Call to action: let's catch the thief


Author
Message
Alexa
Alexa
True IOTAn (9.6K reputation)
Group: Moderators
Posts: 732, Visits: 1.4K
+x
kraut - 9 Aug 2018
Ok, now I'm a little bit confused. With "show bundle" you can see step for step, how the thief distributes the loot to several addresses. If I follow the big amounts, sometime the tags ANDROID9WALLET9TRANSFER and KZDROID9WALLET9TRANSFER will appear.

Here are more adresses:
WHLGKOOASMQWUWWNA9YJCWJIOJMQXWBMAWYFMBHSJBXXNSTQYHDRGNXYQTPZ9SIUJNZVOEXFHGZSXXNYG
ENCEKBOBCEJIQHBUJZLZFZQABMXKAEBGLGRWGUPMLQOQQYWNZWBWIKZBDZMSMBJUIIYGAW9QAXGPLUQEORXMAYCNTH
EKPRUGEGVENYDPCFFDJ9STVUGYISYXQGZIXYOHSKVLVEJRFUOVM9Z9VDXMHXFMASJTTXQWOVVNZDDPM9OCDJ9VLJQU
DVKQSKVLU99JJAWIIPDXJAJEITIXE9KBRAOPWMAFD9JPWAGNFXDCAQEGEJIGYTFLYND9JNPLIWQNOYPKQTQP9ZHYDN
YDONGDRNGTBMERWRWSOAMCDLMBRBABPQJKR9WYIRGLQIQCHLASLHS9TPBTABXDBYAIHKHXL9MVLJRIUFR
FPUX9BKUABOTYXMRTNGNPFIHAUNUKLDBMXNNIBOT9IOTQUV9KHTCETDPBAVLVEBWWTVKMLTPOBXJAL99Q
VG9VFMKIGOTTMPNKDBVZSXYVV9TWINHEAMRMEMOVWZZSBEOIVPRTVTVGEW9ZPWIQYBBWUBBRGITCHJOIN
SC9YROVAW9OJVUCJHSCKAPMNSWWJ9ZULZCQFYIWPEDCVKBGPZLLAIGKTF9ZJJ9BWGLTMEYOGZPOYRUYWU
AMWFICT9QIVOYWBGMOLLYRAGNKSNHDDVGUQIKHDVOQLSLVGZVBWPRTNSAESRVKUNURLAWISXNVQSXRUFG
EWJYGKTYWFANWHZEAJCTXREEWOBKDYDOJOQQNIGARFIQUDHYLEIYHDGOEBNBCJASEZKQHNBH9TAIHASKW
TKVFOBMGFFRADSWQOJSVFXXAFROCGIORACUH9CAIVTLKWTLZYECCXEMQWQDPSWZNBPNZMXONZAPAUACDK

You are welcome to outsource the discussion to a new thread.

Well, it is confusing really.
Usually, a thief would immediately send all the funds to an address of a seed that only he controls and afterwards start to split them up and distribute them. In your case, someone apparently moved the funds around between different addresses of your seed at first, which would be a very irrational and unnecessarily time consuming behaviour for a thief. 

And since you said that you’re not 100% sure that you didn’t make any transactions yourself, I was just hoping to find out when exactly you really lost control over your funds. Any transactions made before this might have led to a recoverable portion of your funds.

However, I think I’ve tracked the transactions enough by now to determine at which point none of the addresses used are your ownanymore. After the initial shuffling around, everything (except for 38.2 Mi) accumulated again on these two addresses and was then transferred further on from here (later on sometimes with the tag you mentioned, but this doesn’t really matter):
https://thetangle.org/address/WXFDHRJZNFACMPCITYWFQHJRNRJGSDMIYREUMBFHBOJEFYNSIMNRUARTMFZTEAZL9UUSF9MLZTKSFQXHJ
https://thetangle.org/address/ZTOZDIQFA9JRZJAPDYWKFOFGHPYHISDNLEEDBVKYJHRXQWCGCDZWAJDMUW9XGKMHQVVBIVKKJKVEKYVUO

I think we can be quite sure that you’ve finally lost control when your funds arrived at these addresses, in some cases a bit earlier even.
This is of course not the outcome I was hoping for, but it was still worth taking a closer look.



I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
cleishm
c
Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)
Group: Forum Members
Posts: 1, Visits: 0
Hi!

Here's another address that was drained on Jan 19th. I only noticed it now, as this was just an experiment to play with IOTA, and I haven't checked in since late 2017.

https://thetangle.org/address/FILMUENLL9YWJNJMXPWAYZOAPIQBNZTMMEHJSQCUBJZBNHDCBUBFSRUHQVVUCKHNHK99O9JKUFTQBOUBD

I'm fairly sure this address wouldn't have been seeded off an online seed generator, so I wonder if there is some other issue being exploited.

