Blockchain.info wallet hacked & emptied. Warning!

[skycity]

Skycity Aug 27, 2019 22:50 EDT

This morning I found my BTC balance 0. But it must be 0.035 BTC on it (about 350 USD).
What happened? I did not send anything or even accessed my BTC wallet.
Please HELP.



Greg (Blockchain)

Aug 28, 10:13 EDT

Hello,

I'm very sorry to hear about this. You may have some type of malware on your computer that resulted in your funds being stolen because your private information was somehow obtained. One of the most common types of these are browser extensions posing as bitcoin price tickers that are actually stealing your account information. There's also the possibility that you visited a phishing site posing as Blockchain. We've also heard of computer viruses that detect when an address is in your clipboard, and replace the one you wanted to use with an address controlled by this malicious party.

By design, Blockchain never has access to users' accounts or funds. If you keep your password and private key backups secure, then your funds are always safe with us. Since this information has been compromised, be sure to never use this wallet or any addresses contained within it. I'd also highly advise against using the same password again. I'm truly sorry that you had funds stolen from you. That certainly is an extremely frustrating experience.

If you?d like to learn more about how our wallet works, please visit blockchain com.


Skycity

Aug 28, 23:54 EDT

Hello,
None of what you mentioned really occured, it was probably a breach in your security system. And, yes, again as you mentioned, that certainly was an extremely frustrating experience. But what is more frustrating is that you hold no responsibility. I was totally sure that my funds would be safe with you, blockchain.com wallet was chosen, because I trusted you.
But this is the point where trust ends.
That was not my fault. My computer is always double-checked and secure, and I never visit phishing sites or extensions. Such response from you, no help or compensation offered from your side, makes it even more frustrating.
I will never use again and will discourage other people to use your service.
I am also going to make this situation and our conversation public.


Sent: Wednesday, August 28, 2019 at 5:13 PM

 

[Gamblerspro.com]

Skycity Aug 27, 2019 22:50 EDT

This morning I found my BTC balance 0. But it must be 0.035 BTC on it (about 350 USD).
What happened? I did not send anything or even accessed my BTC wallet.
Please HELP.



Greg (Blockchain)

Aug 28, 10:13 EDT

Hello,

I'm very sorry to hear about this. You may have some type of malware on your computer that resulted in your funds being stolen because your private information was somehow obtained. One of the most common types of these are browser extensions posing as bitcoin price tickers that are actually stealing your account information. There's also the possibility that you visited a phishing site posing as Blockchain. We've also heard of computer viruses that detect when an address is in your clipboard, and replace the one you wanted to use with an address controlled by this malicious party.

By design, Blockchain never has access to users' accounts or funds. If you keep your password and private key backups secure, then your funds are always safe with us. Since this information has been compromised, be sure to never use this wallet or any addresses contained within it. I'd also highly advise against using the same password again. I'm truly sorry that you had funds stolen from you. That certainly is an extremely frustrating experience.

If you?d like to learn more about how our wallet works, please visit blockchain com.


Skycity

Aug 28, 23:54 EDT

Hello,
None of what you mentioned really occured, it was probably a breach in your security system. And, yes, again as you mentioned, that certainly was an extremely frustrating experience. But what is more frustrating is that you hold no responsibility. I was totally sure that my funds would be safe with you, blockchain.com wallet was chosen, because I trusted you.
But this is the point where trust ends.
That was not my fault. My computer is always double-checked and secure, and I never visit phishing sites or extensions. Such response from you, no help or compensation offered from your side, makes it even more frustrating.
I will never use again and will discourage other people to use your service.
I am also going to make this situation and our conversation public.


Sent: Wednesday, August 28, 2019 at 5:13 PM

Which exchange/wallet was this?

 

[skycity]

Which exchange/wallet was this?

It is blockchain.com wallet

 

[KasinoKing]

I'm very sorry to hear about this. You may have some type of malware on your computer that resulted in your funds being stolen because your private information was somehow obtained. One of the most common types of these are browser extensions posing as bitcoin price tickers that are actually stealing your account information. There's also the possibility that you visited a phishing site posing as Blockchain. We've also heard of computer viruses that detect when an address is in your clipboard, and replace the one you wanted to use with an address controlled by this malicious party.

This is such a load of bollocks! (And pretty much exactly what they said to me)
How do they explain that when you log in they send you an e-mail with a verification link which you MUST use to access your funds?

I'm convinced the hacking is going on at THEIR end - not yours or mine.

KK

 

[CL-Ed]

Blockchain claim they use non-custodial wallets. If true this means that they don't have the private keys to your addresses and they can't steal your funds. It is similar to sites like this one having a hash of your password - they don't know what the password is, only that you know what it is when you enter it again at login and they hash it and the hash matches to the one in the database.

So only someone with access to your encrypted wallet and password, and/or your backup seedphrase can access your wallet - with or without Blockchain's website. i.e. if someone gets your seedphrase or private keys they can access your wallet addresses using any Bitcoin software.

The CS rep's reply makes perfect sense in that context.

Of course this all depends on whether they are telling the truth about using non-custodial wallets which you really have no way of knowing. That is why it is always better to have your own wallet. Never trust third parties with your Bitcoin.

While they could be lying, it is far more likely that you lost your funds due to malware on your computer or phishing. I also think it very unlikely they would bother stealing such small amounts from people when their customers likely have multi-millions in funds. If it was some hacker or insider gaining access to wallets, why would they go for the ones with fractions of a Bitcoin in them instead of the ones with thousands?

 

[PROFRBcom]

I am under the impression that if someone has a non-custodial wallet process, such as Blockchain.com has, that they could not access your funds, even if they wanted to.

Sounds like a Trojan, or an even deeper infection like a "rootkit" to me.