Topic: Hacked account recovery. Cyrus, please help! (Read 374 times)

Up

why are there so many hacked accounts lately :/

read sticky , you should pm cyrus/theymos

I found the Earthcoin wallet I installed in 2013 and can sign the address I provided in this unedited post from 2013 (eebzvCMa5ho3BraUXzKRpSE7wHh4BNDUwB):

https://bitcointalksearch.org/topic/m.4107669

Please find below the signed message:

My account financial_analyst (https://bitcointalksearch.org/user/financialanalyst-191069) has been hacked/lost. Please reset the email to xxx (my email before it was changed by the scammer). The current date is 05 December 2017.

Signature: IPg/jYX9Vf86ucwySnzFb4+Dw0I1l3lP/aoitn1aQQOK0MMtm1cC2VwNj+mVI2mVEaqDK6BiAXwCBU9KTf35aM8=

Yes, I am sorry, I am using the European date format. I mean December 4th 2017.

I asked because of the date the message was signed. I guess you are using a different time/date format than I do.

That account was made in 2013 yet you don't have an older address, one older than 3-4 months?

No, I started my activity as participant in bounties since the summer of 2017. My previous activity in the forum from 2013-2017 had to do mainly with GPU mining and I was not a very active member of the community.

Is that message just a copy and paste? Did you buy that account along with that message? ("The current date is 04/12/2017")

What do you mean? It is a signed message from MEW that I control the mentioned ETH address. I am also the original owner of this account from day 1 of its creation.

That account was made in 2013 yet you don't have an older address, one older than 3-4 months?
Is that message just a copy and paste? Did you buy that account along with that message? ("The current date is 04/12/2017")

In my original post there is one space in the sig when I copied the text from myetherwallet and pasted it to this thread:

"0x7ff4a832ca9d1c49e304ae3c34841f0499908b9b62ec188e4d8b1512708c0f0e3af482924957d 24dc2470651658e5a9d12f6e963de3e1b3a43569d68af8c87bd1c"

The correct signature is this one, without the space:

{
  "address": "0x62a717b2b56b6ab3ec5e823ec357706ca6586774",
  "msg": "My account financial_analyst (https://bitcointalksearch.org/user/financialanalyst-191069) has been hacked/lost. Please reset the email to xxx (my email before it was changed by the scammer). The current date is 04/12/2017.",
  "sig": "0x7ff4a832ca9d1c49e304ae3c34841f0499908b9b62ec188e4d8b1512708c0f0e3af482924957d 24dc2470651658e5a9d12f6e963de3e1b3a43569d68af8c87bd1c",
  "version": "2"
}

You may verify this message via this address: https://www.myetherwallet.com/signmsg.html.

Sorry for this inconvenience.

Edit: it seems that the space is something that is generated in bitcointalk. Please remove it manually when you copy this message and you paste it to https://www.myetherwallet.com/signmsg.html.

Hello,

My account financial_analyst was hacked on December 1st. I have sent a PM to Cyrus but he hasn't yet replied back. It would be great if this issue could be resolved urgently, since the scammer is probably hurting my reputation in the community, although he hasn't made any posts since he obtained control of the account. I also locked the account, according to the link I received via email from bitcointalk.

My Ethereum address is: 0x62A717b2B56b6ab3EC5E823EC357706cA6586774, as you can see in various old bounty spreadsheets:

https://docs.google.com/spreadsheets/d/1-1irp09IJRftR-ondhzLH7WXlKA9OEInWs0bLLRbMl4/edit?usp=sheets_home&ths=true (Umbrellacoin)
https://docs.google.com/spreadsheets/d/1ioInV6JlI7Gxdr1h7CpGHEJtz6vGWQlOJEo_btoqD3o/edit#gid=0 (Crystal Clear)
https://docs.google.com/spreadsheets/d/1klEzI5A-brCgNdR2TnjYn5F9_49wh_03vUkxT4v6gLA/edit#gid=181114783 (Confideal)
https://docs.google.com/spreadsheets/d/1k3BRK-DHgxSZzjYwB3E9qDPieGsYAlV6CNVLfFFfVpk/edit#gid=542033738 (SNOVIO)
https://docs.google.com/spreadsheets/d/1JlIEzm3iCiLBkjqPlDy5acoQ1z1VC8ag7CwSufGhVWo/edit#gid=305628688 (GOAL)
https://docs.google.com/spreadsheets/d/1WMJKgqajFrDNVauTah71ODbXiAzoCiPKv3eHeuhxWvE/edit#gid=758942846 (Sharpe)
https://docs.google.com/spreadsheets/d/1Utj25HAy2kRbAChhkQIFvzEoD5uFtUJ1XNrMs4AWc00/edit#gid=1048429264 (Tokenstars ACE)

You can also see a lot of old unedited posts in which I have posted my ETH address with the purpose of reserving the Greek translations:

https://bitcointalksearch.org/topic/m.23474880
https://bitcointalksearch.org/topic/m.23281744
https://bitcointalksearch.org/topic/m.23194025
https://bitcointalksearch.org/topic/m.22152003
https://bitcointalksearch.org/topic/m.20772429


Please find attached below the signed message from myetherwallet:

{
  "address": "0x62a717b2b56b6ab3ec5e823ec357706ca6586774",
  "msg": "My account financial_analyst (https://bitcointalksearch.org/user/financialanalyst-191069) has been hacked/lost. Please reset the email to xxx (my email before it was changed by the scammer). The current date is 04/12/2017.",
  "sig": "0x7ff4a832ca9d1c49e304ae3c34841f0499908b9b62ec188e4d8b1512708c0f0e3af482924957d 24dc2470651658e5a9d12f6e963de3e1b3a43569d68af8c87bd1c",
  "version": "2"
}

Always at your disposal, do you think I should provide anything else? I appreciate any prompt action to obtain again the control of my account!

Thank you very much!