Pages:

Author

Topic: has this DT account changed hands? please check! (Read 1860 times)

jackshephard

full member

Activity: 126

Merit: 100

So in the end this account was hacked... How many passwords were encrypted from the old hack? I though these were encrypted and would take hundreds to unlock... now there are plenty of reports about hacking "and some pretending as well".

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

I was contacted out of the blue by Chevas Regal u=844504 via PM on the 30 December 2016, 15:56:59

with this being part of the overall message:

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
I'm selling this account to Chevas Regal for 0.3 btc. Today is December 6, 2016.
-----BEGIN SIGNATURE-----
19FRPLvjcgjuihZiD9pZbacAGKjM2dLA5s
HM+xvtLq2qAfCfIRGxivP3v97KfbB0cjmXV2AMFnnp/8c7ekjXkKUthl/Dhz6j6Ydk3wm2uggkueSsOy8m8cZyI=
-----END BITCOIN SIGNED MESSAGE-----

A search of the Wallet Address 19FRPLvjcgjuihZiD9pZbacAGKjM2dLA5s finds just two posts:

Re: Offering [INTEREST FREE] Microloans WITH AND WITHOUT COLLATERAL August 18, 2015, 07:00:45 AM https://bitcointalksearch.org/topic/m.12170576 http://archive.is/VjQWu#selection-4693.0-4712.18

Quote from: johnniewalker on August 18, 2015, 02:00:45 AM

DISREDARD, THANKS
Amount: .07 BTC
Interest: 15%
Collateral: None
Reason:Waiting for finds to transfer
Repayment Amount: .0805
Repayment Date: sooner than 8/31/2015
BTC Address: 19FRPLvjcgjuihZiD9pZbacAGKjM2dLA5s

Needed as soon as possible if you can accomadate. Appreciate.

and

DISREGARD Hero Member needs Micro-Loan 18 August 2015, 17:01:37 https://bitcointalksearch.org/topic/m.12170582 http://archive.is/JhMNz#selection-523.0-542.18

Quote from: johnniewalker on August 18, 2015, 02:01:37 AM

DISREGARD THANKS
Amount: .07 BTC
Interest: 15%
Collateral: None
Reason:Waiting for funds to transfer
Repayment Amount: .0805
Repayment Date: 8/31/2015
BTC Address: 19FRPLvjcgjuihZiD9pZbacAGKjM2dLA5s

Needed as soon as possible if you can accomadate. Appreciate it.

Which give the illusion that the Wallet Address 19FRPLvjcgjuihZiD9pZbacAGKjM2dLA5s is the one that's always been there, however, the underlining of the date as well as two or so posts down on both pages shows that 1NLYEWq8hTHbchHm3kbsDDyq4MgKituV8o was actually the original Wallet Address used.

http://archive.is/VjQWu#selection-5209.13-5190.15 first instance

http://archive.is/JhMNz#selection-1675.13-1656.15 second instance.

The second thread's post was modified 06 December 2016 at 21:40:30 while the first post mentioned was modified at 21:41:36

In this thread: johnniewalker didn't repay for some time the loan or returned btc https://bitcointalksearch.org/topic/johnniewalker-didnt-repaid-the-loan-or-returned-btc-1208069 johnniewalker is late repaying a loan (which links back to the original loan request posted above).

johnniewalker takes out a loan and pays it back quickly, thus "buying trust" from you-know-who when they were still on the DT.

Quote from: johnniewalker on April 09, 2015, 09:36:22 PM

To be fulfilled by "Quickseller"

Please send to:

12KsutCoHyKXmCdRpYttbUT4HoNBXeAA2E

The quotes are part of the original post. http://archive.is/Jf1kt#selection-1217.0-1245.34

Find who controls Wallet [8048009cf5] - https://www.walletexplorer.com/wallet/8048009cf5f7d34d/addresses http://archive.is/I5L3K with Wallet Address 19FRPLvjcgjuihZiD9pZbacAGKjM2dLA5s and you'll find the person who hacked the johnniewalker UID

AleScamHole

sr. member

Activity: 504

Merit: 250

Don't you looooooove how offensive my name sounds?

Quote from: Lauda on January 01, 2017, 08:41:00 AM

I've notified theymos regarding this user, and he has removed them from DT. The user that received the rating should also be looked into.

whoa, so i was right? wow i feel awesome doing good for the community, i shall continue to keep my eye out for weird things!
i think its no doubt we all know that some accounts have shifted hands over the years, but need to keep eyes out as they spread their green trust after :/

ty all so much!

Lauda

legendary

Activity: 2674

Merit: 2965

Terminated.

I've notified theymos regarding this user, and he has removed them from DT. The user that received the rating should also be looked into.

jamalaezaz

copper member

Activity: 1876

Merit: 533

Quote from: SaltySpitoon on December 29, 2016, 08:53:30 PM

Given that I've traded with them in the past, and there is a reasonable amount of evidence, I've excluded them from DT. Of course that is without prejudice, and I'll promptly remove that exclusion if JW has any proof that their account hasn't been hacked/sold. I've also PMed them to direct them to this thread.

and this?

Quote from: jamalaezaz on December 23, 2016, 12:04:32 PM

Maybe this Account also got hacked like Powell,, and now he's giving false trust same as Powell..

I don't have any Public Evidence and Proof But I am 100% confirmed The Account "Powell" (https://bitcointalksearch.org/user/powell-202934) hacked by "Phosphorous" (https://bitcointalksearch.org/user/phosphorous-324831)..
I found Powell was giving and removing many false positive trusts to hacked account to increase their value while selling. (after selling account he removes the positive trusts)

SaltySpitoon

legendary

Activity: 2590

Merit: 2156

Welcome to the SaltySpitoon, how Tough are ya?

Quote from: 0x0010 on December 29, 2016, 08:58:19 PM

If this account was hacked (looks like it...) then the email would only be changed and not the password to prevent the original owner from receiving notifications regarding messages and replies, etc so the person can use the account to scam as much as possible.

Here are some notable things as mentioned before:

- Leaving trust randomly when he hasn't in a few years
- English has changed from before

People don't often need to put "I sent first" consistently but with this guy...

Oh well, let's wait it out and see what's happens

The speaking patterns are what I noticed change. The feedback left says "I sent the BTC first, sell me some alts" I went back through JW's post history and there are no other instances of incorrect verb tenses. This leads me to believe whoever left the feedback, english is not their first language, and I'm quite sure that is not the case for JW.

0x0010

member

Activity: 112

Merit: 10

female ;)

SaltySpitoon

legendary

Activity: 2590

Merit: 2156

Welcome to the SaltySpitoon, how Tough are ya?

DrMsEr

hero member

Activity: 728

Merit: 501

Is this true that this dt account has changed hands??

magemist

hero member

Activity: 756

Merit: 501

Quote from: Quickseller on December 23, 2016, 06:05:41 PM

Quote from: Timelord2067 on December 23, 2016, 04:48:58 PM

Quote from: jamalaezaz on December 23, 2016, 12:04:32 PM

While I don't doubt there's been a hack I also can't help but wonder why doesn't the original account owner come along and say "Hey, look at me, my UID was hacked." ?

If his account was in fact hacked, one likely reason why his account was targeted is that he has been inactive for a long time and is unlikely to notice that his account was hacked.

It just might have been by another user.
Here is my input into this DT member.

Quote from: AleScamHole on December 19, 2016, 01:48:06 AM

hi, is this weird?

this user https://bitcointalksearch.org/user/johnniewalker-72227 leaves feedback for user https://bitcointalksearch.org/user/user211-451063

"sent BTC first, no problems" WHO would send BTC first to a new user when they are on DT?!?

i look at the profile "email changed recently"

can someone experienced enough please make sure "johhniewalker" has not changed hands and is spreading his trust to new accounts (his own?) there is no reference to the deal with "user211" either :/ AND they never RETURNED the feedback? WHO would NOT return feedback to a DT?!? so sketchy

DT members including Timelord are looking at this account carefully now and they would very interested in this information that I have on you btc_shell/Johnniewalker

Send my bitcoin back that I sent since the Dec 16th for it:
https://blockchain.info/address/1FueLtmb85SSYhuxQat4AFZRUU7hYGnhrh

Send it too: **--

If you don't send it the next time you log in I will take that as you will not and just scammed me. Then it will ruin this account, btc_shell account and USER211 which I believe is you account as well.

YOU HAVE BEEN WARNED!
And I know it is you or if it wasn't then this account would have said something about my last pm questioning why I asked "Have you scammed me?".

Who is btc_shell??

I did infact try and buy it as you can plainly see. But that is what i do from my last feedback received this is not a surprise. Roll Eyes

This is a Christmas present to Timelord and the OP that was questioning if this account did in fact change hands and I think it did or it is btc_shell's account.
Make your own conclusions now that I have out this information to everyone because btc_shell logged in twice since I told him to send me back the btc that I paid for this purchase (which I am an avid dealer in accounts, there is no surprise there just by looking at my last post. Wink

Quickseller

copper member

Activity: 2996

Merit: 2374

Quote from: Timelord2067 on December 23, 2016, 04:48:58 PM

Quote from: jamalaezaz on December 23, 2016, 12:04:32 PM

While I don't doubt there's been a hack I also can't help but wonder why doesn't the original account owner come along and say "Hey, look at me, my UID was hacked." ?

