Digital Wallet Security Help

[Blackfeather9999]

Hi all I’ve now had crypto stolen from my MetaMask wallet twice now, out of different wallet addresses. I can’t figure out where the leak is, is there any chats or forums I can get some live help from??

 

[Chris Newman]

You would have shared the pass phrase or private keys with someone and / or with some malicious type of website(s) and / or you have some malware in your device which steals through malicious copy/paste of addresses. (Also note there is a Cryptocurrency section in BHW where you can get information about cryptocurrencies and also post your crypto related question there).

 

[Juhku]

You mentioned that you had different addresses. When this happened, did all of your crypto assets get stolen all of a sudden, or did particular transactions get stolen?

 

[Blackfeather9999]

You mentioned that you had different addresses. When this happened, did all of your crypto assets get stolen all of a sudden, or did particular transactions get stolen?

All of it got stolen at once. I really don’t understand. I haven’t shared any passwords or phrases with anybody, the first time this happened, I created a new MetaMask wallet on my device in a new account. I also installed ExpressVPN and installed TotalAV software. Just this morning I put in some funds and 15mins later they’re all gone. I even had MetaMask locked on my device. When I went to unlock it later all of it was gone. I don’t understand how they have access. It’s almost like someone is mirroring my device. Is that possible? How do I know?

 

[Juhku]

All of it got stolen at once. I really don’t understand. I haven’t shared any passwords or phrases with anybody, the first time this happened, I created a new MetaMask wallet on my device in a new account. I also installed ExpressVPN and installed TotalAV software. Just this morning I put in some funds and 15mins later they’re all gone. I even had MetaMask locked on my device. When I went to unlock it later all of it was gone. I don’t understand how they have access. It’s almost like someone is mirroring my device. Is that possible? How do I know?

I'm afraid I'll need a bit more information before I can suggest any solutions to your problem.

Were you using any sort of VPN at the time you created your MetaMask wallet?
Do you have any unrecognizable or refurbished devices connected to your computer?
What operating system are you using?

 

[The Oracle]

This gives me nightmares sometimes. Crypto can be brutal. That's why it doesn't hurt to spread your money a bit around gold and Jack Bogle's VTSX. Silver bars and resource rich land are good too if you can afford the latter. Even the most evil fucker Billy Gates has bought farm land.

 

[The Oracle]

But whatever you do, don't put your money in the banks. That's retarded and just asking for trouble.

 

[Blackfeather9999]

I'm afraid I'll need a bit more information before I can suggest any solutions to your problem.

Were you using any sort of VPN at the time you created your MetaMask wallet?
Do you have any unrecognizable or refurbished devices connected to your computer?
What operating system are you using?

I don’t think I had the VPN on when I first created the wallet not sure really, but I definitely had it on today. No unrecognized devices. And I was using it through the app on iOS

 

[Juhku]

I don’t think I had the VPN on when I first created the wallet not sure really, but I definitely had it on today. No unrecognized devices. And I was using it through the app on iOS

I see.
Do you remember how you were connected to internet at the time?
Where did you download MetaMask to your iOS device, and is your iOS device jailbroken/rooted?
Have you installed any configuration profiles to your iOS?

 

[Blackfeather9999]

I see.
Do you remember how you were connected to internet at the time?
Where did you download MetaMask to your iOS device, and is your iOS device jailbroken/rooted?
Have you installed any configuration profiles to your iOS?

I was connected via internet Wi-Fi. I’m not sure if my phone is jailbroken I believe it is and no configuration profiles have been added.

 

[Juhku]

I see.

If your phone is not jailbroken,
I'm suspecting that you were a target of packet sniffing. To solve that issue, don't connect to unknown unsecure Wifis, and use a VPN at all times.

However, if your phone is jailbroken. It is far more likely that, that is the issue.

 

[Blackfeather9999]

I see.

If your phone is not jailbroken,
I'm suspecting that you were a target of packet sniffing. To solve that issue, don't connect to unknown unsecure Wifis, and use a VPN at all times.

However, if your phone is jailbroken. It is far more likely that, that is the issue.

Interesting. How would the issue be if my phone is jailbroken?

 

[Juhku]

Interesting. How would the issue be if my phone is jailbroken?

With a jailbroken iOS, you have the access to grant 'bad guys' full access to your phone via sketchy repos.

 

[jacksob]

I may be too focused on the semantics or minor details here but you mentioned how ...

the first time this happened, I created a new MetaMask wallet on my device in a new account.

For the sake of clarity, I assume "new account" was either you referring to an a)* a new Apple ID "account" while on the same device or, you meant b)* a new MetaMask account was created where you signed out of your original MetaMask wallet+account which previously had funds stolen while signed into the iOS device and went about to create a new Metamask account and New Wallet within but from the same iOS device, and/or more importantly, with the same AppleID account signed in. This may or may not be relevant but I'm supposing it's more likely b?

*1. Defining the reference for making a "new account" refers to the reason prescribed as part of a) a MetaMask Account or b) an Applee ID account?

Just this morning I put in some funds and 15mins later they’re all gone. I even had MetaMask locked on my device. When I went to unlock it later all of it was gone.

For all the precautions you took, this does seem to be out of the ordinary, so bear with me if I ask you some very 'obvious' questions while listening for very specific answers, as a problem that is unique will have unique characteristics that may sometimes be assumed and/or taken for granted and presumed, so I only ask for the sake of clarity and to rule out other possibilities so that it may serve the purpose of helping you realize what it is or how to prevent it.

2. When you say you "put in some funds" do you mean you sent funds from another wallet you own, such as the 'wallet' holding your funds on an exchange or perhaps another "cold" wallet of som of some sort where you sent yourself? And type offunds did you send? Were they Ethereum (ETH), ETC20 tokens (i.e. Tether, BNB, LUNA, Pokedot, etc.), or was it some other blockchain asset such as Bitcoin?

3. When you say, "later all of it was gone" is it safe to assume you mean the funds were all transferred out? All transactions on the blockchain are inherently public and traceable. Granted you won't be able to identify them, looking up the address might help provide clues in either helping determine where your funds went, why it's not appearing, or might help find the malicious code that is stealing your funds. So if it is, could you provide the transaction IDs or the addresses to provide you with more insight on the matter?

 

[babfo]

Hi all I’ve now had crypto stolen from my MetaMask wallet twice now, out of different wallet addresses. I can’t figure out where the leak is, is there any chats or forums I can get some live help from??

Hello, there may be a leak in your browser cookies. I recommend that you review it.

 

[seomaster5]

Many possible reasons can be there. Like your system is hacked. Someone is able to hack your emails regularly.

 

[Blackfeather9999]

Ok, if my email is hacked how are they able to see my secret phrases for Meta? I ran a virus scan and didn’t find anything.

 

[Athanasios]

Buy some hardware wallet ASAP!