTjvSpXm19Vm4VZaV1BAivJcUG4 18XepHFzHjLwxNpFgP5ztijETERticHKiw 18Y67e4xufr5Prac2yeN3kpRY2GHGQqWBw 18daGTGqoU4kN81MTrHTheRPGkvk4EeXPD 18e9TxPoFEwJbnVC1HDkWgPDwLtDajxtyx 18j2dNhwGYQg1923vriVvX9W8gvo5SYK1x 18rfnoRW6i28vyX7tx2Csr8r9Q5qcmSMMh 18sCunuPssvET1rPNeujuPaQYjLtvdNhQ9 18sfxXnSBdYziWx7WBCBacZP7cGzhHNFn5 18sx2ZG32bpU2G6s4Db5VoN6FFzAgxVoUT 191TULiVHH6sJFp7unZ48FCfuaQ7SaFqoR 197XSUdfUqwERbmVy9PPpco4zjZQEAJVxo 198nm5qAvFxNFUG6zR4sC1fXBZBQxM8WdL 19FsxoyEWUobqi27tdMAp7n7G55nA3qyUb 19G1voRcRp5pzQp7niRapQgP7bgPpSXEjz 19KDWBs1EEVWe8Y46mFg4wdMwPaSFbWuXK 19LAurMRPLg6qPKPewRJ2F9dnPzJufYxiC 19LLu7miZCNifZZg2KvBCVntnid4CSKBv 19gkmmYj3XzpgJWru2ke3TqSMxj5djgo73 19iyRX8aQNWeYeVAHiPQEjVyR8R3AGftCG 19kmKADtPnn8zKH1Qq8ujJGdQ5zpfUsAgB 19kztQUWUtxhuRv5xGjetc4W9t9p2hZcV8 19rU8NRs9VYKHiKkpCRhLQsqUELU4jivb9 19s59fXGJxLZfKZdHTkprneQgEG6RRMfW1 19w3qBr7FQFPr9dmCSLX8UTFYWUW8h1MfY 19wfhymFnkqWNXWAEH64AqN8r1yJHqJw5a 19xtMKEuxoCW22k3QknfYhK28iCAginas 19y1EbyVE1LjHRDJZB4osj9wty2Zeno4pw 1A4XB6vvyRaGS3vurTQwCUC9mayadT7bzd 1ADVHK2pHUMgDKkPxSQDutCbKRtAv8mykb 1AHzUaTz38SMv8MzZwQc2CdHafVbu9rs4m 1AJG862AG86ujKBuRindBMzsy9B17nbXPw 1ASnsZb1nZoJ8RrsW3uzZuH5uQBHYSjmWf 1AW9PoxSMxRMDfrLscVJRhJh5TkFm9KEow 1AZK8q9tX9n6oFeP4LpJv83h6dp1ccWqoA 1AZKdi4NUu1ytrNHneaEHbie2s8Cymxax3 1Aeow8w4CNmFBpYWimGxGKsZ9vRxqb9Cxc 1AgVRVsmNupjncU9mKNZBKHz4G4WPNumbF 1AiPsJ1WzyyrNmTpCsB25NsHHxMEKRwvKA 1AmPH6Wtr3DPFjWqe7wE5fYTzV9hkePKqA 1AqRFNYh4wRk2MEWy81HgwbrRAjKwCkf9T 1AtaThmprk2UHovBvo68ABZeJPeDfQmSAb 1AuKshTvWctHLBwDY8AneEfFc2DVj9Y3jb 1B4VW6gWWG2ceV9yhurfQwhBdM2sSgDBpX 1B9deph26MQ641qdJLtxrpRETcDwLHAs5 1beYkgLtVxsZw1oFMYViaxaKx5ESoNCx7 1BMvk9JXy4N9RSR97SmTugUAuNTrPGFT7t 1BQ5FiXk6K6Fhxki6bcwQcJLpcoSL4caRK 1BQezWGH7SRJV1fD7oumhHRdBf7ocqvDZG 1BSmartoUnHz32AAdPKcc7cGGC3DiA4RSh 1BWDtZgaSiUbuAtVPpXTXWLTafwqm8epgj 1BrDh5faV8YrYakTsJPX2vaenBS2XNVsq4 1BstLz7SC3QddttZCB7hMNLiBuqJ295JJi 1C18RYbXPTRW2YCxAC6NmAk8aCzwb3u4zf 1C1cVE2q7Ed31nyBBBLp9hNRdLaiNtQPFN 1C27aptWWJdAnyTmzEVeNr7cdWqKry9vGs 1C2zKyP4Fz81cAJCvVsp6EU1K1Ei6PPTaD 1C6ZhPenStY6SeMSw7juv6WkPRXVGhLguw 1CALaK8z2TrvURmSawx7RMFSLovtxTnRgH 1CBtGQpeWB2Jq18ZuzshGXGbr5DXL3fkAa 1CKZqNnULjkC6cuMCYq6xW5NRVLsKrqj5G 1CLJkcdgirk4XKRxoZGhM5HDhSMZ8ctihb 1CNKuN7aHdrG2FvjdPTMhPQsvE1EPmSXQU 1CNubsaV79fuYHsMcmZQZJLtMPeDAnASe7 1CSXotnA8iadyX2g9fGHPK5BofM5m2ogQG 1CSo4kR7SHSN9YXHjZTLUmiV1tV6WHfh6y 1CU89JSk7QJHz9vQV8F6pR8JArDQ6K75mq 1CWwyqAEB65nxxhEx65do46iApnFMLTabm 1CZEZ3j9znRAvbABBT4dPguckCkQ7Jo85K 1CaW9gPQXSgRqFQ2eaJ571bu1Qdgk5q5dN 1CdBLQi2ULUhjr3eXxZUaXGQcuSy4yjTya 1CgK9hzM8MrnzF4h1TW4UeumwTBkoC89iH 1ChanxqrZz7ki4WjjdHp9Qj9Spgx7jmZxr 1CiHq3dAdQ8YUiU2esny3p7oogUWDucMNE 1Cjm6Sb4GK8q4pBvC3PfBBsdB6FfhEQC5h 1CksbyVEo4nowmSogr9b3D4KVw6jc6tYV 1CnpzYcjZoJxZyyaCEJC5DC389o73dX3EV 1CoSP6Ne7NDCcq46An3DNRAifRNYLx9yLp 1CrKQxN4mEafjLkK7eHifPNrZEEPzrsjMf 1CudjQUdtewcVFPXK2s9vvdTBneaM2yaFt 1CxFJBZu3xD8BE2gV4PMjTuNjia1gBZL7a 1CxYr7ajsaAm6EfG5EdE4gMkH5qUYPdLDg 1CzTpytvUaF3Lmr66sj5VrSTPdtapyqBfB 1D1PydiUdB1A7j4CLBBGRrsbsTCgZmL8Bd 1D3s3A3K8T5TfBgyTpoj8nbStUq3pX9bYF 1D5J3oZPA3ooErR2tSojmB5k8vF4L9N7jV 1DDabZybW9tqQ7NFrk8R6Hqo8JzB2uH9PQ 1DG7AGnLR8qMGYBG7DRaZNFmDxuABsroWN 1DGPhKc1xCYuEkjDAorpxTAgFLTfCuyvdk 1DLQDtmLresgcjJGb9ERFsqM8JM1mzPkZT 1DRHhHBFNFCWspA2iJFk7592qxiVKggV5x 1DRUs9bABCxEnEiHSExzknzDQ1EAZehGsX 1DS7ytVDb7hDnUUkVn4hBnqxSTv1HXokdn 1DTocexv5CuPULCqccJVtFKsDcg1DPXdLW 1DamEsZyL4YnUscJ2HrXQ5j36BXBUMmGc2 1DavwTEFLQu4w18czbSv17dQeJWhMA7222 1Dc6Bv17BQh6pFBSp7AQD1RNexfXLCeX15 1Ddkt3c39duefEd2gDeyQ72s75dg6ChxeU 1DiheKVXa7JKC6pJ4dWs44otJV8tDEaUEN 1DjXAwR9XCzxzcwou6NphBPhnELKWjeHqU 1DjejF6jzeKE1b5NDZ4yYHPs3SxgMPpL6y 1DooFsBtpDDvbt49Si7JhJrk68z1EWP7DM 1Drxiic1SkFfHWeuj2GaiPgT8XTE9Gq9hQ 1DuCRwyV1CQXvGkCGc4dPYjDPHJswkWB3N 1Dz2nMgCft7Wf9MXinPHsVDxq7CtyCciWf 1E9HwqNpeL2xNqu9gk5cgZY8aXFytjD6bX 1E9VvExEERUkMvPsmcq9asFG4n4mJ8LF7F 1EHG3B7MmqNEeWiU9uV5YRWpikT1QGj6JH 1EJcTLZNfy9HALtgovGuUJbLi1ERmoo6uZ 1ELWsVsGjGTQu1a4xrLqW8LmGBft9pyUxN 1ELtfZtbEWDP585BpSQuRDSfGKTf6UCcBd 1ER9UDRrM6BT62TxHuYr9JqbXNimVm8hR9 1EVC6pEDTBG3hU47LFTRCRTC2ynzm8LuCS 1EW1h3PrbnXsLCHvB7ve4fjVx3GpCrhRL4 1EbA1oS2cBj6JfPoMwjmWGMbgmMighrYMa 1EbeqQUdsAAQYu49QuKE18S58ieogqJ3m 1EdDxVZJkgtF7XqeW9wDWENDw5R5vhV9go 1Eo8dji3UhDDHbWNFgbJTZNwkpZkGHgLMy 1Eru1qKJUqnRvhGPEkGBxjG3bcCgGuaFrj 1Eub8wkJHaxS7H1BC73Zg56zZhGqhwEj85 1EvqrXiRaQVURvBW8RS5gK2QpkgGMzKXq9 1F5aHtRi1pG2bYpVzcG5pxVCXQMEcbLgaH 1F5dK6ofzjs2QcZeRC6hZCXXpwM92zj4JY 1F6s3NAEqAKGTnaTE45JF83cMtLm7P3kkr 1F7fJWX9UhCUSUXhevpkXBHeaArBTxKc7X 1F93rmntM1LzF3VaUKHesKDiuF6s3eFd7j 1F9sSQnJeDpMW4wadbnL6FwhsYUUK5Quyp 1FLUsy94eiWAtZDsvV8tumfZ4rfswfnmxX 1FNmkGL7E4vasxduUTakX9s8Sc6mLFTR1U 1FRcbUrHdSuCLpxdGvjWvZRi8efxZYjGNN 1FZcNHvyzWuJt7ZijU5tA13wpWk4c8xCmA 1FcqdmM6HNR2KQ1XUR9X2Crgr6CfxPAh9d 1FhYyGnjEV4AN2QxNm7Pgw69TFUBQC4Tty 1FkPMdNVQcmD3zXoYseezUEt98KFM6FyH6 1FpVjRWKF4TmZikRVCZZY8AkadvjK6SncA 1Fr7f2B7DVVU2c261z4ixURfi3SdLsc49G 1FrFbGgXfLS7Trgqh5fcrbDBq24uJ4bshg 1FsrDRXaUmSyXfPzu2VuStCcuyHXzMCCi9 1FtVbBzh4QCoutAvbngEtXjfxyBwMX4gGk 1FvQaaSLsF7aY6Kxpw9jmYYRZJyRB4Qw9Y 1FxCdNdTXir6HJqXf6Cfm3CpMgYdD57FsA 1FyxyoP6jQg5imCkjrXfzrAjuHVmxyKHAH 1FzHDKgoUMJiPbSzJa8N5HuLY8FwT1GsGG 1G66xSzwpcLKVKW4WjL8s4BbHy4RDtQeeA 1GAgjodExDYqTRStjYaC24nL8mrDCv2VDH 1GJP1SGUgw7ZuYDwdqq4Q31e1MzaNMdQ9y 1GMNJibcHcVJjWcD5HEqbPpgRvCdPfcAFF 1GQERdoopFeBJUJdKKhA5aRKEq4jct7CiY 1GTNY7KYi2WwJ9ixnTM185hVxUjRv6qDpT 1GTYUnvmuQkoBbNLnae9aCwGbdcwQMMYi8 1GVFQiC1VhGQ1CLsucPgPiFoG72oxzcQH3 1GXaqGYU8gf5KPCo8DcqZYt6MVy8gxmxtD 1GYM7WhgLaRcAgHc9opy75X5VmM3AUwgKe 1GZfJD6ebFWh8KyZBiu2aovpL2fMG5SmgG 1GcPSudchZybLaXiPRrcmMAj8k1VJfJGvW 1GfiHzq4U4AzZVZBjuEYZqsWCJxRGQiF8B 1GgFNGTQrxVrvoKTdNiFQQx8wuxLt6aZRD 1GhGz4FNvEriSxbwCSgt4KsdQP9jNCbcVk 1GjEEEG2mTuN4TdPAv8xvpYXt4KSbEELm9 1Gszj2zB3hEWAvpM1kvzCLJmFpev9TGPo9 1Gv6zn1p49z1t92RFStzhjmYx6wqao7sN8 1GwpPXr2WDrGrr6gcLVK8TCnA5XfTmAQ5V 1H2fT7HfuPCcQxFyGm5sg2twNdWAE36mh4 1HAwdi2jyopge8kQbWtwjhbgiTMWBnTJ2n 1HC9AoGsnL6g6ejpK1CtQfGCqCSHTMJwsU 1HCBHeLVGveSeVmfMLigLRvpbd3A3TRNjW 1HEBVxWhBREeeCkoKdEZdt5abNAtd2BDYu 1HKTEtMtxt4RJyS6EL5RjGdMKSRoMJ72au 1HN3TiGT8Ly9rMWAR2erkNd84ZeLKfRQ3 1HQnNnxXP2xSkXiHTL1cawzLVHHAbiJGTf 1HSf1VJdXCMZqdEDWhkmkn47SinkYCbDwb 1HcBow5woVXDJNrVKyCqLjHGuiF2e6z7dQ 1Hi8nZqxeXSPUJjkqf5LMmvkWLUoHrhHpA 1Hir3As91BEVS55mEU1sh79sKuoYSFwhSV 1HvYgUpPgV5T9mWbao3i3n8oNLvAs5732V 1J1riHhcvDEhMAwT7GSVkfGAR8aF2R5A9S 1J47dg6JydZov92QMdPcRqGZNoM7qu2UNA 1J8LcMftJRasbWy2VzX4idpBBxkVK3vLmo 1JB67uo3ra2nC6xwgHGG3awHsKtBaUXWsm 1JCRA5arPabfLAcoyGWfE2aUJovf8YcqDt 1JCjxxBUgMzvBcWVgFcgkjqZ8J2MAUxAPN 1JFCtVCshX8Rxa2tNUvmc4nuRx6RZi31UN 1JNoKktgwS2h8VkH8zRRXHrEFVCwbuJbJK 1JTkqqw25vWBPfEXo4H9bsGuVmcfxbDSTA 1JUY5f1R9nUWznm36n6YVnidDKfX4r74L7 1JX5EayawGXohUs2pbG54MggL543kZBRXV 1JYwZYnUQ5U2FwKyYe5MT9LzoB62EyrfDE 1JZHfKJ8QVg8LZTVEDghzmHPwzY3szhbUo 1JZNJ2hs4Wt1Wer2Cw9n3DRL2ye2qBr8ki 1Jc2sFk2cDK8xmoL5nWei9kLFy97JgtvS 1JpRveBFhH22MyKtzQqZdLjssmXmBhusfy 1Js1AKg5FLxoT3mJ79yXLrGeuqUzqktghE 1JucotA6xqAhZk23LJiLZjW3hSfvFduaaE 1K1S7PBKoNZN32LBaAGKswMHmKbDXKjQmD 1K3fjXg3PCQKhq1sXtE2hkBirxanuzFoEj 1K4hW7rqTLZ2szF9PAkBuatSTxX4yoVAd 1K7mCfzveAUtwB9Vuao5vz2nHTSxQ6nXvM 1KGyTQXWbZ8FjrXHumvteBfegGsm676N2j 1KKKXTtcKXpqAw6bEPosmpumtaGf7ZYtcC 1KMN8thP4j8eDpkVGHAsyhjkSUdvcsmtzc 1KV67mr6MM1NxNANudzK9jSfrcfH6NEyGP (this is your friend's address, right?) 1KW6NbSbdjVR4Ts69jVu5bneZSLReu2XfJ 1Kar2XwnX1ZaxQazjXSpkZCcQdXJniosqP 1Kg9f9Neng33EHMziD7bZqeECRvsYqPLXr 1Kh5yBT245JFQTFG7VPjKzbJc7fgqRzN7E 1KkskJDD8pVGyoAJvUGNXtU6RUuKQj1njM 1KqNkGZQcHPFf7kSMDyUzMgUbyBrKGZZxf 1KwXG3QxgBaqhbAN2XUqnW1xtonBu5mRa 1L2T398t4NRNHyzre72fEFy8Nwn7wAhzy 1L4dKeU25HutGqhLBhcY18cCv8Euqmn1cm 1L4z4t5BASXcfmq6Wk2DUUFwqzS14FhnTJ 1L76W74eTtvhmtsjmuPJvCRPNdgy6DPTPe 1LABt7dj3314J9ipzUSdKxR85JheWVPi25 