My Wallet got hacked and the hacker paid huge transaction fees to take the money

empoweoqwj

hero member

Activity: 518

Merit: 500

Quote from: Abdussamad on December 23, 2013, 07:40:05 AM

Quote from: theecoinomist on December 23, 2013, 06:23:09 AM

This has been said hundreds of times, and shall be said again. Blockchain.info does NOT have access to your unencrypted private keys, it's not an online wallet since a thief can't hack their database and steal loads of passwords. The only way you would lose them on Blockchain would be to login while a hacker implemented some malicious javascript, but I still think that's yet to happen..

bc.i is an online wallet because it serves up an encrypted copy of your wallet to anyone who knows the wallet identifier. It also stores the encrypted wallet on its servers thereby making it available to its employees as well as the datacenter staff.

The other thing is that it uses javascript to generate the random numbers for the wallet and also for the transaction signing. This has caused problems before.

Some ways in which people have lost money on bc.i wallets:

- RNG bug caused random numbers to be reused which made it possible to calculate the private key behind an address.

- Hacked because the user used a simple password and the wallet was bruteforced. This would be much harder on a desktop client because you first have to get access to the encrypted wallet file.

Exactly. Not matter how diligent website programmers are, your coins are *always* safer offline

Abdussamad

legendary

Activity: 3766

Merit: 1601

Quote from: theecoinomist on December 23, 2013, 06:23:09 AM

This has been said hundreds of times, and shall be said again. Blockchain.info does NOT have access to your unencrypted private keys, it's not an online wallet since a thief can't hack their database and steal loads of passwords. The only way you would lose them on Blockchain would be to login while a hacker implemented some malicious javascript, but I still think that's yet to happen..

bc.i is an online wallet because it serves up an encrypted copy of your wallet to anyone who knows the wallet identifier. It also stores the encrypted wallet on its servers thereby making it available to its employees as well as the datacenter staff.

The other thing is that it uses javascript to generate the random numbers for the wallet and also for the transaction signing. This has caused problems before.

Some ways in which people have lost money on bc.i wallets:

- RNG bug caused random numbers to be reused which made it possible to calculate the private key behind an address.

- Hacked because the user used a simple password and the wallet was bruteforced. This would be much harder on a desktop client because you first have to get access to the encrypted wallet file.

empoweoqwj

hero member

Activity: 518

Merit: 500

Quote from: theecoinomist on December 23, 2013, 06:23:09 AM

Quote from: jbssm on December 16, 2013, 06:20:46 AM

Quote from: empoweoqwj on December 15, 2013, 09:26:18 PM

Quote from: paul44 on December 15, 2013, 01:05:09 PM

I currently keep mine in a blockchain.info wallet as it was recommended to me a while back. I would certainly be interested to hear if there is something more desirable though.

Electrum. I could never recommend storing your bitcoins online, sorry.

But the two factor authentication in blockchain.info doesn't make it more secure?
Or even better any local storage that uses the two factor authentication, does it exist?

This has been said hundreds of times, and shall be said again. Blockchain.info does NOT have access to your unencrypted private keys, it's not an online wallet since a thief can't hack their database and steal loads of passwords. The only way you would lose them on Blockchain would be to login while a hacker implemented some malicious javascript, but I still think that's yet to happen..

So you've audited blockchain.info's code have you? Coins are always safer offline, code is too susceptible to be 100% trustworthy.

theecoinomist

full member

Activity: 200

Merit: 100

Quote from: jbssm on December 16, 2013, 06:20:46 AM

Quote from: empoweoqwj on December 15, 2013, 09:26:18 PM

Quote from: paul44 on December 15, 2013, 01:05:09 PM

I currently keep mine in a blockchain.info wallet as it was recommended to me a while back. I would certainly be interested to hear if there is something more desirable though.

Electrum. I could never recommend storing your bitcoins online, sorry.

But the two factor authentication in blockchain.info doesn't make it more secure?
Or even better any local storage that uses the two factor authentication, does it exist?

