[HACKED ACCOUNT - Zeroxal] WARNING: Do NOT deal with him

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

Quote from: Mitchell on May 24, 2016, 10:14:13 AM

Verified. Negative trust removed.

Code:

Alaki

sr. member

Activity: 266

Merit: 250

So what did you came accross here TL?

Mitchell

copper member

Activity: 3948

Merit: 2201

Verified awesomeness ✔

Verified. Negative trust removed.

zeroxal10.1

newbie

Activity: 3

Merit: 0

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
This is Zeroxal confirming once again that my main account has been recovered and is controlled by its rightful owner again. I kindly ask you to remove the trust tags.
-----BEGIN SIGNATURE-----
1GpT2GWiPmDB1bhH5pJGceRnaMyNjNHuBD
HF18aXINjf2bjWHTH2r+qgSyP7R0VUO7yJ2pkWeDs/cXQuO50zmTcPxxD94ZHPCIdkqd53GFooD05qjH7UrYvrg=
-----END BITCOIN SIGNED MESSAGE-----

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

I on the other hand was looking to see if a hacker had control of Zeroxal 's Wallet Address and came across the connection.

Quickseller

copper member

Activity: 2996

Merit: 2374

Quote from: Timelord2067 on May 23, 2016, 07:00:00 AM

Had QuickSeller looked beyond the Wallet Address, he might have seen multiple transactions with both 18WvTJ and 12cp7R Wallet Addresses

(March 2015 - Just in case QS wants to suggest a hacker took over Zeroxal's account like s/he suggested with Alaki meh neh mah ? ? ? ) Roll Eyes

In the context of the post that you quoted, I was only looking to see if josef2000 was an alt of bittyfree, and nothing more. I have never gone around looking for dirt on x user to try to find out if they are a scammer, but rater look at scammer and try to find their alts, and I look at situations and try to find out if it is a scam attempt.

It looks like that josef2000 and bittyfree were at the very least at one point each controlled by the same person, however I have not looked into the situation in close enough detail to see if they are likely still alts of each other. After quickly glancing at the trust of both josef2000 and bittyfree I am not aware of either of them attempting to do anything wrong, so I do not think it is a good use of resources to determine if they are currently alts of each other. In the event that either of them does try to scam (or does successfully scam) then I would look at the situation more closely and leave trust as appropriate.

No I do not have any reason to believe that a hacker took over the wallet in question.

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

Had QuickSeller looked beyond the Wallet Address, he might have seen multiple transactions with both 18WvTJ and 12cp7R Wallet Addresses

https://blockchain.info/address/18WvTJ1M3gAr6xYfFtWtsH1RikTXfvhEBN?offset=250&filter=0

(March 2015 - Just in case QS wants to suggest a hacker took over Zeroxal's account like s/he suggested with Alaki meh neh mah ? ? ? ) Roll Eyes

https://blockchain.info/tx/c9c1ebbce12bb806043029ea74a6e77ee86a472ecf4b427e329c367fea4d2743

https://blockchain.info/tx/998c0423db735f8385e06909040b3f0a9847a4407e364c7b7ed196b604a28d79

https://blockchain.info/tx/7779c232e6b0c6f2e3e0cd69aba2fa2efca6cb7f14dc4836a90d1fdfbdacb6c8

https://blockchain.info/tx/4b9cfcb188d098a2ec3265294ad12733aa14d4b5dd3d75b0088fef0baec81832

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

While we are waiting...

Zeroxal uses Wallet Address 18WvTJ1M3gAr6xYfFtWtsH1RikTXfvhEBN here (quoted by Mitchełł )

Quote from: Mitchell on March 08, 2016, 01:28:55 AM

Quote from: Raimonn on March 07, 2016, 06:01:38 PM

Thanks Mitchell for the updates, and all the work. I confirm that i received the bitcoin transference, and the shipping tracking of my package. I will post the pictures of the kialaras when i receive them.

Thank you very much. I can't wait to hear that everyone has receive their package. Grin

Quote from: Zeroxal on March 08, 2016, 01:02:20 AM

Wow, so much left over Grin

Please send 0.2 BTC back to 18WvTJ1M3gAr6xYfFtWtsH1RikTXfvhEBN and leave the rest as a tip for the awesome group buy you have organized Wink

Thank you very much, here you go: 7ca121f4376c717c491397e1ef11a92cf7901f15d086de242d4be1386a96585e

The group buy is hereby finished. Thanks everyone!

18WvTJ1M3gAr6xYfFtWtsH1RikTXfvhEBN is part of Wallet [734a71fc5d] https://www.walletexplorer.com/wallet/734a71fc5da3c746/addresses with Wallet Addresses:

Code:

18WvTJ1M3gAr6xYfFtWtsH1RikTXfvhEBN 1.03226057 150 412957
12cp7RTVgo1cpSyV99uGyc1oz74eYnQir3 0. 297 399234

12cp7RTVgo1cpSyV99uGyc1oz74eYnQir3 is used by josef2000 https://bitcointalksearch.org/user/josef2000-359905

http://archive.is/92UZz

Quote from: josef2000 on August 31, 2014, 03:04:05 PM

BitBiz.io Username:josef chen (josef-chen)
BTC Address:12cp7RTVgo1cpSyV99uGyc1oz74eYnQir3
Current Post Count:112

Quote from: Quickseller on May 06, 2015, 12:12:51 AM

Quote from: josef.2000 on May 05, 2015, 11:52:05 PM

Why have I bewn banned for ban evasion?! And the ban period is extended??? I am NOT bittyfree or someone else! Pleaseee... Forum mods or admins, sort this out.
I have has trades with bittyfree (Escrows like Quickseller, may you confirm it???). I have known him since I startes using bitcoin, he started a faucet bittyfree.com (Equinoxx-the designer please confirm) - I helped him setting it up, thats why we have good contact.

Forum mods, please, reply once

I can confirm the following:
*I escrowed a deal between josef2000 and bittyfree roughly two weeks ago.
*The terms of the escrow was that both bittyfree and josef2000 would each pay a portion of the escrow fee
*josef2000 was selling an item
*due to either confusion or otherwise a misunderstanding josef2000 send a small amount to the escrow address in order to pay for the escrow fee instead of having the amount be withheld from him upon the release of escrow.
*the escrow address was 1AeBVpGTgAamqVvvoiQTxu7NehvZD37Jnx
*the address josef2000 requested funds to be sent to after escrow was released was 12cp7RTVgo1cpSyV99uGyc1oz74eYnQir3
*the address josef2000 sent funds "from" to pay his portion of the escrow fee was the same as above.
*I have not looked into any further blockchain connections (nor other connections) beyond the escrow service that I provided.

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

Code:

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

Quote from: Lutpin on May 23, 2016, 04:39:49 AM

Quote from: Timelord2067 on May 23, 2016, 04:38:01 AM

Other than https://keybase.io/zeroxal/key.asc have you staked your PGP Public Key here on BCT by any chance? (I got your PM BTW)

There's users tracking Zeroxal that can confirm his identity (me being one of them).
If you don't want to trust those users, go to the PGP database.

That's the trouble with this place when I want to delete something, or edit it, somebody will come along and quote the pre edited version... Undecided

Quote from: Timelord2067 on May 23, 2016, 04:38:01 AM

~~Other than https://keybase.io/zeroxal/key.asc have you staked your PGP Public Key here on BCT by any chance? (I got your PM BTW)~~

Found it... https://bitcointalksearch.org/topic/the-bct-pgpgpg-public-key-database-stake-your-pgp-key-here-1159946 Zeroxal --- LINK 2 (62C5 A99E 8413 78D2 3B3F 7A53 1A0A CDAC 16CF F2A6)

Lutpin

copper member

Activity: 1904

Merit: 1874

Goodbye, Z.

Quote from: Timelord2067 on May 23, 2016, 04:38:01 AM

Other than https://keybase.io/zeroxal/key.asc have you staked your PGP Public Key here on BCT by any chance? (I got your PM BTW)

There's users tracking Zeroxal that can confirm his identity (me being one of them).
If you don't want to trust those users, go to the PGP database.

Quote from: Timelord2067 on May 23, 2016, 04:42:24 AM

That's the trouble with this place when I want to delete something, or edit it, somebody will come along and quote the pre edited version... Undecided

Sorry that I'm too fast for you.

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

Quote from: Zeroxal on May 23, 2016, 12:11:27 AM

Account has been fully secured. Sending out PMs regarding the trust now.

~~Other than https://keybase.io/zeroxal/key.asc have you staked your PGP Public Key here on BCT by any chance? (I got your PM BTW)~~

Found it... https://bitcointalksearch.org/topic/the-bct-pgpgpg-public-key-database-stake-your-pgp-key-here-1159946 Zeroxal --- LINK 2 (62C5 A99E 8413 78D2 3B3F 7A53 1A0A CDAC 16CF F2A6)

Zeroxal

hero member

Activity: 896

Merit: 508

Account has been fully secured. Sending out PMs regarding the trust now.

