Topic: my mtgox account has been robbed this night. (Read 3431 times)

This would've never happened if you had a locked withdrawal address. This way even if they hack the account they can only send bitcoins to you, but what do you expect from Gox, it's the worst exchange out there. Some people never learn

i was wrong about the situation, just read the logs...

2014/02/06 02:51:24   In      0.00100000 BTC   2.46178942 BTC
Cancelled transfer because of timeout (fee): Bitcoin withdraw to 1Q1Wo95FcXvrhDB5ieDMk52qDs2yNfpySN
2014/02/06 02:51:24   In      2.46000000 BTC   2.46078942 BTC
Cancelled transfer because of timeout: Bitcoin withdraw to 1Q1Wo95FcXvrhDB5ieDMk52qDs2yNfpySN

i got my BTC back because of timeout :-)

Crystallas: thx for active reply and the recon you have done - good job.

in my case nice move has been done - MtGox refunded my lost $ with BTC as the attacker changed the $ for BTC. I must say i am happy they done this move and it makes an good feeling after i saw lot of issues, i must say this is not an issue anymore for me. Also must say its respectfull move from MtGox.

so in my case i do not hunt any money as i got my stuff back.

But i would like to cooperate on the hunt for the thief as his primary atack was on my gmail account.

Of course setting any and every account mail/exchange to paranoid security as this is beeing wild like back in the cowboys time if you had a piece of gold in your pocket...  so if you wanna ask me: is BTC same like gold - well it certainly look like you need to secure it the same way.

Good luck and be carefull!

I'm still tracking the ledger. I'm not sure what I'm going to do with it.  Just to be clear, there are two people in this thread talking about the same person, so two different situations, methods, and exchanges.

Here is the other account that these coins have been dumped in. https://blockchain.info/address/185zyps34SJdNYkutTZhAFHkEh1zoX4mCR
As you can see, they are actively being mixed.

I had this bit of coin online, because I was actively exchanging it. Otherwise it would have been in an offline wallet. Email wasn't hacked(which was confirmed by my email provider), unique password was used, and 2FA would have helped(I would have LOVED to use 2FA, I begged for 2FA in chat), but BTC-e's 2FA is still new(maybe post hack) and setup is not in english yet. The last thing I would want to do is assume setup, and have an nonretrievable 2FA password. Oh, and links in email, nope. I didn't. This account was strictly accessed from a virtual machine which is bitcoin only, and only used to make bitcoin transactions.

It doesnt need to be hack or anything, he may have had access to ur Gmail via recovery form,

Bitcoin transactions are an "Open book"
Just follow the transactions, and google every wallet address....   eventually, you will find an account linked to them.
It CAN be done. You will find them, don't give up.

if you PM me, I may be able to get Nasa/Jpl to help you track the wallets if you are willing to share a bit of reward with them.

There's also...  http://cseweb.ucsd.edu/~smeiklejohn/  she can do magic too. She developed a special bitcoin transaction tracking software.


For the future...
1.NEVER store BTC online.
2. Always use 2FA.
3. Never click on links in e-mails, ever. That's the oldest trick in the book.
ewok

Wow what I am seeing is that scammers / hackers are responsible for all the BITCOIN drama that is happening. What if this was a plot to destroy BITCOIN at the consumer level. 

So by not clicking links or attachments we are safe?

Has anyone considered this might be MtGox's doing? Given the current situations MtGox is facing with the whole "transaction malleability" issue, could they be transferring all BTC from user accounts into one address for "safe-keeping" until they fix whatever it is they're trying to fix? I do find it kind of strange this so-called hacker stole thirty something thousands worth of Bitcoins and is just letting it sit there. Has anyone tried contacting MtGox directly? Like.. as in person to try to get some answers?

FreeBSD(see avatar) and Firefox, doesn't matter. I run all bitcoin related events in a virtual machine. Max security =/= guaranteed protection. Anyways, I've been investigating the issue for some time, and my mail service support gave me a log of all activity. BTC-E alerts email on login, and I received no "BTC-E successful authentication" email which was verified from the logs. This exploit was done outside of my own system.

"legit hacker" this sounds so wrong

I've got more than enough funds sitting in MtGox right now to begin pursuing them via legal action right now.  I am sick to my ****ing stomach because my gut is telling me that I am out an inexplicable amount of money.

Why I kept most of my funds in BTC, that's a question I'll be asking myself for a long, long time.

All I know, is that I am now ALL IN when it comes to pursuing these mother****ers through every single legal alleyway my lawyer will find.  I am currently trying to find a lawyer who specializes in virtual currency (in New York).  If anyone has a connection let me know.

I am not holding my breath thinking that they will magically find enough BTC to give customers theirs back.

I am of the belief that my Bitcoins are gone.

Private investigators, in my experience, are a 100% sure-fire way to waste money and valuable time when it comes to legal battles.  Most evidence they turn up is not permissible in the court-of-law, with that said, I am already trying to brainstorm my attack here.

I am sure I am not alone here, so if anyone wants to team-up and get the ball rolling, shoot me a PM.

Scummy mother****ers will go down.

EDIT: Sorry OP.  Might have hijacked here.
Maybe it was a legit hacker who took your BTC but I wouldn't put it past the OPs of MtGox siphoning their own users money under the table.

Anything is possible, I wouldn't trust MTGox with anything right now. The rumour is that they don't actually have the money to pay their customers because they've been paying operating costs (including lawsuits) using customer funds.

Is it possible that MtGox is starting to steal from their own members wallets before they get sued big FIAT dollars?
The Bitcoin will remain untouchable, but all of the $ will be taken from that after a class action lawsuit.  How can one explain 36,700 stolen Bitcoins? 

Thats messed up! You got Fiat money stolen out of your Mt Gox account?!

Did you have 2 factor authentication enabled?
Do you use a Yubi Key/Security Card from MtGox? I don't because they charge you $ for it

Could he have obtained your log in credentials through a botnet sitting ontop of the Mtgox log in page? (Technical guys - I'm not sure if this is possible, maybe you can shed some light here?)

Perhaps there's a keylogger on your computer installed, that could be how he got into your account?

Thats crazy, sorry you went through that. I got scammed from localbitcoins.com for 1.3BTC and this was not the first time I was scammed for my bitcoins.

How the hell do people do stuff like this

That is a bit frightening; so many bitcoins stolen from so many different accounts...

You would think he would stop stealing and start laundering the money but he doesn't, it must be pretty easy/safe to steal or it is an organisation

37k btc stolen ?
He's not even using those bitcoin .

The above problem is not a gmail security issue. The user was dumb and clicked a link in an email, falling for the common phishing tactic. Then, because he didnt have 2fa or other protection enabled, the attacker was easily able to take control with a slight bit of social engineering.

Once again, the onus is on the user. If you are smart and take precautions, this will never happen to you.

Some scumbag stole some coins from my cavirtex account, got into my email account and changed password. I am so paranoid now.  Email had ID's  and all sorts.