Pages:
Author

Topic: wtf? i woke up and it says my bitcoin got sent to some one's address (Read 3806 times)

hero member
Activity: 605
Merit: 634
yea im running windows but how does that even happen.  im 99.9% sure i dont have a key logger.  i work in IT and im not that dumb to get a virus and stuff that easily.  they would need to have my my wallet in order to send themselves bitcoin right?  it is password protected.  im using multi-bit

You don't have to be dumb to get a virus and stuff, you just have to be running an insecure version of Windows. Some versions can have a running VNC server injected into memory, the attacker can log on to it as SYSTEM, and you are pwned without ever clicking on a link, or getting a funny email. Some tools let you remotely add a user.
member
Activity: 84
Merit: 10
its on my computer

Let me guess, you are running Windows.  Undecided

Never use Windows to store your wallets.

And never use Linux to store your wallets ?
Too big.
Give us an alternative.
newbie
Activity: 29
Merit: 0
Mind telling us the versions of Multibit, Windows and Java?

I ask because the original bitcoin client seeds the random number generator "with a screen scrape and other hardware sources", specifically when it's running on Windows.

Whereas bitcoinj (which Multibit relies on) simply calls SecureRandom() without seeding the PRNG first.
hero member
Activity: 750
Merit: 601
I'm sorry for the OP's loss.

I would say if you have more than 5 Bitcoins, buy a cheap laptop (second hand if you like) and dedicate it to storing your Bitcoins, and nothing else.
You can use Armory for signing your transactions with an offline computer that never touches the internet.
Every online Bitcoin service should be using 2FA, if they don't have that facility, then don't use them.

Holding 5 bitcoins, your cheap laptop is only going to be 10% of your Bitcoin worth, and you will be almost guaranteed security (unless someone breaks into your house whilst you have your wallet unlocked).

Until something like Trezor comes along people need to take serious precautions.
I wouldn't walk around with the equivalent of 10bitcoins in the leather wallet in my back pocket, and people shouldn't put Bitcoins in a internet connected computer that you do lots of other things on.

Come on people,  it may be virtual money, but its not virtual pain when you lose it. 100's of people on this forum can help you with securing your Bitcoins, pull you finger out and do it properly.


hero member
Activity: 490
Merit: 500
if i have an offline wallet, how do i see how much bitcoins is in my wallet?  (serious questions)
i usually just have it up on my screen minimized and i check it every now and then.

You can install a watch only wallet. You will need a deterministic wallet like Electrum or Armory or the upcoming multibit hd.

Just use www.blockchain.info to watch your Bitcoin wallet, for Litecoin I use http://explorer.litecoin.net
My real wallet is on an encrypted Ubuntu home partition. I only log into when I want to buy something.

Install altcoin clients on different encrypted home partitions. Never run a miner and your wallet in the same place. Never trust a 3rd party to hold your Bitcoins!  Wink
sr. member
Activity: 430
Merit: 250
Are mac users like myself less likely to have this issue?Or should I just be vigilant as everyone else needs to be?What solutions exist for an offline wallet?As I'm looking into one due to recent unusual access attempts to my online wallet (it's safe as I have 2 factor login).My coins are still safe/there it's just more important now to get them moved to an offline wallet though.
Don't install any suspicious bitcoin-related software and you'll be fine on any os, or if you really have to, install it on another computer.
legendary
Activity: 1022
Merit: 1000
Freelance videographer
its on my computer

Let me guess, you are running Windows.  Undecided

Never use Windows to store your wallets.
This is bullshit. Using windows, never had any wallets stolen. Stupid people will install malicious software no matter which os they use. From what I see most of bitcoin stealing stuff comes with bitcoin related software, a different os will not protect you from that.

Majority of the people who got their wallet stolen uses Windows. That is a fact.
Are mac users like myself less likely to have this issue?Or should I just be vigilant as everyone else needs to be?What solutions exist for an offline wallet?As I'm looking into one due to recent unusual access attempts to my online wallet (it's safe as I have 2 factor login).My coins are still safe/there it's just more important now to get them moved to an offline wallet though.
legendary
Activity: 3066
Merit: 1188
Hauwd-the-noo people.

Can we get back to the OP's post for a moment. We don't even know what wallet they were using or whether it was encrypted or not.

Could the OP please provide some details about that ? e.g. was it QT with a password encryption ?

How did you check the balance - using the blockchain or the wallet ? Did you definitely check the blockchain? Are you sure you didn't make a payment or something and your wallet sent the change to change addresses ? In that case the blockchain would show your original address as empty but your wallet would still have access to the change addresses.

If your wallet wasn't encrypted then it may simply have been 'stone' by a virus. What software have you downloaded that may have piggy-bagged a trojan ? Are you on Windows ?

I'd be interested to know more about this.
hero member
Activity: 868
Merit: 1000
Cloud backups are supposed to be spread around multiple servers in multiple data centers all in the name of redundancy. How can you secure money in such a system?