This has been said hundreds of times, and shall be said again. Blockchain.info does NOT have access to your unencrypted private keys, it's not an online wallet since a thief can't hack their database and steal loads of passwords. The only way you would lose them on Blockchain would be to login while a hacker implemented some malicious javascript, but I still think that's yet to happen..

empoweoqwj

hero member

Activity: 518

Merit: 500

Quote from: Xiaoxiao on December 22, 2013, 06:29:39 AM

Quote from: Abdussamad on December 15, 2013, 05:40:30 PM

Quote from: jbssm on December 15, 2013, 02:57:26 PM

I moved the wallet to Blockchain.info, it's not that I trust my gmail account (and dropbox) is completely safe now but I guess it must be impossible to enter the account after I put up the google key two factor authentication.

blockchain.info is even worse than a desktop client! You computer has been compromized. Moving to blockchain.info won't make things any better.

What you should do is backup essential documents, delete everything on your computer, reinstall the operating system, install anti-malware software like anti-virus apps and scan and restore the backups. Then change your passwords everywhere including your email accounts. As far as bitcoins go you should move all the coins to a new wallet. Make sure you set a password on your new wallet.

Question- I share same wireless network with roommates. The network is secure, but if their computers are unsafe/malware infected, could that infect my computer since we are on the same wireless network? I do have 100% security on my computer though: antivirus, malware, firewall and safe browsing habits.

I'lll stop you at "the network is secure". No network is secure, not even your setup with your roommates.

Never assume anything is safe or protected. Store the majority of your coins offline, not on a computer connected to the Internet.

Xiaoxiao

legendary

Activity: 1274

Merit: 1000

The Golden Rule Rules

Quote from: Abdussamad on December 15, 2013, 05:40:30 PM

Quote from: jbssm on December 15, 2013, 02:57:26 PM

I moved the wallet to Blockchain.info, it's not that I trust my gmail account (and dropbox) is completely safe now but I guess it must be impossible to enter the account after I put up the google key two factor authentication.

blockchain.info is even worse than a desktop client! You computer has been compromized. Moving to blockchain.info won't make things any better.

What you should do is backup essential documents, delete everything on your computer, reinstall the operating system, install anti-malware software like anti-virus apps and scan and restore the backups. Then change your passwords everywhere including your email accounts. As far as bitcoins go you should move all the coins to a new wallet. Make sure you set a password on your new wallet.

Question- I share same wireless network with roommates. The network is secure, but if their computers are unsafe/malware infected, could that infect my computer since we are on the same wireless network? I do have 100% security on my computer though: antivirus, malware, firewall and safe browsing habits.

empoweoqwj

hero member

Activity: 518

Merit: 500

Quote from: ?? on ??

What if the hacker had access to the wallet backup and the password? It wouldn't need my computer that way, right?

A wallet back is the same as the wallet. So if he has that, and your password, he has access to your coins. Its not tied to your computer or your identity in any way. Scary isn't it Wink

empoweoqwj

hero member

Activity: 518

Merit: 500

Quote from: nosdi26 on December 21, 2013, 05:02:49 PM

the best way to store your coins are offline, i do backups in 3 usb memories every time i make a transaction..and nothing to my pc..

3 is a bit over the top ..... and I was told in another thread you don't need to backup after every transaction. But I forget what the actual criteria is, sorry. Perhaps someone can fill us in.

nosdi26

full member

Activity: 199

Merit: 100

the best way to store your coins are offline, i do backups in 3 usb memories every time i make a transaction..and nothing to my pc..

jbssm

member

Activity: 71

Merit: 10

I've just noticed a Multibit Failsafe-data folder in my computer.

It was created (not by me) 2 days ago after I discovered the bitcoin hack (probably about the time I changed my password, but I'm not sure).

Is this file supposed to exist or is it a suspicious activity?

empoweoqwj

hero member

Activity: 518

Merit: 500

8-10 ain't enough these days. 14 random characters (of all kinds) bare minimum

jbssm

member

Activity: 71

Merit: 10

Quote from: e4xit on December 16, 2013, 04:32:42 AM

Quote from: Waramp22 on December 16, 2013, 12:32:34 AM

Quote from: Abdussamad on December 15, 2013, 05:40:30 PM

Quote from: jbssm on December 15, 2013, 02:57:26 PM

I moved the wallet to Blockchain.info, it's not that I trust my gmail account (and dropbox) is completely safe now but I guess it must be impossible to enter the account after I put up the google key two factor authentication.

blockchain.info is even worse than a desktop client! You computer has been compromized. Moving to blockchain.info won't make things any better.

What you should do is backup essential documents, delete everything on your computer, reinstall the operating system, install anti-malware software like anti-virus apps and scan and restore the backups. Then change your passwords everywhere including your email accounts. As far as bitcoins go you should move all the coins to a new wallet. Make sure you set a password on your new wallet.

At least blockchain.info has 2FA. If he sets it up with his phone number, they would need to have his cell phone in their hands to log into the account.

Not to mention it has IP lock so if you are outside if the set I.P address it wont function.
And a disable TOR IP address option too.

I think all this hoo-har surrounding the blockchain.info 2FA is slightly overblown for the following reason. The 2FA is only required for actions using the site.

Many people back up their wallet file or have it automatically backed-up/emailed to their email by blockchain.info. THIS WALLET FILE IS ENCRYPTED (using your main password) BUT NOT BY 2FA (or blockchain.info's "second password"), which I think many people believe it is.

So all an attacker needs is a copy of this backup file, and your primary password, which apaprently people keep losing.

Just wanted to make that point. I suppose, if your email has a strong password, and 2FA of its own (e.g. gmail), THEN you might be starting to get to somewhere secure.

OP I am interested, I think you mentioned that you are using OS X, right? Also, would you care to divulge your password metadata with us, for example for both your email, dropbox and multibit:

1) were the passwords all different?
2) length of each password?
3) alpha, numerals and symbols (#) in each password

My condolences for your loss too, by the way.

Thank you. Yes, I was using a Mac.

1) No, the passwords for the wallets where the same (I know, stupid me). The passwords for email and Dropbox where different.
2) About 8-10
3) The passwords for the wallets and the email where pretty good: alpha, numerals and symbols. The passwords for Dropbox was just alpha, although it was just a bunch of letters I came up with, not a dictionary word.

Also I turned on 2FA everywhere and changed all the relevant passwords and disabled TOR in blockchaininfo.
But I'm still apprehensive about what you said from the wallet backup from blockchaininfo. I didn't made a backup, I just printed that original wallet access codes. But now I'm a bit paranoid about if it's possible for the hacker to have access to that as well. Any thoughts on that?

I think it's really difficult for the hacker to have some backdoor to my computer. It's a Mac, the SO was freshly installed about 1 month ago and it's got no fixed IP address. I still think this has something to do with Dropbox and/or my Gmail account. But to say the truth, now I'm not sure of anything anymore.

empoweoqwj

hero member

Activity: 518

Merit: 500

Quote from: paul44 on December 16, 2013, 05:30:04 AM

Quote from: empoweoqwj on December 15, 2013, 09:26:18 PM

Quote from: paul44 on December 15, 2013, 01:05:09 PM

I currently keep mine in a blockchain.info wallet as it was recommended to me a while back. I would certainly be interested to hear if there is something more desirable though.

Electrum. I could never recommend storing your bitcoins online, sorry.

Downloaded electrum now, definitely going to use it. Thanks for the advice, I needed it!

You are welcome. Its a gem.

jbssm

member

Activity: 71

Merit: 10

Quote from: empoweoqwj on December 15, 2013, 09:26:18 PM

Quote from: paul44 on December 15, 2013, 01:05:09 PM

I currently keep mine in a blockchain.info wallet as it was recommended to me a while back. I would certainly be interested to hear if there is something more desirable though.

Electrum. I could never recommend storing your bitcoins online, sorry.

But the two factor authentication in blockchain.info doesn't make it more secure?
Or even better any local storage that uses the two factor authentication, does it exist?

paul44

newbie

Activity: 42

Merit: 0

Quote from: empoweoqwj on December 15, 2013, 09:26:18 PM

Quote from: paul44 on December 15, 2013, 01:05:09 PM

I currently keep mine in a blockchain.info wallet as it was recommended to me a while back. I would certainly be interested to hear if there is something more desirable though.

Electrum. I could never recommend storing your bitcoins online, sorry.

Downloaded electrum now, definitely going to use it. Thanks for the advice, I needed it!

e4xit

sr. member

Activity: 302

Merit: 250

Quote from: Waramp22 on December 16, 2013, 12:32:34 AM

Quote from: Abdussamad on December 15, 2013, 05:40:30 PM

Quote from: jbssm on December 15, 2013, 02:57:26 PM

I moved the wallet to Blockchain.info, it's not that I trust my gmail account (and dropbox) is completely safe now but I guess it must be impossible to enter the account after I put up the google key two factor authentication.

blockchain.info is even worse than a desktop client! You computer has been compromized. Moving to blockchain.info won't make things any better.

What you should do is backup essential documents, delete everything on your computer, reinstall the operating system, install anti-malware software like anti-virus apps and scan and restore the backups. Then change your passwords everywhere including your email accounts. As far as bitcoins go you should move all the coins to a new wallet. Make sure you set a password on your new wallet.

At least blockchain.info has 2FA. If he sets it up with his phone number, they would need to have his cell phone in their hands to log into the account.

Not to mention it has IP lock so if you are outside if the set I.P address it wont function.
And a disable TOR IP address option too.

I think all this hoo-har surrounding the blockchain.info 2FA is slightly overblown for the following reason. The 2FA is only required for actions using the site.

Many people back up their wallet file or have it automatically backed-up/emailed to their email by blockchain.info. THIS WALLET FILE IS ENCRYPTED (using your main password) BUT NOT BY 2FA (or blockchain.info's "second password"), which I think many people believe it is.

So all an attacker needs is a copy of this backup file, and your primary password, which apaprently people keep losing.

Just wanted to make that point. I suppose, if your email has a strong password, and 2FA of its own (e.g. gmail), THEN you might be starting to get to somewhere secure.

OP I am interested, I think you mentioned that you are using OS X, right? Also, would you care to divulge your password metadata with us, for example for both your email, dropbox and multibit:

1) were the passwords all different?
2) length of each password?
3) alpha, numerals and symbols (#) in each password

My condolences for your loss too, by the way.

empoweoqwj

hero member

Activity: 518

Merit: 500

Quote from: electerium on December 16, 2013, 12:08:27 AM

if you computer has been compromised, why would you ever begin changing passwords without ensuring that you are no longer compromised?

Gmail has the easiest 2FA setup. Everyone should atleast use it. And I've been lobbying for a long time that there should also be a geographical restriction that allows the user even more control.

You shouldn't. You should start again. Biggest mistake people make is thinking they can run some dodgy anti-virus software to "clean" their system. What a joke.

Havelock.com has both 2FA and geographical restrictions. I turn both on. Still not confident though Wink

Waramp22

sr. member

Activity: 321

Merit: 250

Quote from: Abdussamad on December 15, 2013, 05:40:30 PM

Quote from: jbssm on December 15, 2013, 02:57:26 PM

I moved the wallet to Blockchain.info, it's not that I trust my gmail account (and dropbox) is completely safe now but I guess it must be impossible to enter the account after I put up the google key two factor authentication.

blockchain.info is even worse than a desktop client! You computer has been compromized. Moving to blockchain.info won't make things any better.

What you should do is backup essential documents, delete everything on your computer, reinstall the operating system, install anti-malware software like anti-virus apps and scan and restore the backups. Then change your passwords everywhere including your email accounts. As far as bitcoins go you should move all the coins to a new wallet. Make sure you set a password on your new wallet.

At least blockchain.info has 2FA. If he sets it up with his phone number, they would need to have his cell phone in their hands to log into the account.

Not to mention it has IP lock so if you are outside if the set I.P address it wont function.
And a disable TOR IP address option too.

electerium

full member

Activity: 179

Merit: 100

if you computer has been compromised, why would you ever begin changing passwords without ensuring that you are no longer compromised?

Gmail has the easiest 2FA setup. Everyone should atleast use it. And I've been lobbying for a long time that there should also be a geographical restriction that allows the user even more control.

blanc1664

newbie

Activity: 13

Merit: 0

If your system is compromised they may have a key logger and have captured logins,password, and everything else.

How is it that the transfer AND the fee went to the same wallet? Don't fees go to miners?

empoweoqwj

hero member

Activity: 518

Merit: 500

Quote from: paul44 on December 15, 2013, 01:05:09 PM

I currently keep mine in a blockchain.info wallet as it was recommended to me a while back. I would certainly be interested to hear if there is something more desirable though.

Electrum. I could never recommend storing your bitcoins online, sorry.

GoodHosting

newbie

Activity: 42

Merit: 0

*.is is Iceland.

Code:

% Abuse contact for '79.134.224.0 - 79.134.255.255' is '[email protected]'

inetnum:        79.134.224.0 - 79.134.255.255
netname:        CH-GLOBAL-20071024
descr:          Backbone ehf
remarks:        icecell-net
country:        IS
org:            ORG-GNSA2-RIPE
admin-c:        AF15-RIPE
tech-c:         AF15-RIPE
tech-c:         ME2795-RIPE
status:         ALLOCATED PA
mnt-by:         RIPE-NCC-HM-MNT
mnt-lower:      AF15-MNT
mnt-routes:     AF15-MNT
notify:         [email protected]

Also it does appear to be a Tor node.

* Dns resolved 79.134.234.200 to masterchief2.tor.leo-unglaub.net

jbssm

member

Activity: 71

Merit: 10

Quote from: paul44 on December 15, 2013, 06:20:27 PM

If it really is TOR then what is the point? It could be anyone and anywhere. Really sorry but its likely gone forever.

Yeah, I kind of accept that would be the outcome. But I still feel the right thing would be to tell the police about it... even if they do nothing about the stuff :/

paul44

newbie

Activity: 42

Merit: 0

If it really is TOR then what is the point? It could be anyone and anywhere. Really sorry but its likely gone forever.

jbssm

member

Activity: 71

Merit: 10

Quote from: IsaacGoldbourne on December 15, 2013, 06:13:04 PM

Quote from: jbssm on December 15, 2013, 01:54:46 PM

Quote from: trout on December 15, 2013, 01:47:33 PM

if your funds were stolen from multibit it has nothing to do with multibit.
It means your computer is compromised. Using qt OR blockchain.info
on the same computer will make you lose more money.

But my computer was not even on.

What if the hacker had access to the wallet backup and the password? It wouldn't need my computer that way, right?

Not he wouldn't, just to add I use armory for any large amount of coin. Electrum offline storage also works well.

Ok, just one thing. Where do you keep the backups for this? I mean, I could make a linux installation in a USB pen and use it just for keeping the bitcoins. But I'm afraid that if something happened to that USB pen, my BTC would be lost forever that way.

jbssm

member

Activity: 71

Merit: 10

Ok, thank you all for the support.

I already spent most of the day changing the most important passwords I have (email, dropbox, ebay, paypla, etc...).
I had installed Maverics (Mac OSX) about 1 month ago from scratch, but well, I guess it's time to be a bit paranoid so I'll install it again like you suggest.

About the lost bitcoins, perhaps it's a silly question, but do you think it's worth to make a complaint in the police? So far the hacker didn't move them from any of the two addresses where he sent them.

The IP address the hacker used was: 79.134.234.200
I can see this belongs to some guy in Austria, but like I said, I think he's just someone how runs a TOR server.

IsaacGoldbourne

member

Activity: 112

Merit: 10

Looking to start various enterprises

Quote from: jbssm on December 15, 2013, 01:54:46 PM

Quote from: trout on December 15, 2013, 01:47:33 PM

if your funds were stolen from multibit it has nothing to do with multibit.
It means your computer is compromised. Using qt OR blockchain.info
on the same computer will make you lose more money.

