Pages:
Author

Topic: My Bittrex account was hacked - page 2. (Read 3707 times)

legendary
Activity: 2730
Merit: 1288
May 10, 2017, 04:18:20 PM
#4
When was last time you changed password?  Did you do it after that passwords leaked?  It was few months ago.
hero member
Activity: 561
Merit: 500
kittehcoin.info
May 10, 2017, 04:04:43 PM
#3
So there are others and all of this happened last year also, several times.
Thank you for the comment.
 
copper member
Activity: 2940
Merit: 4101
Top Crypto Casino
May 10, 2017, 03:45:31 PM
#2
Hi majsta

Similar happened to me 2 days ago and I noticed it today with an email received from Bittrex. Glad i didn't have anything to steal in as I never keep any coins more than 1 day. I changed my password and emailed them. Finally I am happy to see I am not the only one. I don't type my password so i don't think a keylogger can catch anything

Login Time: 05/08/2017 22:04
IP Address: 78.176.204.102
User Agent: okhttp/3.4.0
hero member
Activity: 561
Merit: 500
kittehcoin.info
May 10, 2017, 10:31:18 AM
#1
Last night lot of strange things happened. In total about 168K of FTC, 17.5K VTC and bunch of other alts were stolen(destroyed) on bittrex from me. In total 11BTC worth.
All of this happened just after I applied for enhanced account verification, well maybe day after, and that is strangest thing.
Yes I didn't have 2FA, my bad but still I don't get what happened.
He didn't do any single withdraw, instead he was dumping my coins and buying them again at higher price. He was doing that for one hour, imagine that! before that he was logged in for 3 hours into my account doing nothing.
This could indicate buy - sell rotation and that in fact he was sending my coins over his bittrex account without withdrawing them then from there to send them over his account.
Final "sales" happened on ETH and REP.
Question is also this, how is possible that two persons can be logged in the same time to bittrex. Because I m always logged in, I didn't shut down my computer since last year, so keylogger or something is not an option. How is possible that someone could hack password who was unique and used only for bittrex. There is also captcha verification and he could pass it only if he had exact password, so brute force word list or something is also out of the question.
It started from:
Quote
Login Time: 05/09/2017 21:33
IP Address: 213.230.77.40
User Agent: okhttp/3.4.0
then:
Quote
Login Time: 05/09/2017 23:12
IP Address: 204.236.213.246
User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
Tracking down Ip address is just waste of time nowdays...
 
In total 80 buy/sale requests over various coins.
Here is how it started:




Then there is how ended:




Again what was the point of this if this wasn't something I said earlier to transfer coins to his own bittrex account. This was purely to destroy them all. Any thoughts on this matter?
Pages:
Jump to: