Found more alt of this hacker, https://bitcointalksearch.org/topic/m.14006801
Topic: Flag a hacked account (Read 2269 times)
It looks like this is not the first time this has happened. If you look at this thread, you will see that someone else had their account hacked without their password getting changed, then when the real owner realized what was going on he changed his password. It looks like Blazr was able to track the stolen funds to vitha putri, on this post.
The above account posted 1Ayn1NnpcBS7djk1D4JF1F5dZX82FBsDST here which is part of 0302f4c7ae
edit: the address that Blazr was able to link to the stolen funds is a dead end with the exception of the single one account....at least with the information that I have access to.
The above account posted 1Ayn1NnpcBS7djk1D4JF1F5dZX82FBsDST here which is part of 0302f4c7ae
edit: the address that Blazr was able to link to the stolen funds is a dead end with the exception of the single one account....at least with the information that I have access to.
and orenz is not an alt of yours?
Also see above, it seems he had a second account also with the same bitcoin address
Regards,
Jamie
orenz.
and mucalov91 and blackmasker, according to this transaction.
but I'm no blockchain expert so CMIIW.
Indeed, that TX is signed by all of the 3 address so it's a proof. For reference:
https://twitter.com/Rangerbitcoin
BTC addres: 19s647u9oaHK78852Tcgwn6CK5KaFKdvq
retweet and follow..thanks
BTC addres: 19s647u9oaHK78852Tcgwn6CK5KaFKdvq
retweet and follow..thanks
Archive.
Also robzxxx.
He posted the address 1A5zW53GG9gcPK4wsbuuhZnPzy7dY8ZNSE here (archive).
1A5zW53GG9gcPK4wsbuuhZnPzy7dY8ZNSE and 1M5a1Uw6FqD43UyxN8TPJau6SCzKttfoZL cosign this TX.
and orenz is not an alt of yours?
Also see above, it seems he had a second account also with the same bitcoin address
Regards,
Jamie
orenz.
and mucalov91 and blackmasker (all of them posted in the same thread in the same day with same format, yeah), according to this transaction.
but I'm no blockchain expert so CMIIW.
Well... this seems to be one of the rare cases where everything got repaired with a hacked account... well... i only paid for missing a crucial point. Though i think it's fair since i should have been thought of it. 
I think i don't even want to be angry against the scammer. I mean how poor, he posted with that account in games and rounds and is happy getting 0.12 coins. I mean i feel now like i tipped a bum on the street. I don't await anything when i tip a bum and so i can't really be angry when someone works that hard for scamming that much.
Anyway... i hope the red trust gets removed completely and nothing like that happens again.
I think i don't even want to be angry against the scammer. I mean how poor, he posted with that account in games and rounds and is happy getting 0.12 coins. I mean i feel now like i tipped a bum on the street. I don't await anything when i tip a bum and so i can't really be angry when someone works that hard for scamming that much.
Anyway... i hope the red trust gets removed completely and nothing like that happens again.
and orenz is not an alt of yours?
Also see above, it seems he had a second account also with the same bitcoin address
Regards,
Jamie
SebastianJu gently sent me the 0.12 BTC. He's surely the best escrow this forum has seen!! He didn't have to pay anything, but he did anyway as you can see.
For anyone who wants to track and trace the imposter, here you can find the btc address the money was sent to:
For anyone who wants to track and trace the imposter, here you can find the btc address the money was sent to:
Loan amount required: 0.12
Repay amount: 0.13
Repay date: 24/08/2015
110% - 150% Collateral: this account
Bitcoin address: 1M5a1Uw6FqD43UyxN8TPJau6SCzKttfoZL
Repay amount: 0.13
Repay date: 24/08/2015
110% - 150% Collateral: this account
Bitcoin address: 1M5a1Uw6FqD43UyxN8TPJau6SCzKttfoZL
If i had the bitcoins i would.
Sadly you have seen my empty wallet. If i ever come across any, i will be sure to send a tip when i can
Sadly you have seen my empty wallet. If i ever come across any, i will be sure to send a tip when i can
I've removed the negative trust I had left. I'm glad this is solved, great response by SebastianJu!
Personally I think all 3 were responsible for this for not securing the account enough and not asking for a signed message. I hope both bigjme and Gelbstich generously tip Sebastian.
Personally I think all 3 were responsible for this for not securing the account enough and not asking for a signed message. I hope both bigjme and Gelbstich generously tip Sebastian.
The account is now back in my name, with a new password, and a new email address.
I am sorry for all the trouble SebastianJu
I am sorry for all the trouble SebastianJu
And when the original owner can provide a signature that proofs his ownership then i will give him the account login.
Message sent to BadBear,
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
He posted that signature earlier in this thread so he is indeed the original owner of the account. You can see proof of this bitcoin address being used by bigjme in his signature here.
Thanks for the link. I only found the signature being valid but did not see the cache link. Guess it's proven then. I will give him back his account and give gelbstich his 0.12 bitcoins since i should not have forgotten to think about the signatures.
I will ask the original owner to post on here when it's done.
And when the original owner can provide a signature that proofs his ownership then i will give him the account login.
Message sent to BadBear,
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
He posted that signature earlier in this thread so he is indeed the original owner of the account. You can see proof of this bitcoin address being used by bigjme in his signature here.
Ok, first thing first, the account is not gone. It's secured by me.
Well, what should i say... i really don't know why i did not get the idea to tell Gelbstich to ask for a signature when accepting an account as collateral. I think it might be because account buyers are behind it so very much all the time.
Anyway... since this is partly my blame i will pay Gelbstich his loss. And when the original owner can provide a signature that proofs his ownership then i will give him the account login.
I checked if the story might be correct. The last PM's are from september 17. The account posted from 7th to 14th august. Before that only until november 3rd. And the posts and language is very different.
So it might very well be true. Except a scammer had a long working plan and is clever.
Automatic email notification for threads was deactivated too.
Looks like i just was welcomed in the club of escrows that had a hacked account in escrow.
Well, what should i say... i really don't know why i did not get the idea to tell Gelbstich to ask for a signature when accepting an account as collateral. I think it might be because account buyers are behind it so very much all the time.
Anyway... since this is partly my blame i will pay Gelbstich his loss. And when the original owner can provide a signature that proofs his ownership then i will give him the account login.
I checked if the story might be correct. The last PM's are from september 17. The account posted from 7th to 14th august. Before that only until november 3rd. And the posts and language is very different.
So it might very well be true. Except a scammer had a long working plan and is clever.
Automatic email notification for threads was deactivated too.
Looks like i just was welcomed in the club of escrows that had a hacked account in escrow.
I am sure we will be able to sort something out. After all, the account was inactive for 8 months, i don't plan to use it again
Regards,
Jamie
Regards,
Jamie
well crap. looks like Gelbstich gave the loan after all. I think the account is in his possession right now.
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
Thank you Encrypted for informing me. I wrote a PM to the OP.https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
Lets hope you can aggree on something. There has been a similar case and its dragging on for months. The admins tend to not interfere if the account was transfered as part of a deal.
well crap. looks like Gelbstich gave the loan after all. I think the account is in his possession right now.
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
Thank you Encrypted for informing me. I wrote a PM to the OP.https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
well crap. looks like Gelbstich gave the loan after all. I think the account is in his possession right now.
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
Gelbstich has been reckless giving out loans today. He/she will learn soon.
well crap. looks like Gelbstich gave the loan after all. I think the account is in his possession right now.
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
@shorena
The email to BadBear has my email address in it. i didn't fancy giving it out here.
Just wanted to post something for you to see until the admins resolve the issue.
@guitarplinker
Thank you!
Regards,
Jamie
The email to BadBear has my email address in it. i didn't fancy giving it out here.
Just wanted to post something for you to see until the admins resolve the issue.
@guitarplinker
Thank you!
Regards,
Jamie
Different format. Signature checks out, but its probably best if you ask for an mail address that actually exists. Accounts do not get deleted.
I think he might have sent BadBear one with his email address included, just because of the wording in his message below.Message sent to BadBear,
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
Negative trust left on the account. Let me know when you're in control of the account again and I'll remove the negative trust left. But now that you've sent BadBear a message you've basically done all you can, and I wouldn't worry about the hacker doing anything on your account now with the negative trust. However be sure to let us know when you get back into your account. For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
Jump to: