Pages:
Author

Topic: 90 BTC stolen! - page 5. (Read 14018 times)

full member
Activity: 151
Merit: 100
January 28, 2014, 09:28:06 AM
This recently happend to me to , are you sure you haven't been keylogged or anything?

You too? No, I am not sure.

did you download dogecoin qt or other bad software  Roll Eyes ?

what's wrong with dogecoin?

He likes to plant the seed...  Undecided
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
January 28, 2014, 09:13:53 AM
This recently happend to me to , are you sure you haven't been keylogged or anything?

You too? No, I am not sure.

did you download dogecoin qt or other bad software  Roll Eyes ?

what's wrong with dogecoin?
legendary
Activity: 1148
Merit: 1014
In Satoshi I Trust
January 28, 2014, 08:52:06 AM
This recently happend to me to , are you sure you haven't been keylogged or anything?

You too? No, I am not sure.

did you download dogecoin qt or other bad software  Roll Eyes ?
newbie
Activity: 25
Merit: 0
January 28, 2014, 05:44:01 AM
If tools like BitIodine were public, maybe these cases would have more chances, and thefts would reduce frequency.
http://miki.it/pdf/BitIodine_presentation.pdf
http://miki.it/pdf/thesis.pdf

is this your paper?

No, it's by an Italian guy from Politecnico of Milano.
I looked at it, but I'm writing in pure C a smaller but more specific learning/forensic tool.
full member
Activity: 308
Merit: 100
January 27, 2014, 08:50:08 PM
must be malware
sr. member
Activity: 437
Merit: 255
January 27, 2014, 08:48:13 PM
This money is lost - it went through many addresses:
https://blockchain.info/de/tree/109329398

Secondly the root cause seemed to be an old qt wallet that has been password secured later. So that the thief could use an old wallet file with a subest of the private keys to steal the 90 BTC instead of everything.

Thirdly @philipzhai - you may check where you kept your old wallet files. Especially cloud space, forums or email accounts. Maybe you gave an old disc or computer away containing the wallet file.

Finally it should be clear that no wallet is 100% safe. There are many recommendations how to create safe wallets and keep them safe. Eg.
 - create offline paper or brain wallets with btcaddress.org
 - encrypt wallet.dat and keep it offline most of the time
 - use anti malware and anti virus software to detect key loggers
 - ....

From my experience I can say that nothing is finally 100% safe. For one a unencrypted wallet.dat with bitcoin-qt may be safe because it is used in a safe system. For another one even the offline generated paper wallet is not safe because on reuse his smartphone is infected.

This situation is a clear sign that we have to manage system security more carefully because the system use cases are extended into a secure area. Everybody must be aware about the traps and open doors in his systems (computer, smartphone, ...) like everybody keeps care about closing the doors and windows of his house over night. This is a ongoing and demanding task and requires awareness for anybody.

@philipzhai even if I do not think you will ever see your money again (except someone of your near environment was the culprit) I feel pity.
sr. member
Activity: 448
Merit: 250
January 27, 2014, 08:40:17 PM

No need, if the machine is offline. It can have trojans up the wazoo but if they can't talk to the controller, then they're useless.

Unless it was really sneaky and inserted its own wallet.dat, so that you sent it your coins.

Ok, fine, that's a point. But just for the sake of counterpoint, the wallet can be derived from the seed. So, if simply check that the seed leads to that private key, you should be fine.

Sure, but if they insert their own seed...
And then there's the ultrasonic magic communication the NSA does...
Just reformat Smiley

But then there's the low level bios...

Better to build it from scratch, get a CPU fab shop in your garage Smiley

Look, all you need is a log-free, virus-free, ultrasonic magic communication-free, SHA calculator, along with hopefully a random number generator (although random numbers can be generated "manually" if need be). That can be an old computer, whatever. I still think in the future there will be dedicated hardware that physically CAN'T get a virus, though.


lol. I couldn't imagine my little disk formatting suggestion could go this far. Cheesy

This is bitcointalk. Its an unwritten rule that we must take everything anybody posts and take it to the logical extreme.
hero member
Activity: 868
Merit: 1000
January 27, 2014, 08:00:01 PM

No need, if the machine is offline. It can have trojans up the wazoo but if they can't talk to the controller, then they're useless.

Unless it was really sneaky and inserted its own wallet.dat, so that you sent it your coins.

Ok, fine, that's a point. But just for the sake of counterpoint, the wallet can be derived from the seed. So, if simply check that the seed leads to that private key, you should be fine.

Sure, but if they insert their own seed...
And then there's the ultrasonic magic communication the NSA does...
Just reformat Smiley

But then there's the low level bios...

Better to build it from scratch, get a CPU fab shop in your garage Smiley

Look, all you need is a log-free, virus-free, ultrasonic magic communication-free, SHA calculator, along with hopefully a random number generator (although random numbers can be generated "manually" if need be). That can be an old computer, whatever. I still think in the future there will be dedicated hardware that physically CAN'T get a virus, though.


lol. I couldn't imagine my little disk formatting suggestion could go this far. Cheesy
sr. member
Activity: 448
Merit: 250
January 27, 2014, 07:56:46 PM
Look, all you need is a log-free, virus-free, ultrasonic magic communication-free, SHA calculator, along with hopefully a random number generator (although random numbers can be generated "manually" if need be). That can be an old computer, whatever. I still think in the future there will be dedicated hardware that physically CAN'T get a virus, though.

Yep, that's exactly the Trezor.

Yes, except that one is just a first generation type thing. I think that these chips could be built directly into USBs, Credit Cards, Phones, or even just Computers. There can't be a significant overhead to making a simple SHA2 calculator chip.
cp1
hero member
Activity: 616
Merit: 500
Stop using branwallets
January 27, 2014, 07:36:55 PM
Look, all you need is a log-free, virus-free, ultrasonic magic communication-free, SHA calculator, along with hopefully a random number generator (although random numbers can be generated "manually" if need be). That can be an old computer, whatever. I still think in the future there will be dedicated hardware that physically CAN'T get a virus, though.

Yep, that's exactly the Trezor.
sr. member
Activity: 448
Merit: 250
January 27, 2014, 06:33:25 PM

No need, if the machine is offline. It can have trojans up the wazoo but if they can't talk to the controller, then they're useless.

Unless it was really sneaky and inserted its own wallet.dat, so that you sent it your coins.

Ok, fine, that's a point. But just for the sake of counterpoint, the wallet can be derived from the seed. So, if simply check that the seed leads to that private key, you should be fine.

Sure, but if they insert their own seed...
And then there's the ultrasonic magic communication the NSA does...
Just reformat Smiley

But then there's the low level bios...

Better to build it from scratch, get a CPU fab shop in your garage Smiley

Look, all you need is a log-free, virus-free, ultrasonic magic communication-free, SHA calculator, along with hopefully a random number generator (although random numbers can be generated "manually" if need be). That can be an old computer, whatever. I still think in the future there will be dedicated hardware that physically CAN'T get a virus, though.
sr. member
Activity: 378
Merit: 255
January 27, 2014, 05:51:11 PM
This is the thief's address:

16CLrCq8c1M8qsCYNP5r21AejMWUgZS7uk

Let's keep hunting!

Starting from that address, which has now a balance of 0 BTC, if you follow all the transactions involving the money, you will go through numerous addresses which in turn sent the whole amount (thus remaining with a 0 balance) to the next one. Why is that?

@ OP: why did you wait almost 2 days to report the theft?

the money is actually going down bcos they are spending it... spent coins are even harder to trace...

theres only 48 BTC left

https://blockchain.info/address/1MWkEYti5YjspJmnWY1r48Tj9kQjgPUtxG


Actually, they would be easier to trace.  If, for instance, they spent the coins at Overstock.com, you could subpoena them to find the shipping address.  The police could track the thief pretty quickly at that rate.

You could also subpoena KRUNIAC on the forums here to get IP addresses that he posts from.
cp1
hero member
Activity: 616
Merit: 500
Stop using branwallets
January 27, 2014, 04:01:21 PM

No need, if the machine is offline. It can have trojans up the wazoo but if they can't talk to the controller, then they're useless.

Unless it was really sneaky and inserted its own wallet.dat, so that you sent it your coins.

Ok, fine, that's a point. But just for the sake of counterpoint, the wallet can be derived from the seed. So, if simply check that the seed leads to that private key, you should be fine.

