user8935: About 14 hours ago I had about 700 Cat coins and 500000 Doge coins on my Cryptsy account. I have sold 0.02725061 BTC worth of DOGE and withdraw it to another address. Soon after as expected I received an email to verify the withdrawal.
About 30 minutes later my account got hacked. All of my Doge coins ware withdrawn from my account, All of my Cat coins ware sold to BTC and then they were also withdrawn from my account. 
All of this happened while I was using my PC, therefore it can't be a remote desktop program. Secondly, this account has two factor authentication which requires access to my phone, which means that simply having my user name and my password would not help in this case. 
The most disturbing thing hare is that I did not receive a verification email for any of these 2 withdrawals. As far as I know after every withdrawal from Cryptsy I'm supposed to get a email to verify the withdrawal, which clearly did not happen. Whoever did this managed to withdraw from my account without needing to access to my email account, which indicates that there is a serious security hole in Cryptsy.
By the time I found out about this all of the transactions ware already confirmed. I opened a support ticket, but I did not receive an answer yet. I just can't wrap my mind around this. How on earth did this happen? He bypassed my two factor authentication,  he did it while I way using my PC, and he did it without needing to access my email.
Any Ideas?

user8935: I figured this out a while ago. Couple of weeks after I got hacked I noticed an unknown process in the task manager. After googling the name of the file that was linked to that process (I don't remember the file's name) I found out it was a trojan horse. Afterwards I deleted it, changed my passwords, and checked out from time to time for unfamiliar processes.
I suspect that whoever did this, connected to my accounts through my session, thus bypassing my two factor authentication both on my Cryptsy account and my Gmail.
Update:
After some digging I found an infected file named Bitcoin.Trading.Botv4.6.exe. This is probably what caused the Trojan to appear in some random temp folder. I don't remember where I downloaded this, or when I ran this, and I'm pretty sure that it wasn't identified as a threat back when I first ran it. I included a link to the scan results here.

user5464: If there were a serious vulnerability at Cryptsy end affecting all users the accounts were flushed in no time, so I doubt this is an issue with Crypty itself. Otherwise there were already 1000 posts on Reddit regarding it.
The malware targeting cryptocurrencies users is very, very, sophisticated due to high value of the users being targeted. Some real-life explanations

In-browser malware modiying pages in-fly. It modifies your withdraw requests and spoof the page you see. This also gets your entered two-factor codes, so it can make withdraw requests on behalf of you. Also available on Linux and OSX: http://thehackernews.com/2014/04/malicious-chrome-extension-hijacks.html - I have seen this live when a popular Bitcoin exchange site represented two different pages when accessed through Safari (compromised) and Firefox (not compromised) on the same computer.
Your phone is also compromised. If you have rooted phone (Android, iOS), your two-factor seed codes have been stolen. Not very common, but not unheard of.
If you are using the same computer to access your email, the attacker can simply interrupt your email, steal the confirmation link and delete the email before it reaches you

The questions remain

Which operating system you are using?
Have you installed any pirated software on your computer?
Have you installed any "Bitcoin open source software?"
Have you installed any browser extensions, tickers?
Have you rooted your phone?


8935: <p>About 14 hours ago I had about 700 Cat coins and 500000 Doge coins on my Cryptsy account. I have sold 0.02725061 BTC worth of DOGE and withdraw it to another address. Soon after as expected I received an email to verify the withdrawal.</p>

<p>About 30 minutes later my account got hacked. All of my Doge coins ware withdrawn from my account, All of my Cat coins ware sold to BTC and then they were also withdrawn from my account. </p>

<p>All of this happened while I was using my PC, therefore it can't be a remote desktop program. Secondly, this account has two factor authentication which requires access to my phone, which means that simply having my user name and my password would not help in this case. </p>

<p>The most disturbing thing hare is that I did not receive a verification email for any of these 2 withdrawals. As far as I know after every withdrawal from Cryptsy I'm supposed to get a email to verify the withdrawal, which clearly did not happen. Whoever did this managed to withdraw from my account without needing to access to my email account, which indicates that there is a serious security hole in Cryptsy.</p>

<p>By the time I found out about this all of the transactions ware already confirmed. I opened a support ticket, but I did not receive an answer yet. I just can't wrap my mind around this. How on earth did this happen? He bypassed my two factor authentication,  he did it while I way using my PC, and he did it without needing to access my email.</p>

<p>Any Ideas?</p>
 8935: <p>I figured this out a while ago. Couple of weeks after I got hacked I noticed an unknown process in the task manager. After googling the name of the file that was linked to that process (I don't remember the file's name) I found out it was a trojan horse. Afterwards I deleted it, changed my passwords, and checked out from time to time for unfamiliar processes.</p>
<p>I suspect that whoever did this, connected to my accounts through my session, thus bypassing my two factor authentication both on my Cryptsy account and my Gmail.</p>
<p>Update:
After some digging I found an infected file named Bitcoin.Trading.Botv4.6.exe. This is probably what caused the Trojan to appear in some random temp folder. I don't remember where I downloaded this, or when I ran this, and I'm pretty sure that it wasn't identified as a threat back when I first ran it. I included a link to the scan results <a href="https://www.virustotal.com/en/file/fad8bb1222c21ac4b95e98d2eb2e9a7922f5f17967fca5a5a930319aad617051/analysis/1403633273/" rel="nofollow noreferrer">here.</a></p>
 5464: <p>If there were a serious vulnerability at Cryptsy end affecting all users the accounts were flushed in no time, so I doubt this is an issue with Crypty itself. Otherwise there were already 1000 posts on Reddit regarding it.</p>

<p>The malware targeting cryptocurrencies users is very, very, sophisticated due to high value of the users being targeted. Some real-life explanations</p>

<ul>
<li><p>In-browser malware modiying pages in-fly. It modifies your withdraw requests and spoof the page you see. This also gets your entered two-factor codes, so it can make withdraw requests on behalf of you. Also available on Linux and OSX: <a href="http://thehackernews.com/2014/04/malicious-chrome-extension-hijacks.html" rel="nofollow">http://thehackernews.com/2014/04/malicious-chrome-extension-hijacks.html</a> - I have seen this live when a popular Bitcoin exchange site represented two different pages when accessed through Safari (compromised) and Firefox (not compromised) on the same computer.</p></li>
<li><p>Your phone is also compromised. If you have rooted phone (Android, iOS), your two-factor seed codes have been stolen. Not very common, but not unheard of.</p></li>
<li><p>If you are using the same computer to access your email, the attacker can simply interrupt your email, steal the confirmation link and delete the email before it reaches you</p></li>
</ul>

<p>The questions remain</p>

<ul>
<li><p>Which operating system you are using?</p></li>
<li><p>Have you installed any pirated software on your computer?</p></li>
<li><p>Have you installed any "Bitcoin open source software?"</p></li>
<li><p>Have you installed any browser extensions, tickers?</p></li>
<li><p>Have you rooted your phone?</p></li>
</ul>
