I was stolen 1.2 btc at bittrex *without* notification.Needing advice!

grendel25

legendary

Activity: 2296

Merit: 1031

Quote from: MinermanNC on November 02, 2014, 08:06:33 PM

Quote from: hero18688 on October 02, 2014, 01:30:06 AM

Quote from: Umbrella Holdings on October 02, 2014, 01:12:14 AM

Sent. Good luck on your future endeavors and be safe.

Our project, Insured Cryptocurrency: https://bitcointalksearch.org/topic/ann-umbrella-insured-cryptocurrencies-bittrex-litecoin-insurance-687265

Really thankful to you. First thing,my signature is yours.

This is just one example of what kind of person the Umbrella Coin dev is. I have been acquainted with him since the start, and you will not find a more sincere and dedicated developer in the BTC community. Especially amongst coin devs!

Good luck and be careful!! Wink

Support Umbrella!

MMNC

Sure, but in the meanwhile, businesses such as Bittrex and other failed exchanges are severely hindering the success (and value) of cryptocurrency. Insurance after the fact is like South Park's Captain Hindsight.

MinermanNC

legendary

Activity: 2198

Merit: 1000

Quote from: hero18688 on October 02, 2014, 01:30:06 AM

Quote from: Umbrella Holdings on October 02, 2014, 01:12:14 AM

Sent. Good luck on your future endeavors and be safe.

Our project, Insured Cryptocurrency: https://bitcointalksearch.org/topic/ann-umbrella-insured-cryptocurrencies-bittrex-litecoin-insurance-687265

Really thankful to you. First thing,my signature is yours.

This is just one example of what kind of person the Umbrella Coin dev is. I have been acquainted with him since the start, and you will not find a more sincere and dedicated developer in the BTC community. Especially amongst coin devs!

Good luck and be careful!! Wink

Support Umbrella!

MMNC

cassius69

sr. member

Activity: 280

Merit: 250

dudes, generate a 32 character salt password for every login. it can help cut down on this bs.

grendel25

legendary

Activity: 2296

Merit: 1031

My account at Bittrex got hacked too. I just sent in a ticket to see if their support can do anything.

I lost just shy of .6 BTC.

It's really shitty... such a petty theft. I barely get any BTC and some asshole has to skim half of what I've managed to accumulate over several months.

No wonder BTC and crypto in general is such shit value these days. Secure? Bullshit.

ellave

sr. member

Activity: 434

Merit: 250

My Bittrex account also got hacked a few months ago, similar thing, their support didn't seem to care have stopped using them since

https://bitcointalksearch.org/topic/m.7961954

armin22

sr. member

Activity: 252

Merit: 250

Quote from: Umbrella Holdings on October 02, 2014, 04:09:03 PM

Quote from: hero18688 on October 02, 2014, 01:30:06 AM

Quote from: Umbrella Holdings on October 02, 2014, 01:12:14 AM

Sent. Good luck on your future endeavors and be safe.

Our project, Insured Cryptocurrency: https://bitcointalksearch.org/topic/ann-umbrella-insured-cryptocurrencies-bittrex-litecoin-insurance-687265

Really thankful to you. First thing,my signature is yours.

No problem. We were happy to reimburse your losses. This is just a small example of what we are about.

Thanks for the signature spot!

Wow, iam just amazed to see acts like this in crypto

Amph

legendary

Activity: 3248

Merit: 1070

the problem if always one

your pc is infected, nothing else, no way they could bruteforce your account and go through 2fa like nothing

Umbrella Holdings

sr. member

Activity: 630

Merit: 252

Quote from: hero18688 on October 02, 2014, 01:30:06 AM

Quote from: Umbrella Holdings on October 02, 2014, 01:12:14 AM

Sent. Good luck on your future endeavors and be safe.

Our project, Insured Cryptocurrency: https://bitcointalksearch.org/topic/ann-umbrella-insured-cryptocurrencies-bittrex-litecoin-insurance-687265

Really thankful to you. First thing,my signature is yours.

No problem. We were happy to reimburse your losses. This is just a small example of what we are about.

Thanks for the signature spot!

b00s624

sr. member

Activity: 322

Merit: 250

-----------✄----------

Use linux or reinstall windows

minerpools

hero member

Activity: 574

Merit: 500

( ͡° ͜ʖ ͡°)

Quote from: hero18688 on October 01, 2014, 06:24:51 AM

Right now I am needing some advice:
1、Should I continue using the same account on bittrex and cryptsy.Password changed of course.
2、Finding a suitable antivirus or security apps for miners and altcoin traders.Some apps like to report mining programs or wallets as virus,trojan.

1. If you can, create new accounts.
2. Use linux.

RD965

hero member

Activity: 532

Merit: 500

I know how that feels Sad

exactly for the same amount so 1.2BTC lost, feels bad but youll be fine

b00s624

sr. member

Activity: 322

Merit: 250

-----------✄----------

Sorry for your lost,fucking hackers Undecided

hero18688

sr. member

Activity: 392

Merit: 250

Quote from: Umbrella Holdings on October 02, 2014, 01:12:14 AM

Sent. Good luck on your future endeavors and be safe.

Our project, Insured Cryptocurrency: https://bitcointalksearch.org/topic/ann-umbrella-insured-cryptocurrencies-bittrex-litecoin-insurance-687265

Really thankful to you. First thing,my signature is yours.

Umbrella Holdings

sr. member

Activity: 630

Merit: 252

Sent. Good luck on your future endeavors and be safe.

Our project, Insured Cryptocurrency: https://bitcointalksearch.org/topic/ann-umbrella-insured-cryptocurrencies-bittrex-litecoin-insurance-687265

travis72682

full member

Activity: 168

Merit: 100

Quote from: hero18688 on October 02, 2014, 12:35:29 AM

Quote from: Umbrella Holdings on October 01, 2014, 11:42:45 PM

As a show of good faith, Umbrella Cryptocurrencies will reimburse your losses. Also, follow the security tips provided by the community.

PM me your ULTC address.

2346.04 ULTC = 1.2BTC

Thanks!

PMed.If so,You save my day

Wow, if you dont use their site from here on you should be ashamed of yourself. BTW I lost some btc also... I wasnt hacked just made some stupid trades though Tongue

But seriously if he pays you over a bitcoin you should do your best to advertise at the least for this guy...

edit: does he not have a site? Dev of a coin? Whatever he is involved in you should use it Tongue

hero18688

sr. member

Activity: 392

Merit: 250

Quote from: Umbrella Holdings on October 01, 2014, 11:42:45 PM

As a show of good faith, Umbrella Cryptocurrencies will reimburse your losses. Also, follow the security tips provided by the community.

PM me your ULTC address.

2346.04 ULTC = 1.2BTC

Thanks!

PMed.If so,You save my day

majeis

sr. member

Activity: 448

Merit: 250

It's been a while since one of these threads rolled around. Kind of surprised that a mod didn't move this somewhere else, but I guess that this is indeed the popcorn section of the forums.

Umbrella Holdings

sr. member

Activity: 630

Merit: 252

As a show of good faith, Umbrella Cryptocurrencies will reimburse your losses. Also, follow the security tips provided by the community.

PM me your ULTC address.

2346.04 ULTC = 1.2BTC

Thanks!

Crypto-in-tha-blood

full member

Activity: 140

Merit: 100

2FA is the only way to go. Turn that shit on.

InitialDat

sr. member

Activity: 252

Merit: 250

Quote from: fox19891989 on October 01, 2014, 08:53:18 PM

Quote from: hero18688 on October 01, 2014, 06:30:55 AM

Quote from: david1365 on October 01, 2014, 06:28:56 AM

Did u try turn on 2FA?

