Topic: Stolen ETH from myetherwallet.com - page 5. (Read 3784 times)

It seems it is still happening .  Someone lost 32 ether yesterday and another person lost 161 about 6 hours ago.  That's  $10,000 and $50,000 respectively.

   It seems you created your wallet on the fake site.   You need to stop using that wallet and switch the coins to point to another wallet.   If you cannot, you will need to check the wallet for the deposit and transfer them out before the scammer does.   I have been checking my old wallet everyday in case of a deposit coming in from my mining rigs before I redirected them. 

I only downloaded exodus wallet but I never used it. I traded on kraken so the only reason for using myetherwallet was to buy enjin and bitindia. How can I stop him from taking my enjin coins when they go live?
 I can't move them because they are time locked until the end of the pr-esale.

Where did you generate your address? Either you went to a phishing site and generated a wallet there and they know your private key. Or your system is compromised in another way, did you download any other wallets recently?

Yesterday i bought bitindia tokens. I added the new token to myetherwallet, checked the balance and after i saw my 1222 bitindia tokens in my wallet I turned off my computer and went to bed. Today I checked my balance and there are no tokens. There is a transaction 31 minutes after I turned off my computer where my bitindia are being transfered to another address. After that another transaction where 0.06 ether is also transfered at the same address. I can see the address at bitindia under token holders where it is listed with my 1222 bitindia tokens. The address is 0x799ffca55c7a9b7c0910799549a458066b2a5704.
Me buying
19 hrs 2 mins ago (Oct-11-2017 08:13:55 PM +UTC)
From:
0x85233fca620cec68ada9c3cd165d2dc418f3fb63
To:
Contract 0x90502eb2771ca5100e1e0e76f97741870822ae57 
  Contract 0x420335d3deef2d5b87524ff9d0fb441f71ea621f Internal Invoke
    1,122.58064516129032258 ERC20 (Bitindia) TOKEN Transfer From 0x90502eb2771ca5100e1e0e76f97741870822ae57 to 0x85233fca620cec68ada9c3cd165d2dc418f3fb63
 TRANSFER  2.9 Ether  to 0xad30f8bf12a80a86ee497228
Him stealing
18 hrs 28 mins ago (Oct-11-2017 08:44:43 PM +UTC)
From:
0x85233fca620cec68ada9c3cd165d2dc418f3fb63
Contract 0x420335d3deef2d5b87524ff9d0fb441f71ea621f 
 1,122.58064516129032258 ERC20 (Bitindia) TOKEN Transfer From 0x85233fca620cec68ada9c3cd165d2dc418f3fb63 to 0x799ffca55c7a9b7c0910799549a458066b2a5704

Any ideas how this happened? Myetherwallet account is new and only used to buy enjincoin a week ago. Enjin coin is time locked will i lose them too when they go live?

OMG i really would like to see this/those chinese thief being in a shooting range for dead sentence

     No, someone built a duplicate site . It is an exact copy so you never know its not the real one.

 The only difference is the url location is slightly different and the software is designed to transfer your ether to China where you will never see it again .  Its actually a Yahoo ad with the description of the correct site .  Very similar to the ads placed by Ebay or Amazon.

              Instead of amazon.com  or ebay.com , you get anazon.com or myebay.com.    Sometimes you catch the difference and sometimes not .

its redirecting to the original one whats the deal ?

The fake url website is    myethereunwallet.com .


        Here is the registration:


          Name: Wuxi Yilian LLC
Organization: Wuxi Yilian LLC
Mailing Address: No.1001 Anling Road, Xiamen Fujian 361008 cn
Phone: +86.5922577888
Ext:
Fax: +86.5922179606
Fax Ext:
Email:[email protected]

 It seems I am in second place at 16.63 .   All my mining efforts for nearly three months.   Ironically , instead of keeping my coins on the Bittrex echange , I used the wallet for safety .   Whenever I transfer out of Bittrex I have to open an email to verify it.  Also , I can trade coins whenever I feel like it.   The scammer is still running the mock site ad on yahoo.  I hope someone shuts him down or calls the FBI .

Please how to complain this address and who is the owner of the address.

From Where u clicked the MEW website link , i recommended u bookmark official MEW site , because now too much of scam website , sometimes they will send us notification from email then we clicked that fake website and we lost our eth.
Next time check u link before submit ur private key , see the SSL network "MYETHERWALLET LLC [US]" this a real official website of MEW.
CMIIW 

I lost all my 16.63 Ether .  Nearly $5,000

   It wasn't a hacked site .  The problem is a phishing site shows as an ad disguised as myetherwallet.com .   The duplicate site is identical except the url is

http www myetherunwallet.com .  instead of http www myetherwallet.com  When you glance at it you don't always notice the url isn't correct.  If you don't have a habit of checking your url's , you will never catch it.

  I was trying to transfer 1.7 ether to bittrex so I could buy Ubiq for $1.20.   Now I lost everything.     The fake site shows #1 on Yahoo search engine .  I imagine it shows on others as well.

               Instead of sending 1.7 Ether to bittrex , it send all 16.63 of my mined coins to :  0x4d517d272ce8d879d8891518e70153b49d2cdb96 .


                    This account is currently still running the ad for the fake site and continues to steal peoples ether.   They had $54,000 in Ether yesterday , they must have made a $10,000 withdraw yesterday because it now shows about $45,000.    Please spread the word .   If this was helpful please help with a small donation.

Eth: 0xd4bc2d9c73512e5906c800c0770f672ededcb792
Decred: DsW31GZYmNX2pFiMW5oZCdZVm26SAs34zsa
Bitcoin: 1MypnbH4aRoN1cYTmn7RA8NXSX5YXpSupT
Ubiq:  0x98e01264d4e550640ea0f1e6b9aa74cae7979278

           


       

I also lost 42 Ether from this!!!  What's crazy is that it worked before for a small amount.  I was attempting to send the Ether to Bittrex. 

Before you ask:  Yes, I DID check the address of the website and I DID verify the receiving address before submitting the transaction.  I have sent an email to MyEtherWallet.  The address the funds are sent to show multiple entries, but only a couple withdrawals (very small amounts, which is unusual if this is indeed a hacker's account).  I am actually currently the highest "loser" with 42.05387962 Ether sent here.  I will no longer use this service, and I would recommend that other be very wary, as there was nothing I could have done differently (except refrain from using this specific service) to prevent this hijacking.   

Edit:  Also, this was done on a government computer and I just confirmed that there is no malware on my computer. 

Not all MEW users are here in bitcointalk and if some are here, maybe they didn't notice this thread.
Anyway, since you've mentioned that you go directly to myetherwallet.com, maybe you've become a victim of a copy/paste malware. I suggest you to install an anti-malware software (such as Malwarebytes) and scan your PC. If you want to be sure next time, you should paste the address first to a notepad or text editor, check if it's right, then copy from there before pasting in a website or wallet.

PS. ALWAYS DOUBLE CHECK

I've read that there is some virus which is pasting bitcoin address when you try to copy/paste your address, maybe it is something similar, instead copy/paste bitcoin address it is pasting ether address.
Unless you accidentally sent transaction to that address or you were phished I don't see any other explanation.

Thanks, i will then do that.

Yes if that address has been compromised already it is best of you create another one.

I also got hacked as well. Should I create another Ether address and send my other coins there. I lost 2457 eBTC coins. The address was 0x4d517d272ce8d879d8891518e70153b49d2cdb96 that hacked me.

For me as i always read in these kind of threads. I always make it a point to create a bootable usb flashdrive of ubuntu when transfering. I get all things needed; the json file, address to. Boot into ubuntu live boot. Sign in with my google account to sync bookmarks. Go to MEW. Transact. Wait for atleast 1 confirmation. Save as bookmark the current page. Logoff live boot. And goto my usual dekstops chrome and check progress. I feel safe with this. And have not experienced this.