1LAEeH7npq4cnJ1PMb2Tv5BfW4rNTjD8HS 1LAUVDBYqVHT7es2o2VhcjWuuNdtVwParM 1LAqimBkmHoWFB5WFptFWXBy71ZVQyeXW2 1LDVvgBQh5fyXZQX8GMaYxcgxYxTxmZQ4c 1LDxzycj8vCuymKfvFNbYfjGsxL7K6Z3v3 1LH2WRDFjo9XuWEe5s6WoiDPSW2SoLb2rV 1LRtetxZdwoE3BRtdJ4L2PSrMac9bMif5Q 1LYS54d3Vagtsv4QGneDexAeVVKnY62bBv 1Lc9VZx9CdEXmhqqd1xUYzHgJg5grbXxtJ 1LeaZVGxFL6sxGCk6hPVMXdbLPKYVczz9d 1LemJtZikmKw1k9QHQvGk3G5sUVfGLAUnX 1LhZihe6eryQVGnvnU4y7H5PUg51hwyDQj 1Lmtu9MCFMTqqRgoA8kPeMd1pitRRHvGWY 1LnR1foZqMvDazsGXMLiVghAp93FKRdu1m 1LwbCU6nGBYGeP2KAhGEjT5J8G8GSX7WkQ 1M8tRwEQ1odWAoU7rwK2pM4yCWikDjE1it 1MB9jx5JopdZH65kDvJMbwYhQP2WLfpMi6 1MEgF1PmDhVRkt8m4qkNHMNG7jzVEX6msj 1MHATVGTeCZoF4pistCSBEoGxc9hnbSz79 1MPkVrXT7t9Zdcozv7CXBq8VXchvovs9Se 1MS4iMgkJoNYiLFs9bEesU6n9BM8AZG7Nn 1MVLHLanK38tpRLwWFBTPrBfWd54sJR4DY 1MZ66Vgc3eVgcdLqYvX97S5HuwmuERCGm3 1MZ7WKUaJe9cSiQYFZaVG64EU9NEBw4ZgV 1MZQYmtYu5t6N9fkAQdbgFyd3EHBqxXhT9 1Mb72Qo6sJS35UH2UD2yqWTjkyWAjYCiJF 1MbzEhwFSuUoT8u7sAKBjS8viq5yrsmbos 1MgMspmMfUZfudmdPh8fRaZgq56NcQ8kQ3 1Mka8LhiYsXZNAk1oqqyMWNMb33mE5mMro 1MneaALEr4qkanypiGKb2kQhcB9QoMpH8n 1MpdqgANARdFnxCs9L6HsceTzWXKjCHi6j 1MpiPuHZza7WCEXTZEk7F2wMFsDbnGnmrN 1Mv4RKeEFhhHVT58E9NUyBvVjNZanhc41g 1NCP2sKXjMMXHieQ7gzeT1ZLhVT2reFxmJ 1NCRz7Wg2PH3QjVtXzZkRxbYUFrj6ao8Rf 1NDbYaDw89yXQ5eqW8FHhvB641XkYF3epF 1NXrnyBVDGHAbjcL1RzfHbjoSbawBH6hcZ 1NYWVApRbtVCmSBbE6SbVjH5tSQRqvwsmE 1NbEjS1GKf5bDneXdEq4p33GEsdQp9tnPL 1NkpPZWQK9gbv2jqBiTAD8uVmCSZrqrqCw 1Np9vLz5qxKqpRdUicbDToJp2P72bDTNaM 1NrLkxMABhWTadmCQpD8XX1iq8jrLRqj83 1NsYVwzDAsSo7rHPrhHDGD3QhA9TNBYDir 1NvASDTVRSXBcyHaP4LSeFyonLd9RzjvfQ 1P1Vu9JgMQBsEECE4eTPKdJxyLbzaLCeVY 1P2iZMGjdZLUJwdaT37UeuJcUiZfiv5UuF 1P94G479idtoJfxFygbjEcwU4dxNE1Ma5q 1PEPvU9srGh8waD8csaeVtdxfRYKj2haJb 1PKGtwApzqo3c3SKnyyEJ4UqwypA9VfHcs 1PPNYaQ5ihJc5miDdqGENjKEcLSfETgnqX 1PXpQb9F3xphXQ8bkBMCyccDd2zxGs42zd 1Pcv18E1FrQM4cQYrg8mmYGKe52rv7Zzhv 1PdE9uhSn5g6jVRdNx1y7C48oKf33r2fJ9 