Hello Everyone,

So far, I and my friends have been able to prevent multiple thefts of IOTA from occurring by creating and promoting our own transaction. To do this is not an easy task and it takes a lot of time and expertise. I will help anyone who has a pending transaction by the hacker, so please email me for details.
Contact me via email here:
bazbazbaz@protonmail.com
Thanks guys.

Update:
So far there is over $30k put to gather information about this attack and hold those responsible.

People have lost enough money for a second time, that they are no longer putting up with this.

Situation best said by Childish, unprofessional, $6.5b disaster, etc.

You either have no leader as bitcoin and can say its user's fault or you are a corporation that is held responsible. You can't tell user's to do something and claim ignorance.
No one would have changed their wallet if it wasn't for your forced upgrade.

 Anyone with additional information on this attack should use this forum to report.

Can anyone explain why the signature of all lost funds are all 9s such as:
999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999

Just so everyone is aware the thief's information on the Iota forum as Norbert vd Berg He used to have a GitHub link that is now blank. Let's find him and turn him in to the proper authorities. 

https://www.quora.com/profile/Norbert-vd-Berg/log
https://github.com/norbertvdberg - The GitHub link is dead now. 

Sorry... Last one. This is all of his activity on the Iota forum... Notice how he discourages everyone from keeping their coins on exchanges and tells them all to go to his website to generate keys....

https://forum.iota.org/u/norbert/activity

@domtasc Check "Call to action", page one displaysall "easy accessible" information who promoted this scam (Norbert). Ithink for hidden information we need the support of the more IT or programmingfocused community of IOTA. Unfortunately, my knowledge is way too limited totrace someone down who set this huge scam up and tricked me and 1000xxx of IOTAsupporters. I could bring some beer and donuts, but that's it Later I'llcall to the Cybercrime Department of the Prosecution in Hessen, Germany (ZIT).At least, I'll report my (our) case. Maybe they will start an investigation.There are Cybercrime Departments in each state of Germany, so if you're Germanyou should at least inform them (although they hopefully already know aboutthis theft). Nothing more what we can do and I don't expect to get any of mymoney back but at least to give the thieves some feeling of being not 100 %secure.

 

@Winston Thanks for all your support, understanding andpatience. I also understand your statements related to the foundation and inthe end it was really not my smartest move to use iotaseed.io to generate myseed. Everything what I state from now on is based on that I know it was myfault in the end. But as mentioned in earlier posts, when I set everything up,all sources I found stated it's ok in doing so (youtube, google,forum.ioto.org...). I definitely watched out for more than one source. I boughtmore than one coin and invested days in research for security for all of mycoins. Therefore, I moved asap my coins from the "unsecure" exchanges(what all of my friends didn’t do - and they still have their IOTAs). ObviouslyI didn't invest enough time, resources or whatever for IOTAs security. I endedup in using this light wallet for IOTA (which is obviously secure with a secretseed) and the Ledger Nano S for all other cryptos. Ingenuous and foolish I expectedto be safe if I follow all instructions on the also "easy accessible"sources, assuming that somebody would answer on mainstream sources topromotions for scams something like: "SCAM - DON'T USE THIS" orsimply delete the posts. Honestly, also the "programming-orientated"environment didn't make it easier for me (it's not like downloading a PDF reader).One could say, why you invested in the coin if you got already kind of lost tofind the right wallet and generate a secure seed.

Coming back to the IOTA foundation or its programming community,I think most supporters or users are now kind of disappointed by the reactionof the "more programming focused society/ community" of IOTA. Thereare always multiple reasons or pillars why an idea is able to grow andinfluence the world while other (also good ideas) die without any recognition.Next to the brains behind IOTA, the technical supporters, the supportingindustries, also the “simple” believers in this technology contributed to whereIOTA is now. Members of this last group lost their money because they trustedin the brains behind IOTA and in the more programming-focused community. Theytrusted that something like this cannot happen and that there are people who don'tlet something like this happen. IOTA raised billions of dollars and they arenot even able to protect their own supporters from something like this,published and promoted on the most popular forums for IOTA, incl forum.iota.org? Pubslihsed on google, youtube...everywhere...And now, instead of showing sympathy or support, most answers are like: “Howcan one be so stupid and use an online seed generator”. Why didn't I find somethinglike this month ago when I set up my seed? Now, nothing about ideas how torecover the money (maybe there is no chance and they don’t want to make us hope),no word like: “We try everything to trace these f***ers down, we are skilledprogrammers, hackers, geeks, whatever and we will do everything to find themwith all our knowledge and resources”. Nothing about: “We need to discuss apossible snapshot modification, hard fork whatever…”, “We gonna document alltransactions (maybe sorted by receiving addresses with XXXX9999999) from last72 hours and discuss how to recover the money”.

 Instead, I find someannouncements how safe IOTA is and how stupid all of us were. Announcementslike:  “Please don’t lose faith in IOTA (witha taste that founders are scared to lose their money due to falling price). Ifind articles about exciting summits, meets up and new members of IOTAfoundations like nothing important happened these guys should care about. Isthere really something more important than to help us right now??? But there isnothing, not even a sign that we are not alone…and that’s why a lot of us arefu***d up by IOTA now…maybe it’s missing social intelligence, it’s ignorance orarrogance…but in the end it’s simply not OK how they keep on behaving likenothing has happened and how they try to keep it from media to protect their money.

Human failures shouldn’t be new to anybody and it’s commonstandard since decades that big companies or foundations take care that thesehuman failures are reduced to minimum level with minimum impact. IOTA raised 6billion dollar!!!! What would you say, if I would promote an update for yournew BMW on the official BMW website? It’s fucking everywhere..Google, Youtube…Even if the promotion directs you to another website, looking pretty similarlike BMWs website. You download this fucking update and I steer your caragainst a wall with 100 km/h…and then BMW gives you following answer: “How canone be so stupid and download an update from a random website?“ This wouldnever happen, because BMW simply would never ever let it happen…and if it wouldhappen, they would say they investigate it, take care this not gonna happenever again, that they are sorry… and that’s why everybody is pissed now. Notonly that they don’t try to undo the hack, not only that they say we weresimply to stupid without any sympathy or understanding, not only that they noteven try to trace this f***er down (and if somebody could trace them then the programmerswho built IOTA)…but they keep on going like nothing happened, not evenimproving their wallet and thinking about their role & responsibilies in this theft, partying at some summitsand meet-ups, celebrating the success of IOTA and how smart & intelligent& rich they are… and that’s why we are pissed and feel like IOTA doesn’tcare at all…because they simply don’t care…

Yeah IOTA really deserves to be top 10 coin
Too much problems and complications about this project. Transactions pending forever, worst wallet ever, stolen founds every 2-3 months, false news,...
You cannot make proper wallet but you want to change the world with you technology. wtf
Why would somebody invest in this project again? 

Thank you to every one that has the courage to post their loss here. Many others have lost coins too that have yet to report.

Every one here is a believer in this technology and have supported this project for a long time.

Perhaps worse than losing our IOTA coins repeatedly is having lost faith in these devs. Their complete failure to handle this issue responsibly is a first for a top 10 coin.

IOTA docs have had links to online seed generators all over the place. It was the first step on their web site to setup an offline wallet. https://imgur.com/ZQJxVcs

Any smaller cap coin would get lambasted for this. When it happens to everyone holding IOTA coins it isn't just the user' stupidity to blame.

Only if we speak up, then will IOTA respond to this major attack and loss by it's community members.

I am so frustrated! All I was told was never to keep my iota on an exchange and store it in a wallet. I found all the info to set up the wallet really confusing with loads of different links and technical jargon....no warning was given about using a seed generator and everyone recommended iotaseed back then. I'm sure it was on reddit and everyone on youtube said that was the way to do it! Wish id kept it on an exchange now!!! Also Iota just ignore you now and don't give you any reassurance! Just treat you like its your problem

+x

 

JANEK123 - 23 Jan 2018

I am so frustrated! All I was told was never to keep my iota on an exchange and store it in a wallet. I found all the info to set up the wallet really confusing with loads of different links and technical jargon....no warning was given about using a seed generator and everyone recommended iotaseed back then. I'm sure it was on reddit and everyone on youtube said that was the way to do it! Wish id kept it on an exchange now!!! Also Iota just ignore you now and don't give you any reassurance! Just treat you like its your problem

Actually Norbert vd Berg was the one who posted on many forums to use his online seed generator. I also wonder why you think no-one has notified users about not to use online seed generators.
See for example this on reddit: https://www.reddit.com/r/Iota/comments/7cr4uk/iota_seed_generator/

A user named iotahelp (who is apparently a bot) actually advised not to use any online seed generator, but instead directed users to use a safe method (Linux terminal, Mac terminal).
The problem is that anyone can register a website in a few days, and can name it iota-foundation.org or whatever sounding pretty official and then scam iota holders to store their coins using an unsafe seed. As with any new technology, newbies can be scammed unfortunately. Remember that in the beginning of 2000s how many people used to send money to some online lottery that he/she already won, just some administration needed to be done? It is something very similar happening here. Scammers took advantage of not-so techie people.

