Important! Please read: Mt gox hacked, all accounts were leaked

[shoota]

Mt Gox is the most active exchange for buying/selling bitcoins. You have to have an account on the site and that's the email and password that got leaked. If you didn't sign up on that site then you are ok. If you did then change the password on every other site that you might have the same password as Mt Gox.

[shoota]

ok so if i've never tried to buy or sell the bitcoins, i pretty much don't have anything to worry about then?

Correct, if you didn't sign up to the site.

[IFMU]

got it, wanted to make sure on that... thanks ^_^

[[XC] Oj101]

I got nailed:

8:47AM (GTM +2)

Your wallet address has been changed on BTC Guild. The new wallet address is: xxx. For your security, payouts are disabled for 24 hours after a wallet address has been changed. Please contact webmaster@btcguild.com if you did not request this change.

8:48AM (GTM +2)

A payout has been made to your wallet (1CU3BqTmpdJmxqd8WL4AmPkPMSjmKtwVDZ) in the amount of 0.38 BTC. This transaction was immediately initiated by our server. It may appear in your wallet instantly, or it could take a few hours depending on how long it takes to be confirmed in a block.

I was busy walking to work at that time, I was nowhere near a PC. I have never changed the address and the last time I did a payout was two days ago. I lost 0.38BTC.

[Alpha]

contact the admin - if its been more than 24 hours, yes, you lost.

if not, tell them you were hacked and they cancel the change. did you not see the note about not getting a payout for 24 hours because of the change?

[p2501]

I'd be very much in favour of hunting down the people who did this, with pitchforks and torches. Damn crackers.

[artemm]

I'd be very much in favour of hunting down the people who did this, with pitchforks and torches. Damn crackers.

A lot of people are hunting anon and lulzsec.... with... err... limited success

I was surprised that anon claimed responsibility for this, but now that they're pretty much the same group, expect the unexpected. They're doing things for lulz AND hacktivism, so anyone's a target.

[KaptainBlaZzed]

I got nailed:

8:47AM (GTM +2)


8:48AM (GTM +2)


I was busy walking to work at that time, I was nowhere near a PC. I have never changed the address and the last time I did a payout was two days ago. I lost 0.38BTC.

Ouch, i changed all passwords when i found out about the break-in.

MtGox, TradeHill, Dwolla, BTCGuild, Paypal, Ebay, and my bank(s)

They are also now all STRONG passwords (+15 alpha numeric characters, no words, special characters)

[Reflex1]

ok so if i've never tried to buy or sell the bitcoins, i pretty much don't have anything to worry about then?

If you have never opened an account at mt gox then no you have nothing to worry about. If you have opened an account with them, then they have your email and password, if you use the same password for other stuff its recommended you change it.

I've already started to received junk mail from this on my email...

[[XC] Oj101]

contact the admin - if its been more than 24 hours, yes, you lost.

if not, tell them you were hacked and they cancel the change. did you not see the note about not getting a payout for 24 hours because of the change?

Oh, sorry. I forgot to mention that I only enabled it after seeing the loss. I'll contact them anyway, thanks.

[[XC] gomeler]

Seems the market is a bit shaky with the price dropping down to ~$13 USD and lower. Now the question is.. do I buy sometime soon

Oh, sorry. I forgot to mention that I only enabled it after seeing the loss. I'll contact them anyway, thanks.

Ouch. I enabled that the moment I generated a fraction of a BTC I'm surprised it isn't set by default on BTCGuild.

[BeepBeep2]

Oh, sorry. I forgot to mention that I only enabled it after seeing the loss. I'll contact them anyway, thanks.

My pool has a wallet lock, if my account is stolen there my money can still go nowhere but my wallet...if I were to lose this machine and had to change wallets I would simply contact them for the change

[artemm]

UPDATE: looks like the same thing may be transpiring at Trade Hill!!

An anonymous blog post claims to have hacked trade hill and is offering to sell password hashes. I would take this seriously at this point.

If you used your tradehill password anywhere else, I would change this now.

[Tom128]

Oh boy. You got a link for that? Hopefully TradeHill was not lying about how they encrypted the passwords. Salted multi-iterated SHA hashes are going to be hard to crack, much harder than salted MD5 hashes like Mt.Gox used.

[artemm]

Oh boy. You got a link for that? Hopefully TradeHill was not lying about how they encrypted the passwords. Salted multi-iterated SHA hashes are going to be hard to crack, much harder than salted MD5 hashes like Mt.Gox used.

The hacker claims that they're unsalted.

And I don't think linking to something potentially illegal will go over too well with the mods, lol.

[don_xvi]

Hmm, popular opinion is that the Tradehill db hack claim is fake.
It still can't hurt to change a password, though.

[INFRNL]

luckily I have not signed up for any of these yet. I do need to activate the security thing on guild though

[OldChap]

Local news:

"A teenager has been arrested in the UK in a joint Scotland Yard and FBI probe into the hacking of websites."

http://www.bbc.co.uk/news/technology-13859868

[shoota]

Local news:

"A teenager has been arrested in the UK in a joint Scotland Yard and FBI probe into the hacking of websites."

http://www.bbc.co.uk/news/technology-13859868

Good. I don't see the lulz in hacking crap and making people's lives miserable.

[p2501]

http://www.h-online.com/security/new...s-1264337.html

Wow, so they want to hit finance and gov to free people from oppression. What does a trade platform for an independent currency has got to do with it?

[Blauhung]

http://www.h-online.com/security/new...s-1264337.html

Wow, so they want to hit finance and gov to free people from oppression. What does a trade platform for an independent currency has got to do with it?

Either
A) generation of funding
or
B) others claiming it was them to try and defame them further

For the most part it would be ideologically backwards for them to attempt to cripple a decentralized system such as bitcoin and they have asked for donations in the form of bitcoin, so my vote is that this was just undertaken by some money grubbing hacker. From the looks of things they had a hacked account and attempted to kill the value then buy back boatloads of extra coins while cheep, and in the chaos somehow found access to the user database of the exchange. This is completely to be expected. Any time anything of value becomes available, someone will try and steal it.