Pages:
Author

Topic: Just had account hacked. Please help :S. - page 2. (Read 11926 times)

jr. member
Activity: 90
Merit: 1
Hello fellow bitcoiners I have recently had my account at an exchange compromised and am out to the tune of tens of thousands. Harsh day to be sure. I realize there is little hope of ever seeing that money again but I would like to investigate this as far as I can. I have the bitcoin address the funds have moved to as well as several IP addresses that were used to carry out the attack. If anyone thinks they can help please message me.

I have changed relevant account information and contacted the exchange. Any suggestions of next steps would be appreciated.
No one can help you with this all you should have to check before that what are you going to do
hero member
Activity: 1218
Merit: 534
Exchanges rarely refund your losses if the hack happens because of your carelessness.  I'm sorry but your money is gone and you need to take this as a learning experience for future security.
mk4
legendary
Activity: 2940
Merit: 3883
📟 t3rminal.xyz
As a junior member, even early one, how come your account was hacked? What for? And if your account be hacked it should not border you much because I know you can't have much in that account. I advice you open another account and continue your life. Just be more  careful with the new account.

If you actually read OP's main post you will immediately know that OP wasn't referring to his Bitcointalk account, but his exchange account. Maybe actually read the whole post first next time.
full member
Activity: 616
Merit: 100
To avoid attacks by many hackers, anticipation for all accounts on the exchange is activated by 2fa and google authenticator. During this time I only use this method. And I think it's still safe.
full member
Activity: 938
Merit: 105
This is very annoyed and sad things happen to OP, hackers nowadays were very smart. If I have a fund in exchange I would rather to a doubled security level system. Putting 2FA authentication and Gmail verifications and other seed phrases before you can withdraw or transfer fund. That's the reason why I did not trust exchange in storing my asset because I believed that once you are not holding your private key then the bitcoin you've stored does not belong to you.
member
Activity: 742
Merit: 21
Be the reason someone smiles today
Hello fellow bitcoiners I have recently had my account at an exchange compromised and am out to the tune of tens of thousands. Harsh day to be sure. I realize there is little hope of ever seeing that money again but I would like to investigate this as far as I can. I have the bitcoin address the funds have moved to as well as several IP addresses that were used to carry out the attack. If anyone thinks they can help please message me.

I have changed relevant account information and contacted the exchange. Any suggestions of next steps would be appreciated.

I'm really sorry for your loss,  mate, but still I don't understand how can people to learn nothing from all happened with exchanges.

The safest way to keep your funds safe is a hardware wallet. Exchanges are just for trading,  not to hold funds for longterm.
Pab
legendary
Activity: 1862
Merit: 1012
Hello fellow bitcoiners I have recently had my account at an exchange compromised and am out to the tune of tens of thousands. Harsh day to be sure. I realize there is little hope of ever seeing that money again but I would like to investigate this as far as I can. I have the bitcoin address the funds have moved to as well as several IP addresses that were used to carry out the attack. If anyone thinks they can help please message me.

I have changed relevant account information and contacted the exchange. Any suggestions of next steps would be appreciated.
I think only one thing you can do is contact to exchange
There  are cyber crime forces in Europe i guess in any other country there are some agencies what you can contact to
But maybe better for you to move your thread to Bitcoin Technical Support
There are experienced members there
sr. member
Activity: 1246
Merit: 255
As a junior member, even early one, how come your account was hacked? What for? And if your account be hacked it should not border you much because I know you can't have much in that account. I advice you open another account and continue your life. Just be more  careful with the new account.
full member
Activity: 658
Merit: 100
PayAccept - Worldwide payments accepted in seconds
Hello fellow bitcoiners I have recently had my account at an exchange compromised and am out to the tune of tens of thousands. Harsh day to be sure. I realize there is little hope of ever seeing that money again but I would like to investigate this as far as I can. I have the bitcoin address the funds have moved to as well as several IP addresses that were used to carry out the attack. If anyone thinks they can help please message me.

I have changed relevant account information and contacted the exchange. Any suggestions of next steps would be appreciated.
Contacting exchange is one of the right choices when requesting support from the legal management team. Also, I believe that the exchange will support you if this is the cause of the exchange. But I recommend using public exchange platforms and in particular, should turn on all security modes that the trade provides.
legendary
Activity: 3038
Merit: 2162
Hello fellow bitcoiners I have recently had my account at an exchange compromised and am out to the tune of tens of thousands. Harsh day to be sure. I realize there is little hope of ever seeing that money again but I would like to investigate this as far as I can. I have the bitcoin address the funds have moved to as well as several IP addresses that were used to carry out the attack. If anyone thinks they can help please message me.

I have changed relevant account information and contacted the exchange. Any suggestions of next steps would be appreciated.

You probably won't get your money back, though you still should try, but what you can do is make a detailed report about what lead to your misfortune so others can learn from your mistake. Do you have any idea how exactly hacker stole your funds? Was your password weak, did they reset the password by taking over your email, did you reuse your password on other sites, do you have any malware on your machine, did you click on a phishing version of the site?
hero member
Activity: 2926
Merit: 722
Once hacked then this is the hardest part on how you would track or retrieve those funds back to you.We know that crypto transactions are irreversible and even
the exchange on where your account is compromised cant even help to get those coins back to you.This is why next time we do set 2fa or tight security on our exchange accounts specially
it do have ten of thousands of funds on it.
jr. member
Activity: 51
Merit: 53
2FA is the lesson 1 here. And the lesson 2 is, you need to find out how your email password was stolen and fix that vulnerability as well.
member
Activity: 868
Merit: 16
Can you say specifically the amount money that has been hacked? You will know it with through/track with IP address but you forget with some coin out there who has high privacy such as monero or bitcoin mixing that make you confused to track it. I haven't saw any person who has experienced conceded in his wallet and try to track the transaction till got his money back. Most of them just willing the money gine and fix any mistakes he made.
legendary
Activity: 1792
Merit: 1283
The absolute first thing you need to do is go file a police report.
The chance that you will see your coins back is low, but if they ever do manage to find a criminal network that's tied to the theft of your coins, you might be able to see some of them back.

I mean, part of Bitfinex stolen coins also were recovered.
https://cointelegraph.com/news/bitfinexs-stolen-funds-partially-recovered-and-returned-by-us-law-enforcement
mk4
legendary
Activity: 2940
Merit: 3883
📟 t3rminal.xyz
Yes I have cold storage as well, thankfully. I WAS using these funds to trade with.

Oh. So you have a cold storage wallet then.

So the funds you lost are only your trading funds? Hopefully not that much of a percentage over your total crypto holdings. I guess what you need to learn is how to secure your exchange accounts then.

1. Use a secure password. Preferably, 40 characters with symbols and everything (e.g. zbo^nxvVQNRVSRME4vB38mkaiG5GIYJt&z7mzUFn). To make your passwords easier to organize, use a password manager such as KeePass2[1].
2. 2 Factor Authentication. NOW.
3. As much as possible, have a separate email account for your exchanges.


[1] https://keepass.info/download.html



*snip*

You're going to waste your time tracking your funds mate. Forget it. I know it's hard, but the best thing you can really do is to move on and learn from it. Don't make this loss slow you down from accumulating.
jr. member
Activity: 61
Merit: 1
Since it likely doesn't matter anyway here is the bitcoin address the funds were moved to.

32cDFtEeUsCX9eYPWh56PoX26L47ySz8SH

Looks like the funds are on the move. Along with what is likely other ill begotten gains.

The IP addresses that were used are:
100.43.112.216 - which appears to be in south korea
104.158.11.46 - which appears to be in ontario, canada.

If the attacker is reading this:

Well played sir. I respect your skills even if I despise your ethics. I hope the money you earn is worth the corruption of your character.
jr. member
Activity: 61
Merit: 1
Yes I have cold storage as well, thankfully. I WAS using these funds to trade with.
mk4
legendary
Activity: 2940
Merit: 3883
📟 t3rminal.xyz
This was essentially my alt coin portfolio. Was too lazy to make cold storage for all the separate coins. Paid for that laziness dearly. Value was in the 5 figure range. Not a life changing amount I would say, but given another bull run it could have been... I thought I was soo smart DCA'ing into everything as it crashed..... I am very patient and was well positioned for the next run I believe Sad
Did not have 2FA, Fucked up Sad. Attacker gained access to email and reset my exchange password. Pretty sure that makes me screwed.

Lesson learned. Unfortunately, some people really need to learn the hard way, and today was your time to do so. Don't be so careless and lazy next time, especially when talking about significant amounts of money.

The exchange was Kraken, which is in the process of requiring 2fa but not there yet. I got pwned just in time. I noticed about an hour after the attack that my funds were gone. there were notification emails sent by the exchange but for some reason the push notifications for my email have not been working and I did not notice them... The attacker attempted to delete the emails from the exchange but they are in my 'deleted folder'
Regardless if an exchange has 2fa or not, leaving funds on an exchange is still a very irresponsible thing to do.

I am wary of posting details such as the bitcoin address and IP address in case I tip off the guy that I'm following this and what I know... What do you guys think in this case?
This won't do that much unfortunately. Hacker might have been using a proxy/vpn in the first place.
jr. member
Activity: 61
Merit: 1
The exchange was Kraken, which is in the process of requiring 2fa but not there yet. I got pwned just in time. I noticed about an hour after the attack that my funds were gone. there were notification emails sent by the exchange but for some reason the push notifications for my email have not been working and I did not notice them... The attacker attempted to delete the emails from the exchange but they are in my 'deleted folder'

I am wary of posting details such as the bitcoin address and IP address in case I tip off the guy that I'm following this and what I know... What do you guys think in this case?
member
Activity: 700
Merit: 14
I am sorry for your lost. Can you please share the name of the exchange where you got hacked? Because from what I know, most exchanges now requires 2FA before you can withdraw plus some codes sent to your email or phone number. If you just got hacked today, try to remember what you have done on your device, how you got compromised, perhaps installing a new software which you have not been evaluated?

You can also post the IP address here so some people can try helping you. Nobody wants to help if we have to approach you and ask you what really happened. Be informative on set so you get more attention from people willing to help.
Pages:
Jump to: