Je poste la reponse du support de localbitcoin.
Si quelqun peu m'aider a aller un peu plus loin. Je crois avoir l'IP du hacker dedans:
Hola,
Si está seguro que hay transacciónes no autorizada en tu cuenta, es posible que alguien haya obtenido tus credenciales de acceso, ya sea a través de phishing, ingeniería social, o con virus en tu computadora.
Para evitar este tipo de incidentes en el futuro, por favor, cambie tu contraseña y habilita la autenticación de dos factores (
https://localbitcoins.com/accounts/two_factor/).
Lamentablemente, no hay manera de revertir las transacciónes y esos bitcoins se han ido.
Aquí hay últimos logins en tu cuenta para que puedes investiguar. Los horarios se refieren a la zona UTC/GMT.
batou121 (30+; 100%) Aug. 17, 2015, 1:38 p.m. Login guard verification succeed 77.150.105.250
batou121 (30+; 100%) Aug. 17, 2015, 1:38 p.m. Login guard triggered for a new browser 77.150.105.250
batou121 (30+; 100%) Aug. 17, 2015, 1:38 p.m. Logged in 77.150.105.250
batou121 (30+; 100%) Aug. 17, 2015, 1:37 p.m. Password reset request - password change attempt 77.150.105.250
batou121 (30+; 100%) Aug. 17, 2015, 12:28 p.m. Email changed by admin
batou121 (30+; 100%) Aug. 17, 2015, 3:40 a.m. Failed login attempt 200.24.255.207
batou121 (30+; 100%) Aug. 17, 2015, 3:40 a.m. Failed login attempt 200.24.255.207
batou121 (30+; 100%) Aug. 17, 2015, 1:39 a.m. Login guard verification succeed 46.45.137.71
batou121 (30+; 100%) Aug. 17, 2015, 1:39 a.m. Login guard triggered for a new browser 46.45.137.71
batou121 (30+; 100%) Aug. 17, 2015, 1:39 a.m. Email reset request 46.45.137.71
batou121 (30+; 100%) Aug. 17, 2015, 1:35 a.m. Password change succeed 46.45.137.71
batou121 (30+; 100%) Aug. 17, 2015, 1:35 a.m. Password change request 46.45.137.71
batou121 (30+; 100%) Aug. 17, 2015, 1:35 a.m. Send from wallet 46.45.137.71
batou121 (30+; 100%) Aug. 17, 2015, 1:34 a.m. Login guard verification succeed 46.45.137.71
batou121 (30+; 100%) Aug. 17, 2015, 1:31 a.m. IP address changed in the middle of a session
46.45.137.71batou121 (30+; 100%) Aug. 17, 2015, 1:26 a.m. Login guard triggered for a new browser 84.53.203.38
batou121 (30+; 100%) Aug. 17, 2015, 1:25 a.m. Logged in
84.53.203.38batou121 (30+; 100%) Aug. 16, 2015, 2:33 p.m. IP address changed in the middle of a session 89.81.172.75
batou121 (30+; 100%) Aug. 16, 2015, 2:29 p.m. SMS sent
batou121 (30+; 100%) Aug. 15, 2015, 9:05 p.m. Logged in 77.150.105.250
batou121 (30+; 100%) Aug. 15, 2015, 2:17 p.m. SMS sent
batou121 (30+; 100%) Aug. 14, 2015, 7:24 p.m. IP address changed in the middle of a session 77.150.105.250
batou121 (30+; 100%) Aug. 14, 2015, 6:06 p.m. SMS sent
batou121 (30+; 100%) Aug. 14, 2015, 5:59 p.m. Logged in 200.24.255.207
batou121 (30+; 100%) Aug. 14, 2015, 10:12 a.m. SMS sent
batou121 (30+; 100%) Aug. 13, 2015, 6:36 p.m. SMS sent
batou121 (30+; 100%) Aug. 13, 2015, 5:36 p.m. IP address changed in the middle of a session 77.150.105.250
batou121 (30+; 100%) Aug. 13, 2015, 5:05 p.m. Logged in 200.24.255.207
batou121 (30+; 100%) Aug. 12, 2015, 8:54 p.m. Logged out 82.65.167.113
batou121 (30+; 100%) Aug. 12, 2015, 8:53 p.m. Login guard verification succeed 82.65.167.113
batou121 (30+; 100%) Aug. 12, 2015, 8:52 p.m. Login guard triggered for a new browser 82.65.167.113
batou121 (30+; 100%) Aug. 12, 2015, 8:52 p.m. Logged in 82.65.167.113
batou121 (30+; 100%) Aug. 12, 2015, 8:19 p.m. SMS sent
batou121 (30+; 100%) Aug. 12, 2015, 7:23 p.m. SMS sent
batou121 (30+; 100%) Aug. 12, 2015, 4:20 p.m. IP address changed in the middle of a session 200.24.255.207
batou121 (30+; 100%) Aug. 12, 2015, 3:07 p.m. Logged in 77.150.105.250
batou121 (30+; 100%) Aug. 11, 2015, 2:32 p.m. IP address changed in the middle of a session 200.24.255.207
batou121 (30+; 100%) Aug. 11, 2015, 12:52 p.m. SMS sent
batou121 (30+; 100%) Aug. 11, 2015, 12:44 p.m. SMS sent
batou121 (30+; 100%) Aug. 11, 2015, 9:23 a.m. SMS sent
batou121 (30+; 100%) Aug. 10, 2015, 11:36 p.m. Logged in 77.150.105.250
batou121 (30+; 100%) Aug. 10, 2015, 7:47 p.m. Logged out 89.81.172.75
batou121 (30+; 100%) Aug. 10, 2015, 7:38 p.m. Send from wallet 89.81.172.75
batou121 (30+; 100%) Aug. 10, 2015, 7:37 p.m. Logged in 89.81.172.75
batou121 (30+; 100%) Aug. 10, 2015, 7:33 p.m. Logged out 89.81.172.75
batou121 (30+; 100%) Aug. 10, 2015, 7:10 p.m. IP address changed in the middle of a session 89.81.172.75
batou121 (30+; 100%) Aug. 10, 2015, 4:21 p.m. Logged in 77.150.105.250
batou121 (30+; 100%) Aug. 10, 2015, 12:14 p.m. SMS sent
batou121 (30+; 100%) Aug. 9, 2015, 4:08 p.m. Logged in 77.150.105.250
batou121 (30+; 100%) Aug. 8, 2015, 3:40 p.m. Send from wallet 89.81.172.75
batou121 (30+; 100%) Aug. 8, 2015, 3:35 p.m. IP address changed in the middle of a session 89.81.172.75
batou121 (30+; 100%) Aug. 8, 2015, 3:49 a.m. SMS sent
batou121 (30+; 100%) Aug. 7, 2015, 8:19 p.m. IP address changed in the middle of a session 200.24.255.207
batou121 (30+; 100%) Aug. 7, 2015, 11:32 a.m. Logged in 77.150.105.250
Cordiales saludos,
Edgar González
In response to:
Buenas tardes,
Tal como me dijieron en el ticket #65043 acabo de reiniciar mi contraseña y efectivamente me encuentro con mi cartera vacia.
Por favor podrian darme todos los detalles de lo ocurrido?
Desde ya muchas gracias por su ayuda,
Saludos cordiales,
Il sont également entré sur mon mail pour avoir acces au message de verification. Messages qu'ils ont instantanement supprimé mais j'ai pu les recuperer.
Je ne comprend pas comment ils ont pu avoir mes deux mot de passe (mail + localbitcoin...)
Non, je n'utilise jamais les liens dans les mails et je suis en règle génerale assez attentif aux fishing etc...
Cordialement, et merci d'avance pour votre aide,