Pages:
Author

Topic: Hacked - page 2. (Read 2485 times)

cp1
hero member
Activity: 616
Merit: 500
Stop using branwallets
August 01, 2013, 08:32:30 PM
#15
Did blockchain.info generate this key or was this a brain wallet?
member
Activity: 97
Merit: 10
August 01, 2013, 08:31:18 PM
#14
If he got your backup wallet it's easy to import in electrum or blockchain.info https://blockchain.info/wallet/import-wallet and spend money.

but  main question is, how he hacked your mail?

Are you using some common/unsecure password or used same password on some other unknown/new website?

If you are using gmail, you can check ip address of recent logins.

I checked the ip address of recent logins.  Everything seems to be in order.

I don't have 2FA set in gmail, but my password is fairly strong.

So if it's not that, can it be some type of java browser exploit?
hero member
Activity: 686
Merit: 504
always the student, never the master.
August 01, 2013, 08:26:33 PM
#13
I am a big advocate of paper wallets.  I have never heard of anyone having a single bitcoin stolen from a paper wallet.  Print at bitaddress.org.

I am sorry to hear of your loss!
At this time, one theory is that someone got into my email and pulled the private key from a wallet backup file (possible, but not sure how likely that is).


its easy as shit to do, but he would have to know your blockchain.info account password, which he probably did if he was ablle to get into your account already.

just yesterday, i used an old wallet.aes.json backup to retrieve coins from my stolen laptop.

a little backstory: i made my first bitcoin wallet on blockchain.info, then exported the addresses to the bitcoin client on the laptop. the computer was stolen from my home last week. yesterday i found an old wallet back up and imported it into a new wallet at blockchain.info. it prompted me for the password to unencrypt the wallet, then for the secondary wallet password, then it asked me to prove i was human by solving a captcha, then bam i was at the login screeen ,where i logged into my new wallet and easily recovered the .4 btc that was in my bitcoin wallet on my laptop.

i'm sure the hacker did the exact same steps to steal your money.

legendary
Activity: 1274
Merit: 1004
August 01, 2013, 08:20:52 PM
#12
If he got your backup wallet it's easy to import in electrum or blockchain.info https://blockchain.info/wallet/import-wallet and spend money.

but  main question is, how he hacked your mail?

Are you using some common/unsecure password or used same password on some other unknown/new website?

If you are using gmail, you can check ip address of recent logins.
member
Activity: 97
Merit: 10
August 01, 2013, 08:13:51 PM
#11
I am a big advocate of paper wallets.  I have never heard of anyone having a single bitcoin stolen from a paper wallet.  Print at bitaddress.org.

I am sorry to hear of your loss!

Hi Mike,
I do have Armory set up on an unconnected ubuntu laptop, and watching-only wallets on my machines connected to the internet.

Yes, it's an annoyance to lose the coins, but what I'm concerned about is understanding how this happened, because I thought things were pretty buttoned up. 

The coins were literally sitting in the online wallet for just a few hours, as well.

Given that I had 2FA on, was running on a mac, was logged out of the blockchain wallet at the time....

At this time, one theory is that someone got into my email and pulled the private key from a wallet backup file (possible, but not sure how likely that is).

Willing to hear other theories.

I sent an email to [email protected] to get more info on the transaction.
   
vip
Activity: 1386
Merit: 1136
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
August 01, 2013, 08:06:58 PM
#10
I am a big advocate of paper wallets.  I have never heard of anyone having a single bitcoin stolen from a paper wallet.  Print at bitaddress.org.

I am sorry to hear of your loss!
legendary
Activity: 1274
Merit: 1004
August 01, 2013, 08:05:45 PM
#9

2 Factor was on my cellphone.  I'm on a mac. 

Then there is no other way to steal coins except getting wallet backup from your mail.
member
Activity: 97
Merit: 10
August 01, 2013, 08:01:30 PM
#8
Yes they can empty your wallet without doing login on blockchain.info wallet by importing your backup wallet into any client that supports it.

Ok, assuming they didn't get into my backup wallet file, what other security holes might I have?

Your pc might be infected. Download malwarebyets and scan it .
But still it's not easy to bypass 2factor authentication.

Ps: It was email based  2Factor authentication or device/cellphone based?

Email one is useless if your pc got infected or someone got your emails password.



2 Factor was on my cellphone.  I'm on a mac. 
legendary
Activity: 1274
Merit: 1004
August 01, 2013, 07:48:09 PM
#7
Yes they can empty your wallet without doing login on blockchain.info wallet by importing your backup wallet into any client that supports it.

Ok, assuming they didn't get into my backup wallet file, what other security holes might I have?

Your pc might be infected. Download malwarebyets and scan it .
But still it's not easy to bypass 2factor authentication.

Ps: It was email based  2Factor authentication or device/cellphone based?

Email one is useless if your pc got infected or someone got your emails password.

member
Activity: 97
Merit: 10
August 01, 2013, 07:45:52 PM
#6
Yes they can empty your wallet without doing login on blockchain.info wallet by importing your backup wallet into any client that supports it.

Ok, assuming they didn't get into my backup wallet file, what other security holes might I have?
legendary
Activity: 1274
Merit: 1004
August 01, 2013, 07:41:46 PM
#5
Yes they can empty your wallet without doing login on blockchain.info wallet by importing your backup wallet into any client that supports it.
member
Activity: 97
Merit: 10
August 01, 2013, 07:37:30 PM
#4
Looks like someone got backup copy of your wallet, from your email.. maybe?

I do have the blockchain info wallet backup sent to my email.  Even if they had this, would they be able to extract the private keys?  I still had 2FA on. 
legendary
Activity: 1274
Merit: 1004
August 01, 2013, 07:35:01 PM
#3
Looks like someone got backup copy of your wallet, from your email.. maybe?
legendary
Activity: 1176
Merit: 1255
May Bitcoin be touched by his Noodly Appendage
August 01, 2013, 07:33:14 PM
#2
Help?
Just ask blockchain.info for ip or any info they may have
member
Activity: 97
Merit: 10
August 01, 2013, 07:27:22 PM
#1
It appears someone got into my blockchain.info account and transferred coins out of it just a few minutes ago.

I have 2 factor enabled.  Was logged into btct and bitfunder at the time (but not blockchain.info)

Any help would be appreciated.

https://blockchain.info/tx/1174e27cd6de043ec081a68b52f455ba1548f35949c2ba2ddd3abc60f5a29840
Pages:
Jump to: