Hackers steal Ethereum, who is hurt?

Stalker22

legendary

Activity: 1526

Merit: 1359

Quote from: qory on May 08, 2021, 01:24:21 AM

How come? Most of my Ethereum is in exchange so I think it's safe there also I don't store my ethereum to some wallets but on hardware wallet. We really can't tell where they will attack or when.

You think your Ethereum is SAFU on the exchange? Haven't we learned anything from the past?

When you send your coins to the exchange, it really isn't your money. It belongs to the exchange.

TastyChillySauce00

legendary

Activity: 3010

Merit: 1028

Leading Crypto Sports Betting & Casino Platform

Quote from: khaled0111 on May 07, 2021, 06:55:36 PM

Quote from: Botnake on May 07, 2021, 04:13:23 PM

However, I really thought it's just an isolated case where the problem is mostly coming from the user, not the system itself, but I could be wrong.

This is the hacker's address according to the reddit post linked above:
https://etherscan.io/address/0xc940eda1fbe83db6e11d48eecad6f0de07915ffe
It has received many transactions in the last couple of days. So, I don't think this is an isolated case. The first transaction it received was two days ago. OP suspects that Trust wallet might be vulnerable but I think it's too early to draw conclusions.

He said the seed was stored in metal box and the only device he used to access it was an ipad pro, if the story that was shared in reddit is really true I believe it's the ipad itself that has been compromised and there's so many transactions that was made aswell, I doubt the activity done manually, I think it's malware or such, I know IpadOS is rather strict but anything can happen right? not to mention if the ipad was bought in second hand condition, it might have some kind of fishy software installed, etc. so many possibilities.

qory

hero member

Activity: 1722

Merit: 508

How come? Most of my Ethereum is in exchange so I think it's safe there also I don't store my ethereum to some wallets but on hardware wallet. We really can't tell where they will attack or when.

olabiyijummy02

member

Activity: 239

Merit: 17

The most common way that hackers use are malware spy attacks and phsing attacks
I once fell a victim of malware attack where the hacker stole my ether from my ethereum wallet
In my case, i believe my computer was attacked through my metamask.
I stopped using metamask since that day and i never had any compromise of any of my other wallets

tippytoes

sr. member

Activity: 1988

Merit: 275

Quote from: Botnake on May 07, 2021, 04:13:23 PM

It will be investigated, if it's the fault of Apple, then it will not result good to their business. Actually, AFAIK, apple is more secured than other OS, so how come this happens? If their system is compromised then probably its time to see more pump in crypto as investors will fly in crypto from apple.

However, I really thought it's just an isolated case where the problem is mostly coming from the user, not the system itself, but I could be wrong.
I'll follow the development of this and hear your opinion guys, this should be not be taken lightly, I'm an apple user too.

I believe, it is more on isolated case. Apple, in my opinion, is more secure than any other OS. So it is not the system per se. Maybe we are wrong. but we don't know the whole story here. We need tangible facts before we can draw conclusion.

khaled0111

legendary

Activity: 2702

Merit: 3045

Top Crypto Casino

Quote from: Botnake on May 07, 2021, 04:13:23 PM

However, I really thought it's just an isolated case where the problem is mostly coming from the user, not the system itself, but I could be wrong.

This is the hacker's address according to the reddit post linked above:
https://etherscan.io/address/0xc940eda1fbe83db6e11d48eecad6f0de07915ffe
It has received many transactions in the last couple of days. So, I don't think this is an isolated case. The first transaction it received was two days ago. OP suspects that Trust wallet might be vulnerable but I think it's too early to draw conclusions.

Botnake

hero member

Activity: 2856

Merit: 667

It will be investigated, if it's the fault of Apple, then it will not result good to their business. Actually, AFAIK, apple is more secured than other OS, so how come this happens? If their system is compromised then probably its time to see more pump in crypto as investors will fly in crypto from apple.

However, I really thought it's just an isolated case where the problem is mostly coming from the user, not the system itself, but I could be wrong.
I'll follow the development of this and hear your opinion guys, this should be not be taken lightly, I'm an apple user too.

zasad@

legendary

Activity: 1932

Merit: 4602

Buy on Amazon with Crypto

You need to store your coins in hardware wallets, this will give you great protection against viruses. It is possible to draw tokens in the Ethereum ecosystem if you give permission for untrusted smart contracts to interact with your wallet.
I still don't understand how the ethereum was stolen. The only way is to steal the seed phrase.
For the operations with the seed phrase, I plan to use a separate computer that will never connect to the Internet. This is the best protection, and a hardware wallet is difficult to hack with a computer virus.

Anonymous100

member

Activity: 423

Merit: 11

Quote from: lovesmayfamilis on May 07, 2021, 10:13:33 AM

A recent post on reddit.com sounds about a request to check wallets, as hackers have withdrawn more than $1.1 million in Ethereum over the past 48 hours.

https://www.reddit.com/r/dogecoin/comments/n676ko/warning_please_help_us_to_find_out_how_eth_is/

The user is not a beginner and knows all the storage security measures. But he and other victims as well cannot understand the reason why their Ethereum being withdrawn.
Are there any victims among members of the forum?
According to the telegram channel @gfoundinshit, there is a leak from Apple devices, since all complaints come from the owners of these devices.

We are not sure that a wallet like MEW was hacked. However, a malware attack on their computer could result in the backup of the private key being taken. So that someone can easily enter a wallet. We always anticipate malware attacks on computer systems. Pirated antivirus can also retrieve computer data when it is scanned and the entire contents of the computer are read by the antivirus.

aemma

copper member

Activity: 966

Merit: 14

This is a big problem and no one might know actually what happened or how the victims played around or uses their wallets, that is, which website did they connect their wallet and so on, because nowadays a lot of projects are coming up with airdrops in which one of the requirements or steps is connecting wallet to the website, wherein it might be hard to tell which is genuine or which have scam intentions.
In a bid to add, it is wise to have a separate wallet where you can connect to any random website all in a bid to participate in their airdrop, that is if you are an airdrop kind of person. Secondly, it is also wise to have more than one wallet where you can store your assets, at least splitting assets in more than one wallet looks more secure. And lastly, do not save personal information like private keys on your phone.

maydna

hero member

Activity: 2912

Merit: 556

Enterapp Pre-Sale Live - bit.ly/3UrMCWI

That is a lot of money.

How can the hacker withdraw all of the ethereum? While assuming the user knows how to protect their wallet.

Perhaps, that is because of a leak from the Apple devices, and the hacker used it to steal the ethereum. But if there is no further explanation or details from the user on how they can get hacked, we can assume that can be their mistake because they are not a beginner in crypto.

It is from the Trust wallet moderator on that Reddit page.

Code:

A Trust wallet moderator told me that the theft must be my own fault and that there is no systemic fault in their app or seed generation.

Perhaps, his Apple or his iPad Pro have leaks, so the hacker used it to steal his ethereum.

oemar bakrie

full member

Activity: 1260

Merit: 100

SOL.BIOKRIPT.COM

I am surprised that currently there are more and more thieves who target bitcoin or ethereum assets and other coins in different ways ..
whether the perpetrator is a network I don't know ..
because a year ago I had my wallet hacked and there were not a few losses at that time, good tokens were taken, and only left tokens that were worthless..
In the beginning, I gave a link to a project that has the same shape as MEW, and there I entered with a private wallet, that's where it didn't take hours for my token to disappear..
I really feel sad, but it has all become a lesson for me to always be careful..

semobo

full member

Activity: 1498

Merit: 146

People consider Apple devices are entirely safe but no device is safe when it connects to the internet, so people who are holding huge amount of cryptocurrencies should dedicate a device for their cold storage and better never connect internet into it and what type of wallet they are making also has to be considered when these type of hacks occur.

akirasendo17

sr. member

Activity: 1106

Merit: 310

This is why clicking a link from a browser of your computer or mobile phone should be cautious because we don't know what really is on the site or there is a script that will run once the link is open, see people who lose their funds while just watching, the thing is avoiding opening links, and emails sent by unknown people, some people when you ask if they open a link or an email will try to deny it, especially if they are years in the industry because they don't want people to tell them what happened is their fault instead they will just say it's just happened, more or less the cause of this hack is due to links that have been run to trust wallet or there is a link click and there is a script maybe that run and gather all the information and sent it to the hacker's server.

DaMut

sr. member

Activity: 1274

Merit: 263

Quote from: ryzaadit on May 07, 2021, 11:03:01 AM

~snip

I did and yes I know it, but it did not happen these past couple of days which mean it is out of the possibility or am I missing something here?
the latest I heard about DNS Hijacking was around two or three months ago and it happened on Pancakeswap while he is using Ethereum.

Quote from: FatFork on May 07, 2021, 11:24:01 AM

Wow! That's a whole lot of ETH!

Based on etherscan, I noticed that the hacker started moving coins today, and some of his transactions are linked to the HitBTC exchange. Maybe some of the victims should contact their support to freeze funds if that is still possible.

HitBtc will not respond to that, they are not doing any better either.

ecnalubma

sr. member

Activity: 1540

Merit: 420

www.Artemis.co

Probably its due to users unsafe internet behaviour. As much as possible I don’t store my crypto assets in single wallet, its better to divide funds in different wallets its free and we should take advantage of it. Even the pros are unsafe these days one wrong move could really devastating when someone got hacked.

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Quote from: lovesmayfamilis on May 07, 2021, 10:13:33 AM

A recent post on reddit.com sounds about a request to check wallets, as hackers have withdrawn more than $1.1 million in Ethereum over the past 48 hours.

Wow! That's a whole lot of ETH!

