The Worst Day! And a small Silver lining.
A friend came to visit Saturday, and by the time I walked with her to catch a taxi, and rode the bicycle home, it was almost 12 am. I planned to quickly check the token I'd bought a few days earlier which is bound to break out one of these days (actually, meanwhile it did but more about that in another post), and then try to get at least a start on writing a post here. However, this plan fell to shreds when I opened my Metamask wallet...
A Sick Joke
When I checked the wallet, my ETH wallet was quite empty but it didn't quite concern me because I didn't have more than a few dollars in it.
But when I checked the token that I'd bought, there wasn't anything there.
For a moment, I thought that my Metamask wallet was playing up so I shut it down, refreshed the page, and tried again. Nothing.
By that time, my heart started skipping a beat but I wasn't really too worried yet. Not yet!
It must have been some mistake, or Metamask not working properly.
I decided to check my other two wallets, on different browsers.
One was fine. The other: empty.
At this point, I was sweating it quite a bit but still, I thought it could be an issue with Metamask because the third wallet was fine.
But then I went to EtherScan and my nightmares became reality.
About 24 hours earlier, my funds had been moved to a, to me unknown, address.
I checked the second wallet: the same thing. Funds were removed to the same wallet address.
My wallets had been hacked!
At first 'all' that was gone was around $350 from two accounts. This was mainly a tiny amount of ETH, another token I'd had for years that wasn't worth much, and ALL of my new tokens, plus $100 that didn't even belong to me but was sent to me by a friend who didn't know how to buy through Uniswap yet, and wanted to get that same token.
The token has gone up big time, and right now, the total value of that would lie around $800 USD, at least.
The
However, the more I searched their wallet address, the more shit I found. My heart was about to pump out of my chest when I checked my OpenSea account and saw that they'd also taken my one and only NFT there. A Golden Bull by Elliotrades, that I had bought more than 18 months ago. I bought this together with my daughter and @camthecreator. We each paid an equal share of the 0.25 ETH it cost at that time (at the time this was $450). The highest bid I'd ever had for it was around 3 ETH (6k in USD) and we didn't take it back then because we knew it would be worth more eventually. He/they sold it for the bottom price...
I felt sick...
Then I realized that, of course, my Ether wallet address would be the same as other coin addresses, so I checked those: All gone. These were small amounts, around $100 in total but still. They even took my CUB and PolyCub. SCUMBAGS!
What to do?
There's nothing really to be done. All I could do was protect my PC from further attacks, which I did right away.
Then I got in touch with Metamask but it's very hard, if not impossible, to get in touch with support there.
There is the community but that's not much help either.
When you read their info, there's really nothing they can do. I am not saying that things should be centralized, but maybe it would be great if there was extra protection so it's harder for thieves to steal from you in Metamask.
The extra protection can be through a hardware wallet. So I decided to connect my Ledger. However, somehow it won't connect, and...well, with basically no support present, there's not much to do.
Having to put in a code that is sent to an email address would solve a lot of issues in my opinion. You can still stay anonymous with that.
OpenSea is a bit of a different story.
The thieves transferred the NFT (that I had kept, and never sold for more than a year...) to their own account. They then moved it to yet another account. The first account was unknown, and the second one was. They then sold it to the lowest bidder. You'd say that if it's a known account, they can do something, right?
Nope, wrong.
This is what OpenSea told me: They put a hold on the NFT.
So the buyer of the NFT now has a label on the NFT saying that it's under investigation for fraud. Nice one, right?
If I was that buyer, I wouldn't be a happy camper. However, when I buy an NFT, I track its history. And when I see that someone who was holding it for over a year and never took any of the offers on it, now transfers the thing for free to another account, and it's then transferred again, and then sold to me for the lowest price...I'd scratch my head and probably wouldn't buy it. However great of a deal it seems to be. So to be honest: This guy deserves the NFT to be on hold.
But here is the rest: I now had to either file a report at the local police station (uhuh, here in Mexico...not happening) OR with the FBI Cyber Crime Unit. Yes, you've read that right!
Then, and only then, will OpenSea keep the NFT locked for further sale on their platform. However, the owner is free to sell it elsewhere... Nice, right?
In other words, I have no rights. It's gone. And anything I do doesn't do me any good.
