Someone hacking mybitcoin.com accounts: Proof

TraderTimm

legendary

Activity: 2408

Merit: 1121

Quote from: WilliamJohnson on June 22, 2011, 01:26:37 AM

My balance on mybitcoin is now 0, too.

My bitcoins went to 1MAazCWMydsQB5ynYXqSGQDjNQMN3HFmEu as well.

I had only 0.84BTC, so I don't really care, but I just wanted to confirm what the OP said.

However, it is possible I used the same password for my Mt. Gox account (which I never really used. I had no $ nor BTC in Mt. Gox, so once again, I don't really care).

But you cared enough to post.

CONTRADICTION COMPLETE.

WilliamJohnson

newbie

Activity: 47

Merit: 0

My balance on mybitcoin is now 0, too.

My bitcoins went to 1MAazCWMydsQB5ynYXqSGQDjNQMN3HFmEu as well.

I had only 0.84BTC, so I don't really care, but I just wanted to confirm what the OP said.

However, it is possible I used the same password for my Mt. Gox account (which I never really used. I had no $ nor BTC in Mt. Gox, so once again, I don't really care).

aceman1011

full member

Activity: 142

Merit: 100

I found it in the list now. Sucks, since Tor has evolved to the point where it is virtually untraceable. Who knows what kind of security MBC has, since most of these bitcoin sites were hastily thrown together. Once the hackers start sellin off their btc, bye bye bitcoins. At thus point, setting up an anonymous gold exchange makes much more sense. Let people stet mining and set up "pools" and unions.

NicholasBell

newbie

Activity: 34

Merit: 0

Quote from: EricJ2190 on June 21, 2011, 09:02:01 PM

Quote from: aceman1011 on June 21, 2011, 05:19:34 PM

Quote from: NicholasBell on June 21, 2011, 03:21:40 PM

24.184.196.101 is a Tor exit node according to https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=194.63.142.59&port=80, so it's almost impossible to figure out who it actually was. Good luck though for what it's worth.

Ummm... You entered the wrong IP. I did a port scan and it is dead. Definitely not Tor.

No, it isn't the wrong IP, unless you gave us the wrong IP. The IP address you posted is in the list. As to why your port scan comes up empty-handed, it could be filtering incoming connections, or just be too bogged down to handle your connection attempt.

Right -- that is a list of some Tor exit nodes among which the offending IP is listed. That IP in the URL (194.63.142.59) was just part of the search result link from Google but that wasn't the important part.

BCEmporium

legendary

Activity: 1218

Merit: 1000

Beats me how the cracker got to a 14 char upper+lower+numeric salted password, but... he did.
Not blaming it on mbc thou.

@Eric,

Guess you would need to start by explaining to him what is Tor in the first place... Roll Eyes

EricJ2190

full member

Activity: 134

Merit: 102

Quote from: aceman1011 on June 21, 2011, 05:19:34 PM

Quote from: NicholasBell on June 21, 2011, 03:21:40 PM

24.184.196.101 is a Tor exit node according to https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=194.63.142.59&port=80, so it's almost impossible to figure out who it actually was. Good luck though for what it's worth.

Ummm... You entered the wrong IP. I did a port scan and it is dead. Definitely not Tor.

No, it isn't the wrong IP, unless you gave us the wrong IP. The IP address you posted is in the list. As to why your port scan comes up empty-handed, it could be filtering incoming connections, or just be too bogged down to handle your connection attempt.

Clipse

hero member

Activity: 504

Merit: 502

uh I dont believe you, simple as that.

I had my mtgox password unchanged with 25BTC in mybitcoin.com at the time deciding if these rumours were true then someone would steal my coins.

None of it is gone, same password still.

All I can think is that you guys arnt being honest about using a shitty password at mtgox and the same shitty password at mybitcoin.com so it took the crackers <3hrs to find the password.

BCEmporium

legendary

Activity: 1218

Merit: 1000

Quote from: Clipse on June 21, 2011, 08:26:08 PM

aceman101 do you even have any proof that it wasnt you making that transfer?

There is absolutely no way for this forum to know wether your intend is just to make mybitcoin.com look like shit.

That much we know he didn't. Many mbc accounts were depleted to the same address, one of mine included.
Except in my case I know it was due to the mtgox db party, because it was an account matching mtgox's data, and most (except this guy actually) of the other users felt under the same situation of share a login between mtgox and mbc.

aceman1011

full member

Activity: 142

Merit: 100

Lol, look at all the other posts reporting stolen bitcoins going to the same address. People are reporting that their miner passwords are being changed, and they also have different MtGox passwords. The evidence is all around you, you're just too thick-headed to acknowledge it.

Clipse

hero member

Activity: 504

Merit: 502

aceman101 do you even have any proof that it wasnt you making that transfer?

There is absolutely no way for this forum to know wether your intend is just to make mybitcoin.com look like shit.

tito13kfm

newbie

Activity: 42

Merit: 0

Quote from: aceman1011 on June 21, 2011, 10:59:26 AM

I have the IP!!!!! MBC was at least smart enough to give me that. They were hacked and now won't do anything for us? A**holes. 24.184.196.101
Light em up, boys!
http://i53.tinypic.com/3463i2g.jpg

That's the IP of a TOR exit node. It's not the person who hacked you.

aceman1011

full member

Activity: 142

Merit: 100

Quote from: NicholasBell on June 21, 2011, 03:21:40 PM

24.184.196.101 is a Tor exit node according to https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=194.63.142.59&port=80, so it's almost impossible to figure out who it actually was. Good luck though for what it's worth.

Ummm... You entered the wrong IP. I did a port scan and it is dead. Definitely not Tor.

NicholasBell

newbie

Activity: 34

Merit: 0

24.184.196.101 is a Tor exit node according to https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=194.63.142.59&port=80, so it's almost impossible to figure out who it actually was. Good luck though for what it's worth.

aceman1011

full member

Activity: 142

Merit: 100

Ermmm... Not worth it. I am gonna try the remote access metasploit attack and see if I can steal this persons wallet later. Involving the police doesn't really seem worth it though. They're in Brooklyn, and the hacking incident occurred in servers in the West Indies. Undecided

jerfelix

sr. member

Activity: 266

Merit: 250

Quote from: aceman1011 on June 21, 2011, 10:59:26 AM

I have the IP!!!!! MBC was at least smart enough to give me that. They were hacked and now won't do anything for us? A**holes. 24.184.196.101
Light em up, boys!

Might want to check with the good folks at optonline.net.

Code:

C:\>tracert 24.184.196.101

Tracing route to ool-18b8c465.dyn.optonline.net [24.184.196.101]
over a maximum of 30 hops:

And remember, you can have better luck if you call as a network admin, talking to one of their network admins. As soon as you get the police involved, they'll likely insist on a subpoena. But if you call one of their network admins, and let them know the time and, if they won't give you the name of the user (I doubt they will), maybe you can have them set aside the name of the user for when the police come. Preserve the records.

Not sure how you got the IP address, or how reliable that is, but that's what I'd do.

PS I should add that this was advice given to me by local police about 8 years ago, when I was investigating a hacking incident where I was pretty sure I knew who the intruder was.

nhodges

sr. member

Activity: 322

Merit: 251

Quote from: aceman1011 on June 21, 2011, 10:59:26 AM

I have the IP!!!!! MBC was at least smart enough to give me that. They were hacked and now won't do anything for us? A**holes. 24.184.196.101
Light em up, boys!

Nothing you really can do, just like someone can do a chargeback when you sell them WoW gold.

aceman1011

full member

Activity: 142

Merit: 100

I have the IP!!!!! MBC was at least smart enough to give me that. They were hacked and now won't do anything for us? A**holes. 24.184.196.101
Light em up, boys!

AngstHase

newbie

Activity: 39

Merit: 0

http://forum.bitcoin.org/index.php?topic=20533.0

d.james

sr. member

Activity: 280

Merit: 250

Firstbits: 12pqwk

Quote

Someone hacking mybitcoin.com accounts: Poof

It was a typo, fixed.

chanzui

newbie

Activity: 8

Merit: 0

Hi,

what's mybitcoin.com about? Can't find information on there page.

Topic: Someone hacking mybitcoin.com accounts: Proof (Read 7142 times)