1PdL2qBdctWnfYAAjYmXy45RJyo9W3wF71 1PfmtEsXdts58NLWesHVYVJwcjKSMfW3kU 1PifRoSVU9wZJq96FwYk2AAFZ7GYD1gMBm 1PpJYMGDRiioEfW55d8qJkHMznPmv4S1vf 1PxJCGrJSbx8LDKUgmP1zc7LHkiKZD1zvo 1Q1RExnLNqXUjkkASLNoBQyHEiBYe9Q8wd 1Q7i1QrRRgop8KjGREZjmghWGkXbdL8Qxx 1qeB4CmcAiybjZdoEzFKN8vQBGir29HkU 1QFBftMa7R4NxEbHWdVGAA9Bko6ADdX1yn 1QJLsWiWYD3DNikL7DnypUTatV1GAbx6Ej 1QJyx9MWnrfz9kyBmPoyYo3me95b9qKjLw 1TJCJjnhKZWZteZuEiioTwpDzGxh5jvvB 1uYSPV7Vtsf56U2389Hw1SaDf4C2UiTTE 1WsbphDFxGV6561SsN8ZUJSHDyrbwKRgp 1XdmJie3nogNwjFZUjBHmCeyYSmDd62D5 1xJ8QknQ82zydPC5rKwcVTMuozQvHmWm2 1YQofpiYR4FZDxN6ZsWzyF5dwUqjKDyNC 1Zs8mdhfeXzzqbvgzYhq2dw2VaQV3TYkC
|
|
|
|
Gallah
Newbie
Offline
Activity: 18
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 11:23:26 PM |
|
How did you find out all that information?
That's a truckload of addresses.
Can you find them out by software to look at transactions through the blockchain and where BTC was sent/received?
|
|
|
|
THoR1337
Newbie
Offline
Activity: 4
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 11:37:04 PM |
|
I think it's a trojan or spyware on your computer. Which system are you using? do you have any anti-spyware logs?
well i use windows 7 64bit and as anti-virus software i use avast, always up to date for sure. i don't think i got any logs. i checked avast and there are no protocols. i just installed malwarebytes now and checked my system. there were some potential threats detected but how can i know if they are somehow related to this bitcoin thing? Edit: wow that's such a enormous list of adresses... and he probably stole money from all these people ![Angry](https://bitcointalk.org/Smileys/default/angry.gif)
|
|
|
|
DannyHamilton
Legendary
Offline
Activity: 3472
Merit: 4790
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 11:44:51 PM |
|
How did you find out all that information?
That's a truckload of addresses.
