Topic: hacked account , do not trade "Milkz" (Read 662 times)

Also, linenoise sent 10 to Allblw who resent 5 to yet more 21st Nov 17 registered spam/bumping accounts, just as MiLkz did with Allxblx.

Seems similar case like erre. Anyways listing all the accounts that you haven't authorized to sent merit to:

[1] laserfocused (BPIP)
[2] bluecrab (BPIP)
[3] Kkmdx (BPIP)
[4] lksufrr (BPIP)
[5] fdsar (BPIP)
[6] kreon112 (BPIP)
[7] astrologer123 (BPIP)
[8] bchdfsy (BPIP)
[9] iHalera (BPIP)
[10] ramanmart1 (BPIP) (Autobanned)
[11] velona2589 (BPIP)
[12] Allxblx (BPIP)

---

laserfocused was given merit by linenoise for the same post for which MiLkz (not in possession of real owner then) gave.



Merits were sent on same date and just a minute apart which seems like that linenoise is another hacked account maybe?

---

Edit: Screenshots removed as it proved nothing

the only legit merit is to ecuamobi, which is probably the only time I have ever given merit

Now that you have, which of these merits do you recall sending?

yes, the first thing I did when getting my account back was check messages and posts.  I did not even think to check merit.

Are all these posts yours?

fuck, I didn't even check my merit, looks like someone accessed my account prior to the time discussed in this thread -.-.

anything related to bitcoin really must have 2fa..!!!!!

Can all that merit be removed?, I did not leave it

I only saw the words Reputation and MiLkz,so here's my input on those subjects, nothing to do with hacked accounts.
It just happened to be after I was posting in the "Farms of account sellers in the Russian branch "Off-topic"" thread.
The account MiLkz is mentioned there too, as the award source of 10 merits (awarded for unremarkable shitposts) which, virtually immediately, were passed on to five members of a bump posting ring who since then have posted of hundreds of spam comments.

Just removed my positive feedback (from 2017) so I added it back.

Mine gone as well

The recovery system is working! Removing my feedback as well.

Just now noticed from MiLkz PM he had recovered his account. I have confirmed by BPIP log account has recovered by manual.


So I think problem is solved. I have removed my tag and other DT could remove as well.

Cool, thanks.  Neg removed.  Can't trust anything any more. 

You can see that manual ownership recovering was completed around an hour ago here: https://bitcointalk.org/seclog.php

LOL, Hmmm, how do we know his last message was legit?  Don't yet see it here:  https://bitcointalksearch.org/topic/m.49317801

Once we get some more confirmation in this thread  will most def remove neg.  Just being careful. 

That's fair..haha

I just got the "Manual recovery complete" email 1 hour ago, I do not know how long it takes for it to show up

Just got a PM from "Milkz" saying account was restored but I don't yet see it in list so not YET removing neg (admittedly I did remove it for about 5 secs until I realized it hadn't yet been confirmed).

I just now successfully recovered my account.

I am confident I know how all this happened..

I used the site haveibeenpwned.com and found out I was part of the 2015 bitcointalk hack and a hack in the same year on a site called cheapassgamer.

I never even used the account I had on cheapassgamer, but I sadly used the same username and same password I was currently using on bitcointalk. I am leaning toward cheapassgamer as the culprit because I think I used a different password here in 2015.  It really could be either one though. I guess it just took awhile for someone to use/find my info.

When my account was compromised, the e-mail was changed to [email protected]. The "hacker" luka was not actually a hacker.  I found this guy's skype(lucky.strike1987) via google and he told me he purchased my account information. He claims he purchased my account from: https://bitcointalksearch.org/topic/bitcointalk-hero-member-rank-accs-for-only-300-each-5092343

No way to know for sure if he is lying, but the timeline matches and there is no real reason for him to lie.

I am just happy it all turned out well in the end.  The guy was only able to make 1 post before I locked the account.

I appreciate everyone's help, Thanks!

Your account is queued for ownership change by manual recovery, you will get it back by January 30th. Your entry has been added to SecLog since 4 days:
You can track the queued change and add notes by visiting this thread:  All the Ownership-Changed and Restored accounts 

I had changed my email a few days ago, but never my password.  This all happened today.  Feel free to confirm that with a mod/admin.


yep, seems he received neg trust for buying/selling accounts

he is active here: https://www.mpgh.net/forum/member.php?u=3397589

-----

EDIT: I just found out how this happened. I used the site haveibeenpwned.com and found I had an account on cheapassgamer with the same username and password as here.  cheapassgamer was hacked a few year ago -.-  This luka1987 guy deals in accounts and happened upon my info I guess.  I was also flagged on haveibeenpwned.com for bitcointalk, but the password here must have been different at the time.  2 different emails.

no way you caught this within 30 mins of happening i was looking for amazon gc a few days ago and the password and email was changed already and only now you say its hacked

only adding one thing, This email is used by this user: luka1987

Several times like https://bitcointalksearch.org/topic/affordable-origin-accounts-all-games-order-now-1178337 Archived: http://archive.fo/tDEYS#selection-544.1-544.3

 do you hear yourself?

common sense, it is safer to tag an account even for 1% possibility of it being hacked. this is called " better safe than sorry" .

assuming the guy who reached out to me on telegram was a random out of the blue " which indeed was not the case", but just for the sake of this argument ,what do you think the right decision would be?

1-tag the user, save poor souls , wait for him to prove the opposite ?
2-collect more evidence, risk people's money waste everybody's time?

The damage of no 1 is very minimal , DT remove their tags and story is over.

sadly you can't undo number 2.

 providing evidence " the way you want them" is nothing under my obligation, let alone the time needed for screenshots and the stuff you asking for, by the time i get all those stuff, the hacker would have already finished what he came for.

also ,why are you assuming that i am angry? never, it's the way i reply to non-sense B.S. sorry nothing personal tho.

thanks for your input, highly appreciated.


I have not asked anybody to tag the account.

 i also have no desire in going on with this discussion with you. i don't want to lock this thread for obvious reasons. but sure thing i won't be replying to any of your non-sense here.

Milkz if you have any problem with the tag, start your own thread.

good luck.

edited : thread unlocked upon request , a user said he has some more information to post related to the subject.

@mdayonliner : if you have anything to oppose the tag, please start your own thread.

I sadly do not have a BTC addy posted anywhere, however, I do have access to my first registered e-mail and my IP address maybe changed one-two times since 2015.  IP location has not changed since registration.

All I can do is wait for the admins to respond to the email I sent.

I have also done a decent amount of trades here.  Its fairly easy to determine with people I have traded with, but the admins are another story

----

My password was sadly not that strong, but I am fairly certain it was changed since 2015.  If I somehow had a keylogger, more would have been lost than this.

Mate you did a good job. Why so angry. I am asking for evidences to put together LOL

I don't want to see anyone get scammed nor want to see anyone get red trust without having enough proof. I hope this make sense.

Before tagging you need to be sure enough.




Do you want me to tag an account just because you said so?

---

I am also waiting for this. I hope he had/has a signed staked address to prove the ownership.

OK smarty-pants , so i do not tag the user, i do not warn people about it, take all the time in the world to do the "Sherlock Holmes" thing. let 5-10 people get scammed trading with a green trusted account that is possibly hacked ? when the party is over i come back here with my evidence ? is that what you are suggesting? brilliant.

one thing i know for sure is that only someone with access to Milkz account could have reached out to me on telegram, so be it him or the hacker makes no difference, the account is now hacked, and that's all about it, if you have any doubts still, ignore all the negative feedback, go trade with him.

if the original user still has access to this account he can simply reply here and prove me wrong, and tags will be removed.

Date registered January 04, 2015. I don't know when was the 2015 hack. If this was before the hack then it's possible assuming OP did not use his account since then.

How would you determine the strong password in this case  
My password has capital latter, small latter, special characters, numbers. In facts I can not remember my password LOL it's so hard to type when I do. I consider it hard but don't know the level of hardness to define.


Could be if the system was infected.

How strong was your password and when did you last change it? There have been password hash leaks.

Another option could be some nasty keylogger even if you can't find anything.

Good thing that you have locked it (I hope it's the truth). Do you have a signed staked address to prove the original ownership?

This is milk

I was able to catch this within 30 minutes of it happening.  I immediately locked the account via the link provided in the email alert.  It looks like any protentional damaged was prevented.

I e-mailed "[email protected]" and am now waiting to recover my account.

What boggles my mind is how they got me.  I am very safe and cannot find any breach anywhere.  ALL of my important accounts have 2FA and any emails do not have any abnormal IP logs.

https://i.imgur.com/H9gqjQ3.png

The hacker was:  [email protected] by IP address 83.177.38.206

If you do a google search you can find him pretty fast.

It is utterly asinine that bitcointalk does not have 2FA!?!?!

Thanks for the help

You are right but OP did not provide any such information. Even if he provide the screenshot then how would you come to the equation that it was not faked? You need to directly talk to the telegram guy - even that could be a set up too.

The only way is to sign an address (if any) by the guy who is claiming that his account was hacked.

Look, I am not protecting the guy but I am considering the options. I don't believe in leaving red tag for everything unless it's proven 100%. A false red tag is a crime IMO

---

The real owner can woke up and change the email and password. Can't he?

---

Anyway, I guess the current owner of the account should speak here. But there will be problem here: If the account does not have a signed staked address then the real owner (if the current one is real) also can not prove that it was his original account. But for that we can not just tag him/her just because someone came and claimed that the account was hacked.

PS: We should encourage everyone to sing their address and stake in the topic we have. Or this things are very messy to prove real ownership.

Absolutely not. But if they have chat log before then we can say its hacked. For example, I have chat with Darkstar for loan purpose, if in case hack my account I can inform immediately to Darkstar. Because we have chart record and he can confirm. I don't think telegram could be hacked same time. On the other hand account changed email and password recently. Tags will remove when recover account successfully.

Seems like a pretty reasonable scenario to me, considering his email and password both reset recently. Better to be overly cautious when that's the case.

Just because someone came to your telegram and told that Milkz was hacked - made the account hacked? If someone comes to me and tell me that your account is a hacked account then would I think you are using a hacked account?

You need to ask the guy to give you enough evidences. I hope he did. If yes then you should present them here.

Good luck.

https://bitcointalksearch.org/user/milkz-408677

Milkz account was hacked, he reached out via telegram and told me so.

he said there was only 1 new new post by the hacker, long story short, do not trade with this account until things are worked on.

Mikey,