Wrong BTC Adress, copied from Binance's Dashboard

Dave1

hero member

Activity: 1526

Merit: 555

And with this one, I opened up a thread regarding this issue, [PSA]: Binance warns of threat about Clipper Malware.

Binance made aware that there are of their customers falling for this trick and so they issued a warning already. And the source of this malware is when someone downloaded a unofficial apps and plugins especially on Android devices.

So for crypto enthusiast, we should only downloading software updates to official apps.

DaCryptoRaccoon

hero member

Activity: 1241

Merit: 623

OGRaccoon

Looks like the hacker address

13PcbKjLBjVUYcSevYELQDc1pLDm6Bb9Di

Has has funds in from Binance and Crypto.com and also sends funds to Coinpayments.net.

You should contact them and share this report with them since they clearly must have account with Binance. Crypto.com and Coinpayments.net.

They also sent funds into Binance also so they must have account on Binance.

Honestly the fact that Binance can't even audit this stuff when it's clear as day the money went back into a Binance account is un-real..

Track link : https://www.breadcrumbs.app/reports/12548

You can track the money on Breadcrumbs.app

LittleBigIvan

newbie

Activity: 17

Merit: 0

Quote from: LittleBigIvan on April 09, 2020, 06:05:37 PM

Hey there guys, im creating this topic just to share and "maybe discuss" my case with Binance's support;

At the moment i didnt knew what exactly happened, but, i've copied the adress 13PcbKjLBjVUYcSevYELQDc1pLDm6Bb9Di
from the "Copy Address button" and deposited 0.10 BTC "That's a high value for me"

At that point, everything is ok.
Been waiting 10~20 minutes, and my balance haven't updated.
Ok, something wrong is happening here
For instinct, i've just checked my wallet again, and, for my hopelessness, my real BTC wallet is 19rRmQXDKxu8bQki2tJqdPJ2H1SfoYunHC

The "Copy Adress is automatically copying the adress 13PcbKjLBjVUYcSevYELQDc1pLDm6Bb9Di"

PS: I've also recorded with OBStudio what just happened; https://youtu.be/EqUqI6eaU6I

Ok, that's a problem. since i have already deposited 0.10 BTC in ANOTHER wallet.
No other way to solve it, i had to open a ticket.
And that's the answer i've received;

Binance's answer ;
Dear Ivan,

Thanks for reaching out.

We are sorry for what you encountered. Please go through following tips immediately before you take any further action.

1. Install anti-virus software to scan/kill Trojan and other viruses as soon as possible;
2. Disable plug-in/extensions for your browser, trading bot or third-party APP and uninstall unknown software on your computer;
3. Change the password for your devices and accounts;
4. In a critically dangerous situation you should format your hard drive and reinstall the OS (operating system) on your computer (If you are not sure how to do this, seek professional assistance);
5. Consider seeking help from an information security expert to determine how to achieve the best possible level of security;

Thank you for your understanding.

Best Regards,
Binance Support Team

My reply ;

Right.

But, what about my 0.10 BTC's?
How can i get it back?

Binance's reply ;

Dear Ivan,

Thank you for your follow-up.

As shown in the website, your BTC deposit address should be 19rRmQXDKxu8bQki2tJqdPJ2H1SfoYunHC. If the address changes after you copy and paste it, you will need to check the security status of your device. You can refer to the instructions offered by Elaine before.

In addition, I regret to tell you that, given that the destination address does not belong to Binance, we are not able to freeze any funds/accounts tied to the recipients.

If you are interested in pursuing this case, we recommend that you file a police report or cyber-crime report so that you may receive assistance as soon as possible.

Your understanding is much appreciated.

Kind regards,
Binance Support Team

The point is;
I have already formated my computer, downloaded the official .ISO from microsoft, paid for the OS, the anti viruses is ok, nothing have been detected.
Do you think the Binance's support is right in that case?

I agree that i should have paid more attention, yes, but, the "error" is occurring only on the "Copy Address button", not in my Ctrl + C / Ctrl + V

That's it guys, thank you for reading.