Cheers,
Chri
Olav Moen
O
Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)Attaching to Tangle (1 reputation)
Group: Forum Members
Posts: 1, Visits: 0
Hello guys. I have lost 1.3 Gi from my wallet. I used the online seed generator, iotaseed.io

Here are my transactions:

•    21.12.17: I transferred +688.34 Miota from Binance to my address:
WZMSQCZZETKAALRXFAVAMXANGSJXWXRGXYBHBLTQGKTWIYORCO9XIOJDQKZSYLJVZNGUHCFCTFUIBPJEWAEFHPHN99
•    22.12.17: I transferred +679.82 Miota from Binance to my address:
P9NCWIEHLFMLOZDADAWOOZKAZHAVZJOCSD9WBGQIVUQLKVIQXGCEWIPGYREGGPAEFDSFS9FVZHDDJQO9WQQNOJFYNY

After those transfers my balance was +1.3 Giota

Then:
•    06.01.18: I transferred -300 Miota to Binance using binance address:
QO9DUGWFGLBUDBUYSTHYTUAEWZEIBWTJPLPSQOMANELJUPHTRGXCMIQNHGXAYRMEAIWBZSFNZFEQNJB9ZPMXE9XBPW
•    08.01.18: I transferred +274.23 from Binance to my address:
RFPNEETABWOTEWNKRBSJDUBTAQNDEGW9GVJSHLWPJXSUXJJPHOMBTMUPZ9BIGYFGZISXBTIJZYIGHBCYDOIRZWTIDY

I can see on https://thetangle.org/address that:
•    03.01.18: -688,34 Miota was removed from its address.
•    19.01.18: -679.82 Miota was removed from its address.
•    19.01.18 – 274.23 Miota was removed from its address.

My wallet has had a zero balance since january 19th.

In a attempt to reattatch my addresses to the tangle I made some transactions:

•    06.09.18: I transferred 9.5 Miota to each of these three addresses:
WZMSQCZZETKAALRXFAVAMXANGSJXWXRGXYBHBLTQGKTWIYORCO9XIOJDQKZSYLJVZNGUHCFCTFUIBPJEWAEFHPHN99
P9NCWIEHLFMLOZDADAWOOZKAZHAVZJOCSD9WBGQIVUQLKVIQXGCEWIPGYREGGPAEFDSFS9FVZHDDJQO9WQQNOJFYNY
ZJEAMSYNKTJTTYXCLINXQMYQDSROHJNKI9BSKYCBVRUKDJJWZ9FYJPITSVKO9SNSZSMRATXRRQQLHXENBLEYIBWAQX

•    06.09.18: I transferred 14.5 Miota to this address:
RFPNEETABWOTEWNKRBSJDUBTAQNDEGW9GVJSHLWPJXSUXJJPHOMBTMUPZ9BIGYFGZISXBTIJZYIGHBCYDOIRZWTIDY

My wallet has now a balance of 43 Miota ( 9.5 + 9.5 + 9.5 + 14.5)

My correct balance, including the 43 Miota i transferred the 06.09.18 should be: 1385.38 Miota

Thank you again.

Regards Olav

Winston
Winston
Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)
Group: Administrators
Posts: 3.6K, Visits: 6.7K
After 943 replies over the course of 48 pages, what began as an ambitious call to action here on January 21, 2018 has finally culminated in the arrest of the thief.

Superb work everyone, you did it!

https://www.zdnet.com/article/europol-arrests-uk-man-for-stealing-eur10-million-worth-of-iota-cryptocurrency/
Europol arrests UK man for stealing €10 million worth of IOTA
Suspect operated the iotaseed.io portal that generated and secretly logged passwords for IOTA wallets.


https://twitter.com/Europol/status/1088115324547928065

Congratulations to everyone in this thread who posted their information and got their local authorities involved. This epitomizes the strength that we have when working together toward a common goal. Also, this wouldn't have been possible without the great work of Alexa (@CryptoHamster)  or the IOTA Foundation (specifically Koen and Julie). 
Edited 7 Months Ago by Winston
rose
r
Attaching to Tangle (69 reputation)Attaching to Tangle (69 reputation)Attaching to Tangle (69 reputation)Attaching to Tangle (69 reputation)Attaching to Tangle (69 reputation)Attaching to Tangle (69 reputation)Attaching to Tangle (69 reputation)Attaching to Tangle (69 reputation)Attaching to Tangle (69 reputation)
Group: Forum Members
Posts: 13, Visits: 2
This is amazing if it pans out. I just considered the stolen tokens a lost cause.

I briefly looked up the info, but there's not much posted about it. Do you know if they actually caught the people or if they just have a suspect they are questioning? That's all the video said was that a suspect was taken.

Any idea if funds can be recovered and what any of us need to do now?

Winston
Winston
Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)Forum Admin (33K reputation)
Group: Administrators
Posts: 3.6K, Visits: 6.7K
rose - 24 Jan 2019
This is amazing if it pans out. I just considered the stolen tokens a lost cause.

I briefly looked up the info, but there's not much posted about it. Do you know if they actually caught the people or if they just have a suspect they are questioning? That's all the video said was that a suspect was taken.

Any idea if funds can be recovered and what any of us need to do now?
@rose 
I don't know any more than was written in the article that's linked above, but I would assume that a few more conditions will have to be met before they're able to potentially return funds to the victims (conviction of the suspect and identification of funds on seed are probably the two big ones). I think the article gives a contact number for anyone with further information on the case, so maybe people could contact Europol via that number and ask about what the next step should be?

Edited 7 Months Ago by Winston
zimer87
z
Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)Attaching to Tangle (26 reputation)
Group: Forum Members
Posts: 10, Visits: 6
Hi Winston,

I am another victim of that thief.
Do you have a knowledge what guy like me should do to (maybe) get back my stolen funds?
Maybe month later you have some information about it?

Thank You in advance for the answer.
Alexa
Alexa
True IOTAn (9.6K reputation)
Group: Moderators
Posts: 732, Visits: 1.4K
For everyone asking about how to get your funds back:
The truth is that right now nobody knows if, when or how it might happen.
The rules and details of this process will be have to be decided by the authorities.
For now, the stolen funds serve as evidence, so most likely nobody will get anything back before the trial is done.

But everyone can prepare:
  • Keep your seed!
  • Collect and keep all evidence of when and where you bought your coins and where you sent them afterwards. For example save both your trade history and your withdrawal history from your Bitfinex account (or wherever you initially purchased your coins). Do not delete that account.
  • If you haven’t done so already: Report the theft to your local police!
This is very important because the authorities might only consider claims for officially reported incidents. It could also happen that national authorities will each take care of only their own national residents. Therefore it’s very important that your local authorities know about your case and that they can notify you of anything important.
During the investigations, we have informed the German police of the details of many theft cases that were reported here on the forum. But your specific case might not have been included in these actions for certain reasons. Even if it was included, that still doesn’t mean that the authorities have any personal info about you other than your username. Therefore it is required that you file a proper claim with your local police.
  • Be patient. Wait and pay attention to any news regarding the case. 
Good luck to everyone! I got my fingers crossed for you.

I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
Cirilla
Cirilla
Attaching to Tangle (32 reputation)Attaching to Tangle (32 reputation)Attaching to Tangle (32 reputation)Attaching to Tangle (32 reputation)Attaching to Tangle (32 reputation)Attaching to Tangle (32 reputation)Attaching to Tangle (32 reputation)Attaching to Tangle (32 reputation)Attaching to Tangle (32 reputation)
Group: Forum Members
Posts: 2, Visits: 8
Thx for the update and detailed information!

Unfortunately it's no sense for me to report it to the local police. they don't support crypto-community in my country. No regulations and bed attitude towards cryptos. I will keep track of this topic. Hope to get at least some of my coins back 1 day

Cheers,




isidore
i
Attaching to Tangle (44 reputation)Attaching to Tangle (44 reputation)Attaching to Tangle (44 reputation)Attaching to Tangle (44 reputation)Attaching to Tangle (44 reputation)Attaching to Tangle (44 reputation)Attaching to Tangle (44 reputation)Attaching to Tangle (44 reputation)Attaching to Tangle (44 reputation)
Group: Forum Members
Posts: 2, Visits: 12
Hello,

I have only just caught the updates regarding the capture of the thief. For some reason, I stopped getting updates to this thread.
Is there any update on the process to reclaim our stolen IOTA?

Thanks,

Alexa
Alexa
True IOTAn (9.6K reputation)
Group: Moderators
Posts: 732, Visits: 1.4K
isidore - 15 May 2019
Hello,

I have only just caught the updates regarding the capture of the thief. For some reason, I stopped getting updates to this thread.
Is there any update on the process to reclaim our stolen IOTA?

Thanks,

@isidore
No news since they caught him, but it's expected to take time.
If anything gets released about if, when or how the funds might be returned, I'll post it here. 

I wouldn't be able to help anyone without thetangle.org-explorer. If you feel like you want to support its developer Mathieu Viossat in maintaining his service, please consider a donation to the address shown here: https://thetangle.org/about. Thank you!
GO

Merge Selected

Merge into selected topic...



Merge into merge target...



Merge into a specific topic ID...




Reading This Topic

Login

Explore
Messages
Mentions
Search