BitShares Forum

Main => Technical Support => Topic started by: cAPSLOCK on January 21, 2014, 08:18:28 am

Title: Was I Hacked?
Post by: cAPSLOCK on January 21, 2014, 08:18:28 am
Hi.

So I mined a few bitshares and then bought a few more.

I decided to load my wallet today and to update the blockchain.

When I loaded it I was greeted with this info:

Status: 10301 confirmations
Date: 12/17/2013 01:37
To: PmcX3e12vnQ2weDquWtKc2XUX6iSWH9JYd
Debit: -18.14963961 PTS
Net amount: -18.14963961 PTS
Transaction ID: 24b932b5991fd64aefd26931c5e0b0d428abf9da57e71dda554ba1ecc0117062

I do not remember transferring out my bitshares.

Is there any way to figure out where they went?  I am honestly confused.  I have no evidence of any security breech on my computer... and I have never had any other coins stolen... I have lots of bitcoins for example...

 
Title: Re: Was I Hacked?
Post by: cAPSLOCK on January 21, 2014, 08:30:54 am
I must have been hacked.

I can think of no other way for my PTS to have been transferred out.

Ugh.
Title: Re: Was I Hacked?
Post by: cAPSLOCK on January 21, 2014, 03:10:06 pm
Sorry for putting this post in the wrong forum.

Is there any way for me to figure out any clues about where these PTS went?

My machine is completely clean... no virus or trojan.  No recent software installed.

I am completely dumbfounded.  I am wondering if I transferred the coins out to some exchange or something when I was half asleep?!?  There is no real way to trace this transaction or clues from which to connect it to other addresses?
Title: Re: Was I Hacked?
Post by: ripplexiaoshan on January 21, 2014, 03:30:28 pm
According to https://coinplorer.com/PTS/Addresses/PmcX3e12vnQ2weDquWtKc2XUX6iSWH9JYd

This wallet received 18.14 pts from  PnP1xTNDi6EnGWSj7BALyobvJ8b3hd7P5d   and PYYn3c3QmLe2R1T3Ps9VriNyQPdKtf8vkZ , I guess at least of them is your wallet address? then all pts went to PZpbAVvD9AhyYAnAXd6BTsfnDJrEoraubx . If you didn't do anything, then your wallet must be hacked. Did you encrypt your wallet?
Title: Re: Was I Hacked?
Post by: cAPSLOCK on January 21, 2014, 03:44:19 pm
Thanks for taking the time to answer... 

No, I had not encrypted this wallet.  Nor do I tend to keep any crypto wallets on this machine (although I have had btc, litecoins etc on and off it).  The reason I was holding these coins locally was because I wanted to have them off any exchange for distributions.

I have scoured the machine looking for any trace of reasoning where these coins went.

At this point I believe it is more likely I moved them myself than any malware or breech.  But then I would be getting terribly forgetful. :)
Title: Re: Was I Hacked?
Post by: Amazon on January 21, 2014, 03:52:57 pm
Thanks for taking the time to answer... 

No, I had not encrypted this wallet.  Nor do I tend to keep any crypto wallets on this machine (although I have had btc, litecoins etc on and off it).  The reason I was holding these coins locally was because I wanted to have them off any exchange for distributions.

I have scoured the machine looking for any trace of reasoning where these coins went.

At this point I believe it is more likely I moved them myself than any malware or breech.  But then I would be getting terribly forgetful. :)

The first thing to keep balance in your wallet is to encrypt it and make backups. Check with your exchange deposit address, maybe you just forgot about it.
Title: Re: Was I Hacked?
Post by: rysgc on January 21, 2014, 04:49:12 pm
Alcohol sucks!
Title: Re: Was I Hacked?
Post by: cAPSLOCK on January 21, 2014, 05:17:48 pm
Alcohol sucks!

Well I doubt I was drunk. :)

But I have been thinking through this quite a bit.  There is a possibility I ran a rogue miner binary around the time of this transaction.  I was experimenting with mining alt coins at the time which is actually why I became interested in PTS in the first place.  I vaguely remember downloading a quark miner which I was immediately suspicious of.  I cannot find any link, and I have already erased any trace of that software from my machine.

Fortunately all BTC/LTC wallets I have are cold and/or encrypted. 

To be honest I had not thought anyone would take an interest in stealing altcoin wallets, but I may indeed have been wrong.  This is the reason I had not gone to the trouble to encrypt the wallet, and obviously that is a mistake.

Ah well...   it embarrassing, but it is not the only time in life I have made a mistake.

I wish this community well...  my assume PTS have vanished into the hands of a dishonest person.

I am deleting all altcoin wallets and old empty BTC and LTC pub/private keys from this machine (so i don't erroneously use them) and moving on.

Lesson learned.  I suppose my PTS days are over.

Thanks again.