This haunts me and makes me sad to this day. Cry

Be careful, everyone, this attack isnt new and has been happening since the 'beginning'.

https://beincrypto.com/binance-alerts-users-about-clipper-malware/

LittleBigIvan

newbie

Activity: 17

Merit: 0

Quote from: Dewi Aries on November 03, 2021, 08:29:51 AM

Clipboard malware already come from years ago, and who get usually attacked is people who not really concern about recipient address when they want to send their crypto. AT first maybe sorry for your loss, but it is better to clean your computer for now and in next time make sure to see address that we want to send the coins, in past after that things attack a lot of people, before i send my coins, usually i see multiple times first 5 digit and last 5 digit address that i want to copy and paste.

Eh... i've learned it @ the worst way ever.. Undecided

zaesvlas

jr. member

Activity: 140

Merit: 2

Interestingly, I have never met such a person. Alternatively, it may be caused by the fact that you have some kind of virus on your computer.

Tigerheart3026

full member

Activity: 1018

Merit: 113

your 0.10BTC is now value approximately 6000$ it's very sad thing with happened u. if you had to double check which address showing in binance dashboard and ur copy paste address, provably it would not happen.

Dewi Aries

legendary

Activity: 2716

Merit: 1092

Leading Crypto Sports Betting & Casino Platform

Clipboard malware already come from years ago, and who get usually attacked is people who not really concern about recipient address when they want to send their crypto. AT first maybe sorry for your loss, but it is better to clean your computer for now and in next time make sure to see address that we want to send the coins, in past after that things attack a lot of people, before i send my coins, usually i see multiple times first 5 digit and last 5 digit address that i want to copy and paste.

UmerIdrees

hero member

Activity: 2464

Merit: 877

Quote from: LittleBigIvan on November 02, 2021, 09:47:19 PM

I really miss those 0.10btc..

Also, im glad that binance have solved this "button"

I can very well understand your feelings. You lost those 0.1 btc in April 2020, when the price of bitcoin was near 4000$. Now when you see the bitcoin price well over 60,000$, you should miss this 0.1 btc. It is not small amount in the present times.

Sometimes we learn the lessons but they are too costly. Feeling sad for you Sad

habebe

newbie

Activity: 98

Merit: 0

before you do the processes you have to repeat it before confirming because with a digital currency we don't know where you went wrong you should make sure and just be a little careful ,, it's a pity we will lose what we worked so hard for in just one mistake especially in newcomers who don't know much about crypto currency need to read first before entering and need to understand all your processes, that's all, check first before you confirm.

DewiKirana

full member

Activity: 378

Merit: 102

It is a pity that a disaster has happened to you, I am concerned about this incident.
This is a lesson for all of us to research before sending Bitcoins. You should also follow the advice given by the Binance team as soon as possible.

The Cryptovator

legendary

Activity: 2422

Merit: 2228

Signature space for rent

Quote from: LittleBigIvan on November 02, 2021, 09:47:19 PM

I really miss those 0.10btc..

Also, im glad that binance have solved this "button"

Sorry for your loss, Bitcoin is irreversible and that's why you shouldn't hope to get it back once that was moved to the hacker's wallet. The problem didn't exist on the Binance copy button really. The people are your clipboard was hacked hence whatever you copy from Binance it's turn into a hacker's address during pasting somewhere. You should take a lesson from your past mistake, always verify your address multiple times either it's your copied address or someone else's before pressing the send button. Also, don't visit suspicious sites from the device like porn, or don't install any application if you aren't sure that's safe. All the senses should work properly during sending Bitcoin to other wallets.

LittleBigIvan

newbie

Activity: 17

Merit: 0

I really miss those 0.10btc..

Also, im glad that binance have solved this "button"

Reatim

sr. member

Activity: 2828

Merit: 357

Eloncoin.org - Mars, here we come!

Quote from: cryptoworld99 on May 03, 2020, 11:40:35 PM

Quote from: LittleBigIvan on April 09, 2020, 06:05:37 PM

That's it guys, thank you for reading.

You should look up clipboard hijacking, and check your laptop for malware/virus.

Hackers have made special tools that detect BTC addresses when copied to clipboards and replace it with their own.

