Author

Topic: [2015-10-13] Purse.io users’ accounts compromised, hackers stole 10,235 BTC (Read 656 times)

full member
Activity: 199
Merit: 100
in the end, you only find the beginning
Nothing new here, phishing attempts are rampant in the online banking scene too, and nobody post that as headline news on websites. It happens even more than we know, the banks just manage to keep it quite. One of my friends got his accounts cleared with the same thing and spoofed websites.

The thief's will not stop trying, because you use Bitcoin. They will target any platform or payment method with these type of social engineering attacks. If you do not enable 2FA, you expose yourself to a world of trouble.  

yes, i agree with that, i mean that this happened even more than we know, this is curious about why there is no news about that, i mean about obviously the banks just manage to keep it quite, but why there is never news about it, because as you said it happens more often that we are thinking.


yes, it was NOT stolen 10k BTC, it was 10 BTC, so nothing huge  Cheesy

ahhh just imagine that it was your own 10 btc the one that was stolen, will be it huge? Tongue
legendary
Activity: 1974
Merit: 1003
Translation for American readers:

Quote
Purse.io users’ accounts compromised, hackers stole 10.235 BTC


yes, it was NOT stolen 10k BTC, it was 10 BTC, so nothing huge  Cheesy
legendary
Activity: 3472
Merit: 1963
Leading Crypto Sports Betting & Casino Platform
Nothing new here, phishing attempts are rampant in the online banking scene too, and nobody post that as headline news on websites. It happens even more than we know, the banks just manage to keep it quite. One of my friends got his accounts cleared with the same thing and spoofed websites.

The thief's will not stop trying, because you use Bitcoin. They will target any platform or payment method with these type of social engineering attacks. If you do not enable 2FA, you expose yourself to a world of trouble.   
legendary
Activity: 4354
Merit: 3260
Translation for American readers:

Quote
Purse.io users’ accounts compromised, hackers stole 10.235 BTC
sr. member
Activity: 249
Merit: 256
Try Purse Instant! https://purse.io/instant
i got an email couple months ago about purses security being compromised and password change advice. i just decided to stop using purse lol, guess i made a pretty goo decision

That email was regarding phishing attempts. Purse hasn't had any other security breaches.
hero member
Activity: 756
Merit: 500
i got an email couple months ago about purses security being compromised and password change advice. i just decided to stop using purse lol, guess i made a pretty goo decision
legendary
Activity: 1302
Merit: 1024
Was initially shocked as I read 10k Bitcoins stolen! Smiley
definitely 2FA is a must nowadays on anything that has value.

As litecoinguy said above, 2FA should be mandatory and I think it's about time that these sites make it also mandatory for people to use the 2FA. No 2FA then no account. It helps the community and also the company.
legendary
Activity: 1848
Merit: 1000
Was initially shocked as I read 10k Bitcoins stolen! Smiley
definitely 2FA is a must nowadays on anything that has value.
legendary
Activity: 910
Merit: 1000
Purse.io users’ accounts compromised, hackers stole 10,235 BTC
Several users of Purse.io, a P2P service provider allowing to shop on Amazon with bitcoins, reported receiving unauthorized password reset emails which was quickly followed by unauthorized withdrawals of money from their accounts.
http://www.coinfox.info/news/3348-purse-io-users-accounts-compromised-hackers-stole-10-235-btc

That's a lot of coins. I wonder where hackers uses all those.  What eo you guys think will be their next target?  Undecided

I don't think they use them all in one place. 10 btc wouldn't be hard to distribute and sell off for another currency.
before the revision on the amount: 10kbtc on the other hand   Sad
legendary
Activity: 1148
Merit: 1011
In Satoshi I Trust
“No accounts with 2FA enabled before the attack were affected. Reports of accounts with 2FA being compromised are not accurate. Some users enabled 2FA after they received reset password emails,” he said.


Some people will never learn. 2FA has to be mandatory.
legendary
Activity: 1806
Merit: 1090
Learning the troll avoidance button :)
Purse.io users’ accounts compromised, hackers stole 10,235 BTC
Several users of Purse.io, a P2P service provider allowing to shop on Amazon with bitcoins, reported receiving unauthorized password reset emails which was quickly followed by unauthorized withdrawals of money from their accounts.
http://www.coinfox.info/news/3348-purse-io-users-accounts-compromised-hackers-stole-10-235-btc

That's a lot of coins. I wonder where hackers uses all those.  What eo you guys think will be their next target?  Undecided

Fail it was 10 BTC good news though just a small hack

https://blog.purse.io/update-on-unauthorized-password-reset-emails/

Update:  

11 users were affected and 10.235 Bitcoin were withdrawn. All affected accounts have been reimbursed.  Reports of accounts with 2FA being compromised are not accurate. Some users enabled 2FA after they received reset password emails.  Accounts that were affected will soon regain access.  We will publish technical details of the attack in the coming days.
legendary
Activity: 1302
Merit: 1024
Purse.io users’ accounts compromised, hackers stole 10,235 BTC
Several users of Purse.io, a P2P service provider allowing to shop on Amazon with bitcoins, reported receiving unauthorized password reset emails which was quickly followed by unauthorized withdrawals of money from their accounts.
http://www.coinfox.info/news/3348-purse-io-users-accounts-compromised-hackers-stole-10-235-btc

That's a lot of coins. I wonder where hackers uses all those.  What eo you guys think will be their next target?  Undecided
legendary
Activity: 1806
Merit: 1090
Learning the troll avoidance button :)
Thanks I'll add it to the list of big bitcoin thefts
Edit: It looks like someone put a comma where a decimal was needed ...
https://www.cryptocoinsnews.com/purse-io-users-are-targeted-by-hackers-10-235-btc-stolen/
http://siliconangle.com/blog/2015/10/11/purse-io-denies-bitcoin-theft-despite-compromise-and-multiple-users-saying-theyve-been-robbed/

Confirmed SOURCE OP ERROR  CORRECTION Posted Below

Bitcoin startup Purse said today that 10.235 BTC (roughly $2,500) in customer funds were stolen over the weekend during a security incident.

Eleven customers had their accounts emptied, according to Purse representatives, who reported they had covered the bitcoins withdrawn with company funds.

http://www.coindesk.com/customer-bitcoin-stolen-purse-email-breach/

“We actively monitor our customer liabilities against the funds we control. During our downtime, we determined funds we control exceeded customer liabilities [and] the unauthorized withdrawals (10.235 BTC) implying user funds were secure," he said in an email. "Profit from one to two days was used to reimburse the withdrawals.”
full member
Activity: 224
Merit: 100
Purse.io users’ accounts compromised, hackers stole 10,235 BTC
Several users of Purse.io, a P2P service provider allowing to shop on Amazon with bitcoins, reported receiving unauthorized password reset emails which was quickly followed by unauthorized withdrawals of money from their accounts.
http://www.coinfox.info/news/3348-purse-io-users-accounts-compromised-hackers-stole-10-235-btc
Jump to: