You are viewing a single comment's thread from:
RE: URGENT!!: STEEM.AMAL HAS BEEN COMPROMISED BY @ gandurasik011!!!
I wondered the same thing which is why I can't understand the association with steem.auto.
I don't believe that you can change the Master Key with just the Owner Key (although I could be wrong) so it appears that you have had the Master Key stolen.
Which leads me to 3 possible scenarios:
- Your Master Key has been hacked - this feels unlikely given that the Key is so complex, unless of course somebody has "cracked" the entire system in which case we'll see a lot more of this.
- Somebody that you know has done it - this is an uncomfortable thought but check who else has access to your computer and where you have your Master Key stored.
- Your computer has been compromised - Check for SpyWare or similar installed on your machine. It could be that the hacker has had access to your account for a long time and been waiting for the best time to attack.
I'd also consider your reasons for keeping so much liquid SBD and STEEM. I'm sure you have them but consider splitting large amounts across multiple accounts - the remainder of the power was "saved" because of the 4 week powerdown period.
You have my sympathies, I can only imagine the pain that this has caused.
My preliminary investigation was the first PDF was saved in the email, and the email was not safe at all, the access key was only kept by 3 trustees persons. They were all panicking contacting me to do any possible thing to save the account.
My last computer has been clean out before I handed it over to my wife. My big regret was the SBD and Steem did not keep in the "Save balance" as they should be.
if the case is my computer, I don't have any key stored in this new computer or phone, because I never access the account using this new computer at all till yesterday.
So my best guess was they gain access to the email used to create the account and find the pdf file there, it is the easiest way to get access since the password of the email is not strong enough.
what all of us need to be concern about is finding the real cause of how someone else could get access to any account, to protect the entire steemit system and avoid miss understanding the user for the platform security issues.
I thought (if this is possible) for the steemit team could find a way to track down the thief and freeze the account so then they can not do any transactions.
can you do an IP address track of the thief account to find out from where he came from and let me know to my discord channel? @el-naillul3044
Thank you for your sympathies my friend, best regards
El-nailul
Unfortunately, I don't think Steemit will do anything. We've seen stolen money transferred through accounts before and I don't remember Steemit ever freezing an account in order to stop the funds being withdrawn.
The only suggestion I have is to look at the user of the account that has stolen your money and see which exchange the money is moved to. Once you've established that, you could phone the exchange and explain that one of their users has stolen your money (you can provide evidence of the transfer out of your account) and they might be able to freeze their account and retrieve the money for you. I've not heard any stories of this being successful either but it's worth a try - I fear that once it's gone, there I've seen little to no appetite from anybody to help get it back 😢
It's also my understanding that IP addresses are not recorded and if they were, I don't think anybody would ever admit to it. I think that your best hope is to first report the theft to the police and then to contact the exchange which the thief uses.
@el-nailul
@quarantine have done investigations for years on Hackers / Phishing.
Example Accounts
@wwefun @richardman
Have seen how it was done.
Using App can also be Storing your passwords.
You do not need to expose your passwords, there is way this ppl will steal it.
By lodging into their App.
Under Investigation Steem amal have use Steem Auto App.
If not Why would I said that.
I am busy , If you don't believe me then don't take my words.
Have A good day.