Java Exploit stole 14.60088128 Bit coins out of my wallet. Users beware

I wasn't sure where to post this so I figured that here would be the best spot. I have been experimenting with bitcoins over the last month or so since there was so much hype on this site about it. At first I found a lot of "faucets" that would give me tiny amounts of uBTC every hour or so.

Then I attempted to mine and that got nowhere fast.

last week I went over to mtgox and purchased roughly 1600$ worth of BTC. With my wallet looking good I wanted to find even more ways to make money. I found a faucet site which would allow a java app to run on my machine and earn very little BTC (every little bit counted)

After I left the PC for about 8 hours I saw a transaction to a wallet 1k6pYMy6MTbntuJksJdopY8JHrDe8dh7P which I didn't authorize. I troubleshot my bitcoin wallet for awhile and after realizing there was nothing I could do to revert the changes I ran malwarebytes and found win.keylogJS.gen

After some additional research it turns out it was a generic keylogger that takes advantage of java exploits. At the current exchange I am out a little chunk of money and it is a little disheartening

There is nothing I can do to get my bitcoins back. I just need to start over.
For new people into bitcoins beware all those free faucet sites and if any site asks you to use java close it right away. IF I decide to invest in bitcoins I will only be trading them on mtgox and not try to penny pick over the net.

THIS SUCKS.
Don't let this happen to you.

Sorry for your loss, mate.

I can but confirm that - Java is your worst enemy. My PC has always been clean, until the moment I installed Java.

This applies to your smart phones as well btw. If you keep something valuable there, one day Java will make a move.

how much is that in real money?

Valefor said:

how much is that in real money?

Click to expand...

He said in the OP: "1600$ worth of BTC"

That's a lot of money! Sorry for your loss mate. The best encryption tool to protect yourself from keylogger, you can use keyscrambler

http://www.qfxsoftware.com/

Click to expand...

For Java, turn on auto update to the latest version. Java always have problems with exploits security, make sure you use the latest version.

It's called a "java drive by" and it sure did get you, I use to do it and steal Runescape and WoW accounts.
good times. Sorry for your loss though

omar37 said:

It's called a "java drive by" and it sure did get you, I use to do it and steal Runescape and WoW accounts.
good times. Sorry for your loss though

Click to expand...

good time to steal peoples accounts ? ... If I just had the banhammer

Valefor said:

how much is that in real money?

Click to expand...

At todays rate it would be $1,552 USD

I decided to get back into bitcoins. But no more faucets.
Hopefully nobody else gets burned like I did

sorry for your loss, you have opened our eyes, we'll be very careful from now on! Thanks

today i ran something like that it tried to access my wallet on my desktop as a withdraw point for the money i would have "earned" but then i got suspicious as the program finished and tried to gain access to chrome and it would shut it down and open internet explorer so had to re-install chrome and 30 minuets later i had a attack and avg saved my ass and that's why i now use online coin wallets

thegamekind said:

today i ran something like that it tried to access my wallet on my desktop as a withdraw point for the money i would have "earned" but then i got suspicious as the program finished and tried to gain access to chrome and it would shut it down and open internet explorer so had to re-install chrome and 30 minuets later i had a attack and avg saved my ass and that's why i now use online coin wallets

Click to expand...

I use two computers now. One wallet is for trading, the other is for online stuff. I guess I could control two wallets on one pc but I don't want to chance it now. With big companies accepting bitcoins I expect the value to exceed 250$ per BTC in 6 months so I am trying to invest as much money as possible while it hovers around 100$ or so.

I will probably sell at 250$ and then get out of it while the going is good. I need to make up a 1600$ loss now. The money is not the issue it is the stupidity of falling for such a scam. I just don't want anyone else who cannot afford to lose even 100$ to experience what I experienced.

man I was mad for a awhile.