search

keybase / client

Keybase Go Library, Client, Service, OS X, iOS, Android, Electron
BSD 3-Clause "New" or "Revised" License
8.92k stars 1.23k forks source link

My account was hacked! #21108

Open ChubbyDachshund opened 5 years ago

ChubbyDachshund commented 5 years ago

My ChubbyDachshund account was hacked!

$3824.00 XLM was taken out of my account yesterday at 5:10am, Monday November 18, 2019 and I did not authorize it.

It went to: GDJW7KFUFXNV6AQFLF5RNKSGJVEPUVTG7FVU6JBWFPEKQOJZRSHZ2R7I

https://stellar.expert/explorer/public/tx/68f469f33654710333997197c6b44f610aa04059ae062005a11350bf350a54e4

What can I do to fix this and get my money back?!

Thanks

Keybase GUI Version: 5.0.0-20191114143658+f73f97dac6

jacobsandersen commented 5 years ago

You can't get it back. If they got your stellar private key, they have full access to your funds. Or rather, the lack thereof. They took the money and transferred it to Binance.

Furthermore, this is not related to Keybase but to Stellar. Keybase just provides a wallet.

Sorry, but you can't get the money back. You should have protected your wallet better.

ChubbyDachshund commented 5 years ago

How do we go after this thief? GDJW7KFUFXNV6AQFLF5RNKSGJVEPUVTG7FVU6JBWFPEKQOJZRSHZ2R7I

jacobsandersen commented 5 years ago

"We" don't. This is not a keybase issue. If your account got hacked, that's your fault. You need to practice stronger security.

This happened entirely on the Stellar network. They got your stellar private key and were able to initiate a transaction. You can see which Binance account they transferred it to, so I suppose if you really want to try (you probably won't get far), you can go talk to Binance.

But this is not Keybase's problem.

ChubbyDachshund commented 5 years ago

I've talked to Binance and have an escalated security ticket issued to me. They are currently working on it now. Thanks. What do you suggest I do with my current Keybase account? If I create another wallet within that same Keybase account this thief person will be able to get it correct? What are your suggestions for me going forward?

ChubbyDachshund commented 5 years ago

StellarExpert | Stellar XLM block explorer and analytics platform.
StellarExpert Stellar XLM block explorer and analytics platform.

Explore detailed stats, price history, and analytic reports for all assets on Stellar Network. View comprehensiv... |

|

|

https://stellar.expert/explorer/public/tx/68f469f33654710333997197c6b44f610aa04059ae062005a11350bf350a54e4

This is the account that stole my money and sent it to Binance:

GDJW7KFUFXNV6AQFLF5RNKSGJVEPUVTG7FVU6JBWFPEKQOJZRSHZ2R7I It happened yesterday at 5:10am Mountain Standard Time or 12:10:05 UTC Monday November 18, 2019 The amount that was stolen was $3824.00 XLM Stellar Lumens.

Any other information that you need from me? 

Thanks

On Tuesday, November 19, 2019, 11:18:31 AM MST, Jacob Andersen <notifications@github.com> wrote:

"We" don't. This is not a keybase issue. If your account got hacked, that's your fault. You need to practice stronger security.

This happened entirely on the Stellar network. They got your stellar private key and were able to initiate a transaction. You can see which Binance account they transferred it to, so I suppose if you really want to try (you probably won't get far), you can go talk to Binance.

But this is not Keybase's problem.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe.

Brianetta commented 5 years ago

I've talked to Binance and have an escalated security ticket issued to me. They are currently working on it now. Thanks. What do you suggest I do with my current Keybase account? If I create another wallet within that same Keybase account this thief person will be able to get it correct? What are your suggestions for me going forward?

If somebody has compromised your Keybase account, I'm surprised they haven't already revoked the device you're using. If you believe that somebody has compromised your account, you need to revoke any devices that you aren't 100% sure haven't been cloned or been accessed by somebody else (including paper keys), and provision new paper keys to replace those you're revoking.

Most importantly, though, it would seem that somebody has your wallet's secret key, which gives them complete owner control of your wallet, with or without Keybase, forever. You would need to create a new wallet, and make it your new default for Keybase. You should also revoke the compromised wallet, so that people you know don't send money to it, because that money can still be taken at will by whoever has that secret key. You will also, of course, have to stop using that Stellar wallet's address elsewhere, such as in currency exchanges.

Igbalode0 commented 1 year ago

I suggest you message #corbenleo he's an expert in recovery of banned, hacked and deleting of cloned account. message him His referral link 👇👇👇 https://www.facebook.com/profile.php?id=100088858426470&mibextid=LQQJ4d