How hackers hack e-gold accts. and what you should do!

I paste an info which I have found on another forum, it doesn't matter if you are using a PC, Linux or Mac:

Quote:

---

e-Gold can be hacked at e-Gold server-side, not our side.

This is e-Gold hack software, Gold Tresor v3.0 from www.goldpro.tk

Frequently Asked Questions :

Q: How GoldTresor finds passphrases?

A: In fact GoldTresor don't find anything ! This software sends small backdoor script to E-Gold server and defraud it, then match passphrase with NOTHING but get real passphrase !

Q: How Long it takes to access an E-Gold account?

A: It depends on many parameters such as your internet connction speed and E-Gold server traffic at same time. Anyway it takes a few minutes to 1 hours.

Q: Does GoldTresor works with new E-Gold security feature: AccSent?

A: YES! GoldTresor bypasses AccSent script similar to Turing number script.

Q: With AccSent security feature we can't login to account even we have passphrase.
Does this program works about it?

A: YES! When GoldTresor accesses account and get passphrase, you can transfer ALL of
balance to any other account directly from GoldTresor program with Transfer button.

Q: If your software works fine you can get good money, so why you sell it?

A: It is true! We made good money with this program. Probably most E-Gold accounts with high
balance is hacked with this software. like the owner of HYIP. all HYIP is 95% fake/scam site, some people are the victim of this. so that's why this software made.

Q: If I access and transfer balance from an account, is it safe for me?

A: YES! This software has built in proxy server and you can change your IP address for login to E-Gold server. So only proxy IP could be saved in E-Gold servers.

Q: Does ANY account be accessible with GoldTresor?

A: NO! Accounts with passphrase that is longer than 16 characters could not be accessible with GoldTresor. Because it takes more than 128 bits and our backdoor script doesn't support it. This is only weakness of GoldTresor in new version. We are working on this problem for next version.

Q: Does new version support accessing to E-Dinar or E-Bullion or others?

A: NO! Due to some reasons new version only operates on E-Gold. Also our research shows that E-Gold is used more and more. So we focus on E-Gold and GoldTresor code is smaller than before.

Q: I am registered in some HYIPs with an account that I don't access to e-mail of that account. By AccSent feature of E-Gold I can't access that account. Does GoldTresor help me?

A: YES! Of course with transfer by GoldTresor always you can get your profits but in other accounts ! Also we are working on this ability for changing e-mail address of E-Gold accounts. Probably we provide it in next version.

Q: Do you provide a demo or trial version?

A: Yes, couse like the old version (Goldtresor v.2.6) can be crack the password by craker or hacker, so i think that's why i provide a demo version, but don't trust if any site that sell Goldtresor v3.0 with demo version, couse it maybe a scam site. Goldtresor v3.0 can buy only at http://egoldcheat.biz.tc

Q: If I pay you with E-Gold, can you hack my E-Gold account?!

A: YES!!! This is intelligence question. But: Firstly we won't hack your account, Secondary if you want pay with E-Gold you should create new account and transfer $50 to it, then pay us with that account. So you have nothing to lose !

Q: How can I be sure that you won't scam me?

A: For that we made the download demo version available to you, so you can get the actual software and when you make the payment you will get the full version and the password.

Be careful!!!
1. Do not keep too much money in your e-Gold account.
2. Do not announce your e-Gold account number in any forum.
3. Install Firewall and password Protection software such as ZoneAlarm and RoboForm.
4. Apply 20 or more characters of your passphrase and change it regularly.

---

I think the crucial part is to have more than 20 characters in your PW, this should stop brute force hack programs or at least make it quite nonprofitable due that it is timeconsuming, the longer the password the longer the computer needs to calculate. It is scary though that currently they manage to even hack 16 character strong passwords. I assume they connect several PC's for more CPU power and let them run for days (or even several weeks) day and night in order to get into one acct. if they know there might be some large funds. At the point they have found the password they have an easy game, can login several times in your acct. (without you even knowing it as they bypass the security features) and check each day and catch the day funds come in. We shouldn't underestimate those guys, they hack for living, do that night and day and are asbolute Pro's in that what they do.

Be aware and take the precautions listed above and this applies not only to e-gold but ALL e-currencies you deal with. Any other suggestions and ideas welcome!

Cheers
Mike

Just re-read it and it only takes a few minutes to max. 1 hour with this software and not like I thought several days! This is crazy!

Actually e-gold should have been aware of this loophole for quite a long time as this hacking with softwares goes on for at least 1-2 years as far as I recall on accts. getting hacked despite all security measures... Why didn't they do anything until now??

I just found a site selling this and they accept payment only by..... Egold!

Therefore it can't be that good, otherwise you could just hack his account and get it back along with everything else he has... his E-gold Id is 1609546 if anyone fancies a shot...

I bet he has made enough precautions for his acct. (+20 character etc.) and has several accts. in place to switch funds.

Quote:

---

Originally Posted by nej

I just found a site selling this and they accept payment only by..... Egold!

Therefore it can't be that good, otherwise you could just hack his account and get it back along with everything else he has... his E-gold Id is 1609546 if anyone fancies a shot...

---

If gets even worse, I paste an article someone posted on the other forum:

Quote:

---

As Paul Harvey would say; now for the rest of the story.

About 6 months ago, or there abouts, I opened a new egold account to be used exclusively for a particular program. the account was used for nothing else. I only logged inyto the account on three occasions.

The password was 40 characters long using a combination of upper and lower case letters, numbers, and other characters. It was created on a sheet of paper on my desk and entered into the egold system using their SRK function. I used the SRK function everytime I logged into my e-gold account. Evrytime I logged into e-gold I am required to enter the PIN. that is still the case, now. I never typed the password into the computer or saved it to the hard drive or floppy and I am the only person in our house that uses a computer. It just doesn`t exist online except in the egold system.

And yes the account was hacked. I only lost $60 but that is not the point. The point is that egold security is nothing more than crap shoot.

What pissed me off more than anything was egold themselves. I wrote them basically the letter I wrote here and their response was something like a government form letter. It was my fault; it was my computer`s fault; it was my dog`s fault, (I don`t have a dog); it was everybody`s fault, except, of course, egold`s.

Egold said that if I followed the procedures that I descibed, then it would be impossible for anyone other than myself and egold to access the account. I wrote them back with the name and egold account number that the funds went to and that was the last communication I ever received from them. They refused to answer any more of my letters.

The only reason that I belong to this program is because of what the other members have to say about xxxx and xxxx. I am happy with the program to date, although I haven`t yet received my first payment, (due in a couple weeks).

---

This reminds me of when PIPS e-gold has been hacked 2 years ago and when BM assumed it even might have been inside work. Now this is indeed scary!

Warning from Nevis Financial Services Regulation and Supervision Department:

Quote:

---

E-Gold Limited
Date: 05-Dec-2005

The Nevis Financial Services Regulation and Supervision Department wishes to advise that the website www.e-gold.com contains inaccurate and misleading information as to its legal status.

E-Gold Limited was incorporated in July 1999 under the Nevis Business Corporation Ordinance 1984 (NBCO). However, it was subsequently found not to be in good standing and was struck from the register of companies on July 31, 2003 for non-payment of fees, as required by s.99 of the NBCO. E-Gold Limited has not applied to the Registrar to be restored to the register. Therefore, it is not on the register of companies in Nevis and as such we advise that persons viewing this site or proposing to do business with E-Gold Limited should exercise great caution.

For further information, please contact the Nevis Financial Services Regulation & Supervision Department by e-mail at: [email protected].

---

source: http://www.nevisfinance.com/Announce...?Idz=4&MIdz=36

Another article from another private program which pays out for several years:

Quote:

---

We have it on good authority that e-gold has been under investigation by the SEC for quite some time, and is in serious danger of being shut down. If that happens, you can pretty much forget about ever recovering any funds left there as the agencies will end up lining their pockets with these funds. XXX management has decided that we can no longer accept E-GOLD loans. The risk to buy E-GOLD each week in order to pay back E-GOLD loans is getting too high. XXX agrees with the Business Week writer that the raid could signal serious trouble for E-GOLD.

Considering the total lack of any customer service, and the reluctance of E-GOLD to attempt to stop hackers, recover hacked funds that have been illegally transferred to other accounts, it's not a surprise that E-GOLD is under investigation.

Finally we have heard that Omnipay no longer accepts bank wires at Regions Bank (Burmingham, AL) as they used to. They do not (yet) have another US account that we know of, and we now have to wire funds to their European Bank only. They probably had their U.S. account shut down.

---

I still can't believe this GoldTresor software actually works... I mean it's pretty unlikely that they can hack the e-gold servers anyway, as e-gold would notice and close the backdoor.

Additionally, if I had created a piece of software that would allow me to steal millions of dollars without a trace (oh to be that smart!) then the last thing I'd do is sell it for $50 a pop... I'd keep it for me and only me, or sell it to the mafia for a million or so.

I reckon it's inhouse if your account gets hacked (if it isn't a trojan on your PC) and that the goldtresor stuff is just a hoax to make some $$.

you need to install this on your computer ( who is that stupid ) that makes it limited to work om PC aka windows only.
I don't use windows for a decade now :-) you can pm if interested

it installs a backdoor with own smtp engine. not very new trick.

if you have a computer with the OS windows and it is corrupted, it does not matter how many digits your password has.
how does my computer get corrupted you ask ?

windows
third party software
trial software that is patched with cracks

I need Win32.gam.I source code

thanks