Mt. Gox user details for sale - page 6.

glendower

newbie

Activity: 17

Merit: 0

Quote from: ozzymax on March 09, 2014, 03:47:01 PM

I came late to the MtGox party and fortunately did not lose a lot and my heartfelt feeling go out to those that did, This news is not good, so now my passport, my bank details and my home address is now in the hands of hackers and they are trying to sell that info. I'm fucking furious. Karpeles needs to pay for this big time. post the hackers email address, this need to go to Interpol.

It is not Karpeles fault that a criminal is trying to sell your data. The perpetrators of crime are the criminals, and in this case MtGox & its customers are the victims. In fact, if someone hadn't been defrauding them via the malleability exploit, we wouldn't be in this situation.

So, how about we start actually blaming this fiasco on the perpetrators rather than the victims.

glendower

newbie

Activity: 17

Merit: 0

Quote from: SmokeTooMuch on March 09, 2014, 02:24:15 PM

I won't post the link to the source or his email address, but apparently nanashi___ is selling the Mt. Gox user database:

Quote

Official sale of MT.Gox database: personal details for almost all Bitcoin users.

I am selling all data obtained in recently MT. Gox database hack. File is ~20gb and contains full personal information of all clients in gox system, including passport scan. This document will never be elsewhere published by us. Selling it one or two times to make up personal loses from gox closure. Asking 100BTC for entire document. Willing to sell it in pieces, 10BTC for 2gb of data.

I will verify that I am in possesion of this data before you make purchase. Interested buyers can contact me and I will send you all information contained in file about you personally. No one contact asking for parts of the file for free/me to send file before payment.

I hate those blackhats ~.~

He's going to need that 100BTC to keep himself safe & out of prison.

h1d

newbie

Activity: 21

Merit: 0

Since there are plenty of investors who are still not aware of this, we report this to media journalists that we know and pretty please them to write an article up, which isn't bad for them to get attention on their article which has a chance to get a followup when the guy is caught for a nice incentive. We hire a professional investigator team with crowd funding and... good luck to the seller (and potentially the buyers).

Gox will be more than happy to help find the sellers to disclose any hack attempt evidences they have.
It would be of our best interest to act quick.

Anyone with good knowledge in the investigation field, I wish them to come out and take a lead.

Evil-Knievel

legendary

Activity: 1260

Merit: 1168

This message was too old and has been purged

h1d

newbie

Activity: 21

Merit: 0

He doesn't know what he's doing.
He's turning himself from the victim's side to the Gox's side where no one will give any mercy.

It doesn't cost us too much to crowd fund and find the seller, then the buyers when the seller is caught.
When this gets picked up by the media to piss off every investors to find the seller, 100BTC? too easy.

Too bad he can't ask us to donate BTC to promise to discard data as there is no way to prove it's gone.
Not sure how putting his head out there for hunt for just 100 BTC is good for his life against... lots of people out there with lots of money.

ninveh

newbie

Activity: 14

Merit: 0

This has been a major concern for me since I started dealing with the exchanges: nobody knows what standards they use in protecting user-supplied documents.

Some of the people running the exchanges are known by name only, some not even by that. Just because somebody has some rudimentary coding skills and opens a web site, it is not enough for me to trust him with my personal documents.

If I send him money, I am hoping that in 2-3 days I am done with the transaction. With documents, this can be an engagement written in hell for eternity. Not only you never know if they follow through on your request to destroy the documents when the time comes, in a matter of fact they can't - they must keep them for LE if the need ever arises. Do they encrypt the files? to they keep it off site? we will never know.

SmokeTooMuch

legendary

Activity: 860

Merit: 1026

Quote from: dewdeded on March 09, 2014, 10:04:10 PM

Real cybercrime scene doesn't care about this dump.
[...]most people in database are poor, holders are distributed over the whole world (no country or region targeting/schemes possible), 70% of the accounts are unverified so they contain invalid or no data records, wrong demography/peergroup in dump[...]

Those are just assumptions of yours. We don't know if the database contains any unverified account. Distributed all over the world doesn't mean useless, you can easily repack national databases and sell those to other interested parties. And even if "most people" are poor, there was a multi million dollar trading volume on gox, so there are at least some valueable targets.

itsunderstood

sr. member

Activity: 364

Merit: 250

American1973

Quote from: dewdeded on March 09, 2014, 10:04:10 PM

Real cybercrime scene doesn't care about this dump.

Because it contains no payment data, no extras e.g. user accounts like mail accounts to account holder or security questions, most people in database are poor, holders are distributed over the whole world (no country or region targeting/schemes possible), 70% of the accounts are unverified so they contain invalid or no data records, wrong demography/peergroup in dump: no targets/victims like: senior citizen, tech unsavy old people, foreign people, bad educated people, just: male, 20-40 year old nerds, with tech security, knowledge of most basics scams/schemes, 24/7 online checking all banking/wallet accounts ...

Worthless. Price is ludicrous anyway.

Only phishing and spam mail senders will add email addresses to their databases.

^^^ Good knowledge of modern crime data valuations. Thanks. Type more about how fucked the world is, I myself enjoy truth though it very painful to hear.

dewdeded

legendary

Activity: 1232

Merit: 1011

Monero Evangelist

Real cybercrime scene doesn't care about this dump.

Because it contains no payment data, no extras e.g. user accounts like mail accounts to account holder or security questions, most people in database are poor, holders are distributed over the whole world (no country or region targeting/schemes possible), 70% of the accounts are unverified so they contain invalid or no data records, wrong demography/peergroup in dump: no targets/victims like: senior citizen, tech unsavy old people, foreign people, bad educated people, just: male, 20-40 year old nerds, with tech security, knowledge of most basics scams/schemes, 24/7 online checking all banking/wallet accounts ...

Worthless. Price is ludicrous anyway.

Only phishing and spam mail senders will add email addresses to their databases.

grifferz

full member

Activity: 154

Merit: 100

Quote from: Xer0 on March 09, 2014, 05:08:55 PM

so you are telling me, Gox keeped our ID scans?
on the same server they were hosting the site?

...seriously??

You find that more or less likely than them losing 850k BTC, being repeatedly hacked, customer databases all over the Internet, …?

True___Blue

sr. member

Activity: 354

Merit: 250

I sent in my docs and was waiting for over 3 months to get verified. Never did, they shut down instead. I hope my passport is ok. That would really suck. I lost $2k on gox and having some asshole open up a bunch of shit in my name will just be the icing on the cake.

itsunderstood

sr. member

Activity: 364

Merit: 250

American1973

Quote from: DarkComet on March 09, 2014, 06:19:47 PM

Luckily, i never verified my account even if i had like 5 bitcoins in there, but i really want the database still though lol.

Hello Dark comet. Your "lol", is it a nervous laugh?

Talk us through why you would "want the database though lol." It's fun for people to learn obvious things in threads like this I bet.

DarkComet

newbie

Activity: 42

Merit: 0

Luckily, i never verified my account even if i had like 5 bitcoins in there, but i really want the database still though lol.

sumantso

legendary

Activity: 1050

Merit: 1000

Signed up at Gox early last year, but never got round to verifying. Feeling lucky now.

joesmoe2012

hero member

Activity: 882

Merit: 501

Ching-Chang;Ding-Dong

They said they didn't release the user database, they didn't say they didn't have access to it.

https://mega.co.nz/#!0VliDQBA!4Ontdi2MsLD4J5dV1-sr7pAgEYTSMi8rNeEMBikEhAs

serje

legendary

Activity: 1232

Merit: 1002

Hahahahahahahahah

That Satoshie Nakamoto post is priceless!!!!!!

Really made my evening!

Xer0

hero member

Activity: 826

Merit: 1000

°^°

so you are telling me, Gox keeped our ID scans?
on the same server they were hosting the site?

...seriously??

SmokeTooMuch

legendary

Activity: 860

Merit: 1026

Quote from: st4nl3y on March 09, 2014, 04:45:14 PM

Quote from: serje on March 09, 2014, 04:06:46 PM

you might want to check this shit out!

http://blog.magicaltux.net/2014/03/09/mtgox-2014-hack-database-revealed-live-from-mark-karpeless-reddit-account/

Included in this download you will find relevant database dumps, csv exports, specialized tools, and some highlighted summaries compiled from data. Keeping in line with fucking Gox alone, no user database dumps have been included.

I think they are some sort of good guys

one of the comments..

WTF?

Don't let yourself get fooled, it's not him.

williamj2543

hero member

Activity: 588

Merit: 500

Get ready for PrimeDice Sig Campaign!

Thats awesome. Imagine satoshi getting all of your money back from those greedy goxers

st4nl3y

legendary

Activity: 1050

Merit: 1000

Quote from: serje on March 09, 2014, 04:06:46 PM

you might want to check this shit out!

http://blog.magicaltux.net/2014/03/09/mtgox-2014-hack-database-revealed-live-from-mark-karpeless-reddit-account/

Included in this download you will find relevant database dumps, csv exports, specialized tools, and some highlighted summaries compiled from data. Keeping in line with fucking Gox alone, no user database dumps have been included.

I think they are some sort of good guys

one of the comments..

WTF?

Topic: Mt. Gox user details for sale - page 6. (Read 23970 times)