Pages:
Author

Topic: Lost my bitcoin after I have installe electrum 4.0.0 - page 2. (Read 522 times)

HCP
legendary
Activity: 2086
Merit: 4363
You're not an idiot... you've just been tricked by nasty thieves using a very convincing social engineering attack Sad

At this stage, it appears that the malware was simply designed to modify transactions to send all funds to the thieves... and doesn't appear to be installing any other malware like keyloggers or RATs etc... but there is no guarantee that this has not occurred. You can try running scanners like MalwareBytes or Spybot Search n Destroy etc...

If you want to be 100% sure, you're need to backup your data, then wipe/format the computer and reinstall your OS.
newbie
Activity: 2
Merit: 0
Same sad story here.
be careful!!
I am not expert, I got the same security update message and after few minutes my coins were gone.
The amount of the transaction and the address changed.  Lips sealed Lips sealed Lips sealed

The download site was electrumsky.com

Don't waste your time saying I am an idiot. I just want to help other people to avoid this phishing and to spread the alarm.
After 7 months this malware is still around stealing money!

As far as you know, is it enough to delete the app to be safe? (no need for a wallet anymore:( )

A.
HCP
legendary
Activity: 2086
Merit: 4363
I had version 3.3.4 and at the end of the transaction it gave me a negative result with the error that we wanted the new version 4.0.0. then I downloaded it but I don't remember if I copied the message link or if I looked for it on google. Unfortunately I took a fake server
If you got that error message... then you certainly did NOT have version 3.3.4 installed. The vulnerability whereby a malicious server could create those fake update popup messages was patched in version v3.3.3. It had previously been patched to make the link non-clickable in version v3.3.2. Unfortunately, you must have been using an older version that still allowed the popup Undecided

Sadly, as others have mentioned, your coins are gone Sad

newbie
Activity: 3
Merit: 0

I had version 3.3.4 and at the end of the transaction it gave me a negative result with the error that we wanted the new version 4.0.0. then I downloaded it but I don't remember if I copied the message link or if I looked for it on google. Unfortunately I took a fake server
legendary
Activity: 2520
Merit: 1496
To prevent others from same mistake, could you please write, where did you get this electrum 4.0.0 installation file?
Hope not by clicking a link from e-mail ?
legendary
Activity: 2170
Merit: 1789
ok I have just reinstalled this version. Can I do anything to recover my bitcoin?

You can't do anything, period. The only thing that you can do from this point is to ensure your computer is not infected with other viruses/malware which could potentially steal/hijack your clipboard. Do a clean install or wipe your hard disk if you can't be sure that there is no other malicious file except that Electrum file that you've just downloaded.

I feel sorry for your loss, please be careful next time and always verify the signature of every file that you downloaded from the internet.
legendary
Activity: 3612
Merit: 5297
https://merel.mobi => buy facemasks with BTC/LTC
ok I have just reinstalled this version. Can I do anything to recover my bitcoin?

Confirmed transaction cannot be reverted, unconfirmed transaction can potentially be cancelled by doublespending the inputs of the unconfirmed transaction and broadcasting the doublespending transaction to as many nodes as humanly possible. This is something that's really hard to perform for a non-technical person, and even if you succeed in creating a double spending transaction, the odds of getting your tx in a mining nodes' mempool are really, really, really small (so the odds of success are really low).
Even if the transaction is unconfirmed, most of the time it isn't even worth the effort to try to create a double spending transaction... Only if we're talking about a thefth of several thousands of USD worth of BTC it becomes something you can try as long as the tx wasn't confirmed.

I guess you should focus on what went wrong... When you say you reinstalled "this" version, which version do you mean? Where did you download it from? Did you check the signature?

Also, addresses that "magically" change are never a good sign... Is your pc clean? do you install software from unknown sources? Do you have a virusscanner running? Is your OS patched?
newbie
Activity: 3
Merit: 0
ok I have just reinstalled this version. Can I do anything to recover my bitcoin?
legendary
Activity: 3612
Merit: 5297
https://merel.mobi => buy facemasks with BTC/LTC
Directly from https://electrum.org/#download:

Quote
Latest release: Electrum-3.3.4

Version 4 does not exist, so if you have installed version 4, you either misread the version number or you installed a fake version!

If you say that the address you were funding changed, and you funded an address you were not trying to fund, those funds are lost, the odds are pretty big you have a copy/paste virus installed on your pc, or you have a fake electrum version (as said before).
newbie
Activity: 3
Merit: 0
Hi.Yesterday I installed version 4 of electrum and made 2 transactions, the first one was successful but the second one I find the address of the recipient changed and the transaction performed. I have uninstalled version 4. Can anyone please tell me if it is possible to recover my bitcoins and if I run risks for other files in general on my pc. Thanks
Pages:
Jump to: