Topic: Liberty Reserve stole my money (Read 2211 times)

+1... million

Cheers,
Kermee

From the hindsight is 20/20 department: If you had discovered that some unauthorized access (particularly theft) had occurred, your mindset should have switched to assuming that you have a compromised system. 

Then with that assumption you then work towards regaining a secure environment before doing anything else from that point on.

After I was initially thinking that Liberty Reserve's on-screen keypad and other security measures were pretty decent, I then learned how they were all easily circumvented by a skilled attacker.  See for more info:
 - https://bitcointalksearch.org/topic/ewallet-provider-w-web-based-keyboard-2574

It is unfortunate that Liberty Reserve does not employ a multi-factor authentication such as those in use by Mt. Gox (YubiKey), TradeHill (DuoSecurity), Camp BX (SMS Text Message), and others.  If they had, you would likely still have your LR funds.

Now, going forward, you still probably want to assume that your system has been compromised and has been in that compromised state for at least a week now.  I'm not a security professional though.  Perhaps someone else here can recommend how best to proceed from here.

If you are using windows you might be infected with zeus or spyeye.

I have posted 315 times, therefore you'll have no choice but to believe what I'm about to tell you. I just purchased a new computer for the sole purpose of using it for Bitcoin. Within 30 minutes of having it turn on, but not yet hooked to the internet, the following happened. Somebody, but I won't mention any names, transferred X BTC (the sum doesn't matter) into my wallet of which, upon seeing it for the first time, I didn't know I own. I thought I was protected by not being hooked to the internet. Boy, was I wrong. Lesson learned!

Here is the picture of the wallet:





Here is the picture of some of the bitcoins in the wallet:




To prove that I have filed a report, I provide this community the police composite sketch of the person in question:



If you believe that this person is a member of this forum, please contact the...(I opted to end the joke at the ellipsis).

Your email was hacked:


You were not getting them because the hacker was deleting them from your inbox every time he was active.


Fine...you changed all your LR passwords...but not your email password?

I saw a dog who smoked cigarettes...........

The question is 'What Bitcoin didn't killed?'

And my pet turtle.

They killed my kittens too

It ate my children, too.

Or maybe I just never had any. Hmm.

Bitcoins tried to steal my dollars more than a few times

Cool Story Bro.

I find it hilarious how you think LR would want to steal your $200.

Lolwut?




So on the 4th of August I went to the metro
I tall guy stole all my money
It's no wonder Bitcoin is failing so bad. It's impossible to keep shit safe.

Agreed.
This is a Liberty Reserve problem,  not a Bitcoin problem.

> It's no wonder Bitcoin is failing so bad. It's impossible to keep shit safe.

what does bitcoin have to do with your incident at LR?

this really has nothing to do with bitcoin, and you're adding bitcoin to the mix.

So on the 22nd of July I deposited $200 into my Liberty Reserve account from Mt Gox.
I left in in there as I was going to do a 2nd deposit a little later from Mt Gox of another $200. This I did on 1st of Aug.

I logged into Liberty Reserve after doing this, to find my first $200 gone. It was taken on the 30th of July by transferring to account "U6695754 (wale)".

I had no idea how this had happened. Mr LR password was unique and not saved anywhere.

Here's why I think Liberty Reserve themselves stole the money:

1) This person has been regularly logging in from a different IP address (193.104.186.80). Every time I logged in, I would get sent an email to confirm my login becuase I was logging in from a different IP address. How come I didn't get these emails when HE logged in?

2) After discovering the first theft, I changed all passwords and PINs to do with LR, and I did not leave them anywhere. I never used my keyboard to type them out so a key logger could not have got it.

3) I setup email notification for everything I could in the LR settings. I also turned the IP sensitivity to "high".

4) The 2nd transfer came through last night, and within 5 hours this person had logged in and taken the money - even with a new password and everything! I got no email (apart from an email saying the deposit had come in...but it was night time local time for me so I was asleep) saying about the login from a different IP or no email about the withdrawel.


My 4 months of mining (Only 1 video card) has now been completly wiped out, short of 2 or 3 coins left in my Mt Gox account.

I sent an email to LR right after the first theft with no response, so I am holding no hope of getting my money back.

It's no wonder Bitcoin is failing so bad. It's impossible to keep shit safe.