Bitcoin trojan caught in the wild

This is exactly why Bitcoin will never take off outside of the geek world. Can you imagine, in a world where millions used Bitcoin, the media fallout if users were being robbed with zero way to reclaim their money?<p>Knowing how little "regular" people protect their devices, this scares me.

Ah, Bitcoin: the new incentive to breach computer security. Why risk stealing credit card or bank information when you can steal Bitcoins safely and anonymously?

Don't worry, we've identified the thief! Put out an arrest warrant for: f7c956f566b11751c4d3f5ca077c0406<p>More seriously, it's interesting that the people who have been robbed from could observe in detail exactly where their stolen money is flowing to. So close, yet so far away.

A possible solution:<p><a href="http://forum.bitcoin.org/index.php?topic=18141.0" rel="nofollow">http://forum.bitcoin.org/index.php?topic=18141.0</a><p>tl;dr: Create a bitcoin address, backup wallet.dat, delete wallet.dat from your HD, and send your bitcoins to that address.

Any one else find the FTP password amusing?

what's with the random number generation at the start? how does rand() + 3*rand() improve on just rand()?

Mmh, the "underground code snippet" looks very fishy, unless I'm missing something:<p><pre><code> char * appdata = getenv("APPDATA"); char * truepath = strcat(appdata, "\\Bitcoin\\wallet.dat");</code></pre>

&#62;<i>it has one motive: to locate your Bitcoin wallet.dat file and email it to the attacker.</i><p>Craziness. They could just send the coins to a Bitcoin address, and it wouldn't identify them <i>at all</i>.

The BTC clients should encrypt the wallet too.

Uh? Aren't Bitcoin wallets encrypted?

I have an idea that may fix this broken model of Bitcoin. Make sure each penny has a "history" on it on a public server. You can't spend the money unless it is posted for everyone to see. Each transfer of money is documented, and the reason for the transfer and other data. And in order to spend it, you have to validate and review each transfer of money before it. If there is anyone stealing money, it is just a matter of looking at the history of each penny and then tracking down the unique id to the offender who spent the money they didn't earn.<p>A safe online currency can be done, but if you champion this, the United States government are going to find you, and squish you like the insignificant bug you are. You would be circumventing the primary income stream of the united states with a global standardized currency.

Problem with bitcoin: it's an eternal beta. Can't be solved either.

This is why we can't have nice things.