Bitcoin Forum
June 18, 2019, 12:01:31 AM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: please read bitcoin account hacked and it shows my own ip address  (Read 1367 times)
msladya1
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
February 08, 2015, 03:34:13 AM
 #1

Today at approximately 11:55 am I logged on to a site and created a invoice to make a payment , I send bitcoin payments here at least once sometimes twice a day, You type how much you want to add to your account and hit create, it tell you BTC address to send to ( which changes every-time) then it conversant the amount that you typed from usd to btc. I highlighted the address to send payment to as I do every time. Went to localbitcoin.com pasted the address into send to line then typed amount in BTC to send, and it said it was successful sent...i then notice payment is not showing up in my account and went back to bit only to find it had beed emptied adn the address the payment was to go to was not the one I originally sent payment to.I contaced customer support whom provided me with ip address that have logged in to my account
Transaction history shows the payment I sent and the right amount but wrong address I look at list of ips an notice as soon as I hit send on payment to the legit address there is a failed login attempt from some way off place and then immediately 2 more payments that depleted my bitcoin in full, See in in LA on business staying at a hotel The 2 unauthorized payments were sent from the same ip as my own. How is that possible? this means after I made payment the changed the receiving wallet address to make payment go to them then was able to make 2 other transfers...Does this mean someone in the same hotel broke into my account and stole my bitcoin?Ive changed password and scanned computer for virisis.. please help me understand how its my ip showing the coins were sent from but I am in a hotel how is this possible?http://login.nomadix.com:1111
1560816091
Hero Member
*
Offline Offline

Posts: 1560816091

View Profile Personal Message (Offline)

Ignore
1560816091
Reply with quote  #2

1560816091
Report to moderator
COINSWITCH
Trade 300+ coins
No Login
No KYC
Get $5 on 1st order
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1560816091
Hero Member
*
Offline Offline

Posts: 1560816091

View Profile Personal Message (Offline)

Ignore
1560816091
Reply with quote  #2

1560816091
Report to moderator
1560816091
Hero Member
*
Offline Offline

Posts: 1560816091

View Profile Personal Message (Offline)

Ignore
1560816091
Reply with quote  #2

1560816091
Report to moderator
BitcoinDistributor
Sr. Member
****
Offline Offline

Activity: 350
Merit: 250


View Profile
February 08, 2015, 03:36:00 AM
 #2

There are complaints of malware / viruses that change the bitcoin address you put in when you submit it on localbitcoins. This has been complained about before, IE sending the coins to an address u didn't put in the box as you thought u did but yet did authorize. Scan your computer for viruses.

I'm a lover not a hater. I'm a scam buster misunderstood. However, this forum is full of haters which is why you see my trust. They can't handle my success so they try to stop me...BUT NO ONE STOPS MY SUCCESS! ....Find Quickseller annoying? Click the "ignore" button below his name! You're welcome!
BTCreward
Full Member
***
Offline Offline

Activity: 532
Merit: 100


Pozess - The Photo Sharing Fashion Marketplace Tha


View Profile
February 08, 2015, 05:26:27 AM
 #3

As mentioned above you probably have some kind of malware on your computer. Did you happen to download some program semi-recently?

The malware would probably use your own computer to request a withdrawal from LBC (or any other site you typed your password into since you became infected with malware) to an address that the author of the malware controls.

Using your own computer would make it so any site would not be suspicious when they get a withdrawal request from a computer with your IP address and from a browser similar to one that you use, and with cookies they know they gave to you on the browser

POZESS
Photo Sharing Social Marketplace That Rewards its Users
────────  Facebook Twitter ♦  Telegram ♦  YouTube ♦  Reddit ♦  Bitcointalk   ────────
hilariousandco
Huge Member
Global Moderator
Legendary
*
Offline Offline

Activity: 2030
Merit: 1592


AKA Hilari Clinton


View Profile WWW
February 08, 2015, 09:34:34 AM
 #4

Likely malware, though public wifi connections are often unsecure so there could be something malicious there.

      ▄▄████████▄▄
   ▄████████████████▄
 ▄█████▀▀       ▀▀████                              
▄████▀            ████      ████                  ████
█████           ▄████▀     ████▌                 ▐████
█████           ▀▀▀▀      ▐████                  ████▌    ▄▄
 █████▄                  ▄█████████▀            ▐████   ▄███▀
   ▀█████▄▄        ▄▄███████████▀▀   ▄▄▄▄       ████  ▄███▀     ▄▄▄▄
      ▀███████▄    ▀████▀████▀     ▄████▀███   ▐███████▀▀    ▄███▀ ██▌
         ▀▀██████▄▄     ▐████    ▄████  ▐██▌   ███████     ▄███▀  ▄██▌
    ▄▄▄▄     ▀▀█████    ████    ▄███▀   ███   ▐███▌███    ▐████▄▄███▀
  █████▀▀      ▀████▌  ▐████    ████   ▄███   ████ ▐███   ████
 ████▀          ████▌  ▐████▄▄██████▄▄█████▄▄█████  ▀███  ▀████▄▄▄▄██           ▄████▄  ▄████▄  ██▄██▄██▄
████▌          █████    ▀████▀▀  ▀████▀  ▀██▀ ███▀   ▀███   ▀▀████▀▀           ██▀     ██▀  ▀██ ██  ██  ██
████▄       ▄▄████▀                                   ▀███▄▄      ▄▄██  ▄████▄ ██▄     ██▄  ▄██ ██  ██  ██
 ██████████████▀▀                                       ▀▀█████████▀▀   ▀████▀  ▀████▀  ▀████▀  ██  ██  ██
   ▀██████▀▀▀



▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬
The Bitcoin Casino
▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█                         █
█       ██                █
█      █▄▄█               █
█     █▀  ▀█              █
█                         █
█       ▄▄                █
█     ▄████▄              █
█   ▄████████▄            █
█   ▀████████▀            █
█     ▀████▀              █
█       ▀▀                █
█                         █
█                         █
█                         █
█                         █
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀
▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮
Provably fair
Free faucet

▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮
▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬
12 exclusive games
And many more...

▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬ ▮█▮ ▬▬▬▬▬▬



                ▄▄
               ▄▀▀
               ▀█
      █▀▄  ▄▄▄▄█▀▀█▄▄ ▄▀█
      █  ▀▀          ▀  █
      █▌        ██▌ █   █▌
      ▐█       ▐█████   ▐█ ▄▄ ▄▄▄
      █▌        ▀▀▀▀     █ █ ▀   █
      █       ▀▄▄▄▄▄▀     ▀    ▄▀
      █         ▀▀           ▄▀
     ▄▀                    ▄▀
   ▄▀                     █
 ▄▀                       █
█   █▄█                   █
 ▀▀▀  █       ▄▄▄▄▄       █
      █       █   █       █
      ▀▄▄▄▄▄▄▄▀   ▀▄▄▄▄▄▄▄▀
msladya1
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
February 08, 2015, 06:22:49 PM
 #5

Thank you to everyone who replied, I have scanned my computer and I did find some stuff that said trojan , It was downloaded by my daughter off some software site. She did this right before I left town on Friday night so I am assuming since yesterday was the first time I logged into bitcoin that is why it happened at that time, I really appreciate it , I was extremely concerned as I have a new employee along on this trip, I almost feel bad I was actually wondering if this person was involved as they are the only other person in the hotel whom knows me and that I use bitcoin, Now I am concerned to even sign into any account what if they already have my passwords to like my email and other accounts, Should I reformat my hard drive or go to every account and change passwords? I enabled 2 factor authentication on local bitcoin, But my concern is I had my phone connected to my pc at one point. Dont mean to seem whining about my small loss , I seen some people have lost triple my little 500 but its sickening to know it happened
BTCreward
Full Member
***
Offline Offline

Activity: 532
Merit: 100


Pozess - The Photo Sharing Fashion Marketplace Tha


View Profile
February 08, 2015, 06:23:57 PM
 #6

Likely malware, though public wifi connections are often unsecure so there could be something malicious there.
It is possible that some malicious public wifi provider was able to pull off some kind of MITM attack, however it would be somewhat unlikely considering that his browser should have given him a SSL cert warning unless he was connecting to LBC via something other then HTTPS which I would find unlikely (an attacker could be using some 0-day attack, however the amount is very small for a zero day attack and there are not more similar reports which would be expected)

POZESS
Photo Sharing Social Marketplace That Rewards its Users
────────  Facebook Twitter ♦  Telegram ♦  YouTube ♦  Reddit ♦  Bitcointalk   ────────
BTCreward
Full Member
***
Offline Offline

Activity: 532
Merit: 100


Pozess - The Photo Sharing Fashion Marketplace Tha


View Profile
February 08, 2015, 06:25:41 PM
 #7

Thank you to everyone who replied, I have scanned my computer and I did find some stuff that said trojan , It was downloaded by my daughter off some software site. She did this right before I left town on Friday night so I am assuming since yesterday was the first time I logged into bitcoin that is why it happened at that time, I really appreciate it , I was extremely concerned as I have a new employee along on this trip, I almost feel bad I was actually wondering if this person was involved as they are the only other person in the hotel whom knows me and that I use bitcoin, Now I am concerned to even sign into any account what if they already have my passwords to like my email and other accounts, Should I reformat my hard drive or go to every account and change passwords? I enabled 2 factor authentication on local bitcoin, But my concern is I had my phone connected to my pc at one point. Dont mean to seem whining about my small loss , I seen some people have lost triple my little 500 but its sickening to know it happened
This is why you should not share computers. Even though you obviously "trust" your children, they may not fully understand of the importance of computer security nor have the skills to properly implement proper security

POZESS
Photo Sharing Social Marketplace That Rewards its Users
────────  Facebook Twitter ♦  Telegram ♦  YouTube ♦  Reddit ♦  Bitcointalk   ────────
msladya1
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
February 08, 2015, 06:43:14 PM
 #8

Thank you to everyone who replied, I have scanned my computer and I did find some stuff that said trojan , It was downloaded by my daughter off some software site. She did this right before I left town on Friday night so I am assuming since yesterday was the first time I logged into bitcoin that is why it happened at that time, I really appreciate it , I was extremely concerned as I have a new employee along on this trip, I almost feel bad I was actually wondering if this person was involved as they are the only other person in the hotel whom knows me and that I use bitcoin, Now I am concerned to even sign into any account what if they already have my passwords to like my email and other accounts, Should I reformat my hard drive or go to every account and change passwords? I enabled 2 factor authentication on local bitcoin, But my concern is I had my phone connected to my pc at one point. Dont mean to seem whining about my small loss , I seen some people have lost triple my little 500 but its sickening to know it happened
This is why you should not share computers. Even though you obviously "trust" your children, they may not fully understand of the importance of computer security nor have the skills to properly implement proper security


You are absolutely right. Normally I would not especially on my work computer for that reason alone. But now I will never ever allow that again. I was about to load more bitcoin when I remembered I needed to make that transfer, I am so glad I waited , at least they were not able to take it all, Still bothers me that I allowed myself to be vulnerable. It shows the same amount I sent but it just shows a different wallet address, Then they first tried to log in from a ip other than mine, My research says its in albania but who knows, That login attempt failed. they then waited 20 minutes before logging in and taking the 500 i had left in there. It would be nice if localbitcoin sent a email when there was a failed login attempt especially since it was literally within seconds of me logging in. In fact I was still logged in when they did the failed login attempt. Now I will make sure to hit log out every time I am done at localbitcoin.  I recieve emails right to my phone so if I had received a failed log in attempt notice I would have known , yet still hopefully I never have to deal with this again. I am using avg now, If anyone knows of more or better security please advise,,

thanks again to everyone
mayax
Legendary
*
Offline Offline

Activity: 1288
Merit: 1004


View Profile
February 10, 2015, 08:18:09 PM
 #9

bad luck. format and reinstall your computer
bitbaby
Hero Member
*****
Offline Offline

Activity: 812
Merit: 1000



View Profile WWW
February 11, 2015, 06:00:04 AM
 #10

This is bad, I wonder if it was a malware or a bug in localbitcoins, my advice is you shouldn't use it as a wallet, just use it for trading if you must. And reformat the drive and do a clean install of the OS, or better yet. dual boot and keep the bitcoin stuff in one environment and use the other as regular.

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!