Zeroxal

hero member

Activity: 896

Merit: 508

Reset the password through my email again and regained access to my account. Please still leave the trust feedback for now. I will go to sleep now and settle this out tomorrow.

Anyways, here's another signed message using keybase:

Code:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This is Zeroxal and I have temporarily regained access to my account. Please leave the feedback until I confirm that I have fully secured the account.
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.53
Comment: https://keybase.io/crypto

wsBcBAABCgAGBQJXQjS4AAoJEFrSh19bl1/5+AwH/j/feZQZ/7SngDrSrES8Z7aV
YIm3O7ebcPMSqfMbmQw4ZdiXbtkCgcg0LwVrt8VTxDbXBVlwS9GW8ccge5nvl0O5
08KSlLnOlwZYjcunNcIYBU3/+vp2sIro9aoJKaKSA1718AMbIV5zmDZf6b26v3BQ
bUPjwIvH7Gx6t1AkSjcImoSSQb+J4ow07ED0wU/ZfxokKk7c/XVi1eq3O6hdmBT9
spe6Lj3P6C88B13dLQk6v2PBgIfg96SRtRyjSQuv+7bz08Rp6gMxJbaAmSZnXwNp
IaUNMBhd7MNk85hA25jgkSTs0OGCxyVurmD8xiUzAf+U6k0SPOV7e7RQZKYbdWI=
=+TVM
-----END PGP SIGNATURE-----

It seems like the hacker didn't change my email and I just noticed that by trying to reset the password using my email. The email address was able to be changed via password, right? My email address was immediately locked after the unauthorized attempt. Did that prevent the hacker from doing further actions? Not sure about that...

Cyrus

administrator

Activity: 3962

Merit: 3184

Negative rating left. Contact me to remove it once it's solved.

zeroxal10.1

newbie

Activity: 3

Merit: 0

Quote from: DarkStar_ on May 22, 2016, 04:30:36 PM

I failed to verify your bitcoin signed message using Brainwallet.
https://i.imgur.com/DKw2353.png
Successfully done with your keybase key though.
Have you PMed/messaged theymos with the message format including your email to reset it yet? The message format is someone in Meta I think.

Already sent theymos a PM.

Weird :/
Updated with a new signed message. Please try to verify that

And yes, my email was hacked. But recovered again now.

Quote from: ?? on ??

Just curious how all these people keep getting hacked? Just falling for phishing sites or malware?

I never fall for phishing sites and/or malware. I rarely download something not from secure sources. Despite the fact that I have never logged into bitcointalk on my computer (I use my iPhone - mainly because it's faster to access and malware safe), both my account and my email got hacked. I remember setting up 2nd factor authentication on my email, but somehow it got skipped when the hacker tried to reset my password.

I noticed several failed logins due to 2nd factor authentication regularly before this, both on email and other forums. I changed passwords immediately when I got noticed. But I wasn't fast enough this time. My email was recovered luckily (he changed the password). Google also did a great job blocking access from unknown IPs and devices.

Not sure how the hacker did this, but he must have been trying very long to hack me, unfortunately with success. I will change all the passwords I currently have, on every single platform I'm registered on. But I'm still wondering how he got past the Gauth (Google 2nd factor authentication)

Quote from: Mitchell on May 22, 2016, 04:37:10 PM

Negative rating left.

Thanks Mitchell!

Mitchell

copper member

Activity: 3948

Merit: 2201

Verified awesomeness ✔

Negative rating left.

Boelens

hero member

Activity: 672

Merit: 500

Quote from: zeroxal10.1 on May 22, 2016, 04:00:35 PM

My main account Zeroxal (https://bitcointalksearch.org/user/zeroxal-508748) has been hacked. Please do not deal with him!!!
I kindly ask the default trust members to tag my account with red trust rating until the issue has been resolved.

