I got hacked and my wallet was drained from whonix : hacking

1 points

8 months ago

Weird, did you change whonix default system's password of "changeme" to something else?
did you frequently install appimage or other type of standalone executables on your whonix machine?

/u/Alphaprincess 📢

1 points

8 months ago

I installed atomic wallet. I found the time when the attack started. I was just doing my regular vendor job. I did not install anything extra. I tried to install simplex a few days ago, but I did it with chat gpt and through my terminal. I did not download it directly from the internet

/u/jackroberts

1 points

8 months ago

installing system wide applications by terminal was a fatal mistake. that gave the malware control to your whonix system.

/u/biosphere P

1 points

8 months ago

I suggest you use Qubes OS for work.
If you use it properly, this will never happen again.
Use exclusively split wallets for BTC and XMR :
forum.qubes-os.org/t/how-to-set-up-a-split-bitcoin-wallet/19017
www.getmonero.org/resources/user-guides/cli_wallet_daemon_isolation_qubes_whonix.html
Always use disposable VM to open PDF files and download pictures.
Always use a function Convert To Trusted PDF.

/u/Alphaprincess 📢

1 points

8 months ago

Where do I find something like convert to trusted pdf? Thank you

/u/biosphere P

1 points

8 months ago

This is a built-in function of Qubes OS.
Just right click on the PDF file and you will see the "Convert To Trusted PDF" function in the opened menu.
Conversion will happen in a disposable virtual machine.
I advise you a close look at Qubes OS.
You will find a lot of unique and useful features.

/u/[deleted]

1 points

8 months ago*

[removed]

/u/Alphaprincess 📢

1 points

8 months ago

My host is fine. I checked it and there were no such activity

/u/mathbot

1 points

8 months ago

infected python3 package? or infected OS package file?

/u/Zyren

0 points

8 months ago

I'm sorry this has happened to you.
Steps to make sure this doesn't happen again:
Don't download anything from anyone.
Make sure antivirus is up to date.
Use strong passwords.
Make sure you have a good firewall setup to block all inbound traffic.
Remember to always keep your wallet seed encrypted!

/u/Alphaprincess 📢

1 points

8 months ago

Yes, that was my mistake. I did not encrypt the feather wallet. but neither did I with electrum. But nothing happened with this.

I was already scared that LE got me. But they would not drain my wallet and leave me hang to dry for months? Or drain my wallet at all. How can you get access to a computer and send tor ips there? I was almost about to commit suicide, because that was not only my money, also from somebody else

I got hacked and my wallet was drained from whonix : hacking | Torhoo darknet markets