I did file the report, with all the information I have on the thieves. All their wallet addresses, and everything else they've done. Not only to me but to everyone else they stole from. And believe me, there are a few. I could see 10s of thousands a month roll from others into their accounts.
How did this happen?
To be honest, I am not 100% sure. I installed the program Malwarebytes, and it turned out that I had a Trojan on my computer named dark comet remote access trojan.
What this does is, it gathers information from all your actions and everything on your computer. Everything.
It takes snapshots, and this is how the thieves were able to do their thing.
There are a few options as to why it happened to me.
Now, in the 7 years that I've been in the crypto world, this is the very first time.
A while back, my daughter had someone take over my computer, via team viewer remote access. I told her I didn't want this, but it happened anyway. I have very strong suspicions that this was the thief. About 60%.
However, it could have been a different way, I don't know.
Then yesterday, I clicked on two different Listnerds mails, and BOTH were blocked containing a trojan. So, unfortunately, we have fellow Hivers here who are scammers. It sucks but it's true. Be warned!
But the harsh reality is that you can click a link, any link, and this can open the world (your computer) to thieves.
What to do to prevent theft
In all honesty, you will never be 100% safe in the crypto space, or anywhere really.
Personally, I never have all my funds in one wallet. Well, this time, almost all of it was in three wallets, and most of it is gone now...
I installed the malware app to detect any malware.
Then I proceeded to copy all the docs and photos I had on my PC, after checking them all manually first...
They can even hide malware in a photo...so yeah. Check the damn things.
I wiped my computer and installed Linux. I should have done this before but didn't because it would cost me my warranty. Well, now it cost me more than what the computer is worth so that was stupid.
For Metamask, you can connect a hardware wallet. This way, every transaction has to be approved there, making it much, much harder for thieves to get to your funds. With the ledger, there seems to be an issue but I will keep trying until it connects. I don't trust Metamask alone now.
I've learned a very hard, expensive lesson. The money I stuck in those tokens was there so I could turn it into more, to pay my rent. It's gone now, and so is my rent money. I already didn't have it haha.
The NFT was for when the markets would pick up, and I could sell it for at least around 9k, so each of us would have a nice chunk of money to do other things with. That's gone now. So yeah, all together, right now it seems like the thieves took a little over $1000. But in reality, they took a lot more. It sucks. There's nothing I can do about it.
Trust me, I cried some tears and felt really sorry for myself these past few days...
I just hope that one day, these thieves will be stopped and that the karma train will hit (another hacker taking them on maybe? 😆). I wish I could be there to see it happen. But that's wishful thinking...
It could have been so much worse. And at least, with cybercrime, there's no physical harm.
We live close to one of the poorest areas in Playa, and when you see how people live, it's easy to see that things are not that bad for us. These people live in such poverty every day! Whenever I feel down, I always try to keep reminding myself of that.
The Silver Lining
Sunday, my youngest son and I went to the nearest local shop to get a few things with the last money that I had. I really only had about 25 bucks that would have to last until today.
We're already living on a desperately low income, so this was just another setback that I didn't need.
We got a few basic things from the shop that we needed to get through the next few days. I can get really inventive. Shopping for less than 50 dollars a week, even here in Mexico, brings challenges but it's a challenge I have taken before, and it can be interesting at times. I'll ride the bicycle all the way across town if I have to if that's where oranges are 3 pesos cheaper a kilo...To be honest, with the prices I've found here, it suddenly becomes way more appealing to become a fruitarian...
Anyway, as we left the shop, I remembered something.
In the past, I've been through some seriously rough patches.
However, I've never been in such a situation with my kids before. Yes, we've had moments like it in Ireland but never as bad as this. However, in the past, whenever I felt like I had managed to get myself into such a mess that I didn't have more than just a few dollars left, I'd always do one thing: I'd buy myself a good meal. With nothing left to lose (financially), why not? That's the least one can do for themselves. And somehow whenever I did this, things would always get better soon after...
So this time, I thought I'd do the same. I spent 190 pesos (less than 10 dollars) out of the 400 pesos that I had left on street food for me and my kids. I even threw in some fruit juice. Now, mind you, we had enough food in the house to get us through a few days. When we got home with the food, my daughter asked why I spent this money on street food. I replied with exactly what I wrote above. And said that we deserved that much, as we'd been living off the bare minimum for such a long time now.
It'd get better. I believed it, and that's when it will get better.
But the food wasn't the silver lining I wanted to mention.
When we got to the food stall, there were two men standing next to us. They greeted us, and one got chatting with my 8-year-old son. He was telling him about the menu.
He then asked us if we needed help ordering but I declined. I want to practice my Spanish so every little helps...
The man that had been talking to my son then introduced his friend and told us that his friend's wife was going to start a group, with some friends, to practice English with each other. He suggested I'd join and that way I could practice Spanish with them, while they practiced their English.
A win-win situation.
I knew instinctively that these two were genuine and just tried to be friendly. So I eagerly agreed and we exchanged phone numbers.
You never know
This action, of us, getting the food, brought us one step closer to actually learning the language better, and to making new friends.
Behind every dark cloud, there is always a silver lining.
As an affiliate with ledger, I receive a percentage of the sales generated through this link
Posted using Neoxian City
What a horrible story. I've read several similar Metamask hacks. Man, I'm sorry that happened to you.
I have Ledger too, how long since you accessed yours? Mine had been stored a couple years. When I opened it back up some months ago, I had to download a new version that included updated firmware. Not sure it helps you get in yours but...
Here's to a brand new day. = }
Now that I was looking into it a bit more, I read that there have been quite a few people who get their funds stolen on Metamask. And just looking at this thief's history on ether scan, I could see that it's quite lucrative for them. Scum. Absolute scum. But hey, nothing I can do about it so getting upset about it doesn't help.
I only bought mine just before we left to come to Mexico, and I've had to set it up as a new hardware wallet, so I've done the updates too. I will try to do it again once the wallet is back up on my new operating system, and see how that goes. Their support is absolute rubbish so that's no help haha.
Maybe Ledger can help though. They're quite responsive, although I haven't heard back from them yet.
I understand, I feel your pain and frustration. It is a truly bad feeling when you check your crypto wallets and they are wrong...
!ALIVE
!CTP
P.S. Came here from ListNerds
@misslasvegas! You Are Alive so I just staked 0.1 $ALIVE to your account on behalf of @bradleyarrow. (1/20)
The tip has been paid for by the We Are Alive Tribe through the earnings on @alive.chat, feel free to swing by our daily chat any time you want.
Yeah, I know something similar happened to you this week too. It really sucks. I completely depend on my crypto as I have no other income, so if the rent money is gone, it's gone. Well, I've learned a hard lesson, and I will do everything I can not to ever let it happen again.
I hope you're feeling better now too.
We are two pees in a pod. Lol
!ALIVE
!CTP
@misslasvegas! You Are Alive so I just staked 0.1 $ALIVE to your account on behalf of @bradleyarrow. (6/20)
The tip has been paid for by the We Are Alive Tribe through the earnings on @alive.chat, feel free to swing by our daily chat any time you want.
Thats awful. I cant believe the Metamask could be so insecure!!! Fingers crossed things will get better soon.
Well, now you know...
I'm sure things will get better soon.
:) It's just hard to write my manifesting posts this way LOL.
I can imagine! Sending you positive vibes and energy!! !LUV !CTP !ALIVE
@mypathtofire(2/4) gave you LUV. tools | wallet | discord | community | <>< daily
HiveBuzz.me NFT for Peace
@misslasvegas! You Are Alive so I just staked 0.1 $ALIVE to your account on behalf of @mypathtofire. (4/10)
The tip has been paid for by the We Are Alive Tribe through the earnings on @alive.chat, feel free to swing by our daily chat any time you want.
Wow, what an experience you had, quite touching too, after working so hard to save for the rainy day. The silver lining is definitely out there for you, my best wishes.
Thank you. Yes, it's a pretty bitter pill to swallow.
The silver lining?
I don't use Metamask so there's no fear of a hack there..
Yeah, I need to find an alternative. What do you use If I may ask?
Ledger Nano... when I am HODLing.. right now all my crypto is in HIVE or HE
Yeah, I have a ledger and tried connecting it to my metamask for security but it won't connect. I am not sure if it supports the token I had, otherwise I would have moved it there before.
Being hacked is such a shitty to thing to experience. I am using metamask on a day to day basis. How can it happen that people are sending malicious links on LISTNERDS? I thought Listnerds checks the links? Or don't they do that?