If his account was in fact hacked, one likely reason why his account was targeted is that he has been inactive for a long time and is unlikely to notice that his account was hacked.

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

Quote from: jamalaezaz on December 23, 2016, 12:04:32 PM

While I don't doubt there's been a hack I also can't help but wonder why doesn't the original account owner come along and say "Hey, look at me, my UID was hacked." ?

jamalaezaz

copper member

Activity: 1876

Merit: 533

darklus123

hero member

Activity: 1246

Merit: 588

Quote from: Timelord2067 on December 19, 2016, 11:41:58 AM

They didn't leave trust for almost two years then start trading in Alt accounts?

Check their Trust wall...

Quote

takagari 10: -0 / +1   2015-01-18   1.00000000      My PayPal for his 1 BTC...he sent first, I sent immediately after. Absolutely flawless. Thanks!
Jaxkr 11: -0 / +2   2016-11-25   0.14000000      My PP for his BTC I sent first. Smooth transaction.
USER211 0: -0 / +1   2016-12-06   0.20000000      I sent the BTC first, sell me some alts
crunck -15: -4 / +1   2016-12-09   0.00000000   Reference   Scammer!

Now who do we know that uses the Scammer! Tag indiscriminately?

You are indeed a timelord Shocked

, That is really something strange tho another sign of any suspicious act here is that as Op said that certian account recently just have changed it's email although it is just an opinion

OmegaStarScream

staff

Activity: 3500

Merit: 6152

I'm not sure the "Email changed recently" message shows for how long after changing the email but the password has been changed on the 6th December

Quote

December 06, 2016, 06:00:46 PM - johnniewalker - password changed

and on 6th December exactly , he gave a positive trust to that account so after thinking about it , there must be something suspicious here.

Quickseller

copper member

Activity: 2996

Merit: 2374

A good way to check for indications of a sold account is to check the archives of the security log for (multiple) password changes (I am not in a position to do this now) going back several months.

It looks like this guy has been inactive for over a year so it is possible that his account is sold.

I do find it very strange that he would send first for such a new user, although it is possible that he knows the guy he traded with IRL

jamyr

sr. member

Activity: 1764

Merit: 373

<------

Betting my 0.003Btc that this is not him.

Sentence construction, grammar, email, all changed?

Notice sell / sold
Previous feedbacks never failed on that word.

Timelord2067

legendary

Activity: 3696

Merit: 2219

💲🏎️💨🚓

They didn't leave trust for almost two years then start trading in Alt accounts?

Check their Trust wall...

Quote

Now who do we know that uses the Scammer! Tag indiscriminately?

OmegaStarScream

staff

Activity: 3500

Merit: 6152

Quote from: AleScamHole on December 19, 2016, 02:21:14 AM

so maybe just no reference to the trade why? privacy? i always thought references in feedback prevented these things?

I don't think It has anything to do with privacy otherwise he wouldn't leave a positive so everyone knows he actually traded .If the transaction was made through a third party service or communicated using P.Ms , It won't be possible to post references .

AleScamHole

sr. member

Activity: 504

Merit: 250

Don't you looooooove how offensive my name sounds?

Quote from: OmegaStarScream on December 19, 2016, 01:55:49 AM

I have seen newbies and Jr.members with Green trust before and I don't really see an issue , If he actually traded with him (whether It's using the P.M system or from a thread) I don't see why he wouldn't leave a positive trust.
USER211 is very active at the altcoin section and johnniewalker left him positive trust for buying alts so It pretty much make sense to me and I don't see why we would accuse him of anything .

so maybe just no reference to the trade why? privacy? i always thought references in feedback prevented these things?

Quote from: mocacinno on December 19, 2016, 01:58:55 AM

I don't see anything suspicious in the seclog (https://bitcointalk.org/seclog.php), so eventough his email changed, his password must have stayed the same.
If you're really suspicious, PM johhniewalker a link to this thread, and ask him if he could please sign a message with an old staked address, for your piece of mind

But like OmegaStarScream already said: there are tons of reasons to leave +ve, even to new members, so i personally wouldn't find this suspicious.

ok, thank you for looking, its hard for users like me to not fear being scammed Sad