Signed messages:

Keybase.io

Code:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This is Zeroxal and I confirm that my account has been hacked.
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.53
Comment: https://keybase.io/crypto

wsBcBAABCgAGBQJXQhwBAAoJEFrSh19bl1/5d+gIAJUetMRZ7TECUa36s3pAhFqY
BkQsMXmN64uPgGI2S9E/s/VWf61fBDYFmvcWqqzUSDrGpKR04frsj7r+x7iVTMfh
VD+qsFIj/y5uNIdbDXA6tig3D9L325nyNHPYqpIgd4VywkVzUrdX60AjiichCYEN
4ygqr/wKP7zGYgb9G7kzAGtIGvjRtIJMfhP2fY6MWpuH/l3v7syHtK/tZgIrxYJX
V+njWsz9Ajj4EGyIXoDHB64zqPfvD7YIbXC71T/FBB7rULGMhLZzZ+Ppj4ih8PdB
Qpr35uxOeg2CA8EhHB3rkf5fBNAOrK+nZ5omb3PtfrM2UuC7i1imYyKSv+8FvuM=
=mcqM
-----END PGP SIGNATURE-----

BTC address 1GpT2GWiPmDB1bhH5pJGceRnaMyNjNHuBD (staked here: https://bitcointalksearch.org/topic/m.12998689)

Code:

----BEGIN BITCOIN SIGNED MESSAGE-----
This is Zeroxal and I confirm that my account has been hacked.
-----BEGIN SIGNATURE-----
1GpT2GWiPmDB1bhH5pJGceRnaMyNjNHuBD
G2IP4aCs12RtMZbtRDBe/6Jk8AjvQlU/ISHqKghPQz3+YFpL85HYuol4FVUaXfLxzrztyOSrzs7gCvbkyZlCaNA=
-----END BITCOIN SIGNED MESSAGE-----

Hopefully theymos will be able to help me out on this case. But till then this account is the only way to contact me

I verified your GPG signed message and left you a negative rating. I archived your profile, which currently has a link to your GPG key.

It looks like your password was recently reset via email about 3 hours ago. Was your email address public? Was your email hacked?

Anyway, please let me know once you have access to your account again and I will remove my negative trust.

DarkStar_

legendary

Activity: 2772

Merit: 3284

I failed to verify your bitcoin signed message using Brainwallet.

Successfully done with your keybase key though.
Have you PMed/messaged theymos with the message format including your email to reset it yet? The message format is someone in Meta I think.

Edit: New message verified this time. Wonder what went wrong the first time. Link

zeroxal10.1

newbie

Activity: 3

Merit: 0

My main account Zeroxal (https://bitcointalksearch.org/user/zeroxal-508748) has been hacked. Please do not deal with him!!!
I kindly ask the default trust members to tag my account with red trust rating until the issue has been resolved.

Signed messages:

Keybase.io

Code:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This is Zeroxal and I confirm that my account has been hacked.
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.53
Comment: https://keybase.io/crypto

wsBcBAABCgAGBQJXQhwBAAoJEFrSh19bl1/5d+gIAJUetMRZ7TECUa36s3pAhFqY
BkQsMXmN64uPgGI2S9E/s/VWf61fBDYFmvcWqqzUSDrGpKR04frsj7r+x7iVTMfh
VD+qsFIj/y5uNIdbDXA6tig3D9L325nyNHPYqpIgd4VywkVzUrdX60AjiichCYEN
4ygqr/wKP7zGYgb9G7kzAGtIGvjRtIJMfhP2fY6MWpuH/l3v7syHtK/tZgIrxYJX
V+njWsz9Ajj4EGyIXoDHB64zqPfvD7YIbXC71T/FBB7rULGMhLZzZ+Ppj4ih8PdB
Qpr35uxOeg2CA8EhHB3rkf5fBNAOrK+nZ5omb3PtfrM2UuC7i1imYyKSv+8FvuM=
=mcqM
-----END PGP SIGNATURE-----

BTC address 1GpT2GWiPmDB1bhH5pJGceRnaMyNjNHuBD (staked here: https://bitcointalksearch.org/topic/m.12998689)

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account Zeroxal has been hacked. Today is the 22nd of May 2016.
-----BEGIN SIGNATURE-----
1GpT2GWiPmDB1bhH5pJGceRnaMyNjNHuBD
G+yNABKlMpAT9Xz7cSiyKMMKYeCCgzEdIAWE7/3rOCCT52jl/PLOJAm9mp7h/LY1FLSogeuBTQVLQ11gRyo1ZbU=
-----END BITCOIN SIGNED MESSAGE-----

Hopefully theymos will be able to help me out on this case. But till then this account is the only way to contact me

Topic: [HACKED ACCOUNT - Zeroxal] WARNING: Do NOT deal with him (Read 1367 times)