Home » huobi korea » Bittrex News

Bittrex News

Bittrex News

I want to share my story about Bittrex negligence ter securing my funds.

On June the 19th a hacker wasgoed able to intrude te my Google account.

  1. He stole passwords from “Google Utilitario Sign-in”, a device I use to automatically sign-in to websites using stored credentials
  2. downloaded photos of mij and of my passport from Google drive
  3. arranged thesis pictures with Photoshop or some other photo editing program to make a photomontage showcasing mij holding my passport
  4. entered ter my Bittrex support account and submitted a toegangsbewijs to disable 2FA security on my account
  5. waterput a rule te my gmail to filterzakje all messages from Bittrex and send them directly into the trash bin.
  6. At the request of identity verification he just posted Two photomontages one demonstrating mij holding a paper sheet reading “bittrex Nineteen.06.2018 Please disable 2FA” and another one displaying mij holding my passport.

Te only 25 hours and 12 minutes the Bittrex tuut talent him green light to disable 2FA, while I couldn’t see any email from support, cause I don’t check trash bin of my gmail so often. He instantaneously entered te my Bittrex account where I had crypto currency for about 40000 USD value. He withdrew all my funds to his crypto currency addresses. Despite the very suspicious activity the Bittrex support juut didn’t lock withdrawals up strafgevangenis even waterput them on hold spil it’s usual after 2FA disabling. The suspicious signs were:

  1. IP address of a location on the other side of the globe respect to my usual login webpagina
  2. Request to disable 2FA security without a motivation
  3. two low quality photomontages which anyone can lightly realize coming from one single flamante. Indeed only centering, tegenstelling and background color were switched to mimic two different photos.

Below I report the entire emails exchange inbetween the hacker and the Bittrex support smeris

Tuesday Nineteen June 2018 at 15:20 Hacker: Hello, disable Two-factor please

Tuesday at 15:20 Bittrex Juut

Hi, For help with the 2FA related items please see the following article: https://bittrex.zendesk.com/hc/en-us/articles/115000198612 If you need two-factor eliminated after troubleshooting please reply with the following information, the more details you can provide the better: 1) Latest ip addresses you have logged into webpagina with (You can find this by visiting, https://www.google.com/#q=what+is+my+ip+address ) Two) Latest transaction ids for any withdrawals and deposits you have made to Bittrex Trio) Latest balances te your account For Accounts valued at overheen $1000 USD wij will require extra information for proof of identity. Four)Please link an photo of your government-issued ID, spil well spil a selfie te which you are holding that identification where wij can match your face against the picture displayed on the ID. Also, please write “Bittrex” and today’s date on a chunk of paper and hold it te the picture. Please make sure the text on your ID is readable ter all photos. Please do not fasten .pdf, zip files, or linksom to files. Please reply to this email with the required documents or link them directly to your support toegangsbewijs by visiting https://bittrex.zendesk.com/juut/tickets/1413823. Wij understand this is a slow and painful way to recover your account, but wij do this for both your safety and ours. Best Regards, Bittrex Support Team @ Bittrex Go after us on Twitter @ https[Suspicious verbinding eliminated]xchange

Tuesday at 15:24

My IP Address: 114.125.72.89 or 182.1.91.135 Withdrawal: Amount: 1.92594187 BTC To: 3MLVb6tuaDHEcErGTsExTMJNZEeRnUHoTq Requested At: 05/28/2018 15:20 I link photos of my documents, I hope this will be enough! o thumbnail_passport niko.jpg (400 KB) o Selfi.jpg (Two MB)

Tuesday at 15:38 Bittrex tuut

Related movie: Cryptonews Roundup #11 – BTC extinction, Price predictions and Huobi to Brazil


Hey Nicola, Thank you for reaching out about your 2fa removal. Wij still require the following information. For Accounts valued at overheen $1000 USD wij will require extra information for proof of identity. Four) Please fasten an picture of your government-issued ID, spil well spil a selfie ter which you are holding that identification where wij can match your face against the picture displayed on the ID. Also, please write “Bittrex” and today’s date on a lump of paper and hold it ter the picture. Please make sure the text on your ID is readable te all photos. Please see the affixed example if your account is overheen $1000 USD Wij understand this is a slow and painful way to recover your account, but wij do this for both your safety and ours. Best Regards, F.L. @ Bittrex Go after us on Twitter @ https[Suspicious verbinding eliminated]xchange

Wednesday at 15:54 Hacker

Hello, o selfy.jpg (1 MB)

Wednesday at 16:32 Bittrex tuut

Hey Nicola, Thank you for providing us with the required information. YOUR 2FA has bot DISABLED/Eliminated Please make sure to re-enable two-factor to secure your account and increase your boundaries. When enabling 2FA wij display the “secret” key. Please make sure to store this key ter a safe place, it will permit you to restore your 2fa te the future should you lose or wipe your device. If you have not yet done so please verify your account, this will increase your withdrawal thresholds and help support react to your issues ter a more timely manner. https://bittrex.com/Manage?view=verification Best Regards, F.L. @ Bittrex

Spil you can read from the mails Bittrex smeris wasgoed negligent te secure my funds and I suspect him/hier to be accomplice of the hacker.

The IP address from which the hacker operated wasgoed: 185.Five.175.84 – Located te Romania Bucharest pointing to a company called Voxility.srl – I am an expat living te Malaysia.

The hacker used the device: Mozilla/Five.0 (Windows NT Ten.0, Win64, x64, rv: 56.0) Gecko/20100101 Firefox/56.0

Leave a Reply

Your email address will not be published. Required fields are marked *