But my computer was not even on.

What if the hacker had access to the wallet backup and the password? It wouldn't need my computer that way, right?

Not he wouldn't, just to add I use armory for any large amount of coin. Electrum offline storage also works well.

paul44

newbie

Activity: 42

Merit: 0

This is exactly the sort of advice I was expecting and for that I thank you. Once something is compromised then its gone, out of the door, bolted!

Its how you move on from there that is important. I hope you can win!

Abdussamad

legendary

Activity: 3766

Merit: 1601

Quote from: jbssm on December 15, 2013, 02:57:26 PM

I moved the wallet to Blockchain.info, it's not that I trust my gmail account (and dropbox) is completely safe now but I guess it must be impossible to enter the account after I put up the google key two factor authentication.

blockchain.info is even worse than a desktop client! You computer has been compromized. Moving to blockchain.info won't make things any better.

What you should do is backup essential documents, delete everything on your computer, reinstall the operating system, install anti-malware software like anti-virus apps and scan and restore the backups. Then change your passwords everywhere including your email accounts. As far as bitcoins go you should move all the coins to a new wallet. Make sure you set a password on your new wallet.

paul44

newbie

Activity: 42

Merit: 0

and that's the most important point I feel. You have to be paranoid when it comes to anything money related. Not even directly but anything which could affect YOUR money. I am paranoid but I feel totally justified in being so.

Rannasha

hero member

Activity: 728

Merit: 500

Quote from: jbssm on December 15, 2013, 01:54:46 PM

Quote from: trout on December 15, 2013, 01:47:33 PM

if your funds were stolen from multibit it has nothing to do with multibit.
It means your computer is compromised. Using qt OR blockchain.info
on the same computer will make you lose more money.

But my computer was not even on.

What if the hacker had access to the wallet backup and the password? It wouldn't need my computer that way, right?

One way or the other, the attacker got access to your wallet file and the password. Whether that's from your backup or from your main machine is unknown. Note that if your computer has been compromised, the attacker could empty the wallet at any time, even when your computer is off.

paul44

newbie

Activity: 42

Merit: 0

When it comes to things I fell I simply cannot lose, I am on suspicion alert 101%. Online backups from other parties are not trustworthy at all, if they have access (which could be a possibility) then there would be a lucrative market selling information. Trust nothing or no-one.

cr1776

legendary

Activity: 4298

Merit: 1317

Quote from: jbssm on December 15, 2013, 02:57:26 PM

Quote from: Forexperiments on December 15, 2013, 02:48:48 PM

That's so bad Sad

How could the attacker hack a multibit wallet?
A custom trojan?

Well, I know the hacker had access to my email (I saw a login using the security questions in the GMAIL logs, it comes from some guy in Austria, but I think he was just running a TOR node).
Now, since the wallet backup was sent by email to another person, I think that's how he got it.

I don't know how he got the password tough... I have some suspicion it has something to do with Dropbox, but I can't find any logs in Dropbox to confirm this.

I moved the wallet to Blockchain.info, it's not that I trust my gmail account (and dropbox) is completely safe now but I guess it must be impossible to enter the account after I put up the google key two factor authentication.

If your computer was compromised, be sure to change your password at blockchain.info from a different machine or be absolutely sure that it is clean now.

paul44

newbie

Activity: 42

Merit: 0

I would work on the same principle as with anything related to security. Once compromised, always compromised. Backup the essentials and start afresh, its most likely the only option after any infiltration.

jbssm

member

Activity: 71

Merit: 10

Quote from: Forexperiments on December 15, 2013, 02:48:48 PM

That's so bad Sad

How could the attacker hack a multibit wallet?
A custom trojan?

Well, I know the hacker had access to my email (I saw a login using the security questions in the GMAIL logs, it comes from some guy in Austria, but I think he was just running a TOR node).
Now, since the wallet backup was sent by email to another person, I think that's how he got it.

I don't know how he got the password tough... I have some suspicion it has something to do with Dropbox, but I can't find any logs in Dropbox to confirm this.