People can encrypt the wallet file using truecrypt or archive softwares with a good password, before putting it on dropbox.
full member
Activity: 184
Merit: 100
yea im running windows but how does that even happen.  im 99.9% sure i dont have a key logger.  i work in IT and im not that dumb to get a virus and stuff that easily.  they would need to have my my wallet in order to send themselves bitcoin right?  it is password protected.  im using multi-bit
If you are a miner, save, and make multiple backups of a wallet to keep in cold storage.
Go ahead and have the network send bitcoins to this wallet, but don't actually have the wallet open.

When you need to access the money in the wallet, to be most secure, copy the wallet on a safe computer to make whatever transactions you need out of it.
Immediately afterwards, delete all files from the computer, but keep wallet backups.

legendary
Activity: 3640
Merit: 1571
that would be my guess as well but if my wallet was not shared publicy, they would still need both my dropbox username and corresponding pw to obtain access to my wallet.

Maybe they phished you. Maybe someone at drop box stole your wallet. Remember you have no idea who stole your coins. There is just this address you see. Anyone in the world who had access to the file could have stolen it. Cloud backups are supposed to be spread around multiple servers in multiple data centers all in the name of redundancy. How can you secure money in such a system?
legendary
Activity: 3640
Merit: 1571
if i have an offline wallet, how do i see how much bitcoins is in my wallet?  (serious questions)
i usually just have it up on my screen minimized and i check it every now and then.

You can install a watch only wallet. You will need a deterministic wallet like Electrum or Armory or the upcoming multibit hd.
member
Activity: 62
Merit: 10
that would be my guess as well but if my wallet was not shared publicy, they would still need both my dropbox username and corresponding pw to obtain access to my wallet.
newbie
Activity: 42
Merit: 0
no, so i have my wallet on 2 computers, my personal one and my work computer at work and im the only one that uses it.  i scanned my computer and its cleaned, except for false positives.  theres no way someone could have vnc into my computer.  the only thing i can think of is that i backed up my wallet onto my dropbox.  (not shared publicly)  dumb move, i know.  i already removed it from the dropbox.  created a new wallet from an ubuntu live cd with no internet connected and stored onto a thumb drive that will never be connected to the internet.  

all i know is something got compromised, but pretty sure its not my computer.  if a keylogger was installed on my computer, pretty sure alot more would have been stolen other than my btc.

btw, scammer alert.  i received a PM from this user "promithios".  really, im not that dumb.  already reported to forum admins.
Quote
hello there
my name is aihab and im a reserve counter cyber terrorism officer in the israelly army , ive read your thread about the lost bitcoins and since some of my qualifications include tracking people and electronic data - i would like to offer you my services in retrieving your and maybe others' coins.
i charge a flat 5 btc fee + 5% of what i manage to retrieve , the 5 btc expected upfront and i guarantee to issue a full refund if no retrieval was made within 14 days.
write me back if you are interested , and feel free to refer others to me.
regards.

My guess would be it was stolen from your dropbox. Not the first case I have heard of wallets being stolen from dropbox.
member
Activity: 62
Merit: 10
no, so i have my wallet on 2 computers, my personal one and my work computer at work and im the only one that uses it.  i scanned my computer and its cleaned, except for false positives.  theres no way someone could have vnc into my computer.  the only thing i can think of is that i backed up my wallet onto my dropbox.  (not shared publicly)  dumb move, i know.  i already removed it from the dropbox.  created a new wallet from an ubuntu live cd with no internet connected and stored onto a thumb drive that will never be connected to the internet.  

all i know is something got compromised, but pretty sure its not my computer.  if a keylogger was installed on my computer, pretty sure alot more would have been stolen other than my btc.

btw, scammer alert.  i received a PM from this user "promithios".  really, im not that dumb.  already reported to forum admins.
Quote
hello there
my name is aihab and im a reserve counter cyber terrorism officer in the israelly army , ive read your thread about the lost bitcoins and since some of my qualifications include tracking people and electronic data - i would like to offer you my services in retrieving your and maybe others' coins.
i charge a flat 5 btc fee + 5% of what i manage to retrieve , the 5 btc expected upfront and i guarantee to issue a full refund if no retrieval was made within 14 days.
write me back if you are interested , and feel free to refer others to me.
regards.
newbie
Activity: 2
Merit: 0
Did you click on any link that has javascript?  Huh
hero member
Activity: 605
Merit: 634
I won't join the OS flamewars, but to the OP, if you had a keylogger, they've got everything. They can VNC/RDP into your machine. They don't need to then break into Multibit they can just log in like you do  (or any client, or any website, or any email service). Move any btc to cold storage until you can verify your machine is clean. Right now, it certainly isn't.
sr. member
Activity: 504
Merit: 250
Earn with impressio.io
I never let the kids use Windows

Harsh dude, windows is the most kid friendly os around.
They're really missing out.

A gross misperception.  It wasn't until they were prolly 17 or so that their cousin told them it wasn't Windows.  and, the only downside he was able to point out to is that he couldn't hack it.  he liked to show off how easily he could hack windows, telling stories of how he got porn to pop up on all the computers in the class at the same time.  He had the nerve to ask me if he could download an illegal copy of windows and install it so he could hack it!  LOL

BTW, separately, when he was telling them how he did a FB phishing attack with a fake login, he told them I was the only one who didn't fall for it.  

Linux is at least as kid friendly.  You click on Firefox and it opens!  lol.  Facebook and Youtube look the same.  

I loved hearing the kids explain to other kids how it is "just like windows" and how you can do all the same things.  When people make false statements about Linux, I know they have little to no experience using it, because that's the only possible explanation.  Linux is super kid friendly.  It even has special versions for very young kids.  

Wait a minute, if your children are 18 or above, why would you stop them from using any OS? More So if they can buy their own gadgets. Linux is actually a kernel, but the rest of the OS is what is usually crappy. Bad UI layout, a ton of people set on making CLI for the rest of their lives, not enough love for the GUI.

The argument I love to use is, just like mining, if there is no money involved(and a job) people just don't do very good. I mean look at Windows's UI(Not W8's Metro thingy), we have Aero, bunch of cool stuff like that.

Who's stopping them.  They just only use Linux on my computers.  They can buy and use whatever they want.  But, if you knew them, you'd realize they don't have a preference.  They use the same apps on both. 

There is a lot of money behind Linux.  A TON.  IBM alone sinks over $1 billion a year on it.  There's RedHat.  Heck, Microsoft has become a top contributor to the kernel now.  Over 95% of the world's top 500 supercomputers run it.  It runs Android and Chrome OS.  It is in many of the hardware devices you use, like blu ray players, media players, etc,... 

As for Aero, Linux had that first.  People were shocked at all the kool things my windows could do in Linux, like wabble when you dragged them.  Then Aero came out -- which was understandably the first introduction to kool desktop graphics for Windows users. 

I use Windows over 90% of the time for work, running Win 7 VMs inside of Win 7 on i7s, and hosting eBusiness solutions on Win 2008 servers, in addition to AIX, in DCs.  I personally run all my servers on Centos, though. 
legendary
Activity: 1862
Merit: 1011
Reverse engineer from time to time
I never let the kids use Windows

Harsh dude, windows is the most kid friendly os around.
They're really missing out.

A gross misperception.  It wasn't until they were prolly 17 or so that their cousin told them it wasn't Windows.  and, the only downside he was able to point out to is that he couldn't hack it.  he liked to show off how easily he could hack windows, telling stories of how he got porn to pop up on all the computers in the class at the same time.  He had the nerve to ask me if he could download an illegal copy of windows and install it so he could hack it!  LOL

BTW, separately, when he was telling them how he did a FB phishing attack with a fake login, he told them I was the only one who didn't fall for it.  

Linux is at least as kid friendly.  You click on Firefox and it opens!  lol.  Facebook and Youtube look the same.  

I loved hearing the kids explain to other kids how it is "just like windows" and how you can do all the same things.  When people make false statements about Linux, I know they have little to no experience using it, because that's the only possible explanation.  Linux is super kid friendly.  It even has special versions for very young kids.  

Wait a minute, if your children are 18 or above, why would you stop them from using any OS? More So if they can buy their own gadgets. Linux is actually a kernel, but the rest of the OS is what is usually crappy. Bad UI layout, a ton of people set on making CLI for the rest of their lives, not enough love for the GUI.

The argument I love to use is, just like mining, if there is no money involved(and a job) people just don't do very good. I mean look at Windows's UI(Not W8's Metro thingy), we have Aero, bunch of cool stuff like that.
sr. member
Activity: 504
Merit: 250
Earn with impressio.io
I havent searched around but is there a sticky anywhere on the forum which is like "wallet security for dummies" that teaches step by step on how to properly secure and create both online and offline wallets. A lot of people getting into bitcoin now are not tech professionals, and these hacking incidents are going to hinder mainstream adoption (which i am assuming most of us want).

I got some help directly from one of the trusted members here, but for newbies, creating a cold storage wallet can be seriously intimidating. Remember when you got your first bitcoin? How complex everything seemed?

Hardware wallets will likely be the best thing for non-technical.  Third-party services, like Coinbase and blockchain.info are good options, too, particularly for under 1 BTC for things like TigerDirect purchases and ordering a pizza. 

There's a risk they could get robbed, but hopefully they've learned to use cold storage.  But, for 1 BTC or so, I wouldn't sweat using them.  For long-term storage, they do need to make cold storage easier.  Coinbase makes creating a paper wallet very easy, but I'm not sure I like using a third party to create a paper wallet.  Nevertheless, that's probably as easy as a paper wallet is going to ever get for a non-technical person. 
 
Pages:
Jump to: