New Post has been published on Bitcoin:Views
Just lost 9.6301 BTC due to virus/bug/backdoor in the Andreas Schildbach’s android wallet
28 November 2013 | By popcorp | reddit.com/r/Bitcoin
Today i sent my profit to Andreas Schildbach’s wallet app. An hour later, this payment went out to an unknown address. Be warned, do not use this app. Andreas’ wallet is not the culprit, bug is elsewhere.
https://blockchain.info/address/1MhzgksnJNWFor5hRDWmr9qYnShw8svSg9
EDIT: It seems the PRNG in MIUI is probably still unfixed…
EDIT 2: to sum it, there are four possible attack vectors
a) unfixed PRNG (i have MIUI 3.11.15 installed)
b) zero day in MIUI exploited by a malicious app (i can’t think of any)
c) someone managed to retrieve my private key backup (was encrypted with 14 letter, non-dictionary password)
d) backdoor in the system itself
READ MORE