I was hacked (1170btc stolen) - 500btc max BOUNTY - page 9.

JorgeStolfi

hero member

Activity: 910

Merit: 1003

Quote from: The Avenger on July 15, 2014, 06:16:04 PM

4. Lesson learned.
Give him 10% and step 4 is not going to happen.

Bingo!

It sems hard to get honest people interested in bitcoin; but every scammer and crook in the world who learns a bit about bitcoin imemdiately falls in love with it. Why risk going to jail stealing credit cards, or selling bogus insurance by mail, when they can scam bitcoiners and steal bitcoins, with no worse risk than having their (probably fake) identity exposed and execrated on some obscure forum?

If bank robbers could get off the hook by returning 90% of their loot, or even 150% but only on 50% of their attempts, there would be no banks.

roslinpl

legendary

Activity: 2212

Merit: 1199

As for now it is mixing ...

biggest amounts are here for now:

https://blockchain.info/pl/address/15P9sq42ZP1K8L6B1Us6XaQzhHj7W8T3mK
https://blockchain.info/pl/address/1MicFuhMVvmVcDeLBpujQXN679CrMsKZk3

AT101ET

legendary

Activity: 3066

Merit: 1348

Can someone please post all the info in one post?
Kind of messy jumping between the two threads.

So, what I understand so far;

Password to wallets stored on DB.
DB password hacked?
BTC+NXT withdrawn.
3M NXT held up by Bter - 7M NXT still 'lost'
1700 BTC sent to bitmixer.io
467 BTC returned.
Bounty reopened.

Now, how did the hacker get in contact with Klee?
Does Klee/anyone else know anything about the hacker?

BurtW

legendary

Activity: 2646

Merit: 1136

All paid signature campaigns should be banned.

Quote from: Xdice on July 15, 2014, 06:30:59 PM

Wow, how is this even allowed by bitmixer.io? They know it's stolen coins so why are they participating in this crime

This topic has been cussed and discussed many times within these two threads. Please read both threads.

https://bitcointalk.org/index.php?topic=686275.0;topicseen
https://bitcointalk.org/index.php?topic=690353.0;topicseen

Also, as stated, trying to trace the coins through the mixer is a total waste of time.

The Avenger

hero member

Activity: 798

Merit: 1000

Quote from: BitCoinDream on July 15, 2014, 06:55:48 PM

Oh I see !!! Is it possible to trace back from other addresses from https://blockchain.info/address/1EK1g5x9hmMN36G2PiXsWj2Smo4uzD35vm ?

Moreover, a fixed payment is required to Bitmixer as they said themself said. Can this lead us somewhere ?

Well those are the coins bitmixer gave the hacker, so they are already - if you like - pre-mixed. Tracing them back will probably just lead you to other thefts, but not to klee's coins. Mixing breaks the connection.

Anyone using bitmixer in the future will probably be getting chunks of klee's stolen coins. And so on.

In bitmixer's own thread, the owner is talking about disposing of their dirty coins by selling them on an exchange and buying back clean coins, with no traces to thefts bitmixer assisted. So again, bitmixers criminal intents and that they provide a money laundering service is pretty clear.

BitCoinDream

legendary

Activity: 2282

Merit: 1204

The revolution will be digital

Quote from: The Avenger on July 15, 2014, 06:27:58 PM

Quote from: BitCoinDream on July 15, 2014, 06:23:24 PM

539 at https://blockchain.info/address/14DZ3Yjb39sDTMwKd19Ly4PK15BKZfLXWZ is now standing here after lots of small distribution in each Tx => https://blockchain.info/address/1NyhkPzBNVGHU7URt9qL1M4Hb34EeqYry3

But why is he spreading this into small ?

The hacker has already been given new bitcoins by bitmixer.

These are the original stolen coins still going through bitmixer's mixer and being split into smaller parts. It's a slow process because after each split it needs to wait for confirmations. Which is probably one of the good reasons for 10 minute block times Cheesy

If you refresh that page on blockchain in another hour or so, it'll have been split once or twice more.

You can tell it's all scripted, as each split happens at either 02, 03 or 04 seconds into a new minute.

The time needs to be more random, so it doesn't look scripted. I'm sure bitmixer will be sending me a tip for pointing out a way to improve their code Cheesy

N.B. ^ That is a joke, don't bother thx

Oh I see !!! Is it possible to trace back from other addresses from https://blockchain.info/address/1EK1g5x9hmMN36G2PiXsWj2Smo4uzD35vm ?

Moreover, a fixed payment is required to Bitmixer as they said themself said. Can this lead us somewhere ?

onezerobit

member

Activity: 112

Merit: 10

Quote from: horcoff on July 15, 2014, 05:00:47 PM

someone know what it means?

Please, send email here
1) Ycipgt!Rctukhcn@Dggvjqxgp#Hkfgnkq$Iockn%& - it u Gmail pass

I think google recently added a feature where the IP address from where the account was accessed is logged.

This probably should be the link to take you there.
https://security.google.com/settings/security/activity?pli=1

Xdice

newbie

Activity: 7

Merit: 0

Wow, how is this even allowed by bitmixer.io? They know it's stolen coins so why are they participating in this crime

The Avenger

hero member

Activity: 798

Merit: 1000

Quote from: BitCoinDream on July 15, 2014, 06:23:24 PM

539 at https://blockchain.info/address/14DZ3Yjb39sDTMwKd19Ly4PK15BKZfLXWZ is now standing here after lots of small distribution in each Tx => https://blockchain.info/address/1NyhkPzBNVGHU7URt9qL1M4Hb34EeqYry3

But why is he spreading this into small ?

The hacker has already been given new bitcoins by bitmixer.

These are the original stolen coins still going through bitmixer's mixer and being split into smaller parts. It's a slow process because after each split it needs to wait for confirmations. Which is probably one of the good reasons for 10 minute block times Cheesy

If you refresh that page on blockchain in another hour or so, it'll have been split once or twice more.

You can tell it's all scripted, as each split happens at either 02, 03 or 04 seconds into a new minute.

The time needs to be more random, so it doesn't look scripted. I'm sure bitmixer will be sending me a tip for pointing out a way to improve their code Cheesy

N.B. ^ That is a joke, don't bother thx

WootKung

newbie

Activity: 46

Merit: 0

Quote from: The Avenger on July 15, 2014, 06:16:04 PM

Quote from: RocketSingh on July 15, 2014, 05:42:08 PM

If u return 90% fund within the 24 hours given time to Klee, we wont look for you... we will forget you.

Thereby u retain 10%.

To me, this is wayyy too generous.

A few of us forced a fake hardware seller to return every coin he scammed earlier this year. He had already started to sell the stolen coins. So when we nailed him, he had to buy them back for more in order to complete the refunds.

The scammer ended up out of pocket and his scam ultimately cost HIM a lot of money Cheesy

I think this should be your aim with this punk:

1. Steals coins.
2. Has a nightmare time and bad dreams.
3. Returns coins, incurring cost that leaves him out of pocket.
4. Lesson learned.

Give him 10% and step 4 is not going to happen.

Maybe add one thing - if the scammer doesn't pay back 90% in 24 hours, either 105% back after that time or 100% back AND a long stint inside, with no mercy regarding any situation he may be in? The asshat needs to lose something other than sleep over this crime. Otherwise his pussy will be sore for a week and then he'll go back to doing it again.

lol, ultimate justice. thread?

BitCoinDream

legendary

Activity: 2282

Merit: 1204

The revolution will be digital

Quote from: BurtW on July 11, 2014, 07:19:09 PM

The coins have moved again, they are now here:

410 at https://blockchain.info/address/16j6RQrJc3cyGEqe6BtApXkoNZ4Yy5z5Wo
221 at https://blockchain.info/address/17eHmNKr6Cb1U4uBhcnfs3iwWKsZGtRLaV
539 at https://blockchain.info/address/14DZ3Yjb39sDTMwKd19Ly4PK15BKZfLXWZ

Plus some of my tag BTC was moved through here:

https://blockchain.info/address/19J9DgHUUXh4Kwq1bN2tXbbZpVywBeV1oG

to:

https://blockchain.info/address/1GRFNTyLwoyQnk7S3MFFAz5qPkdWp7YSoY

which is an interesting address with 5,095.70255455 BTC, the address is mentioned in this article:

http://www.deepdotweb.com/2014/02/20/here-is-the-stolen-silk-road-wallet/

539 at https://blockchain.info/address/14DZ3Yjb39sDTMwKd19Ly4PK15BKZfLXWZ is now standing here after lots of small distribution in each Tx => https://blockchain.info/address/1NyhkPzBNVGHU7URt9qL1M4Hb34EeqYry3

But why is he spreading this into small ?

The Avenger

hero member

Activity: 798

Merit: 1000

Quote from: RocketSingh on July 15, 2014, 05:42:08 PM

If u return 90% fund within the 24 hours given time to Klee, we wont look for you... we will forget you.

Thereby u retain 10%.

To me, this is wayyy too generous.

A few of us forced a fake hardware seller to return every coin he scammed earlier this year. He had already started to sell the stolen coins. So when we nailed him, he had to buy them back for more in order to complete the refunds.

The scammer ended up out of pocket and his scam ultimately cost HIM a lot of money Cheesy

I think this should be your aim with this punk:

1. Steals coins.
2. Has a nightmare time and bad dreams.
3. Returns coins, incurring cost that leaves him out of pocket.
4. Lesson learned.

Give him 10% and step 4 is not going to happen.

Maybe add one thing - if the scammer doesn't pay back 90% in 24 hours, either 105% back after that time or 100% back AND a long stint inside, with no mercy regarding any situation he may be in? The asshat needs to lose something other than sleep over this crime. Otherwise his pussy will be sore for a week and then he'll go back to doing it again.

Bonus: If it isn't returned in 24 hours, then of course, as someone suggested in the other thread, everything mentioned above AND his identity will have to be exposed.

klee

legendary

Activity: 1498

Merit: 1000

Quote from: WootKung on July 15, 2014, 06:05:09 PM

Quote from: RocketSingh on July 15, 2014, 05:42:08 PM

A small heads up for you Mr. 'Hacker'.

Now u know we are close... here is a little good news for you !!!

If u return 90% fund within the 24 hours given time to Klee, we wont look for you... we will forget you.

Thereby u retain 10%.

But, if u dont, we'll use that 10% to go for the law enforcement to find u with the information we have.

It is your call. 24 hours. Thank You !!!

hey mr hacker,

look we even got this guy speaking on everyones behalf

u better be sooper scared now brah

right brah?

brah?

brah.....

he is the one who found him brah Kiss

WootKung

newbie

Activity: 46

Merit: 0

Quote from: RocketSingh on July 15, 2014, 05:42:08 PM

A small heads up for you Mr. 'Hacker'.

Now u know we are close... here is a little good news for you !!!

If u return 90% fund within the 24 hours given time to Klee, we wont look for you... we will forget you.

Thereby u retain 10%.

But, if u dont, we'll use that 10% to go for the law enforcement to find u with the information we have.

It is your call. 24 hours. Thank You !!!

hey mr hacker,

look we even got this guy speaking on everyones behalf

u better be sooper scared now brah

right brah?

brah?

brah.....

RocketSingh

legendary

Activity: 1662

Merit: 1050

A small heads up for you Mr. 'Hacker'.

Now u know we are close... here is a little good news for you !!!

If u return 90% fund within the 24 hours given time to Klee, we wont look for you... we will forget you.

Thereby u retain 10%.

But, if u dont, we'll use that 10% to go for the law enforcement to find u with the information we have.

It is your call. 24 hours. Thank You !!!

klee

legendary

Activity: 1498

Merit: 1000

Quote from: s1lverbox on July 15, 2014, 05:11:49 PM

Quote from: WootKung on July 15, 2014, 05:02:34 PM

Please, send email here
1) Ycipgt!Rctukhcn@Dggvjqxgp#Hkfgnkq$Iockn%& - it u Gmail pass

Did you remembered this pass or copy/paste?

Great news that you have some of BTC back. Still 2/3 missing though.

copy/paste

s1lverbox

legendary

Activity: 2310

Merit: 1039

Quote from: WootKung on July 15, 2014, 05:02:34 PM

Please, send email here
1) Ycipgt!Rctukhcn@Dggvjqxgp#Hkfgnkq$Iockn%& - it u Gmail pass

Did you remembered this pass or copy/paste?

Great news that you have some of BTC back. Still 2/3 missing though.

klee

legendary

Activity: 1498

Merit: 1000

Quote from: monbux on July 15, 2014, 05:10:21 PM

Quote from: klee on July 15, 2014, 05:07:14 PM

It was the gmail pwd he stole from me - only he could know this so he used it as proof he was serious

What - was the gmail password also on the compromised dropbox account!?
Or did he hack more than just your dropbox account?

monbux

legendary

Activity: 1736

Merit: 1024

Quote from: klee on July 15, 2014, 05:07:14 PM

It was the gmail pwd he stole from me - only he could know this so he used it as proof he was serious

What - was the gmail password also on the compromised dropbox account!?
Or did he hack more than just your dropbox account?

klee

legendary

Activity: 1498

Merit: 1000

It was the gmail pwd he stole from me - only he could know this so he used it as proof he was serious

Topic: I was hacked (1170btc stolen) - 500btc max BOUNTY - page 9. (Read 35618 times)