Based on etherscan, I noticed that the hacker started moving coins today, and some of his transactions are linked to the HitBTC exchange. Maybe some of the victims should contact their support to freeze funds if that is still possible.

herurist

sr. member

Activity: 1680

Merit: 259

Hackers always have a way of erasing their tracks by going to a variety of different addresses and hoarding them over a period of time. so it's really hard to trace how we found out his identity. random attacks on Reddit so that anyone who stumbles upon Malware can't remember exactly when they accessed it.

ryzaadit

legendary

Activity: 2660

Merit: 1261

Quote from: DaMut on May 07, 2021, 10:43:24 AM

The user is not a beginner and knows all the storage security measures.[/b]
Only a beginner that would fall for those trick unlike these people, they know security measures.

Did you read the Reddit?

Yes, he knows how to store the seed but he does not explain his activity only know he does not download any apps to his phone but you don't know using AMM Exchange doesn't need apps you only need a browser + connected your wallet.

And do you know how DNS Hijack works? you are visiting the legit site but since the site got DNS Hijack you are redirected from a real website into a phishing website this hacked is more dangerous than just regular phising. Even you as a person are not a beginner you still can get phishing because of this, let me bet after you clicked a link from your bookmark you will not check twice because you feel like the bookmark link is already the right link.

pealr12

hero member

Activity: 1946

Merit: 502

Quote from: lovesmayfamilis on May 07, 2021, 10:13:33 AM

A recent post on reddit.com sounds about a request to check wallets, as hackers have withdrawn more than $1.1 million in Ethereum over the past 48 hours.

https://www.reddit.com/r/dogecoin/comments/n676ko/warning_please_help_us_to_find_out_how_eth_is/

The user is not a beginner and knows all the storage security measures. But he and other victims as well cannot understand the reason why their Ethereum being withdrawn.
Are there any victims among members of the forum?
According to the telegram channel @gfoundinshit, there is a leak from Apple devices, since all complaints come from the owners of these devices.

that's huge! hackers don't let any slight opportunity slip by without utilizing it to the maximum, i hope all forum members can get to read this post and check their wallet to see if they fall victim, am still wondering what exactly was leaked in the device that lead to this, i guessing those apple users who have nothing to do with crypto won't be affected.

kryptqnick

legendary

Activity: 3248

Merit: 1402

Join the world-leading crypto sportsbook NOW!

Wow, that's a big robbery. If Apple is to blame, I hope some class-action lawsuit will be out in place, and the company will pay out the losses to the victims.
Luckily, I don't store any ETH, but I lost 0.6 ETH years ago to a hack as well. I was a newbie back then, though, so I've made a mistake of hodling my money in an online wallet that used to be popular back then, but with no access to private keys or anything.
Anyway, I hope the current story will receive a satisfying follow-up.
What's weird for me is that the post about ETH is on dogecoin Subreddit. If you didn't say this person weren't a noob, I would have certainly believed otherwise.

DaMut

sr. member

Activity: 1274

Merit: 263

Quote from: ryzaadit on May 07, 2021, 10:32:30 AM

Hard to be check, there has several reason:
- Connecting wallet to such random website, because some type airdrop like UNISWAP
- Malware
- DNS Hijack

The one is really dangerous "DNS Hijack" because you can redirect to a phishing website even you visit the right URL and most of users who bookmarks and saves the website still can get this.

In not wrong, Pancake Swap is also one of the target of "DNS Hijack".

The user is not a beginner and knows all the storage security measures.
Only a beginner that would fall for those trick unlike these people, they know security measures. either it is because of sim swap or something more advanced that we do not know of, since technology keeps advancing.

another extra, we should not exclude the possibility of fault in their software since I have been hearing a lot of these things but on different network.

Ucy

sr. member

Activity: 2674

Merit: 403

Compare rates on different exchanges & swap.

Hope people stopped storing and controlling huge amount of coins with a single private keys. I don't even like the idea of coins controlled by single secret phrases either. If you have $10,000 worth of coins or huge amounts of coins you can't afford to lose, splitting it into multiple parts and have each part have its own unique private keys, then store the keys safely. Splitting the coin can help alot.
And it's important to do the splitting on secure devices.

ryzaadit

legendary

Activity: 2660

Merit: 1261

Quote from: lovesmayfamilis on May 07, 2021, 10:13:33 AM

-snip-

Hard to be check, there has several reason:
- Connecting wallet to such random website, because some type airdrop like UNISWAP
- Malware
- DNS Hijack

The one is really dangerous "DNS Hijack" because you can redirect to a phishing website even you visit the right URL and most of users who bookmarks and saves the website still can get this.

In not wrong, Pancake Swap is also one of the target of "DNS Hijack".

lovesmayfamilis

legendary

Activity: 2072

Merit: 4265

✿♥‿♥✿

A recent post on reddit.com sounds about a request to check wallets, as hackers have withdrawn more than $1.1 million in Ethereum over the past 48 hours.

https://www.reddit.com/r/dogecoin/comments/n676ko/warning_please_help_us_to_find_out_how_eth_is/

The user is not a beginner and knows all the storage security measures. But he and other victims as well cannot understand the reason why their Ethereum being withdrawn.
Are there any victims among members of the forum?
According to the telegram channel @gfoundinshit, there is a leak from Apple devices, since all complaints come from the owners of these devices.

Topic: Hackers steal Ethereum, who is hurt? (Read 203 times)