Purse.io HACKED.. - page 2. | Bitcointalksearch.org

aarons6

legendary

Activity: 1736

Merit: 1006

Quote from: Phildo on October 10, 2015, 07:58:21 PM

Quote from: btcjamtom on October 10, 2015, 07:51:45 PM

from Reddit:

We have received word today of unauthorized password reset notification emails. We are aware of the issue and have secured all funds. All user balances are accounted for and upon completing our investigation, service will resume shortly.

All accounted for, even though the transaction ids in the emails appear to be legitimate. Of course.

yeah, i guess we will see.. its good news tho..

Phildo

legendary

Activity: 1526

Merit: 1000

Quote from: btcjamtom on October 10, 2015, 07:51:45 PM

from Reddit:

We have received word today of unauthorized password reset notification emails. We are aware of the issue and have secured all funds. All user balances are accounted for and upon completing our investigation, service will resume shortly.

All accounted for, even though the transaction ids in the emails appear to be legitimate. Of course.

Mickeyb

hero member

Activity: 798

Merit: 1000

Move On !!!!!!

Quote from: saturn643 on October 10, 2015, 06:11:44 PM

Quote from: aarons6 on October 10, 2015, 06:06:48 PM

yep. specially since they took the site down..

usually when you email support and say hey someone stole my password they email you back saying too bad..
not pull the plug Sad

I don't know if they're pulling the plug. The site itself is still up. I think they are just trying to fix the problem. What I am concerned is the lack of a public notice that they have been hacked. At this point, it looks a little scammy.

Well maybe it's not fair to blame them yet for the lack of communication. In the midst of the crisis you are trying to save what you can save, and you leave public notices for later. At least I would do it like this. When you get hacked, every second is important.

Edit: There you go a post above mine, a public notice!

btcjamtom

newbie

Activity: 3

Merit: 0

from Reddit:

We have received word today of unauthorized password reset notification emails. We are aware of the issue and have secured all funds. All user balances are accounted for and upon completing our investigation, service will resume shortly.

saturn643

hero member

Activity: 728

Merit: 500

Quote from: aarons6 on October 10, 2015, 06:18:57 PM

it just happened.. like literally 5 minutes before i posted..

i watched my bitcoins leave my wallet Sad

I guess that's not enough time for them to put up an official response.

Phildo

legendary

Activity: 1526

Merit: 1000

I'm shocked that this carders paradise would eventually ~~steal everyone's coins~~ get hacked.

aarons6

legendary

Activity: 1736

Merit: 1006

Quote from: TheGr33k on October 10, 2015, 06:14:23 PM

This sounds like a very serious security flaw and I'm willing to bet that all your bitcoins wind up in the same wallet. I would suggest we all sit back and watch cautiously at Purse, because this is no slight issue .
OP I am sorry for your loss, and everybody else who's experienced loss. thank you for informing the community!

the wallet that my coins went to has just 2 transactions.
https://www.blocktrail.com/BTC/address/1fZisbHc6rGRoWmMet7n15Sficng5YWbQ

looks like they both came from purse hot wallets.

aarons6

legendary

Activity: 1736

Merit: 1006

Quote from: saturn643 on October 10, 2015, 06:11:44 PM

Quote from: aarons6 on October 10, 2015, 06:06:48 PM

yep. specially since they took the site down..

usually when you email support and say hey someone stole my password they email you back saying too bad..
not pull the plug Sad

I don't know if they're pulling the plug. The site itself is still up. I think they are just trying to fix the problem. What I am concerned is the lack of a public notice that they have been hacked. At this point, it looks a little scammy.

it just happened.. like literally 5 minutes before i posted..

i watched my bitcoins leave my wallet Sad

TheGr33k

hero member

Activity: 518

Merit: 500

This sounds like a very serious security flaw and I'm willing to bet that all your bitcoins wind up in the same wallet. I would suggest we all sit back and watch cautiously at Purse, because this is no slight issue .
OP I am sorry for your loss, and everybody else who's experienced loss. thank you for informing the community!

saturn643

hero member

Activity: 728

Merit: 500

Quote from: aarons6 on October 10, 2015, 06:06:48 PM

yep. specially since they took the site down..

usually when you email support and say hey someone stole my password they email you back saying too bad..
not pull the plug Sad

I don't know if they're pulling the plug. The site itself is still up. I think they are just trying to fix the problem. What I am concerned is the lack of a public notice that they have been hacked. At this point, it looks a little scammy.

aarons6

legendary

Activity: 1736

Merit: 1006

Quote from: pereira4 on October 10, 2015, 06:02:24 PM

Quote from: nrd525 on October 10, 2015, 05:56:30 PM

My bitcoins were also withdrawn, as was another person on reddit/r/bitcoin.

https://www.reddit.com/r/Bitcoin/comments/3o9ju8/my_purseio_account_was_compromised/

Well this is weird then. I would have called this a classic "my computer got hacked but I blame the service provider" scenario but it's unlikely that you all got compromised at the same time so im calling a security issue on their part. This, or its an inside job and someone inside purse is running with your money.

yep. specially since they took the site down..

usually when you email support and say hey someone stole my password they email you back saying too bad..
not pull the plug Sad

pereira4

legendary

Activity: 1610

Merit: 1183

Quote from: nrd525 on October 10, 2015, 05:56:30 PM

My bitcoins were also withdrawn, as was another person on reddit/r/bitcoin.

https://www.reddit.com/r/Bitcoin/comments/3o9ju8/my_purseio_account_was_compromised/

Well this is weird then. I would have called this a classic "my computer got hacked but I blame the service provider" scenario but it's unlikely that you all got compromised at the same time so im calling a security issue on their part. This, or its an inside job and someone inside purse is running with your money.

nrd525

legendary

Activity: 1868

Merit: 1023

My bitcoins were also withdrawn, as was another person on reddit/r/bitcoin.

https://www.reddit.com/r/Bitcoin/comments/3o9ju8/my_purseio_account_was_compromised/

aarons6

legendary

Activity: 1736

Merit: 1006

Quote from: saturn643 on October 10, 2015, 05:49:44 PM

Quote from: aarons6 on October 10, 2015, 05:24:24 PM

Quote from: oli123123 on October 10, 2015, 05:23:29 PM

I've used Purse.io a few times and I haven't had any problems but i don't know maybe your computer has been compromised?

nope.. the site is down for maintenance now..

it uses google authy to log in.. so i cant see how my computer would generate the withdraw link and then use my phone to authenticate it..

i might add that my google authy phone is NOT my current in use phone but a backup phone that i use just for google authy. it has no sim card in it.

Well that's a problem, isn't it? The site itself is up, but when I try to log in, I get an error "Server down for maintainence. Please check back shortly"

yes and my bitcoins were withdrawn from my account on that site.. per the email i got, that i didnt do.

logo
Withdrawal

You withdrew 171.152 mBTC.

34208cb232c35717820c72ea7b1c76f6874b6cda6f12a946f91e628754719ccb
View transaction

i checked the transaction and its real. Sad

saturn643

hero member

Activity: 728

Merit: 500

Quote from: aarons6 on October 10, 2015, 05:24:24 PM

Quote from: oli123123 on October 10, 2015, 05:23:29 PM

I've used Purse.io a few times and I haven't had any problems but i don't know maybe your computer has been compromised?

nope.. the site is down for maintenance now..

it uses google authy to log in.. so i cant see how my computer would generate the withdraw link and then use my phone to authenticate it..

i might add that my google authy phone is NOT my current in use phone but a backup phone that i use just for google authy. it has no sim card in it.

Well that's a problem, isn't it? The site itself is up, but when I try to log in, I get an error "Server down for maintainence. Please check back shortly"

aarons6

legendary

Activity: 1736

Merit: 1006

Quote from: oli123123 on October 10, 2015, 05:23:29 PM

I've used Purse.io a few times and I haven't had any problems but i don't know maybe your computer has been compromised?

nope.. the site is down for maintenance now..

it uses google authy to log in.. so i cant see how my computer would generate the withdraw link and then use my phone to authenticate it..

i might add that my google authy phone is NOT my current in use phone but a backup phone that i use just for google authy. it has no sim card in it.

oli123123

legendary

Activity: 1445

Merit: 1000

I've used Purse.io a few times and I haven't had any problems but i don't know maybe your computer has been compromised?

aarons6

legendary

Activity: 1736

Merit: 1006

so i had a few purchases up and i was waiting for a buyer when i just received an email saying i requested to withdraw all of my funds.
now, in this email it says to click the link or use the code to complete the withdraw, or email support.. which i did contact support..

a few seconds later i get an email saying thanks for withdrawing my funds.. WHAT?? i didnt click any links or typed in any codes.. i contacted SUPPORT.. which wasnt a website LINK its [email protected]

now my account with PURSE has EVERY security thing turned on.. even 2fa..

so it looks like someone has figured a way to generate these links.. probably a security flaw or something..

EDIT.. it seems they are working to fix the issue.. they also say the coins were sent to a safe wallet.. and not lost.

Topic: Purse.io HACKED.. - page 2. (Read 4061 times)