Topic: My wallet was just hacked (Read 2380 times)

Hope you get them back!

consider it as a tip... loll

joking aside.. sorry about it...

No way to get them back unless the thief gives them back.

Basically once they are gone they are gone.

I appreciate you are trying to help (or just get your post count up) but FYI when you install a client on your computer all your private keys are kept in the wallet.  That is the way it works.  Your question does not make any sense.  Your statement "Private keys should be kept in cold storage" also makes no sense.

What do you mean "show up"?  Show up from where?  We all know exactly where all 3.17115309 of his coins went. They are here:  

https://blockchain.info/address/1HeAK9siHVWYfWGBVBcGz13WUZkYs5aUGx

is it possible to get one's bitcoins back after they have been stollen? The whole system is built to be anonymous and has no centralization so there's no way to put insurance on the bitcoins is there?  I would think once it's gone it's gone.

I wish you the best of luck in getting your bitcoins back

Did you experiment with any other cryptocurrencies maybe one of them had a keylogger attached to it (or anything you've download lately) I don't know how vulnerable Macs are to website scripts (probably not very) but windows freely accepts virus attacks from tricky java codes if you're not careful.

I'm sorry for your loss of bitcoin

Did your coins show up yet

Did you store your private key on your mac? Private keys should be kept in cold storage (ie: offline computers). Perhaps a hacker found your private key.

Yep, I can do that, as soon as I find an official version that's the same as mine. I'll let you guys know what I find out.

Random8

Can you compare the checksum or hash of your downloaded client to the official one?

The most reasonable answer is a compromised client - the source is freely avaılable so not too hard to simply adjust code to send to a predefined address after some threshold, compile it for mac and then release it for download.

İ would download the client from a trusted source and compare at least file sizes and/or signatures if they are available. Decompiling and looking at source would also be interesting - maybe the address is hardcoded that would make the compromised parts easy to find.

BIP 32 and a key phase, that you write down and lock in vault.

Only what happens when you get a hardware error? Can you make a backup with those?

Sorry for your loss

Any other bitcoin related applications you have installed? I imagine its quite easy for an app to enable the bitcoind api and then hammer sendbitcoins request over the api until the user unlocks the wallet (which is a security flaw of you ask me. )

Yeah... so much more fraud and theft than with the traditional currencies.   

suprising that it would be on a mac and also I dont understand why a wallet nneds to be installed on a system? is it generally more secure or what.

Sorry to hear Random8, but that sounds like the location where you got the bitcoin client from was compromised or not a legitimate application.

For reference to all the pro-Mac people, the firewall on Mac OS is disabled... by default.  Push your "Mac is very secure" antics elsewhere -> coming from someone that has been in the IT support industry (with Macs as well) for the past 12 years.

Where did you download bitcoin-qt from? I hope it was from this forum.

Granted - but the problem with all security software is... it doesn't catch new stuff... first the virus has to be documented and a definition distributed for it... before the AV software is able to prevent an infection.

Just an example:

In the past 6 months there's been a FBI virus going around - it took all of 2 weeks to get a good def written and now all major AVs block it. About a week after that, the makers changed the methods used and updated it say DOJ instead of FBI... that one took almost a month to define and about 2 weeks later they pushed a new version (changed DOJ to ICE). And there still isn't a good removal method for that one.

fbi - wasn't present in sm. infection was a rundll.exe loaded item in a temp folder - and had a shortcut in windows startup folder.
doj - is present in sm (and causes reboot to normal mode). also loading through a runonce entry. removal be booting to smcp and creating a temp admin user that could then be logged into to remove.
ice - present in sm (and blocks use), breaks the machines ability to boot into smcp, recovery console and system restore partitions. Only way is recovery console off a cd/dvd or pulling the drive and cleaning it on another machine.

All of these virus ask for moneypak in varying amounts and threaten arrest and prosecution for illegal activity (child porn) if the user doesn't 'pay the fine'

The big 3 AVs (yes there are only 3 legit av networks and they all shares defs with each other):

Norton: can catch FBI & DOJ but can't stop ICE.
Mcafee: can catch FBI but not ICE or DOJ.
Eset: active methods got FBI and DOJ. was able to remove FBI even without a def. Doj was a able to stop it from loading (but wasn't able to remove until defs came out). ICE still flys right by it tho.

~

my whole point is - there's lag time between when a new virus deploys and the AVs catch up. The only really secure way is via a USB bootable optical media with wallet already on it - or a handheld device that has never done and will never do anything else.