Yeah, it's the worst! It was the first time in 7 years that I experienced something like it. Not sure if that's lucky or not. And not sure about those links. I'm pretty sure the member didn't know what they were sending but they should be checked for sure. I reported them, so hopefully it will stop them from posting those particular links.
I'm so, so sorry to read of all your thievery troubles, and I so, so beyond admire your positive attitude in the midst of all the tribulation. You are such a cool person, I know amazing things are coming your way😊.
That said, people who steal are worse than fermented bovine slobber in a bowl!!!!
!PIZZA
!CTP
Thank you my dear. Crying only relieves for a little while. It doesn't help my case at all. So I decide to see the silver linings everywhere. It makes life a little easier.
PIZZA Holders sent $PIZZA tips in this post's comments:
generikat tipped misslasvegas (x1)
@ericburgoyne(1/15) tipped @misslasvegas (x1)
You can now send $PIZZA tips in Discord via tip.cc!
I am so sorry that happened to you. Thanks for sharing.
Thank you. I hope that my story will prevent it from happening to others.
Thank you. I hope that my story will prevent it from happening to others.
That is such an awful pit of the stomach, anxious feeling when you discover something like this has happened.
I am so sorry that you experienced this.
You selected a good program in Malwarebytes. I have used it for years, and it has proven helpful.
I have seen those malicious attack attempts on ListNerds emails as well and have reported them when they occur.
I hope things turn around quickly for you.
!CTP
Thank you! Yeah, I've reported them too, and hopefully they won't be able to post any of those anymore.
I hope no one got affected by them.
Yes, malwarebytes seems to do the trick but I still felt a big overhaul was needed to make my computer safer. I used to never use Windows, and always had Linux on all my computers. However, this time I bought a quite expensive laptop (almost 2 years ago now) and didn't want to forfeit the warranty.
However, I should have really because what's been stolen is worth more than the laptop was.
Can't win it really. But Linux is the way to go. Not that it's 100% safe but much safer than Windows for sure. I stopped trusting microsoft a long time ago haha.
The only reason I use Windows is because all the Adobe shit needed for photography can not be used on Linux computers. And because an Imac was out of my reach for a long time ever since my old Imac broke down in 2018. But my dream is to have an Imac again. Windows is the weakest operation system regarding security.
I used to have Windows on one partition on a hard drive and Linux on the one that mattered the most for the same reasons: software that couldn't be used on Linux. That being said, now Linux has good options in regards to programs for photography and graphic design etc. And most of it is free...It just takes a little learning curve but it's there.
If you're talking about GIMP ... I tried that for a few years and I still couldn't get used to that. In my opinion it sucked. Yes it has good options in it, but still I couldn't do the same with my photos as with Photoshop. It's really sad, but Adobe (Photoshop) is really the marketleader in software for photography, and that's not only because of the name. It really has the most options ...
Urgh, I'm so sorry to hear this!
It's like my biggest fear every time I open MetaMask. Mainly becuase I really am never sure I'm using it properly. And I know I'd be a victim of this too without even trying hard.
Thanks for sharing your story though, it might help someone take extra precautions. I'll get your account upgraded at ListNerds for ya too to help out.
!CTP
Yeah, I really believed that metamask was quite safe. But I guess it isn't when someone takes over your computer and finds a way to all your passwords and keys. Someone told me that they'd need to have the keys, rather than the password, so I will never use those wallets again, since the keys can't be changed.
Yeah, I'm hoping that my story will prevent others from having to go through the same.
Oh wow! That's so kind of you. THANK YOU!
That's so kind of you! :)
!CTP
So sorry that happened to you. Hope things turn around for you
!CTP
!PIZZA
!HBIT
Success! You mined .9 HBIT & the user you replied to received .1 HBIT on your behalf. mine | wallet | market | tools | discord | subscribe | <>< daily
Thank you. I'm counting on things to get better soon.
I've learned some valuable lessons for sure.
Thank you. I'm counting on things to get better soon.
I've learned some valuable lessons for sure.
I really feel for you.There is always a silver lining in someway, shape or form.
There usually is. Sometimes it's hard to see but I try to see it anyway.
Thank you for stopping by. :)
I'm really sorry it happened to you, these scumbags should keep their hands of other people's funds. It's making me so mad to read these things. I know you will overcome it (as always) but that doesn't make it ok!
Take care <3
!CTP
So sorry you had to experience this. I know the feeling all too well. I had an almost same experience back in 2019.