Can you find them out by software to look at transactions through the blockchain and where BTC was sent/received?
Just looked through the block explorer at blockchain.info. I used to have a program that would search for addresses this way, but I haven't run it in a long time. I don't remember where I stored it, so I'm jsut pulling these by hand. I'll probably have 4 more updates or so before I'm done.
|
|
|
|
DannyHamilton
Legendary
Offline
Activity: 3472
Merit: 4790
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 08, 2014, 11:47:49 PM |
|
I think it's a trojan or spyware on your computer. Which system are you using? do you have any anti-spyware logs?
well i use windows 7 64bit and as anti-virus software i use avast, always up to date for sure. i don't think i got any logs. i checked avast and there are no protocols. i just installed malwarebytes now and checked my system. there were some potential threats detected but how can i know if they are somehow related to this bitcoin thing? The two most likely issues are: - A browser plugin that got installed and which captures your wallet information when you log into your wallet.
- Some freeware or torrented software that you are running on your computer that has a wallet stealer embedded in it.
Either one of these can slip past virus scanners and malware scanners if they are written well and aren't yet known to the scanner creator. Edit: wow that's such a enormous list of adresses... and he probably stole money from all these people ![Angry](https://bitcointalk.org/Smileys/default/angry.gif) Possibly, but if he has ever used any of the stolen coins carelessly or used his wallet for anything other than theft, then there is a chance that the owners of one of those addresses might actually know who he is.
|
|
|
|
cp1
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 09, 2014, 12:13:58 AM |
|
Was this an online wallet, like blockchain.info? There have been phishing attempts where people have put up fake websites, say blockchaln.info and paid for google advertising to put them on the top of the list, so that people click that, think they're on the real website, and then input their password.
|
|
|
|
DannyHamilton
Legendary
Offline
Activity: 3472
Merit: 4790
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 09, 2014, 12:45:31 AM |
|
The list has been updated with all the associated addresses that I was able to find as of now.
|
|
|
|
Peter882
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 09, 2014, 01:30:51 AM |
|
Was this an online wallet, like blockchain.info? There have been phishing attempts where people have put up fake websites, say blockchaln.info and paid for google advertising to put them on the top of the list, so that people click that, think they're on the real website, and then input their password.
Yup it seems the hackers are targeting the bc.i wallet users. OP (shown in screen capture), THoR1337 (in post #8) and the victims in https://bitcointalk.org/index.php?topic=588644.0 (in post #10) are all using bc.i wallet.
|
|
|
|
THoR1337
Newbie
Offline
Activity: 4
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 09, 2014, 07:56:22 AM |
|
yes i also used the blockchain.info wallet. also i don't think i had been on a faked site, i typed it in by myself, not clicking any link on google or something. luckily i spent like 90% of my btc a couple hours before... so damage was not THAT big. browserplugin... mhm ... i got these and none of them is new http://abload.de/image.php?img=pluginswdfsx.jpgi really think it's bc.i's fault, well besides not having a 2FA
|
|
|
|
DannyHamilton
Legendary
Offline
Activity: 3472
Merit: 4790
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
October 09, 2014, 01:08:03 PM |
|
yes i also used the blockchain.info wallet. also i don't think i had been on a faked site, i typed it in by myself, not clicking any link on google or something. luckily i spent like 90% of my btc a couple hours before... so damage was not THAT big. i really think it's bc.i's fault, well besides not having a 2FA The cause is most likely one of the following, there isn't much blockchain.info can do about any of these if they are on your computer: - A malicious browser plugin
- Freeware that you have installed on your computer
- Pirated software that you have installed on your computer
- A virus or other malware on your computer
Not sure if Pando is the cause of the bitcoins being stolen, but it definitely isn't trustworthy software. If you have that running, then I suspect you may have other malware on your computer as well. http://en.wikipedia.org/wiki/Pando_%28application%29Pando shut down its servers and ceased business on August 31, 2013.
As of February 24, 2014 the Pando Media Booster has been hijacked and unsuspecting persons who install a prompted update have their internet browsers hijacked and a virus called the "Sweet Page" browser virus is installed on their machine.
|
|
|
|
|