Author

Topic: Account at EclipseMC hacked! (Read 1775 times)

hero member
Activity: 518
Merit: 500
January 18, 2014, 05:07:36 AM
#12
I am a former EclipseMC miner, it take quite a while to get a support response as BFL_Josh operates the EclipseMC mining pool and Butterfly Labs!  Both have support and delay issues, this just makes both business harder to run and manage.

I moved to BTC-Guild and am glad I did!

Mtnminer

Oh what, really? BFL_Josh runs the pool? Good luck with ever getting any polite response out of them then.
sr. member
Activity: 294
Merit: 250
January 17, 2014, 07:09:13 AM
#11
I am a former EclipseMC miner, it take quite a while to get a support response as BFL_Josh operates the EclipseMC mining pool and Butterfly Labs!  Both have support and delay issues, this just makes both business harder to run and manage.

I moved to BTC-Guild and am glad I did!

Mtnminer
hero member
Activity: 518
Merit: 500
January 17, 2014, 06:48:48 AM
#10
my theory (not an expert on these things by any stretch) is that someone hacked my account and updated or changed the 2fa password


Well I don't know, but my account is locked so....
Can you do that? Log into an account and alter 2fa "Password"? I thought the point was the password isn't fixed and is generated externally, hence safe from anyone knowing ... but I'm far from 2fa expert ... only just started using it myself.
hero member
Activity: 518
Merit: 500
January 15, 2014, 03:41:35 AM
#9
my theory (not an expert on these things by any stretch) is that someone hacked my account and updated or changed the 2fa password

Can you do that? Log into an account and alter 2fa "Password"? I thought the point was the password isn't fixed and is generated externally, hence safe from anyone knowing ... but I'm far from 2fa expert ... only just started using it myself.
hero member
Activity: 518
Merit: 500
January 15, 2014, 03:38:06 AM
#8
my theory (not an expert on these things by any stretch) is that someone hacked my account and updated or changed the 2fa password
hero member
Activity: 518
Merit: 500
January 15, 2014, 03:30:27 AM
#7
My account was hacked and I had google 2fa enabled.  Sorry for your loss, thats a lot to lose....

Any idea how this happened? With 2fa enabled, there aren't so many possibilities .....

I have no idea. I just got emails advising i`d requested payouts (which I hadn`t).

Ever since i`ve tried to sign in and it states that my 2fa auth has failed.  Josh won`t reply to my questions or help resolve, as he just says any account with 2fa was safe.

That is simply not true.

I`ll never use the pool again.

That's a real shame, especially the guy not replying. That's just not right. I'm not a security expert but if 2fa is failing suggests the server is compromised?
hero member
Activity: 518
Merit: 500
January 15, 2014, 02:52:30 AM
#6
My account was hacked and I had google 2fa enabled.  Sorry for your loss, thats a lot to lose....

Any idea how this happened? With 2fa enabled, there aren't so many possibilities .....

I have no idea. I just got emails advising i`d requested payouts (which I hadn`t).

Ever since i`ve tried to sign in and it states that my 2fa auth has failed.  Josh won`t reply to my questions or help resolve, as he just says any account with 2fa was safe.

That is simply not true.

I`ll never use the pool again.
hero member
Activity: 518
Merit: 500
January 14, 2014, 08:36:39 PM
#5
My account was hacked and I had google 2fa enabled.  Sorry for your loss, thats a lot to lose....

Any idea how this happened? With 2fa enabled, there aren't so many possibilities .....
hero member
Activity: 518
Merit: 500
January 14, 2014, 12:52:35 PM
#4
My account was hacked and I had google 2fa enabled.  Sorry for your loss, thats a lot to lose....
full member
Activity: 253
Merit: 101
January 10, 2014, 09:24:05 AM
#3
You also should have enabled the payment lock.
hero member
Activity: 518
Merit: 500
January 06, 2014, 11:45:14 PM
#2
I've been mining on EclipseMC for a couple of weeks and had accumulated about 0.42 BTC.  I had my account set up to auto-payout at .51, but for some reason, this morning, the 0.42 balance was manually paid out... somewhere.  It was not sent to the address I created for this pool and has not been deposited in my wallet.  I suspect my account was hacked and I've lost those coins.

My fault, I suppose, since I did not configure the account with 2-factor Google Auth, but I'm more than a little pissed off.  I tried logging into the forums at BFL to report this, and I registered for a forum account, but I never received any authorization message in my Yahoo mail account after registering.  I can now get into the forums and read posts, but cannot create any new posts since I have not confirmed my account by responding to the message that I never received.

I assume I will never get those 0.42 BTC back, but just want to warn everyone here that EclipseMC is not a safe place to mine, unless you have a Yubi key or configure Google Auth to protect yourself Undecided.

Mode note: updated title to make more clear.

Sorry for your loss.

Everyone should use 2fa and / or a Yubikey anywhere you have money / btc stored .....
newbie
Activity: 43
Merit: 0
January 06, 2014, 03:57:26 PM
#1
I've been mining on EclipseMC for a couple of weeks and had accumulated about 0.42 BTC.  I had my account set up to auto-payout at .51, but for some reason, this morning, the 0.42 balance was manually paid out... somewhere.  It was not sent to the address I created for this pool and has not been deposited in my wallet.  I suspect my account was hacked and I've lost those coins.

My fault, I suppose, since I did not configure the account with 2-factor Google Auth, but I'm more than a little pissed off.  I tried logging into the forums at BFL to report this, and I registered for a forum account, but I never received any authorization message in my Yahoo mail account after registering.  I can now get into the forums and read posts, but cannot create any new posts since I have not confirmed my account by responding to the message that I never received.

I assume I will never get those 0.42 BTC back, but just want to warn everyone here that EclipseMC is not a safe place to mine, unless you have a Yubi key or configure Google Auth to protect yourself Undecided.

Mode note: updated title to make more clear.
Jump to: