JFYI: Maybe btc-e.com is hacked
Good morning, Habr Geeky!
I am writing this post only for the purpose of warning those who have funds in a btc-e account. Enable yourself 2-step auth, just in case.
Tonight, someone logged into my account on btc-e.com from IP-address 178.54.229.65 - definitely has nothing to do with me.
I didn’t have any funds there, and I myself last logged in only a year ago, last January. That is, if it is phishing / viruses / etc - then someone's old experience. I only use Mac OS, so the viruses are unlikely, they didn’t come across phishing.
')
As far as I can see, two other ways to get my password:
0. brute force, but my password is random, so the FIG knows.
1. access to the data of my Firefox Sync account, but then everything is completely sad and I try not to think about it.
Thank you for your attention and safe New Year to you!
UPD. Public opinion believes (and I tend to agree) that, most likely, the merged base from some other site was used. I have used this password a lot where in all sorts of "non-critical" services.
Why this post at all?
I am writing this post only for the purpose of warning those who have funds in a btc-e account. Enable yourself 2-step auth, just in case.
What happened?
Tonight, someone logged into my account on btc-e.com from IP-address 178.54.229.65 - definitely has nothing to do with me.
I didn’t have any funds there, and I myself last logged in only a year ago, last January. That is, if it is phishing / viruses / etc - then someone's old experience. I only use Mac OS, so the viruses are unlikely, they didn’t come across phishing.
')
As far as I can see, two other ways to get my password:
0. brute force, but my password is random, so the FIG knows.
1. access to the data of my Firefox Sync account, but then everything is completely sad and I try not to think about it.
Thank you for your attention and safe New Year to you!
UPD. Public opinion believes (and I tend to agree) that, most likely, the merged base from some other site was used. I have used this password a lot where in all sorts of "non-critical" services.
Source: https://habr.com/ru/post/367451/
All Articles