Topic: Trojan Wallet stealer be careful - page 8. (Read 50237 times)

Even if they do steal it no one has been able to crack the official bitcoin wallet encryption anyway as long as your passphrase is long and diverse enough.

Or am I wrong about this? if so I would like to see the example.

I think people get a bit carried away with security, bitcoins are already far more secure than your standard bank account.

Is it more secure to keep your wallet on a Unix based system (Linux, OSX) rather than windows? or it all comes down to not being stupid and installing unverified executables?

This is one of the main reasons that I do not use Windows.  I run Linux on all my boxes.  When and if I get enough BTC/LTC/Whatever I will be more secure about where I store my wallet but right now nobody would be interested in the whole 4 BTC I have.

I'm sorry, but how do I encrypt my wallet?

It's the horse of troy, WATCH OUT! 

people who aren't careful enough will always get scammed no matter what.

Is there some kind of minimalistic linux-live-cd to do your bitcoin-business? That would be great, as it's very hard for some trojan to get on a live-cd!

Edit: Just answered my question: https://bitcointalksearch.org/topic/beta-bitpit-locked-down-linux-distro-for-offline-transactions-94321

I've seen some youtube scam videos where they claim they're "injecting" (counterfeiting) bitcoins with a special program, with a download link. I don't mind that they're compromising people who are themselves unsavory, and dumb as bricks.

come on````````

Site down as of 6/13/2012.

try a Mint Linux, cant see any disadvantages in it. I can even print in colour from Mint. Also you can install VirtualBox and run Windows and all your fav apps on it.

Yes. Linux is good. I use it sometimes.
But any OS has its disadvantages...

Better use Linux as your main OS. Everything wearing off, fact is that AV did not protect you from any real treat and give you just illusion of been protected, that is even more dangerous. AVs is just a scam.

Yes, I agree to a point. However, the "crypters" as they are called, wear off after a while. So keep using your AV software.

dont be fooled by anti-virus programs, it is just good for those who sale it. before releasing trojan into network, bad guys testing it to be detectable by all major antivirus programs. no body will release detectable trojan. Once become detectable trojan encrypted, update issued and it again undetectable. antiviruses always behind for 2 weeks a t least in this race.

When you do a online AV report it usually submits it.

Here are some tips to keep your wallet secure:
ALWAYS use antivirus software (The paid AV is better than free. AVG seems to work best for me, there is a free version if needed)
ALWAYS use a firewall (Most AV software includes this, make sure it does. Also, make sure you have a hardware firewall.)
NEVER download from an untrusted source
NEVER turn off User Account Control on Windows Vista/Windows 7
NEVER turn off your AV/Firewall unless you really have to for a video game, web server, etc.
ASK yourself these questions before you download anything:
1) Do I know what this program does?
2) Is there any chance this program contains a virus?
3) Is the file name misspelled or does it look suspicious? 
4) How many people downloaded it, and were there any bad reports about it?
KNOW that every file can possibly have a virus hidden in it
KNOW that no virus scanner is 100% effective
KNOW that a virus can NOT harm you unless you open it
MAKE backups of your wallet file (PM me if you do not know how, I'll tell you.)
ENCRYPT your wallet with a very strong password of AT LEAST 10 words
BE AWARE that there can also be viruses for MAC OS and LINUX (and other operating systems)
RESEARCH all programs. No reviews or information? Don't download. Ask around first.

I hope my post keeps the community well informed.

is there is trojan for linux too?

I use a little black notebook to write stuff up in... a virus cant steal that from me... unless it's a keylogger wich my antivirus should detect

ideally, you should use different passwords for every account. have you considered using keepass2 or another similar secure password manager?

you can keep the keepass2 passwords and such encrypted on a usb dongle around your neck or on your neckchain, but that's meant as a backup, in case you lose the computer with keepass2 installed, or in case you need to use a school, work, or library computer.

but ideally, you'd use something like that. a single password across many bitcoin websites isnt exactly ideal. just saying.