MT.Gox Hacked

General_Kerr · Jun 19, 2011

I just got this email.

Dear Mt.Gox user,

Our database has been compromised, including your email. We are working on a
quick resolution and to begin with, your password has been disabled as a
security measure (and you will need to reset it to login again on Mt.Gox).

If you were using the same password on Mt.Gox and other places (email, etc),
you should change this password as soon as possible.

For more details, please see this:

https://support.mtgox.com/entries/2...ell-off-due-to-a-compromised-account-rollback

The informations there will be updated as our investigation progresses.

Please accept our apologies for the troubles caused, and be certain we will do
everything we can to keep the funds entrusted with us as secure as possible.

The leaked data includes the following:

- Account number
- Account login
- Email address
- Encrypted password

While the password is encrypted, it is possible to bruteforce most passwords
with time, and it is likely bad people are working on this right now.

Any unauthorized access done to any account you own (email, mtgox, etc) should
be reported to the appropriate authorities in your country.

Thanks,
The Mt.Gox team
Click to expand...

And I just signed up with my new standard password, Time to change them again. (It's Official, im using unique at all sites for now on )

Huge Bitcoin sell off due to a compromised account - rollback

Mark Karpeles
posted this on Jun-20 04:07

The bitcoin will be back to around 17.5$/BTC after we rollback all trades that have happened after the huge Bitcoin sale that happened on June 20th near 3:00am (JST).

One account with a lot of coins was compromised and whoever stole it (using a HK based IP to login) first sold all the coins in there, to buy those again just after, and then tried to withdraw the coins. The $1000/day withdraw limit was active for this account and the hacker could only get out with $1000 worth of coins.

Apart from this no account was compromised, and nothing was lost. Due to the large impact this had on the Bitcoin market, we will rollback every trade which happened since the big sale, and ensure this account is secure before opening access again.

UPDATE REGARDING LEAKED ACCOUNT INFORMATIONS

We will address this issue too and prevent logins from each users. Leaked information includes username, email and hashed password, which does not allow anyone to get to the actual password, should it be complex enough. If you used a simple password you will not be able to login on Mt.Gox until you change your password to something more secure. If you used the same password on different places, it is recommended to change it as soon as possible.

SERVICE RETURN

Service will not be back before June 20th 11:00am (JST, 02:00am GMT). This may be delayed depending on what is found during the investigation.
Click to expand...

ET Phone Home · Jun 19, 2011

wow .

General_Kerr · Jun 19, 2011

Someone told me that it was upward of 25K bitcoins.

General_Kerr · Jun 19, 2011

Dear Sir or Madam,

A few hours ago the Bitcoin trading website Mt Gox has been hacked. Malicious
individuals have been able to obtain a database containing usernames, email address
and encrypted passwords. This information has been posted publicly on the internet.

As a Bitcoin supporter I'm now sending a message to every email address contained in
the hacked database. This is to warn you that your username, email address and
password have been leaked. I therefore strongly advice you to change your passwords.
If you have used the same password on different websites it's highly recommended to
change your password on all of your accounts!

For a more secure alternative to Mt Gox, the community appears to be moving to
******* So this is no reason to lose faith in Bitcoin itself. It must be seen as
a warning that not every website can be trusted with your data however! Their link
is ******************************* (Note: You can remove the Referral Code
when registering if you want!) This is certainly not the only website where you can
exchange Bitcoins, also check out
*****************************

Sincerely,

A Bitcoin supporter
My wallet:
************************
Click to expand...

Oh friggen joy. im getting more spam already. No kidding.

Busta305 · Jun 19, 2011

This is not good for bitcoins....

skybluesam1 · Jun 20, 2011

Yeh i went into a schatroom for bitcoins last night and a guy was on about hacking it.I saw the reports and over 100k of coins were trying to be sold or something like that.I am not sure though as i am pretty new to bitcoins and am sturggling to mine now .

General_Kerr · Jun 20, 2011

Dear Mt.Gox user,

Our database has been compromised, how you already know.

To protect your account in the future, please download the Certificate
(self-extracting archive) from Attachment and install it.

If you were using the same password on Mt.Gox and other places (email,
mybitcoin.com, etc),
you should change this password as soon as possible.

Please accept our apologies for the troubles caused, and be certain we will do
everything we can to keep the funds entrusted with us as secure as possible.

Any unauthorized access done to any account you own (email, mtgox, etc) should
be reported to the appropriate authorities in your country.

Thanks,
The Mt.Gox team
Click to expand...

ofc the included.exe (When executed in a virtual box) is a naaasty trojan.

anyone else feel like ranting about the fact anyone can send an email from someone else's email? It came from the "Real" mtgox domain but a script kiddie just sent it using sendmail or something similar.

EDIT
So, now instead of a typical "secure" pass (EX Sp0k3z9!) that i can remember..

I'm using something like

websitecompanyname.Sp0k3z9!

and double hashing it

Lets see you brute or dictionary that SKiddies!
(No, Really, i am. I have to decode my paswords to enter them in now. Using a random salted hash program i downloaded.)

Log in or Sign up

[READ THIS OR YOU WILL BE SCAMMED]

MT.Gox Hacked

General_Kerr Active Member

ET Phone Home Apprentice

General_Kerr Active Member

General_Kerr Active Member

Busta305 Playercoins.com - Cheap FIFA 14 coins, GW2 Gold, ESO Gold, and more!

skybluesam1 Guru

General_Kerr Active Member

Log in or Sign up

[READ THIS OR YOU WILL BE SCAMMED]

MT.Gox Hacked

Thread Tools

General_Kerr Active Member

ET Phone Home Apprentice

General_Kerr Active Member

General_Kerr Active Member

Busta305 Playercoins.com - Cheap FIFA 14 coins, GW2 Gold, ESO Gold, and more!

skybluesam1 Guru

General_Kerr Active Member