Topic: This transaction is a fraud (Read 309 times)

here the list of ports

http://www.portchecktool.com/

which one to check to verify suspect violation if my IP?

my yahoo was pwned time ago but now with a new pw and 2fa activated looks clean...
adware has gone with spyhunter and no remnants of malware hitmanpro found

Perhaps the credentials you used for your Yahoo and kraken account were both leaked in some database for another website you registered for?

Or, the adware was, as blankcode described, enough already for an attacker to keylog your pc or your browser.

You can check some databases with your email here, https://haveibeenpwned.com to see if that's the culprit.

If not, it might be smart to completely format your harddrive. (It might be smart to do that anyway.)

i scanned with malwarebytes, spyhunter, eset, hitmanpro... nothing of suspect found!!!
is it time to be quiet?

I thought having multiple malware protections isnt really that necessary.This is my first time to see Hitmanpro and thanks for the share up.I might consider to purchase this one in add up into my Eset Nod32 Premium.@Blankcode its not really wrong to use free ones and ive been using Eset and theres no problem at all yet it did the job when it comes to protection but as 1referee said that theres no better protection other than your self-awareness when it comes to possible virus/malware risk.

There is nothing really wrong with the free ones if they are reputable. I use the free version of Avira for over a decade now, and have never faced an issue. I don't download anything, don't click on links, don't visit vague sites, etc. I think the latter is more important than having a paid Antivirus running.

As an additional layer of detection I use the free version of HitmanPro to periodically scan my system to be 'sure' my system is clean. It doesn't remove threats and whatnot, but detecting them is enough to know that I shouldn't work with Bitcoin on that specific system. I will then secure erase my SSD and reinstall my OS.

Having said please use the premium anti-virus instead of those free and cracked ones, risks are there when installing this free AV, you can buy yearly just for 100$ for the safety of your 1k$+ funds than risking your funds.

When dealing with cryptocurrencies you should do all the basic security procedures
-2fa on exchanges
-never let funds on exchanges for long periods
-use a safe wallet such as Electrum or a hardware wallet
-use an antivirus and scan your computer periodically.

Looks like you haven't done any of this....
I recommend that you buy a hardware wallet if you want to still invest in cryptocurrencies. I recommend ledger or trezor, but buy only from official retail

Having an adware means that your device is not safe anymore, whether it can log what your typing when using browser or log your computer's data or not. You should reflash a new OS for your own safety and check all application yoi're going to install make sure its came from official source not from any random website or cracked one.

I got Vonteera on my pc, is it enough to crack my credentials?

No service would really be keen on detecting unusual activities on any accounts as long the security features had been breached.
Therefore,they can possibly do help you when the issue arises but talking on reverting it back then thats the thing that wont happen ever.
Take this as a lesson learn which you should really be careful on storing important log-in credentials like emails and other stuff.

i use gmail also and not yet pwned... everything is under 2fa now where it is possible and every password is changed
my doubt not yet solved is why kraken noticed suspect movements and didn't stop any trade, it looks  a kind of complicity! they refuse to answer at that

Controlling the Yahoo account is not enough...
The hackers must have had access to his computer and used the pre-saved password to receive the email from Kraken and pass the security.
That mean he has a trojan. He has to clean up his computer asap.

They hide these trojan in pirated stuff, and when you install the crack, you open a backdoor, from there they can go on your computer, and scan silently for a wallet.dat
If they find them, they download them. If you haven't encrypted your wallet, you lost your coins.

Then they will try to get your coins from the exchanges by using your saved password in your browser.

Never use an exchange that is using emails as 2FA, use only the ones who are using Google Authenticator. The hackers cannot have simultaneously access to your phone and your computer.

That sucks. Sorry for your loss.

You should stop using Yahoo immediately. Billions of Yahoo accounts have been compromised in multiple hacks. I recommend a more secure email provider like Gmail.

Like others have said, the money is gone. At this point, you need to worry about securing your computer and accounts. I would follow TheWolf666's instructions regarding cleaning or formatting your PC. I would back up anything important and then format myself. Change your passwords, switch to a more secure email provider, and start using 2FA on your exchange accounts.

kraken sent me a mail where they said to notice some suspect movements and disabled my account
support knows the facts but they investigate just on a law authorities contact

no answers on type of suspect movements i asked!!!

I feel sorry for you.

I got the same problem before. You probably clicked on something that installed a backdoor on your computer.
This is what I suggest.

1- stop internet... the hackers are taking control of your computer remotely and are intercepting your password.
2- backup any wallet you may have on an USB key.
3a- either you install Spyhunter (that is the most honest anti-trojan in my opinion, do not trust Malware Byte, they do not flag the NSA tools, and the hackers are using the same tools since they have been leaked by Wikileak)
3b- or you re-install your computer completely.
4- setup 2FA (using Google authenticator) with all your trading account. Do not deal with exchanges which does not support 2FA security.
5- if you save your passwords in a text file, change all your password and never write them in full. For example a password like WE$90899Balty should be WE$*****B**ty so that you can memorize without saving the full password.

Your transaction cannot be reversed, but you can avoid more problems by acting fast and avoid this to happen again.

 

     Bitcoin transactions are not reversible. There is no way to get your funds back. You can try to contact Kraken support. However, they are unlikely to take responsibility because there was absolutely nothing they could have done on their end to prevent this from happening. If they sent the e-mail to your compromised e-mail and the hacker then authorized the transaction that way, they did their part by sending the e-mail. If Kraken offers other modes of 2FA, you may want to consider using those instead. One of the better ways is to use google authenticator or similar means of 2FA. The only downfall is that you must make sure that you print out the key, in case your cell phone/devise becomes corrupted, so you don't end up locked out of your account.
     Furthermore, only keep the amount of cryptocurrency on an exchange that you need to perform desired functions. If you are not running some kind of trading bot, I'd recommend withdrawing the funds to private keys that you control. Preferably to private keys stored on a paper wallet, air-gapped computer, or hardware wallet. I know that it is convenient to have funds on the exchange so that you can take advantage, immediately, of any market movements. However, as you now know, this convenience may not be worth it.

If you have not done this then I am afraid there are no way to recover it. That's how crytocurrency works.

You can contact with kraken support to let them know about the unauthorized login but about fund recovery - you have zero chance. Sorry to about this.

somebody hacked my yahoo account and kraken credentials
an unauthorized withdrawal was acceptad
i don't know how to recover my money but that's all!!!

https://www.blockchain.com/btc/address/1EQRyqXKNoNKSisG98eL58xCYWyhdsTe3w

and

https://explorer.blockstream.com/tx/8eb173c14998770781aa60908f8511b7f3f02125aa2b5ae9d56c1dca739c2c1c?expand