In the future double-check the address before you actually send the payment.

checkout https://sendbit.io they prevent clipboard hijacking and even give you private keys for each address you own.

Sorry for your loss buddy.

It is really sad and frustrating when you are relying about copy pasting from the site itself knowing that you are safer but in the end?you will end up being a victim of this hackers.

I Suggest also to OP that make a Copy of His wallet address in other form or even in His Bitcointalk account so whenever he need to copy and pasting at least he has a basis of double checking to find if the one is true or changed by hackers and looking the comparison of those addresses?it is very obvious that they are different so i don't know why Op did not noticed that in the first place.

cryptoworld99

member

Activity: 84

Merit: 22

Quote from: LittleBigIvan on April 09, 2020, 06:05:37 PM

Hey there guys, im creating this topic just to share and "maybe discuss" my case with Binance's support;

At the moment i didnt knew what exactly happened, but, i've copied the adress 13PcbKjLBjVUYcSevYELQDc1pLDm6Bb9Di
from the "Copy Address button" and deposited 0.10 BTC "That's a high value for me"

At that point, everything is ok.
Been waiting 10~20 minutes, and my balance haven't updated.
Ok, something wrong is happening here
For instinct, i've just checked my wallet again, and, for my hopelessness, my real BTC wallet is 19rRmQXDKxu8bQki2tJqdPJ2H1SfoYunHC

The "Copy Adress is automatically copying the adress 13PcbKjLBjVUYcSevYELQDc1pLDm6Bb9Di"

PS: I've also recorded with OBStudio what just happened; https://youtu.be/EqUqI6eaU6I

Ok, that's a problem. since i have already deposited 0.10 BTC in ANOTHER wallet.
No other way to solve it, i had to open a ticket.
And that's the answer i've received;

Binance's answer ;
Dear Ivan,

Thanks for reaching out.

We are sorry for what you encountered. Please go through following tips immediately before you take any further action.

1. Install anti-virus software to scan/kill Trojan and other viruses as soon as possible;
2. Disable plug-in/extensions for your browser, trading bot or third-party APP and uninstall unknown software on your computer;
3. Change the password for your devices and accounts;
4. In a critically dangerous situation you should format your hard drive and reinstall the OS (operating system) on your computer (If you are not sure how to do this, seek professional assistance);
5. Consider seeking help from an information security expert to determine how to achieve the best possible level of security;

Thank you for your understanding.

Best Regards,
Binance Support Team

My reply ;

Right.

But, what about my 0.10 BTC's?
How can i get it back?

Binance's reply ;

Dear Ivan,

Thank you for your follow-up.

As shown in the website, your BTC deposit address should be 19rRmQXDKxu8bQki2tJqdPJ2H1SfoYunHC. If the address changes after you copy and paste it, you will need to check the security status of your device. You can refer to the instructions offered by Elaine before.

In addition, I regret to tell you that, given that the destination address does not belong to Binance, we are not able to freeze any funds/accounts tied to the recipients.

If you are interested in pursuing this case, we recommend that you file a police report or cyber-crime report so that you may receive assistance as soon as possible.

Your understanding is much appreciated.

Kind regards,
Binance Support Team

The point is;
I have already formated my computer, downloaded the official .ISO from microsoft, paid for the OS, the anti viruses is ok, nothing have been detected.
Do you think the Binance's support is right in that case?

I agree that i should have paid more attention, yes, but, the "error" is occurring only on the "Copy Address button", not in my Ctrl + C / Ctrl + V

That's it guys, thank you for reading.

You should look up clipboard hijacking, and check your laptop for malware/virus.

Hackers have made special tools that detect BTC addresses when copied to clipboards and replace it with their own.

In the future double-check the address before you actually send the payment.

checkout https://sendbit.io they prevent clipboard hijacking and even give you private keys for each address you own.

Sorry for your loss buddy.

UserU

hero member

Activity: 2254

Merit: 537

My passive income eBook @ tinyurl.com/PIA10

Quote from: LittleBigIvan on April 23, 2020, 09:46:46 PM

Already did it, but it keeps happening on this computer, but it arent happening on my notebook, for example, goddamn crap technology i will throw this computer away on the street

Looks like a complete system reformat is the last resort. Backup your files and perform a clean reinstall.

Guaranteed you won't find those buggers on the PC anymore.

LittleBigIvan

newbie

Activity: 17

Merit: 0

Quote from: Zeke_23 on April 12, 2020, 09:48:03 AM

Quote from: UserU on April 12, 2020, 02:36:02 AM

Quote from: LittleBigIvan on April 11, 2020, 07:59:53 PM

Sure, here they are;

https://ibb.co/jwcY2YK

https://ibb.co/W58vn34

Thanks. I checked and they seem to be legit.

And I've also logged into my account and confirmed the Copy button is not compromised (i.e. copied address is the same when pasted).

There's a chance your system has been compromised. Run a malware/ spyware scan on your system using some tools like Malwarebytes and check if anything shows up.

Right, follow this instruction from @UserU, your system was compromised and the only solution is to remove it. If you still failed to found the malware and the problem still occur, try to reformat your personal computer and start to avoid installing unnecessary applications including chrome extensions.

Already did it, but it keeps happening on this computer, but it arent happening on my notebook, for example, goddamn crap technology i will throw this computer away on the street

o_e_l_e_o

legendary

Activity: 2268

Merit: 18771

Quote from: qory on April 12, 2020, 08:55:08 PM

I try other way but still the same and solution to restart my computer and malware gone, you need to restart your computer first.

I don't know if there is some meaning being lost here in a language barrier, but restarting your computer (as in shutting it down and booting it back up) is not going to remove any malware. You need to reformat it (as in, wipe the hard drive and reinstall your operating system and all your programs from scratch).

If you were experiencing the effects of clipboard malware, and these effects disappeared after a restart, that doesn't mean the malware has been removed. There is some clipboard malware which does not change the copied address every time. Sometimes it will deliberately not change the address, as a way to disguise itself, make it so that if people are double checking the address (as you always should!) that they will think it is correct, make people think it has been removed, and so forth.

If you previously had clipboard malware and haven't reformatted your computer, there is a good chance you still have it. Make sure you double and triple check every address.

qory

hero member

Activity: 1722

Merit: 508

I have the same cases with you but my problem with etherwallet address because when I want to copy my wallet but after paste I got wrong wallet because got malware with my computer, I try other way but still the same and solution to restart my computer and malware gone, you need to restart your computer first.

o_e_l_e_o

legendary

Activity: 2268

Merit: 18771

Quote from: UserU on April 12, 2020, 02:36:02 AM

Thanks. I checked and they seem to be legit.

Most extensions which include malicious code seem to be legit, otherwise nobody would download them. They have to perform some actual function which people want, and perform it properly, for the extension to be widely downloaded and not immediately uninstalled because it doesn't work. Seeming legit does not mean there isn't clipboard or other malware buried somewhere in the extension. Unless the extension is open source and you can review the code, then installing it is a risk, regardless of how legit it seems.

There are very few extensions which you actually need to install, and all of them should be open source and have GitHubs you can review. Extensions like uBlock Origin, Privacy Badger, HTTPS Everywhere, NoScript. The vast majority of extensions which people install are completely unnecessary and serve only to pose a security risk.

Zeke_23

sr. member

Activity: 868

Merit: 333

Quote from: UserU on April 12, 2020, 02:36:02 AM

Quote from: LittleBigIvan on April 11, 2020, 07:59:53 PM

Sure, here they are;

https://ibb.co/jwcY2YK

https://ibb.co/W58vn34

Thanks. I checked and they seem to be legit.

And I've also logged into my account and confirmed the Copy button is not compromised (i.e. copied address is the same when pasted).

There's a chance your system has been compromised. Run a malware/ spyware scan on your system using some tools like Malwarebytes and check if anything shows up.

Right, follow this instruction from @UserU, your system was compromised and the only solution is to remove it. If you still failed to found the malware and the problem still occur, try to reformat your personal computer and start to avoid installing unnecessary applications including chrome extensions.

Topic: Wrong BTC Adress, copied from Binance's Dashboard (Read 745 times)