I moved the wallet to Blockchain.info, it's not that I trust my gmail account (and dropbox) is completely safe now but I guess it must be impossible to enter the account after I put up the google key two factor authentication.

jbssm

member

Activity: 71

Merit: 10

Quote from: gamybtc on December 15, 2013, 02:18:28 PM

You are wrong, Hacker did not paid huge fees.

check this out :

Why would he pay high fee?

Hi, I know that now, it's just that Multibit gave some 3.4 BTC fees like the screenshot I posted, but that part must have been some mistake.

Forexperiments

sr. member

Activity: 259

Merit: 250

That's so bad Sad

How could the attacker hack a multibit wallet?
A custom trojan?

gamybtc

member

Activity: 112

Merit: 10

You are wrong, Hacker did not paid huge fees.

check this out :

Why would he pay high fee?

Altoidnerd

sr. member

Activity: 406

Merit: 251

http://altoidnerd.com

Quote from: jbssm on December 15, 2013, 01:54:46 PM

Quote from: trout on December 15, 2013, 01:47:33 PM

if your funds were stolen from multibit it has nothing to do with multibit.
It means your computer is compromised. Using qt OR blockchain.info
on the same computer will make you lose more money.

But my computer was not even on.

What if the hacker had access to the wallet backup and the password? It wouldn't need my computer that way, right?

Nothing has to be running for someone to initiate a transfer of your funds if they have your sensitive information.

jbssm

member

Activity: 71

Merit: 10

Quote from: trout on December 15, 2013, 01:47:33 PM

if your funds were stolen from multibit it has nothing to do with multibit.
It means your computer is compromised. Using qt OR blockchain.info
on the same computer will make you lose more money.

But my computer was not even on.

What if the hacker had access to the wallet backup and the password? It wouldn't need my computer that way, right?

trout

sr. member

Activity: 333

Merit: 253

if your funds were stolen from multibit it has nothing to do with multibit.
It means your computer is compromised. Using qt OR blockchain.info
on the same computer will make you lose more money.

paul44

newbie

Activity: 42

Merit: 0

Thanks a lot for the clear explanation Altoidnerd, it all makes sense to me. So is QT has a serious advantage if using other altcoins and even if using bitcoin alone it still has advantages to using it. Going to look into this a bit more

Thanks again!

blanc1664

newbie

Activity: 13

Merit: 0

Quote from: empoweoqwj on December 15, 2013, 10:50:35 AM

Why would anyone pay a huge transaction fee to hack an account? A miner? Wink

Are you saying that one can decide who gets a transaction fee? Doesn't it go to whichever miner happens to solve the block? And isn't that based on "luck"? Meaning, there's no way to tell which miner will get the fees.

Altoidnerd

sr. member

Activity: 406

Merit: 251

http://altoidnerd.com

Quote from: paul44 on December 15, 2013, 01:08:39 PM

Quote from: Altoidnerd on December 15, 2013, 01:07:19 PM

Quote from: paul44 on December 15, 2013, 01:05:09 PM

I currently keep mine in a blockchain.info wallet as it was recommended to me a while back. I would certainly be interested to hear if there is something more desirable though.

The QT wallet

What makes this a better option in your opinion? Not questioning your decision but I would like a bit more information though

I tend to use the QT wallet because it is the wallet type that is used for every other coin as well. If you learn to use the QT wallet and its features for backing up your coins, you will understand how to back up any altcoin you may obtain.

Also the QT wallet references a copy of the blockchain that is stored on your hard disk. It is not connecting to a server to access the blockchain. Regardless of the details of the argument, connecting to a server cannot be more secure than simply having the blockchain on your disk.

paul44

newbie

Activity: 42

Merit: 0

Quote from: Altoidnerd on December 15, 2013, 01:07:19 PM

Quote from: paul44 on December 15, 2013, 01:05:09 PM

I currently keep mine in a blockchain.info wallet as it was recommended to me a while back. I would certainly be interested to hear if there is something more desirable though.

The QT wallet

What makes this a better option in your opinion? Not questioning your decision but I would like a bit more information though

Altoidnerd

sr. member

Activity: 406

Merit: 251

http://altoidnerd.com

Quote from: paul44 on December 15, 2013, 01:05:09 PM

I currently keep mine in a blockchain.info wallet as it was recommended to me a while back. I would certainly be interested to hear if there is something more desirable though.

The QT wallet. If you must use a lightweight, try electrum. I think electrum is secure IMO (correct me if I am wrong) but you have to know how to help yourself to the terminal in it.

paul44

newbie

Activity: 42

Merit: 0

I currently keep mine in a blockchain.info wallet as it was recommended to me a while back. I would certainly be interested to hear if there is something more desirable though.

jbssm

member

Activity: 71

Merit: 10

Thanks it's kind of a shitty situation since I was keeping this money to pay the faculty fees.

It was my fault tough, I should have used something with a two factor authentication :/ I think it's best if I keep my BTC in a blockchain.info wallet from now on, or something similar if you are able to suggest a good alternative.

paul44

newbie

Activity: 42

Merit: 0

That makes a lot more sense. You have my sincere condolences, not a nice thing to happen at all!

Automatic

full member

Activity: 238

Merit: 109

Quote from: jbssm on December 15, 2013, 12:11:02 PM

But it's what it says in Multibit. I took a screenshot:

https://www.dropbox.com/s/njj7qxeqgaatlqd/Screen%20Shot%202013-12-15%20at%2017.08.06.png

I used Multibit wallet.

https://blockchain.info/address/1LUJr2Sq2ECpernwZBngwnuzguiHpUXWyD

Fees:- 0.0008, which, if memory serves, is a couple of bucks to steal a couple of grand.

jbssm

member

Activity: 71

Merit: 10

But it's what it says in Multibit. I took a screenshot:

https://www.dropbox.com/s/njj7qxeqgaatlqd/Screen%20Shot%202013-12-15%20at%2017.08.06.png

I used Multibit wallet.

flatfly

legendary

Activity: 1120

Merit: 1016

090930

Quote from: jbssm on December 15, 2013, 10:26:23 AM

the hacker paid 3.40 BTC fees to take out 3.81 BTC out of my wallet

Where do you get this idea from? Nowhere in this transaction do I see 3.40 BTC for fees.

pedrog

legendary

Activity: 2786

Merit: 1031

The transaction fee was 0.0008, balamce on that address is 3.8088038 BTC.

Where do you store your wallet?

Was that on a mining pool account?

jbssm

member

Activity: 71

Merit: 10

I had more accounts hacked, although this was the main one. I guess since they took from the others they understood that I would see it happened and they change the security settings for this account.

paul44

newbie

Activity: 42

Merit: 0

Thats quite a strange decision they made. If they had access anyway then why didn't they wait until the fees came down and make a lot more money. Very weird.

empoweoqwj

hero member

Activity: 518

Merit: 500

Why would anyone pay a huge transaction fee to hack an account? A miner? Wink

jbssm

member

Activity: 71

Merit: 10

No they took all the money, but since it was newly minted coins, they paid very high fees for it, 3.40 BTC of fees not 0.0001 BTC.

Rluner

full member

Activity: 126

Merit: 100

No you can't get the transaction fees back.

If someone really hacked your account I'm sure they would have taken all the money except for a minimum transaction fee of 0.001 BTC I think. Is it possible you made a mistake in some way with a transaction?

jbssm

member

Activity: 71

Merit: 10

Hi guys,
my wallet just got hacked. I still don't understand how, but since they where newly minted coins, the hacker paid 3.40 BTC fees to take out 3.81 BTC out of my wallet :/

The destination wallet was: 1LUJr2Sq2ECpernwZBngwnuzguiHpUXWyD

Is there any way I can at least get these transaction fees back?

How should I proceed about this in general? Do you think it's a good idea to send a micropayment to this wallet with a message saying these are stolen coins?

Topic: My Wallet got hacked and the hacker paid huge transaction fees to take the money (Read 5132 times)