Sure, but if they insert their own seed...
And then there's the ultrasonic magic communication the NSA does...
Just reformat Smiley

But then there's the low level bios...

Better to build it from scratch, get a CPU fab shop in your garage Smiley
member
Activity: 99
Merit: 10
January 27, 2014, 03:52:36 PM
Unfortunatelly "be your own bank" also means taking care of security, because otherwise that "non reversible bitcoin transactions" feature screws you bad.

If I were you I would report it as cyber crime and hope for the best.

Also, since it was a lot of money and you would probably be willing to invest some money in order to get that bastard, think about contacting and paying an investigator.
sr. member
Activity: 448
Merit: 250
January 27, 2014, 03:47:14 PM

No need, if the machine is offline. It can have trojans up the wazoo but if they can't talk to the controller, then they're useless.

Unless it was really sneaky and inserted its own wallet.dat, so that you sent it your coins.

Ok, fine, that's a point. But just for the sake of counterpoint, the wallet can be derived from the seed. So, if simply check that the seed leads to that private key, you should be fine.
cp1
hero member
Activity: 616
Merit: 500
Stop using branwallets
January 27, 2014, 03:39:50 PM

No need, if the machine is offline. It can have trojans up the wazoo but if they can't talk to the controller, then they're useless.

Unless it was really sneaky and inserted its own wallet.dat, so that you sent it your coins.
sr. member
Activity: 448
Merit: 250
January 27, 2014, 03:36:25 PM
1. Download electrum on an offline computer (ideally entirely offline, never-to-go-online-again, I use an old netbook I use as a calculator which I got for $100)

If you decide to use your old pc, you should have done disk formatting before installing electrum.

No need, if the machine is offline. It can have trojans up the wazoo but if they can't talk to the controller, then they're useless.
hero member
Activity: 826
Merit: 1000
'All that glitters is not gold'
January 27, 2014, 01:45:10 PM
I need your help!

I have 2 bitcoin-qt wallets, and yestarday one single transaction happened to both of my wallets and my 90 some BTCs were transferred out of my wallets. I don't know what happened and if it's possible to recover. The blockchain information is as follows:

https://blockchain.info/tx/32d070a547e9d2cc2de4dc453cea27789bf33f1c983ffdc7f28ce3419e70c9d5

On my wallet client software, in the transaction record column, the "address" shows a n/a, and the summary shows a double direction arrow.

How can two wallets be made to transact at the same time with a single transaction? The two addresses are as follows:

1CLn42dHFuXAd7o9bgrsCRmfDvLavRoxTq
1H4esgi6KwhDtVXZXJ12AS7QEwdeQighn4


Is it possible to track down the thief and recover my lost?

Truly,
Philip
[email protected]

Hello !

Maybe there is a more simple explanation: another person accessed your PC and did this transaction of 90 BTC
No keylogger, no Qt bug, only the human factor  Cool
newbie
Activity: 14
Merit: 0
January 27, 2014, 01:43:32 PM
i followed the highest btc transits on blockchain,
31.9 btc when to 16PcMrZWvkLkQxLDotsSWaYgjVD9GoDspa
then they trans 31.9 btc to 1G5pbFtm7ap95wqe2JsZ9EqEA5YQR3GKiQ
16PcMrZWvkLkQxLDotsSWaYgjVD9GoDspa sends alot btc to 1G5pbFtm7ap95wqe2JsZ9EqEA5YQR3GKiQ
1G5pbFtm7ap95wqe2JsZ9EqEA5YQR3GKiQ then sends 100.5btc to "14S2wx2zzj7aJz4gpJSvAXSAvYr9vyNBYi " owned by known scammer here on the forums as  KRUNIAC https://bitcointalksearch.org/topic/kruniac-scam-asic-1-share-229612
then sends 100btc to 1BCjb4BMqLHPdHh1SbeoELQSUfa8NYcacu last stop
https://blockchain.info/tx/cc5ffebb7741a0f6ba77ceba6c6f8bb5a51107439742e421b64e5e982699719c

Interesting! Thank you very much!
You seem to be an expert on this. Then how can we communicate with KRUNIAC?

Gratefully,
Philip
full member
Activity: 131
Merit: 100
January 27, 2014, 01:07:49 PM
sorry for your lost man  Embarrassed
Pages:
Jump to: