Found more alt of this hacker, https://bitcointalksearch.org/topic/m.14006801
Topic: Flag a hacked account (Read 2282 times)
It looks like this is not the first time this has happened. If you look at this thread, you will see that someone else had their account hacked without their password getting changed, then when the real owner realized what was going on he changed his password. It looks like Blazr was able to track the stolen funds to vitha putri, on this post.
The above account posted 1Ayn1NnpcBS7djk1D4JF1F5dZX82FBsDST here which is part of 0302f4c7ae
edit: the address that Blazr was able to link to the stolen funds is a dead end with the exception of the single one account....at least with the information that I have access to.
The above account posted 1Ayn1NnpcBS7djk1D4JF1F5dZX82FBsDST here which is part of 0302f4c7ae
edit: the address that Blazr was able to link to the stolen funds is a dead end with the exception of the single one account....at least with the information that I have access to.
and orenz is not an alt of yours?
Also see above, it seems he had a second account also with the same bitcoin address
Regards,
Jamie
orenz.
and mucalov91 and blackmasker, according to this transaction.
but I'm no blockchain expert so CMIIW.
Indeed, that TX is signed by all of the 3 address so it's a proof. For reference:
https://twitter.com/Rangerbitcoin
BTC addres: 19s647u9oaHK78852Tcgwn6CK5KaFKdvq
retweet and follow..thanks
BTC addres: 19s647u9oaHK78852Tcgwn6CK5KaFKdvq
retweet and follow..thanks
Archive.
Also robzxxx.
He posted the address 1A5zW53GG9gcPK4wsbuuhZnPzy7dY8ZNSE here (archive).
1A5zW53GG9gcPK4wsbuuhZnPzy7dY8ZNSE and 1M5a1Uw6FqD43UyxN8TPJau6SCzKttfoZL cosign this TX.
and orenz is not an alt of yours?
Also see above, it seems he had a second account also with the same bitcoin address
Regards,
Jamie
orenz.
and mucalov91 and blackmasker (all of them posted in the same thread in the same day with same format, yeah), according to this transaction.
but I'm no blockchain expert so CMIIW.
Well... this seems to be one of the rare cases where everything got repaired with a hacked account... well... i only paid for missing a crucial point. Though i think it's fair since i should have been thought of it. 
I think i don't even want to be angry against the scammer. I mean how poor, he posted with that account in games and rounds and is happy getting 0.12 coins. I mean i feel now like i tipped a bum on the street. I don't await anything when i tip a bum and so i can't really be angry when someone works that hard for scamming that much.
Anyway... i hope the red trust gets removed completely and nothing like that happens again.
I think i don't even want to be angry against the scammer. I mean how poor, he posted with that account in games and rounds and is happy getting 0.12 coins. I mean i feel now like i tipped a bum on the street. I don't await anything when i tip a bum and so i can't really be angry when someone works that hard for scamming that much.
Anyway... i hope the red trust gets removed completely and nothing like that happens again.
and orenz is not an alt of yours?
Also see above, it seems he had a second account also with the same bitcoin address
Regards,
Jamie
SebastianJu gently sent me the 0.12 BTC. He's surely the best escrow this forum has seen!! He didn't have to pay anything, but he did anyway as you can see.
For anyone who wants to track and trace the imposter, here you can find the btc address the money was sent to:
For anyone who wants to track and trace the imposter, here you can find the btc address the money was sent to:
Loan amount required: 0.12
Repay amount: 0.13
Repay date: 24/08/2015
110% - 150% Collateral: this account
Bitcoin address: 1M5a1Uw6FqD43UyxN8TPJau6SCzKttfoZL
Repay amount: 0.13
Repay date: 24/08/2015
110% - 150% Collateral: this account
Bitcoin address: 1M5a1Uw6FqD43UyxN8TPJau6SCzKttfoZL
If i had the bitcoins i would.
Sadly you have seen my empty wallet. If i ever come across any, i will be sure to send a tip when i can
Sadly you have seen my empty wallet. If i ever come across any, i will be sure to send a tip when i can
I've removed the negative trust I had left. I'm glad this is solved, great response by SebastianJu!
Personally I think all 3 were responsible for this for not securing the account enough and not asking for a signed message. I hope both bigjme and Gelbstich generously tip Sebastian.
Personally I think all 3 were responsible for this for not securing the account enough and not asking for a signed message. I hope both bigjme and Gelbstich generously tip Sebastian.
The account is now back in my name, with a new password, and a new email address.
I am sorry for all the trouble SebastianJu
I am sorry for all the trouble SebastianJu
And when the original owner can provide a signature that proofs his ownership then i will give him the account login.
Message sent to BadBear,
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
He posted that signature earlier in this thread so he is indeed the original owner of the account. You can see proof of this bitcoin address being used by bigjme in his signature here.
Thanks for the link. I only found the signature being valid but did not see the cache link. Guess it's proven then. I will give him back his account and give gelbstich his 0.12 bitcoins since i should not have forgotten to think about the signatures.
I will ask the original owner to post on here when it's done.
And when the original owner can provide a signature that proofs his ownership then i will give him the account login.
Message sent to BadBear,
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
He posted that signature earlier in this thread so he is indeed the original owner of the account. You can see proof of this bitcoin address being used by bigjme in his signature here.
Ok, first thing first, the account is not gone. It's secured by me.
Well, what should i say... i really don't know why i did not get the idea to tell Gelbstich to ask for a signature when accepting an account as collateral. I think it might be because account buyers are behind it so very much all the time.
Anyway... since this is partly my blame i will pay Gelbstich his loss. And when the original owner can provide a signature that proofs his ownership then i will give him the account login.
I checked if the story might be correct. The last PM's are from september 17. The account posted from 7th to 14th august. Before that only until november 3rd. And the posts and language is very different.
So it might very well be true. Except a scammer had a long working plan and is clever.
Automatic email notification for threads was deactivated too.
Looks like i just was welcomed in the club of escrows that had a hacked account in escrow.
Well, what should i say... i really don't know why i did not get the idea to tell Gelbstich to ask for a signature when accepting an account as collateral. I think it might be because account buyers are behind it so very much all the time.
Anyway... since this is partly my blame i will pay Gelbstich his loss. And when the original owner can provide a signature that proofs his ownership then i will give him the account login.
I checked if the story might be correct. The last PM's are from september 17. The account posted from 7th to 14th august. Before that only until november 3rd. And the posts and language is very different.
So it might very well be true. Except a scammer had a long working plan and is clever.
Automatic email notification for threads was deactivated too.
Looks like i just was welcomed in the club of escrows that had a hacked account in escrow.
I am sure we will be able to sort something out. After all, the account was inactive for 8 months, i don't plan to use it again
Regards,
Jamie
Regards,
Jamie
well crap. looks like Gelbstich gave the loan after all. I think the account is in his possession right now.
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
Thank you Encrypted for informing me. I wrote a PM to the OP.https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
Lets hope you can aggree on something. There has been a similar case and its dragging on for months. The admins tend to not interfere if the account was transfered as part of a deal.
well crap. looks like Gelbstich gave the loan after all. I think the account is in his possession right now.
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
Thank you Encrypted for informing me. I wrote a PM to the OP.https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
well crap. looks like Gelbstich gave the loan after all. I think the account is in his possession right now.
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
Gelbstich has been reckless giving out loans today. He/she will learn soon.
well crap. looks like Gelbstich gave the loan after all. I think the account is in his possession right now.
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
https://bitcointalksearch.org/topic/offering-loans-advanced-accountssufficient-collateral-only-1156050
@shorena
The email to BadBear has my email address in it. i didn't fancy giving it out here.
Just wanted to post something for you to see until the admins resolve the issue.
@guitarplinker
Thank you!
Regards,
Jamie
The email to BadBear has my email address in it. i didn't fancy giving it out here.
Just wanted to post something for you to see until the admins resolve the issue.
@guitarplinker
Thank you!
Regards,
Jamie
Different format. Signature checks out, but its probably best if you ask for an mail address that actually exists. Accounts do not get deleted.
I think he might have sent BadBear one with his email address included, just because of the wording in his message below.Message sent to BadBear,
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
Negative trust left on the account. Let me know when you're in control of the account again and I'll remove the negative trust left. But now that you've sent BadBear a message you've basically done all you can, and I wouldn't worry about the hacker doing anything on your account now with the negative trust. However be sure to let us know when you get back into your account. For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
Message sent to BadBear,
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
Code:
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
-----BEGIN SIGNATURE-----
1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
-----END BITCOIN SIGNED MESSAGE-----
Different format. Signature checks out,
[1] In the light of the remark by guitarplinker below I removed this part.
Message sent to BadBear,
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
For everyone else, here is a signed message for you all to check while they look into this.
Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.
Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=
Again sorry to everyone effected by this
@ColderThanIce
How would i go about moving this? Sorry about putting this in the wrong section.
If the admins can see my old signature, the donation address on that and the cudamining website was: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
As you can tell, its no small account like his, and has been empty since the end of 2014. I have emails in my inbox from april 2014, including personal messages.
It's amazing how nobody noticed the account went from talking full sentences (about compiling cuda miners, and gpus) to talking extremely bad English
@nydiacaskey01
Yes that is the account. As stated above, i have emails from april last year. Along side my personal bitcoin address i posted above. It may be in some of the account personal messages.
@shorena
I have no alt accounts, i am english and have no social media accounts. And i can even provide screen shots of the bitcoin address posted above.
@ColderThanIce
I can certainly sign if you can show me how to?
Regards,
Jamie
p.s. This 6 minutes between posts is a killer so i am replying as i can
If you're still in control of the 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem address please sign the following message with it:How would i go about moving this? Sorry about putting this in the wrong section.
If the admins can see my old signature, the donation address on that and the cudamining website was: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
As you can tell, its no small account like his, and has been empty since the end of 2014. I have emails in my inbox from april 2014, including personal messages.
It's amazing how nobody noticed the account went from talking full sentences (about compiling cuda miners, and gpus) to talking extremely bad English
@nydiacaskey01
Yes that is the account. As stated above, i have emails from april last year. Along side my personal bitcoin address i posted above. It may be in some of the account personal messages.
@shorena
I have no alt accounts, i am english and have no social media accounts. And i can even provide screen shots of the bitcoin address posted above.
@ColderThanIce
I can certainly sign if you can show me how to?
Regards,
Jamie
p.s. This 6 minutes between posts is a killer so i am replying as i can
Code:
My account "bigjme" has been hacked/lost. Please reset the email to (your email address). The current date is August 18th, 2015.
Once you do that, send the signed message to either theymos or BadBear and they should sort everything out in a week or two. If they don't get back to you then I'd suggest bumping this thread once a week or so, just to keep it near the top of the Meta section. If you aren't sure how to sign a message refer to the thread that --Encrypted-- posted, it shows how to sign a message with every major bitcoin wallet.
I can certainly sign if you can show me how to?
here you go: https://bitcointalksearch.org/topic/how-to-sign-a-message-990345 -snip-
you don't need to move this thread anymore because a mod already moved it to the right section.
I don't think screenshot will prove anything because they can easily be faked.
you can learn how to sign an address by reading this thread.
@ColderThanIce
How would i go about moving this? Sorry about putting this in the wrong section.
If the admins can see my old signature, the donation address on that and the cudamining website was: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
As you can tell, its no small account like his, and has been empty since the end of 2014. I have emails in my inbox from april 2014, including personal messages.
It's amazing how nobody noticed the account went from talking full sentences (about compiling cuda miners, and gpus) to talking extremely bad English
@nydiacaskey01
Yes that is the account. As stated above, i have emails from april last year. Along side my personal bitcoin address i posted above. It may be in some of the account personal messages.
@shorena
I have no alt accounts, i am english and have no social media accounts. And i can even provide screen shots of the bitcoin address posted above.
@ColderThanIce
I can certainly sign if you can show me how to?
Regards,
Jamie
p.s. This 6 minutes between posts is a killer so i am replying as i can
How would i go about moving this? Sorry about putting this in the wrong section.
If the admins can see my old signature, the donation address on that and the cudamining website was: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
As you can tell, its no small account like his, and has been empty since the end of 2014. I have emails in my inbox from april 2014, including personal messages.
It's amazing how nobody noticed the account went from talking full sentences (about compiling cuda miners, and gpus) to talking extremely bad English
@nydiacaskey01
Yes that is the account. As stated above, i have emails from april last year. Along side my personal bitcoin address i posted above. It may be in some of the account personal messages.