I think the only thing in which IOTA foundation was very wrong is that there was no big red warning in the wallet GUI that your seed needs to be kept private and should never ever be shared with anyone. Using the term master password instead of seed (even if technically seed is the correct term) could also help, because it would have made people more aware that the seed used for an IOTA address is top secret that keeps your money safe from thieves.

+x

 

JANEK123 - 23 Jan 2018

GOBXTNODUGURNEESTGFVMGFBVBFGIXJLYPOUWMXTBMECORN9IHHCLVWD9UM9WYKJMB9YOFMUHZ9SJASYXNWGUPOSDD

This is the address that mine and all the other stolen iotas have been sent to!  Is there any way this address can be frozen by iota or tracked and stopped?  Had no support of any of the iota team they just ignore me. I had 3.07 Gi stolen on the 19th Jan

My stolen coins are also on this wallet. The worst is helplessness and looking at this wallet. I do not want to believe that the IOTA foundation can do nothing. Maybe he does not want to? Not a professional approach to them. What more can you do? I wrote to https://twitter.com/DomSchiener and https://twitter.com/DavidSonstebo. Unanswered

Hi,

Reporting in with stolen iotas     Nothing much to be done since it has been confirmed.

Hacker tx

JAZDUF9HBORDBRWOTDPZVNJYHFIEANLXAIAZOJTVYCQWNZVHYBOAOPDORXEX9ZGIPNXIYHLTG9KXZLTUWJYPNGITFY

139 Mi stolen from
VLSAACAKYFEVYKLLZKCDHACHL9KHNVPAIZCOBGTZVVWAZHCVXNWLLHKCIORNXPV9CJBUJRLBVNYZEJHKDHOJXAALAA

This case teaches me:
What is safe in the crypto world at all?
For example:
Liteaddress.org: Paperwallet generated online or offline, sure? Maybe only preselected addresses are displayed anyway.
Ledger Nano: where are the recoveryphrases stored, sure Central !
...many more suggestions, nothing is safe !

Hello,

I'm really frustrated, I transferred my IOTA from Binance to my wallet.
Than I read in the newspaper about the hacked wallets and I wanted to check mine. I saw my balance 1.3995 Gi and I was happy, but than I saw my history about pending transaction to address: GAURXOBZFJIEBBARPFIXCXTQAOXGOEGOKSQSAYVXFWFTHWVQUXUOQNQCHVAKFKQCWEERYYXVEVZKLCXB9TPSTSTHTD

after some minutes transaction was confirmed and now I can't see anything on my balance and I can't attache tangle, NOTHING.

https://iotasear.ch/address/GAURXOBZFJIEBBARPFIXCXTQAOXGOEGOKSQSAYVXFWFTHWVQUXUOQNQCHVAKFKQCWEERYYXVEVZKLCXB9TPSTSTHTD

DO ANYONE HAS IDEA HOW TO PROCEED ? Because address does not look like a hackers address.

254.2 MIOTA stolen
from:
LCDFIIGGOENREPWZMLZKEOCTHJAFCQJM9QLRFDOM99WXETQNANEJ9GJIYQNSJPGLJVOCPLYKZSOQKRNQWZDMYQXLED

transfered to:
DBPHJOESJBLJEK9WANRDLQLR9A9UOKWYZCYTHALDQIVDZOGBPCKSQPDRYP9VVHQGBYUFIJBHZQGRNEXQDQXPU9IIMD

HI, i was also so stupid to trust a scam site ;-(

254,2 MIOTA stolen
from:
LCDFIIGGOENREPWZMLZKEOCTHJAFCQJM9QLRFDOM99WXETQNANEJ9GJIYQNSJPGLJVOCPLYKZSOQKRNQWZDMYQXLED

to:
DBPHJOESJBLJEK9WANRDLQLR9A9UOKWYZCYTHALDQIVDZOGBPCKSQPDRYP9VVHQGBYUFIJBHZQGRNEXQDQXPU9IIMD

Unfortunately is one of the entries confirmed.

Here's another chat, which is more actively used. "Call to Action", post your comments there. Only thing you can do is to involve legal authorities. That's it.

+x

 

iq34acal - 25 Jan 2018

Here's another chat, which is more actively used. "Call to Action", post your comments there. Only thing you can do is to involve legal authorities. That's it.

Only thing you have to do is to involve legal authorities.