Hacking | Bitcointalksearch.org

peonminer

hero member

Activity: 798

Merit: 531

Crypto is King.

Quote from: elda34b on February 28, 2019, 12:26:48 AM

Quote from: peonminer on February 25, 2019, 05:37:48 PM

additionally you can password encrypt your wallet file for added security

That might be useful to protect your wallet if the hacker steals your wallet dat. But if he got your seed, just like what happened to OP if my understanding is correct, then this is pretty much meaningless. Not saying that this is bad, but just know that making sure you use the correct software is more important that building a strong password for your wallet.

Thanks for that knowledge. I was seriously wondering just this. This will hopefully help others realize that you must verify each download of Electrum with the PGP signature of the ThomasV.

elda34b

sr. member

Activity: 910

Merit: 351

Quote from: peonminer on February 25, 2019, 05:37:48 PM

additionally you can password encrypt your wallet file for added security

That might be useful to protect your wallet if the hacker steals your wallet dat. But if he got your seed, just like what happened to OP if my understanding is correct, then this is pretty much meaningless. Not saying that this is bad, but just know that making sure you use the correct software is more important that building a strong password for your wallet.

peonminer

hero member

Activity: 798

Merit: 531

Crypto is King.

Can confirm you must learn how to verify the PGP signature on the download of the wallet! I just learned this vital process. It took maybe 30 mins or so to go through everything from verifying the SHA1 of the gpg progam, then you obtain ThomasV's pgp sig and footprint from electrum's website, then you must verify this against the signature for the .exe download of the wallet. All of the info on how to do this can be found on their website https://electrum.org/#download

additionally you can password encrypt your wallet file for added security

Harlot

hero member

Activity: 1806

Merit: 672

Quote from: m4ttl30 on February 13, 2019, 03:41:35 PM

I had the same thing happen to me as others have said. When using electrum a message appeared saying I need to update the app. Then after redownloading I saw my funds had been sent to another account.

Sorry about that you have been a victim of the message being sent to old versions of electrum asking to update your app with their own version of electrum, once you have added your private key to their own version your BTC is good as gone. They have announced it on their website that hackers somehow have been able to broadcast their own message for older versions of their software, I believe you can do anything to be able to retrieve it back as it might be transferred to a dozen addresses by now.

Morarity

newbie

Activity: 35

Merit: 0

Quote from: m4ttl30 on February 13, 2019, 02:53:20 PM

I believe I have been hacked. Is there anyway I can get my money back? It’s a lot of money just to lose!

This electrum vulnerability has been discussed and solved as of now the funds are stolen once you receive an update about electrum to the specific server in question and if you update kiss goodbye to your bitcoin it starts automating transaction in favor to the person responsible for the hacking and you can't do anything about it.

Quote from: jackg on February 13, 2019, 03:38:45 PM

Check addresses on a block explorer like btc.com to confirm if you've been hacked from a bitcoin wallet.

If an exchange account has been hacked, contact their support. It would be helpful if you could go into more detail. It's like asking us how to tell if you've turned your computer on...

The only thing you can do is to track the address in which your funds went and make a note of that in as many exchange or service as possibly you can.
It is always secure to practice updating electrum on the main website in which you can always verify the signature thus even if the website electrum.org is compromise you can still know if hash is strange because hackers can't generate a valid GPG/PGP for the updated version they deploy on the website.

Lastly don't use copy pasting when surfing to a website always type in the URL bar.

Heisenberg_Hunter

legendary

Activity: 1584

Merit: 1280

Heisenberg Design Services

Quote from: m4ttl30 on February 13, 2019, 03:57:21 PM

Yeh wish I’d know not to before though. I’m guessing there’s nothing I can do about it now?

This was a known serious vulnerability in electrum which was warned well before by developers and users on git. Since electrum is a SPV wallet, it relies on other trusted electrum servers while broadcasting transactions. If your transaction is notified by a malicious server run by a hacker it would display a false message to download a new wallet. Upgrading to newer versions of electrum will limit the displaying of such phishing messages but they would be displayed anyway. Anyway versions older than 3.3.3 are more vulnerable to such attacks and would have a high possibility of getting such messages.

Info from git : https://github.com/spesmilo/electrum/issues/4968

If you are a regular cryptocurrency user, you need to keep track of what is happening around you in the technical stuff. Failing that, you will lose your money. Note that, there are electrum forks for Dash and other small coins. Those forked wallet should also be affected. Also if you have downloaded a new upgrade, kindly verify the PGP key of ThomasV to check for original versions of electrum.

nc50lc

legendary

Activity: 2534

Merit: 6080

Self-proclaimed Genius

Quote from: m4ttl30 on February 13, 2019, 03:57:21 PM

Yeh wish I’d know not to before though. I’m guessing there’s nothing I can do about it now?

Your coins were gone for good, the only thing you can do is to collaborate with the other victims for a possible police investigation to the whereabouts of the culprit.
But the chance that you'll get back the funds is too slim or unrealistic, specially after weeks and months.

jackg

copper member

Activity: 2856

Merit: 3071

https://bit.ly/387FXHi lightning theory

Unless they find out who stole them. Check your address is definitely empty and that the transaction is confirmed. Then delete the wallet if you have the seed written down. You might want to keep hold of the seed just in case they find the hacker.

m4ttl30

newbie

Activity: 3

Merit: 0

Quote from: jackg on February 13, 2019, 03:47:37 PM

Quote from: m4ttl30 on February 13, 2019, 03:41:35 PM

Quote from: wakedog on February 13, 2019, 03:05:11 PM

Why do you believe you've been 'hacked'? Have you found coins/funds missing from a wallet?

I had the same thing happen to me as others have said. When using electrum a message appeared saying I need to update the app. Then after redownloading I saw my funds had been sent to another account.

If you downloaded from anywhere but electrum.org then most likely.

You should never download anything if you get a warning like this. It could be a developer scamming at best.

Yeh wish I’d know not to before though. I’m guessing there’s nothing I can do about it now?

jackg

copper member

Activity: 2856

Merit: 3071

https://bit.ly/387FXHi lightning theory

Quote from: m4ttl30 on February 13, 2019, 03:41:35 PM

Quote from: wakedog on February 13, 2019, 03:05:11 PM

Why do you believe you've been 'hacked'? Have you found coins/funds missing from a wallet?

I had the same thing happen to me as others have said. When using electrum a message appeared saying I need to update the app. Then after redownloading I saw my funds had been sent to another account.

If you downloaded from anywhere but electrum.org then most likely.

You should never download anything if you get a warning like this. It could be a developer scamming at best.

m4ttl30

newbie

Activity: 3

Merit: 0

Quote from: wakedog on February 13, 2019, 03:05:11 PM

Why do you believe you've been 'hacked'? Have you found coins/funds missing from a wallet?

I had the same thing happen to me as others have said. When using electrum a message appeared saying I need to update the app. Then after redownloading I saw my funds had been sent to another account.

jackg

copper member

Activity: 2856

Merit: 3071

https://bit.ly/387FXHi lightning theory

Check addresses on a block explorer like btc.com to confirm if you've been hacked from a bitcoin wallet.

If an exchange account has been hacked, contact their support. It would be helpful if you could go into more detail. It's like asking us how to tell if you've turned your computer on...

wakedog

newbie

Activity: 6

Merit: 5

Why do you believe you've been 'hacked'? Have you found coins/funds missing from a wallet?

m4ttl30

newbie

Activity: 3

Merit: 0

I believe I have been hacked. Is there anyway I can get my money back? It’s a lot of money just to lose!

Topic: Hacking (Read 444 times)