@shorena
I have no alt accounts, i am english and have no social media accounts. And i can even provide screen shots of the bitcoin address posted above.
@ColderThanIce
I can certainly sign if you can show me how to?
Regards,
Jamie
p.s. This 6 minutes between posts is a killer so i am replying as i can
is this te account you are talking about?
https://bitcointalksearch.org/user/bigjme-210860
the account was inactive for 9 months from November 2014, then active again August 2015
how far back can you sign a message?
That looks like the account he's talking about.https://bitcointalksearch.org/user/bigjme-210860
the account was inactive for 9 months from November 2014, then active again August 2015
how far back can you sign a message?
OP, are you able to sign a message from one of the following two addresses?
1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
17eJQr8HUaidhNHUGYR7fWKBGonwvcFbz7
Both of those addresses were listed in your signature in 2014 (according to archive.org), and I suspect if you're able to sign a message with either of those that would be sufficient proof for the admins to reset the email address on your account.
Proof 1
Proof 2
So you did not ask for a loan today?
and orenz is not an alt of yours?
Loan amount required: 0.12
Repay amount: 0.13
Repay date: 24/08/2015
110% - 150% Collateral: this account
Bitcoin address: 1M5a1Uw6FqD43UyxN8TPJau6SCzKttfoZL
Repay amount: 0.13
Repay date: 24/08/2015
110% - 150% Collateral: this account
Bitcoin address: 1M5a1Uw6FqD43UyxN8TPJau6SCzKttfoZL
and orenz is not an alt of yours?
is this te account you are talking about?
https://bitcointalksearch.org/user/bigjme-210860
the account was inactive for 9 months from November 2014, then active again August 2015
how far back can you sign a message?
https://bitcointalksearch.org/user/bigjme-210860
the account was inactive for 9 months from November 2014, then active again August 2015
how far back can you sign a message?
Did you ever post a bitcoin or altcoin address with that account? If you have an old, unedited post with an address you can sign a message with it to prove that you are indeed the owner of the account. See this thread for all the info on doing so.
I went through about 20 pages of your posts though and I didn't see an address posted anywhere. I don't know if the admins would be able to take your website as proof because it may have changed hands in the last few months that your account was inactive. However, if you know some secret details about the account (ex. private messages sent and received, etc.) then the admins may be able to help you out. I thought I read once that BadBear asked a user questions about their account to recover it when it was hacked.
Also, please move this thread to Meta, it doesn't belong in Technical Support.
I went through about 20 pages of your posts though and I didn't see an address posted anywhere. I don't know if the admins would be able to take your website as proof because it may have changed hands in the last few months that your account was inactive. However, if you know some secret details about the account (ex. private messages sent and received, etc.) then the admins may be able to help you out. I thought I read once that BadBear asked a user questions about their account to recover it when it was hacked.
Also, please move this thread to Meta, it doesn't belong in Technical Support.
Hi everyone.
It seems that my original account has been hacked under the username: bigjme
I have not been active on that account for a long time and have started to receive messages about bitcoin loans.
So far i have received messages from the following usernames: Magic8Ball, SebastianJu, Gelbstich
I have been able to see this much as ther account still had my email address set however it now seems that the email address and password have been changed making me unable to recover it at all.
DO NOT INTERACT WITH THIS ACCOUNT!
If the forum admins would like to email me i can verify it is me how ever they wish. I am also the website owner of cudamining.co.uk so can gladly confirm my validity via putting something on the website.
I am extremely sorry about this and i hope no one has been scammed out of nay money.
Regards,
Jamie
It seems that my original account has been hacked under the username: bigjme
I have not been active on that account for a long time and have started to receive messages about bitcoin loans.
So far i have received messages from the following usernames: Magic8Ball, SebastianJu, Gelbstich
I have been able to see this much as ther account still had my email address set however it now seems that the email address and password have been changed making me unable to recover it at all.
DO NOT INTERACT WITH THIS ACCOUNT!
If the forum admins would like to email me i can verify it is me how ever they wish. I am also the website owner of cudamining.co.uk so can gladly confirm my validity via putting something on the website.
I am extremely sorry about this and i hope no one has been scammed out of nay money.
Regards,
Jamie
Jump to: