Dear Mr. Mahesh,
Thank you for sharing this on forum and also we have a Bitcoin event in couple of weeks ahead, so can you please share this experience with the audience?
Please email @
[email protected] to confirm.
Look forward to hear from you.
Thanks,
Avinash
Folks,
I just thought I'd share my experience so others don't make the same mistake.
I transferred $1500 from my HDFC bank to Bitstamp (
www.bitstamp.net)
I received an email from them saying my funds were deposited. Within an hour of that, someone logged into my account, bought bitcoins, transferred them to their wallet A
ND THEN changed the password.
Clearly this wasn't an insider and NOT malware as I have no dodgy apps on my office laptop and also have Symantec Antivirus running.
See log (please read bottom-up):
2013-12-28 12:29:01 173.254.216.67 Logged in
2013-12-27 17:34:47 209.222.8.196 Opened bitcoin withdrawal request for 0.025 BTC to 14hF8K4h7u4MAZsEJs5aRjXGVti6YBLTEn
2013-12-27 17:33:55 209.222.8.196 Opened limit buy order (amount: 0.025 BTC, price: $718.00)
2013-12-27 17:31:47 96.47.226.22 Changed user password
2013-12-27 17:29:27 96.47.226.22 Opened bitcoin withdrawal request for 2 BTC to 14hF8K4h7u4MAZsEJs5aRjXGVti6YBLTEn
2013-12-27 17:28:20 176.240.210.83 Opened limit buy order (amount: 2 BTC, price: $724.18)
2013-12-27 17:26:07 96.47.226.22 Logged in 2013-12-27 10:32:48 122.172.192.2 Logged in
2013-12-27 04:26:28 122.167.73.30 Logged in
2013-12-26 12:16:25 122.178.240.51 Logged in
2013-12-26 03:14:24 122.178.198.77 Logged in
As you can see all 122.*.*.* are timestamps where I logged-in. Suddenly on 27th Dec, someone logs in from a diff IP,
TRANSACTS in my account (buys/ transfers to wallet)
AND THEN LATER changes password.
Here is where the fun begins. There is no support number provided on
www.bitstamp.net So I logged a support ticket and then someone replies to my email with a phone number. I call that UK number & after a few attempts...somebody answers the phone & I speak to somebody called Marko Rogan who does not have an employee ID! Guess why?? They are are limited liability company (LLC) incorporated in UK with a capital of just 1000 pounds! The "director" is a 24 year old Slovenian who does not have a contact number that he can be reached on!
http://www.companiesintheuk.co.uk/ltd/bitstampMarko tells me that a password reset can be done & the temporary password will be mailed to the registered mail ID i.e. my email ID has been compromised. So I then raise a support request with Microsoft on
www.outlook.com the mail ID that was "compromised" asking for details of all mails received/sent/deleted on 27th dec.
I have reported the crime to the UK police
http://www.actionfraud.police.uk/ The crime reference number CRN is NFRC131200484131. I will also be reporting this to the cyber crime police in Bangalore.
Request you to please promote this post & ensure others don't fall prey. Also gather momentum to get the UK police to investigate this case and punish the guilty.
Please DO NOT send funds or transact on www.bitstamp.net-Mahesh