With 2FA still has risk of being stole at bittrex.Someone has reported this fact
http://highoncoins.com/cryptocurrency-trading-tips/do-not-use-two-factor-authenticatoin-with-bittrex/

https://bitcointalksearch.org/topic/lost-5btc-from-bittrex-exchange-hacker-stolen-770522

so you turned off 2FA because of risk?

I lol'ed.

igl00

full member

Activity: 231

Merit: 100

bittrex is a sucky exchange but it raced cryptsy and poloniex

Viecoin

hero member

Activity: 852

Merit: 500

I have gotten emails on potential break in attempts on multiple exchages. Won't get anything but shitcoin dust if they were to get In. But as a precaution, all of my logins have 2fa. I'm a cloud architect and heavily guarded by Sophos next gen endpoint protection on all my machines.

hero18688

sr. member

Activity: 392

Merit: 250

Quote from: bathrobehero on October 01, 2014, 09:05:37 PM

Quote from: hero18688 on October 01, 2014, 09:03:28 PM

Quote from: acs267 on October 01, 2014, 11:54:35 AM

Haven't this happened before, but on Cryptsy I think? Some person's account got hacked and the thief actually was able to take over their computer, or something like that. Didn't touch their E-Mail to make it less suspicious. Converted all of their coins into BlackCoin I think and sold them for sats.

Just found I was fucked at cryptsy,too.But comparatively small since I rarely visit there.

Check your email's last login details.

I've located his ip is within Utah State University Information Technology.What should I do next.

bathrobehero

legendary

Activity: 2002

Merit: 1051

ICO? Not even once.

Quote from: hero18688 on October 01, 2014, 09:03:28 PM

Quote from: acs267 on October 01, 2014, 11:54:35 AM

Haven't this happened before, but on Cryptsy I think? Some person's account got hacked and the thief actually was able to take over their computer, or something like that. Didn't touch their E-Mail to make it less suspicious. Converted all of their coins into BlackCoin I think and sold them for sats.

Just found I was fucked at cryptsy,too.But comparatively small since I rarely visit there.

Check your email's last login details.

hero18688

sr. member

Activity: 392

Merit: 250

Quote from: acs267 on October 01, 2014, 11:54:35 AM

Haven't this happened before, but on Cryptsy I think? Some person's account got hacked and the thief actually was able to take over their computer, or something like that. Didn't touch their E-Mail to make it less suspicious. Converted all of their coins into BlackCoin I think and sold them for sats.

Just found I was fucked at cryptsy,too.But comparatively small since I rarely visit there.

fox19891989

hero member

Activity: 840

Merit: 1000

Quote from: hero18688 on October 01, 2014, 06:30:55 AM

Quote from: david1365 on October 01, 2014, 06:28:56 AM

Did u try turn on 2FA?

With 2FA still has risk of being stole at bittrex.Someone has reported this fact
http://highoncoins.com/cryptocurrency-trading-tips/do-not-use-two-factor-authenticatoin-with-bittrex/

https://bitcointalksearch.org/topic/lost-5btc-from-bittrex-exchange-hacker-stolen-770522

so you turned off 2FA because of risk?

acs267

hero member

Activity: 644

Merit: 500

Haven't this happened before, but on Cryptsy I think? Some person's account got hacked and the thief actually was able to take over their computer, or something like that. Didn't touch their E-Mail to make it less suspicious. Converted all of their coins into BlackCoin I think and sold them for sats.

mecc

newbie

Activity: 34

Merit: 0

You can use winauth on an offline laptop or netbook. You can also run it with wine.

https://code.google.com/p/winauth/
http://askubuntu.com/questions/177192/how-do-i-create-a-32-bit-wine-prefix

wine 32 prefix is something you have to do to run it in linux if that's your preferred OS

itsAj

hero member

Activity: 588

Merit: 500

You have a keylogger or trojan on your computer. You must format.

bathrobehero

legendary

Activity: 2002

Merit: 1051

ICO? Not even once.

Quote from: KidCrypto on October 01, 2014, 11:17:20 AM

Quote from: bathrobehero on October 01, 2014, 11:12:40 AM

Quote from: KidCrypto on October 01, 2014, 10:43:31 AM

I went to set up 2FA but I do not have a mobile device. Are you required to have a mobile device to set 2FA up? I can't seem to find any other way.

There are tools for PC that does the same thing although that kind of defeats the purpose because if your PC get compromised the attacker can use that tool just as well. At the very least you should use similar tools from another PC physically, without remote control.

Thanks for your reply.. but I thought 2FA meant I would get an email to confirm before I can log in? So if someone knows my bittrex password they still can't access my account. They would also need my email credentials to verify the login. Does anyone know if this or something similar is this an option with bittrex?

Thank you

Welll, technically 2FA can mean email verification instead of phone verification but that's not what I meant. If your PC got compromised, chances are the attacker also has access to your e-mail account as well which means you're done and he can do whatever he want. I lost my fair share because of my own stupidity and I went through the hoops with the support of an exchange but I can't really blame them for this kind of situations. My PC got compromised with certain passwords saved among an email address without phone 2FA so really, I kind of deserved what I got and I'm just glad that I haven't lost everything. 2FA, sandbox/VM is a must.

Edit:

Quote from: ?? on ??

Technically, you could probably run Google Auth on your desktop, but you would need to use Android emulation software.

There are tools like WinAuth which does the same thing without the need to emulate android. But do not use it on your main PC as it defeats the purpose.

KidCrypto

sr. member

Activity: 294

Merit: 250

Quote from: bathrobehero on October 01, 2014, 11:12:40 AM

Quote from: KidCrypto on October 01, 2014, 10:43:31 AM

I went to set up 2FA but I do not have a mobile device. Are you required to have a mobile device to set 2FA up? I can't seem to find any other way.

There are tools for PC that does the same thing although that kind of defeats the purpose because if your PC get compromised the attacker can use that tool just as well. At the very least you should use similar tools from another PC physically, without remote control.

Thanks for your reply.. but I thought 2FA meant I would get an email to confirm before I can log in? So if someone knows my bittrex password they still can't access my account. They would also need my email credentials to verify the login. Does anyone know if this or something similar is this an option with bittrex?

Thank you

hero18688

sr. member

Activity: 392

Merit: 250

Quote from: Amph on October 01, 2014, 10:46:00 AM

checks your rig/pc, it's infected for sure

I have installed eset security long ago and keeping update.Which antivirus program are you recommending.I've tried others but they like to report wallet/miner as virus.

bathrobehero

legendary

Activity: 2002

Merit: 1051

ICO? Not even once.

Quote from: KidCrypto on October 01, 2014, 10:43:31 AM

I went to set up 2FA but I do not have a mobile device. Are you required to have a mobile device to set 2FA up? I can't seem to find any other way.

There are tools for PC that does the same thing although that kind of defeats the purpose because if your PC get compromised the attacker can use that tool just as well. At the very least you should use similar tools from another PC physically, without remote control.

hero18688

sr. member

Activity: 392

Merit: 250

Quote from: Jerrietg on October 01, 2014, 10:59:52 AM

have you contact bittrex ask the reason , i think they can help you ,

Did you read my post? I already posted the link to my conversion with bittrex.They are helpless!

Jerrietg

sr. member

Activity: 350

Merit: 250

have you contact bittrex ask the reason , i think they can help you ,

Amph

legendary

Activity: 3248

Merit: 1070

checks your rig/pc, it's infected for sure

KidCrypto

sr. member

Activity: 294

Merit: 250

I went to set up 2FA but I do not have a mobile device. Are you required to have a mobile device to set 2FA up? I can't seem to find any other way.

SalimNagamato

legendary

Activity: 924

Merit: 1000

conclusion: don't keep YOUR coins in the exchange. no one is learning from what happened in cryptorush, mintpal, mtgox... ? nothing is 100% secure
send to exchange only when you want to sell/buy.
it will also might give your coins some more value

mishax1

legendary

Activity: 2898

Merit: 1017

I wonder if some more reports will pop up after this..

hero18688

sr. member

Activity: 392

Merit: 250

Quote from: bathrobehero on October 01, 2014, 06:50:39 AM

I noticed other exchanges logging me out if my IP changes, but bittrex doesn't.

Yes.And bittrex allow buying and selling within the same account which is convenient for pump&dumpers but also for hackers.

bathrobehero

legendary

Activity: 2002

Merit: 1051

ICO? Not even once.

Quote from: hero18688 on October 01, 2014, 06:30:55 AM

Quote from: david1365 on October 01, 2014, 06:28:56 AM

Did u try turn on 2FA?

With 2FA still has risk of being stole at bittrex.Someone has reported this fact
http://highoncoins.com/cryptocurrency-trading-tips/do-not-use-two-factor-authenticatoin-with-bittrex/

https://bitcointalksearch.org/topic/lost-5btc-from-bittrex-exchange-hacker-stolen-770522

"Somehow, the hacker was able to get the password of my friend’s account to get access to his Bittrex account. Then, somehow he was able to get the correct code of TFA to withdraw all the money."

I don't think there is an e-mail based 2FA at bittrex (which is useles) and getting through phone based 2FA doesn't just happen. Maybe the attacker stole your browser's already logged in session? I noticed other exchanges logging me out if my IP changes, but bittrex doesn't.

hero18688

sr. member

Activity: 392

Merit: 250

Quote from: david1365 on October 01, 2014, 06:28:56 AM

Did u try turn on 2FA?

With 2FA still has risk of being stole at bittrex.Someone has reported this fact
http://highoncoins.com/cryptocurrency-trading-tips/do-not-use-two-factor-authenticatoin-with-bittrex/

https://bitcointalksearch.org/topic/lost-5btc-from-bittrex-exchange-hacker-stolen-770522

david1365

legendary

Activity: 994

Merit: 1000

Did u try turn on 2FA?

bathrobehero

legendary

Activity: 2002

Merit: 1051

ICO? Not even once.

2FA all day, every day and don't run any executables (wallets/miners/tools) without sandbox or VM.

hero18688

sr. member

Activity: 392

Merit: 250

5 days ago.1.2 btc was stolen from my account at bittrex.I just noticed this yesterday.Because no withdraw notification had sent to my email.I left about 1 btc for trading at bittrex and some altcoins.The motherfucking hacker logged in my account sold all the altcoins for btc and buy Darkcoin with my btc.Then he utilize the BC-DRK market for laundering.There is no withdrawal notification to me.It's much smarter than hacking your account and withdraw all your coins.

I asked bittrex support for help,but they are helpless at all.Form what they said,even with 2FA,there is no guarantee for safety there. The safest way is to withdraw btc from bittrex!
Conversation between me and bittrex owner:
https://bittrex.zendesk.com/hc/en-us/requests/10017

Update:I just found that my cryptsy account has been robbed,too,Lost 0.12btc there.He used sbc-ltc to drain my fund Angry

One thing for sure.I did use different password on both sides.

This is the motherfucking asshole'IP.Maybe a proxy.
129.123.7.6 LOGAN, UTAH, UNITED STATES 2014-09-24 14:18:39 EST

0.5 btc bounty for tracing back my fund.

Right now I am needing some advice:
1、Should I continue using the same account on bittrex and cryptsy.Password changed of course.
2、Finding a suitable antivirus or security apps for miners and altcoin traders.Some apps like to report mining programs or wallets as virus,trojan.

Topic: I was stolen 1.2 btc at bittrex *without* notification.Needing advice! (Read 9662 times)

Topic: I was stolen 1.2 btc at bittrex without notification.Needing advice! (Read 9662 times)