Author

Topic: Account got hacked - Hacker is using my trust score to scam others (Read 1813 times)

newbie
Activity: 40
Merit: 0
Hello all

I would like to make a final update to this thread and thank all the ones who helped.

Unfortunately, after sending 3 messages to theymos with the required signature in the exact required format as mentioned, I received no reply.
I even offered in my last message, a $100 USD BTC donation the bitcointalk.org forum in return to the wasted 5 minutes required to verify the signature.
It's been a week now, no answer, to be honest, I'm not expecting one anymore.

I'll go ahead and start fresh again as advised.
I already made a new post here
https://bitcointalksearch.org/topic/exchanging-bitcoin-into-paypal-very-high-positive-feedback-1430141

and would like to ask for your support, especially the members who traded with me earlier, the members who were able to verify my account at bitify and the members who verified my old signature (already posted in this thread).

Thank you all for your help and support.
newbie
Activity: 40
Merit: 0
Thank you for the tips.
Will have a look.
legendary
Activity: 1260
Merit: 1003
If you have a linux distribution you can create a random password with the following command:
apg -a 0 -x 32

Create a password of at least 32 characters for your account: Bitcointalk is not very secure and your data will be stolen someday in the future but if you have a password of at least 32 characters the chances of your account being hacked are lower.
"Bitcointalk gets hacked once a year in the last 5 years span"
You can buy the whole Bitcointalk database in the darknet.

For Window platform you can use this tool:
Password Generator: http://pwgen-win.sourceforge.net/
Password Keychain: http://keepass.info/

Sad for your loss.

Good luck with your work.


Best regards.



BitNow
"Buy moondollars with cash"
www.bitnow.it
staff
Activity: 3458
Merit: 6793
Just writing some code
Dear all

First I would like to thank you for your help in the last day, with regards to restore my account.

I have made few research yesterday and today, and found out that even if you are able to fulfill theymos requirements by signing an old address, it's highly probable that your request will get dismissed or ignored.

Can any of your guys confirm or deny this?

That's the message I send (exactly as requested)

_______________________________________________________________________________ ___

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account has been hacked. Please reset the email to <[email protected]>. The current date is <01 April 2016>
-----BEGIN SIGNATURE-----
131pBGSGtQ9Z5XuGUFYV55NB1iq5nSoaJ5
HMP7v8HqWnG4AfIy4WuEQ4OO1DwgU8P+roTtynRJJH+dam866C6tf72GCZ8R0hkOw/zgX83OImseLG78tf+Ugmo=
-----END BITCOIN SIGNED MESSAGE-----

I sent that address to someone in a PM with PM ID#4176240
https://bitcointalk.org/index.php?action=pm;sa=send;f=inbox;pmsg=4176240;quote;u=71834
_______________________________________________________________________________ ___


I'm not sure what else should I be doing, if anyone knows the right steps to get this account restored, I would really appreciate it:

PLEDGE: For anyone who can actively help, in return for your time for helping me restore my account, I pledge to donate $25 USD (by uᴉoɔʇᴉq) to any address or any charitable organisation of your choice.
Really all you can do now is wait. PM theymos and BadBear with the signed message and hopefully your account will be recovered. The proper users have given it negative trust warning that the account is hacked and Cyrus said (in the trust page) that the account is now banned as well so it can't be used maliciously.
newbie
Activity: 40
Merit: 0
Dear all

First I would like to thank you for your help in the last day, with regards to restore my account.

I have made few research yesterday and today, and found out that even if you are able to fulfill theymos requirements by signing an old address, it's highly probable that your request will get dismissed or ignored.

Can any of your guys confirm or deny this?

I sent that address to someone in a PM with PM ID#4176240
https://bitcointalk.org/index.php?action=pm;sa=send;f=inbox;pmsg=4176240;quote;u=71834
_______________________________________________________________________________ ___


I'm not sure what else should I be doing, if anyone knows the right steps to get this account restored, I would really appreciate it:

PLEDGE: For anyone who can actively help, in return for your time for helping me restore my account, I pledge to donate $25 USD (by uᴉoɔʇᴉq) to any address or any charitable organisation of your choice.
newbie
Activity: 40
Merit: 0
Can you sign this address avax?
131pBGSGtQ9Z5XuGUFYV55NB1iq5nSoaJ5


Finally done!

I contacted blockchain.info and they told me 2 things

1 - There is no way to sign messages with the new design.
The only way I was able to do it is to export the private key, and then import it to the key to a new blockchain.info account, without switching to the new design.

2 - Concerning exporting the private keys to another wallet.
That's what they answered.
===============================
There is no user-friendly way to export individual private keys from the HD wallet, but this guide will walk you through the steps:

https://docs.google.com/document/d/1-2l6xOqcbjs9QWEqSh72RD1d8EEdvG_hQuEXw_f_o6w/edit

Thanks,
===============================

Already contacted Theymos with my signature, waiting for his answer.
staff
Activity: 3458
Merit: 6793
Just writing some code
How are you using it with Electrum? Did you create a new wallet with the "restore a wallet or import keys" option? That is the only way to import the private key.
No, it's not.
"Wallet -> Private Keys -> Import" works aswell.
(Unless the private key exported from blockchain.info is in some odd format electrum doesn't accept that way.)

Yes that's what happening, the format of the private key exported from blockchain.info is not recognized by electrum.
I also tried it on www.bitaddress.org >> wallet details

Same error, private key unrecognized.
Oh, yeah, I just checked, Blockchain.info does not seem to be using the right format for Private keys. Private keys will always start with a 5, K or L. I'm seeing them start with 7 in my bc.i wallet.
legendary
Activity: 1260
Merit: 1003
How are you using it with Electrum? Did you create a new wallet with the "restore a wallet or import keys" option? That is the only way to import the private key.
No, it's not.
"Wallet -> Private Keys -> Import" works aswell.
(Unless the private key exported from blockchain.info is in some odd format electrum doesn't accept that way.)

Yes that's what happening, the format of the private key exported from blockchain.info is not recognized by electrum.
I also tried it on www.bitaddress.org >> wallet details

Same error, private key unrecognized.

Proceed as follow:
1. Export a private key from Electrum wallet
2. Check Blockchain.info exported key and Electrum exported key in a text editor
3. Look for differences out of the key area: the key numbers in hexadecimal should be the same, blockchain.info probably add something custom in the file and Electrum probably add some custom text in the private key file as well.
4. Normalize the key exported from Blockchain.info into the Electrum standard

Private key is a string of hexadecimal characters: that part is the only part that matters.

That is why I use Bitcoin Core: "Use web wallets for daily amounts only"


Best regards.
newbie
Activity: 40
Merit: 0
How are you using it with Electrum? Did you create a new wallet with the "restore a wallet or import keys" option? That is the only way to import the private key.
No, it's not.
"Wallet -> Private Keys -> Import" works aswell.
(Unless the private key exported from blockchain.info is in some odd format electrum doesn't accept that way.)

Yes that's what happening, the format of the private key exported from blockchain.info is not recognized by electrum.
I also tried it on www.bitaddress.org >> wallet details

Same error, private key unrecognized.
staff
Activity: 3458
Merit: 6793
Just writing some code
How are you using it with Electrum? Did you create a new wallet with the "restore a wallet or import keys" option? That is the only way to import the private key.
No, it's not.
"Wallet -> Private Keys -> Import" works aswell.
(Unless the private key exported from blockchain.info is in some odd format electrum doesn't accept that way.)
I'm using Electrum 2.5.4 and I don't see that option, just sweep and export.
copper member
Activity: 1904
Merit: 1874
Goodbye, Z.
How are you using it with Electrum? Did you create a new wallet with the "restore a wallet or import keys" option? That is the only way to import the private key.
No, it's not.
"Wallet -> Private Keys -> Import" works aswell.
(Unless the private key exported from blockchain.info is in some odd format electrum doesn't accept that way.)
staff
Activity: 3458
Merit: 6793
Just writing some code
If your address was created on the old blockchain.info wallet, with the new one, you should be able to export the private key and use another software to sign a message. If you go to Settings > Addresses and click on "Manage Addresses" next to the Imported Addresses option, you will see a list of addresses from the old wallet. Then click on export private key to get the private key of your address and sign a message with it.

Yes I managed to go to "Manage addresses" and copied the Private key for that address, however when I paste it in the Electrum software, it doesn't recognize it, any ideas?
How are you using it with Electrum? Did you create a new wallet with the "restore a wallet or import keys" option? That is the only way to import the private key.
newbie
Activity: 40
Merit: 0
If your address was created on the old blockchain.info wallet, with the new one, you should be able to export the private key and use another software to sign a message. If you go to Settings > Addresses and click on "Manage Addresses" next to the Imported Addresses option, you will see a list of addresses from the old wallet. Then click on export private key to get the private key of your address and sign a message with it.

Yes I managed to go to "Manage addresses" and copied the Private key for that address, however when I paste it in the Electrum software, it doesn't recognize it, any ideas?
legendary
Activity: 1260
Merit: 1003
Download the Bitcoin Core wallet: signing addresses with that wallet is very easy.
For any doubt or information feel free to ask.
Best regards.
But we need a signature from the address that user has previously used (and posted in a PM).
Hence only the 131pB address comes to mind.

I was giving advices.

However, if the user is unabled to export the private key from blockchain.info (or get to it in any other way),
downloading core won't be that much a help with this task.

That is true.


Best regards.
copper member
Activity: 1904
Merit: 1874
Goodbye, Z.
What is a 131pB address?
An address starting with the prefix 131pB.

Can you sign this address avax?
131pBGSGtQ9Z5XuGUFYV55NB1iq5nSoaJ5
legendary
Activity: 1260
Merit: 1003
Download the Bitcoin Core wallet: signing addresses with that wallet is very easy.
For any doubt or information feel free to ask.
Best regards.
But we need a signature from the address that user has previously used (and posted in a PM).
Hence only the 131pB address comes to mind.
However, if the user is unabled to export the private key from blockchain.info (or get to it in any other way),
downloading core won't be that much a help with this task.

What is a 131pB address?


Best regards.
staff
Activity: 3458
Merit: 6793
Just writing some code
If your address was created on the old blockchain.info wallet, with the new one, you should be able to export the private key and use another software to sign a message. If you go to Settings > Addresses and click on "Manage Addresses" next to the Imported Addresses option, you will see a list of addresses from the old wallet. Then click on export private key to get the private key of your address and sign a message with it.
copper member
Activity: 1904
Merit: 1874
Goodbye, Z.
Download the Bitcoin Core wallet: signing addresses with that wallet is very easy.
For any doubt or information feel free to ask.
Best regards.
But we need a signature from the address that user has previously used (and posted in a PM).
Hence only the 131pB address comes to mind.
However, if the user is unabled to export the private key from blockchain.info (or get to it in any other way),
downloading core won't be that much a help with this task.
legendary
Activity: 1260
Merit: 1003
Yes i own that address.
But I never signed an address before.
So give me 10 minutes to learn how to do it Smiley

Download the Bitcoin Core wallet: signing addresses with that wallet is very easy.
Bitcoin Core download: https://bitcoin.org/en/download
How to sign: https://forum.bitcoin.com/beginners-help/guide-how-so-sign-a-message-with-blockchain-info-t436.html

For any doubt or information feel free to ask.


Best regards.
newbie
Activity: 40
Merit: 0
Thank you
I'm contacting Theymos now
PS: I already sent the 0.34356322 BTC to another address

https://blockchain.info/tx/407147a173f7229c1ee1769f7f16798d2c70f15008eaacad742d7f2f4c174e58



Please help because with the new blockchain.info design there is no way to sign an address.
I'm aware of that. However, it's not for me to decide what is sufficient to prove ownership.
We (xetsr, shorena and I) have already left negative trust to your (hacked) account, so it hopefully won't be used to scam anyone else.

Currently, it's about recovering it (-> giving control back to you).
In the sticky thread (here) theymos is pretty clear about the requirement of a signed message.

Quote
I very rarely recover accounts if you can't prove ownership as described above. There are alternative ways of proving ownership, but they take too much time. If I point you to this thread, you can't prove ownership properly, and then I ignore your future PMs, this means that I'm not going to recover your account. Create a new one.



You can take a shot though, PM theymos, explain the situation and point to this thread.
Good luck with it!
copper member
Activity: 1904
Merit: 1874
Goodbye, Z.
Please help because with the new blockchain.info design there is no way to sign an address.
I'm aware of that. However, it's not for me to decide what is sufficient to prove ownership.
We (xetsr, shorena and I) have already left negative trust to your (hacked) account, so it hopefully won't be used to scam anyone else.

Currently, it's about recovering it (-> giving control back to you).
In the sticky thread (here) theymos is pretty clear about the requirement of a signed message.

Quote
I very rarely recover accounts if you can't prove ownership as described above. There are alternative ways of proving ownership, but they take too much time. If I point you to this thread, you can't prove ownership properly, and then I ignore your future PMs, this means that I'm not going to recover your account. Create a new one.



You can take a shot though, PM theymos, explain the situation and point to this thread.
Good luck with it!
newbie
Activity: 40
Merit: 0
however it seems blockchain.info changed their design so that tutorial, is not helping me see where to sign an address with the new design.
If you are using the new beta wallet, I think there currently is no option to sign from the addresses (that is according to my information).
Although, I don't use blockchain.info, so if that's wrong, feel free to correct me.

Are those blockchain.info addresses aswell, or can you sign from any of them?



Blockchain[.info] hasn't changed their design.
They have, if you are using their beta wallet.
https://blockchain.info/wallet-beta/#/



If I move a specific amount of btc from that address to another address will that that be enough proof?
You tell me the amount and I'll move it.
Let's say 0.34356322 btc
or whatever you want as number.

Please help because with the new blockchain.info design there is no way to sign an address.
copper member
Activity: 924
Merit: 1007
hee-ho.
^Blockchain hasn't changed their design. Just login to your account, click Receive Money tab, next to your address there will be a Actions drop-down box which you need to click and select Sign Message. In the pop up, type a message to verify your account and copy paste the code you get.

they have a new wallet. there's an option to switch to the new wallet on the log in page. once you switch you can't go back and you're stuck with an incomplete wallet with no option to either sign a message or export private keys.

if OP have saved the private key of that address somewhere he can import that to another wallet. if he can't then hopefully theymos will accept sending bitcoins from that address as proof.
newbie
Activity: 40
Merit: 0
however it seems blockchain.info changed their design so that tutorial, is not helping me see where to sign an address with the new design.
If you are using the new beta wallet, I think there currently is no option to sign from the addresses (that is according to my information).
Although, I don't use blockchain.info, so if that's wrong, feel free to correct me.

Are those blockchain.info addresses aswell, or can you sign from any of them?

No I can't sign those addresses, but I can prove the ownership of 131pBGSGtQ9Z5XuGUFYV55NB1iq5nSoaJ5
with no problem
legendary
Activity: 2632
Merit: 1094
^Blockchain hasn't changed their design. Just login to your account, click Receive Money tab, next to your address there will be a Actions drop-down box which you need to click and select Sign Message. In the pop up, type a message to verify your account and copy paste the code you get.
copper member
Activity: 1904
Merit: 1874
Goodbye, Z.
however it seems blockchain.info changed their design so that tutorial, is not helping me see where to sign an address with the new design.
If you are using the new beta wallet, I think there currently is no option to sign from the addresses (that is according to my information).
Although, I don't use blockchain.info, so if that's wrong, feel free to correct me.

Are those blockchain.info addresses aswell, or can you sign from any of them?



Blockchain[.info] hasn't changed their design.
They have, if you are using their beta wallet.
https://blockchain.info/wallet-beta/#/
newbie
Activity: 40
Merit: 0
thank you for that
however it seems blockchain.info changed their design so that tutorial, is not helping me see where to sign an address with the new design.
If anyone has an account on the new Blockchain.info I would appreciate any help

Or I can send the admin here, $1 from 131pBGSGtQ9Z5XuGUFYV55NB1iq5nSoaJ5 as a proof that I own that address.

Thanks for helping

But I never signed an address before. So give me 10 minutes to learn how to do it Smiley
There's a great tutorial on how to sign a message with various tools by shorena.
https://bitcointalksearch.org/topic/how-to-sign-a-message-990345
legendary
Activity: 2632
Merit: 1094
Too many accounts have been hacked recently (especially accounts with green trust ratings). I've already escaped twice from getting scammed. OP, when did your account get hacked? Did you use a weak password or click any links on this forum?
hero member
Activity: 574
Merit: 503
V2h5IGFyZSB5b3UgcmVhZGluZyB0aGlzPw==
how does so many users get their account hacked? just curious. my friend also got their account (not bitcointalk) hacked yesterday and that made me really paranoid.
can I get hacked just by browsing the internet? I always have avast on and is very careful when downloading things. am I protected or not?
copper member
Activity: 1904
Merit: 1874
Goodbye, Z.
But I never signed an address before. So give me 10 minutes to learn how to do it Smiley
There's a great tutorial on how to sign a message with various tools by shorena.
https://bitcointalksearch.org/topic/how-to-sign-a-message-990345
legendary
Activity: 1120
Merit: 1000
Left temp negative feedback, will remove it if you can't verify ownership though.
Can you confirm you're still in control of:
https://bitify.com/user/cointrade/ ?
I can.
Contacted the account on bitify, this was the reply:





You can check address used for our transactions in the trust profile.
Can you sign this address avax?
Thanks for getting here so fast after my PM.

Well then, I hope those who accepted paypal or anything reversible are ready for the chargebacks  Undecided
newbie
Activity: 40
Merit: 0
Yes i own that address.
But I never signed an address before.
So give me 10 minutes to learn how to do it Smiley
copper member
Activity: 1904
Merit: 1874
Goodbye, Z.
Can you confirm you're still in control of: https://bitify.com/user/cointrade/ ?
I can. Contacted the account on bitify, this was the reply:





You can check address used for our transactions in the trust profile.
Can you sign this address avax?
Thanks for getting here so fast after my PM.
newbie
Activity: 49
Merit: 0
Can you sign this address avax?

131pBGSGtQ9Z5XuGUFYV55NB1iq5nSoaJ5


legendary
Activity: 1120
Merit: 1000
Damn, why does this always happen to me ? I sent him 8.5 usd btc . Sad

https://bitcointalksearch.org/topic/m.14378657

This is why I left negative feedback without seeing a signed message. Usually scammers stall like this.

Of course I could be wrong and will apologize for leaving feedback if it turns out it wasn't a hacked or bought account.

yes I can do that.
Can you help?

Left temp negative feedback, will remove it if you can't verify ownership though.

Can you confirm you're still in control of:
https://bitify.com/user/cointrade/ ?

Nothing much I can do. I left negative feedback, but that would only slow him down from scamming others. Reputation is most likely ruined by now.
newbie
Activity: 40
Merit: 0
yes I can do that.
Can you help?

Left temp negative feedback, will remove it if you can't verify ownership though.

Can you confirm you're still in control of:
https://bitify.com/user/cointrade/ ?
sr. member
Activity: 434
Merit: 250
Damn, why does this always happen to me ? I sent him 8.5 usd btc . Sad
legendary
Activity: 1120
Merit: 1000
Left temp negative feedback, will remove it if you can't verify ownership though.

Can you confirm you're still in control of:
https://bitify.com/user/cointrade/ ?
copper member
Activity: 1904
Merit: 1874
Goodbye, Z.
I don't remember I have a linked bitcoin address linked to my account (if there is one I have no problem signing it)
Sadly, there is none.
Maybe some of your trade partners (ghibly79, chronicsky, luluchick, cointell, BitNow) can provide one of the addresses you sent them in private messages.
newbie
Activity: 40
Merit: 0
My account has been hacked.
https://bitcointalksearch.org/user/avax-129728

I don't remember I have a linked bitcoin address linked to my account (if there is one I have no problem signing it)

PS: I'm the owner of this post (created a year ago)
https://bitcointalksearch.org/topic/buying-bitcoin-through-paypal-very-high-positive-feedback-1083244

where I state that I am an active user of bitify.com (formerly cryptothrift.com)
https://bitify.com/user/cointrade/

The bad thing is that the hacker is now using my name and feedback history to scam other clients on this forum, like this one
https://bitcointalksearch.org/topic/m.14378065
(not posted by me)

I can prove the ownership of my account here as well as my account on bitify as well.

I'm happy to answer any question to prove my ownership if that could lead to help me restore my account.

Thank you for your help
Jump to: