Author

Topic: BeCareful guys someone Hack My LocalBitcoin Account & withdraw 0.78BTC (Read 776 times)

hero member
Activity: 672
Merit: 502
Did you set 2FA or not
No dude , my mistake Sad

no im not using vpn and others services . only for hack my localbitcoin account and not touch any folder and browers  , hackers using on Mozilla , im using on chroma i contact support on localbitcoin he reply me your withdraw same ip Sad that wrong investigation Sad

That's really sad dude, I think your PC might be infected and since you didn't had 2fa enabled they took advantage of that and stole your password or cookie and used it to clear your account.

I would suggest, take necessary back up of your important files and do a clean install of OS and make sure you enable 3fa, which is when you enter your 2fa code from the google authenticator they would send a code to your registered email which you have to enter at LBC and only after doing that you'd get access to your account.

And then it would be really hard for anyone to get into your account.
hero member
Activity: 696
Merit: 500
Sorry for your loss buddy, it is always advised that never keep your coins in an exchange for too long, just get in and get out. LBC usually is very safe and I know people who have been using it from a long time and never had any problems or theft.

Tell me something..Do you use VPN/Tor or something like that?

Because I just learned this recently that even if you had 2fa enabled and you use VPN or TOR your account may still get compromised through MITM (Man-in-the-middle) attack.

Read this:
I could come up with 10 ways to "hack" 2FA, but the relevant risk for VPN is the man-in-the-middle attack (MITM) and 2FA does not help for that. Basically all the traffic goes through the VPN so if the hacker controls the VPN he could show you a fake PD site (copy) and see the passwords you fill in, but also the 2FA code. Both can be send to the real PD site under the attackers control - and he can make withdrawals etc. Basically 2FA does not help at all against MITM. This is the same reason 2FA doesn't work against phishing sites (also fake site that gets your password/2FA code and uses it immediately.)

HOWEVER, the description in https://bitcointalksearch.org/topic/psa-bitcoin-gambling-ssl-security-1043827 seems pretty correct. All you have to do is make 100% sure you are connected to https://primedice.com and there is nice little lock icon next to it. That topic has some more details. This way the traffic is encrypted between you and the real PD site.

Still I do recommend everyone to use 2FA whenever there is a decent amount of money involved (or your account is worth a lot to you.)
no im not using vpn and others services . only for hack my localbitcoin account and not touch any folder and browers  , hackers using on Mozilla , im using on chroma i contact support on localbitcoin he reply me your withdraw same ip Sad that wrong investigation Sad
hero member
Activity: 696
Merit: 500
hero member
Activity: 696
Merit: 500
How did the hacker got into your account?

no idea he when hack , i buying today and hack today fuck this hackers Sad
hero member
Activity: 532
Merit: 500
LBC is very secure if you set 2FA and browser guard.

Without that it's very risky to put coins there.

Yes I agree it is very secure if you use the right precautions, since day one I have used 2FA and never have any funds went missing in the early days that used to be my main wallet as well. Your computer must be compromised OP, get decent antivirus asap. I have only heard of one other person to have lost funds from a hacker on that site and his computer was not secure, nothing to do with the site but your own security measures  Undecided
hero member
Activity: 672
Merit: 502
Sorry for your loss buddy, it is always advised that never keep your coins in an exchange for too long, just get in and get out. LBC usually is very safe and I know people who have been using it from a long time and never had any problems or theft.

Tell me something..Do you use VPN/Tor or something like that?

Because I just learned this recently that even if you had 2fa enabled and you use VPN or TOR your account may still get compromised through MITM (Man-in-the-middle) attack.

Read this:
I could come up with 10 ways to "hack" 2FA, but the relevant risk for VPN is the man-in-the-middle attack (MITM) and 2FA does not help for that. Basically all the traffic goes through the VPN so if the hacker controls the VPN he could show you a fake PD site (copy) and see the passwords you fill in, but also the 2FA code. Both can be send to the real PD site under the attackers control - and he can make withdrawals etc. Basically 2FA does not help at all against MITM. This is the same reason 2FA doesn't work against phishing sites (also fake site that gets your password/2FA code and uses it immediately.)

HOWEVER, the description in https://bitcointalksearch.org/topic/psa-bitcoin-gambling-ssl-security-1043827 seems pretty correct. All you have to do is make 100% sure you are connected to https://primedice.com and there is nice little lock icon next to it. That topic has some more details. This way the traffic is encrypted between you and the real PD site.

Still I do recommend everyone to use 2FA whenever there is a decent amount of money involved (or your account is worth a lot to you.)
legendary
Activity: 1456
Merit: 1005
Its good lesson at least we should know when we store bitcoins we should have some secondary protection to the account. They are already providing felicities but people are so lazy to do setup   
legendary
Activity: 2562
Merit: 1064
LBC is very secure if you set 2FA and browser guard.

Without that it's very risky to put coins there.
member
Activity: 98
Merit: 10
yeah man

went through the exact same thing about a month ago

have the dude's ip address -- debating whether to dedicate my life to sherlock holmes'ing it

(not having 2 factor authentication on localbitcoins = not having a password at all on localbitcoins)

^^free lesson that cost me and op a few hundred dollars

How did someone hack your account? Maybe there is a malware in your pc.
newbie
Activity: 31
Merit: 0
yeah man

went through the exact same thing about a month ago

have the dude's ip address -- debating whether to dedicate my life to sherlock holmes'ing it

(not having 2 factor authentication on localbitcoins = not having a password at all on localbitcoins)

^^free lesson that cost me and op a few hundred dollars
newbie
Activity: 3
Merit: 0
Did you set 2FA or not
member
Activity: 98
Merit: 10
How did the hacker got into your account?
hero member
Activity: 696
Merit: 500
someone Hack My LocalBitcoin Account & withdraw 0.78BTC Becareful Guys.


Jump to: