Topic: I've been hacked (Electrum 4.3.2) - page 8. (Read 12966 times)

First of all, big thank you to the few ones who managed to answer to this without quoting all the names (ie without triggering my notifications for nothing).

Now, to the topic: sorry BitcoinGirl.Club, but icopress is not wrong. The only reason I didn't leave red feedback was because I was sure other will do that. And while too much red feedback is useless in this case, at least one is a must. OK, when the missing money is paid back or resolved as debt with the involved people, then it can become neutral. But until then.. it has to be there. Else everybody will become campaign manager until the first big payment they can "lose" (and, why not, beyond). I am not telling that julerz12 is a thief (I don't know and it doesn't matter). What I'm telling that this kind of mishaps, if not handled, can give ideas to others.
Plus, indeed, he's also not wrong about the fact that red feedback doesn't stop people still do campaign management.

"What would you feel and do if you are in the same shoe of julerz12" <- this is bad approach. He did make a big mistake in handling money, and we don't talk about 5$ here. And while people get red tag for asking "no collateral loans" of 100$, he has lost ... 50x more.

But, with a bit of political skills, julerz12 can easily turn icopress' feedback to neutral. All he has to do is discuss with the campaigns he was handling and "convert" the missing money into debt with clear agreements about paying that back, and where that is not possible, maybe lend some money too for covering all this. Loans are neutral feedback. And then he can go on.
I mean, even some of the current big exchanges have lost users' money, but they've paid back soon enough and kept pretty good reputation. It can be done. Not cheap, but it can be done.

I see, like every time this kind of things happen, people go more for the drama than for being helpful.
Of course, the first impulse after reading this is the drama. But that was yesterday. Let's be helpful today. 5k is not the end of the world, at least one of the campaigns have shown understanding and I think that a rationale discussion can easily take place. So, with some more luck, it should not be that hard for julerz12 to "patch" a little this fuckup.

Not a very good start to the year, julerz12; I'm really sorry for you. I'm a parent too, and I can very well understand all your concerns about providing for a family.
But everything that has happened has already happened. Someone rightly said that you need to sit in a chair and collect your thoughts.
To proceed, one must be certain that this will not happen again in the future. Are you sure that you are an experienced Windows user? In any case, ask and think.
Are you using licensed Windows? How long have you had it? Do you allow the system to be updated regularly? Do you use your computer for anything other than work-related Internet browsing? Check everything: what browsers are worth, whether there is access to mail, and opening other people's letters. Such viruses are now being written that even Windows Defender does not recognize them as viruses. Remote Desktop, which might be named for another completely harmless process, could regularly monitor all of your activities. We just need to find the problem now.
Flash drives—are they all healthy?
In any case, I wish you strength. May your children always be proud of the honesty and correctness of their father.

I'm with you, difficult situations like this require a cooler brain temperature. I don't know julerz12 personally, but upon checking his past photos, he seems quite young at the moment and I'm sure running away with $5k won't be enough to sustain the rest of his life guilt-free.

Putting a red tag narrows julerz12's chances of fixing the problem and only encourages him to do something stupid considering this is big money as well from a revenue standpoint in my country. One thing I can remind anyone, I don't know what problem will befall me next. I can only sow good seeds to everyone all the time hoping they will help me when problem comes.

Many campaign managers doesn't only look on the negative feedback alone, they also consider how good reputation you have, how popular you're, and they also look on how many positive feedback they got too. I think an user who's reputable and get few negative feedbacks doesn't make them can't join signature campaign, I believe you're know which user I refer too.

Well companies can hire him as a manager only, but not act as an escrow. Which mean @julerz12 need to find an user who want to escrow the signature campaign funds, what do you think? it's fair enough considering he already make this mistake.

I think this case is quite different with Royse777 because he's not the one who has full control over the money, his friend is. While this case @julerz12 is the one who has full control over the money since it's belong to his non custodial wallet.

I understand @julerz12 isn't a scammer and he doesn't have any intention to scam, but he has a high risk of losing money and type 1 flag is applied here.


Here's the flag type 1 https://bitcointalk.org/index.php?action=trust;flag=3079

Let's up to everyone decide to oppose/support the flag.

At least give him a chance ^[month(s)] to resolve this problem before leaving negative feedback and I agree with you.
Leaving negative feedback as of now won't help --let @julerz fix this problem and repay those two companies within a specific time limit.

---

I do not know how you will pay them @julerz with that big amount --but it is worth it to save the reputation that you have built for how many years here in the forum ^{[also our country's reputation]}. I believe in you, don't lose hope --you can even raise funds in our local to cover up this mess. Many members there have joined the high paid signature campaigns.

I agree with you here.
Even coinomize have decided to cooperate and help him recover with time.
Maybe he should be allowed to join sig. campaigns but the payout addresses should belong to yomix and coinomize so the weekly rewards are sent directly to these two service providers. Also by the time OP could find another job (offline or online) and fasten the process of recovery. It may take sometime, but theres nothing in life which can't be solved. Atlast, we are all humans with brains (not animals). Best wishes to the OP!

From icopress   2023-01-10 : https://bitcointalk.org/index.php?action=trust;u=950662;dt

How is it going to resolve the problem? Because of the tag you left, many campaign mangers will deny him joining their campaign, companies will deny him to give their projects, resulting he is not going to financially benefit from the forum. As per his explanation the forum is his only earning source. sucks but it's reality for him.

Besides, look at the long history he have in the forum. Think logically (since you are a campaign manager yourself) what benefit it brings him to steal the funds and ruin his long established business. Nothing adds up.

You guys are too triggered to leave a feedback to others no matter neutral or negative or positive. I noticed the tendency especially the users who joined from 2017 and later. Some of you feel you are too much responsible to involve in anything that matters the reputation and jump on quick decision. Have I seen a feedback from LoyceV, yahoo62278, NeuroticFish, Hhampuz or me. All of them read the story so far. Others who are regular in reputation board and older members, don't you think many of them already read it but have they left a feedback yet? No.

It's not always black and white. Someone makes a mistake or became a victim of a bad incident and you all show up, destroy them without giving a chance to redeem. Ultimately you are the ones are causing trouble, liable to lose business for two parties. Both the victims. In the specific case, julerz12 will not be able to generate any revenue, results the two company don't get their lose back. How is your feedback helping a single member in the forum?

What would you feel and do if you are in the same shoe of julerz12? I hope your answer is not going to: You will never be in trouble in your life.

It would be nice if you could post a comprehensive guide on good OPSEC on our local board.

---

It will take time but you'll recover whatever you've lost @julerz12

I feel sorry for you for this unfortunate event man, I can't hardly remember, but I'm pretty sure I have participated in one of those campaigns and contest you've managed before.

Sometimes, we tend to do the most stupid things that puts us in a lot of risks for the sake of "convenience", and yeah it comes with a price as we are always responsible for our own actions.
You see, there have been a mixed sentiments here, some believes and some don't and you can't blame them. But don't lose hope, there's always a way to fix this. Either you do the extra work to recover the funds (which is almost impossible), or you pay it with your own pocket. I know that's a lot of money, but then again, you can do an extra work to pay off this considered as debt.
Remember, if there's a will, there's a way.
Good luck to you man and don't lose hope, you can do this.

Ps. Kudos to @Hhampuz for giving such a classy advice and stepping up for another campaign manager.

Sorry julerz12 for your loss... most probably your laptop was compromised and you were targeted by someone who was monitoring "you" or your computer, since the funds were drained within a few hours of transfer and your announcement.

We always focus on Not Your Keys, Not Your Coins but we forget to add that anything "online" keys, wallet phrases, passwords etc. are also part of not your keys not your coins thing.

Anyway don't cry over spilled milk, this is for your own reputation and to regain your trust back here... I think you should propose a plan to repay [banned mixer] and YoMix. Let me it be weeks or months but this was your responsibility and taking such responsibility comes with obligation.

Again the way both teams [banned mixer] and YoMix have handled the situation they must be appreciated too.



Wow hats off to you Hhampuz for such a generous offer ... now its up to [banned mixer] (YoMix already selected Royse777)

Next time, make sure you have a separate device that is only used for business or signature campaign purposes. This should include your electrum, ledger live, or any other tools that allow you to confirm the installer of electrum's signature (Kleopatra).

If possible, try installing at least the most basic Linux OS which is Mint for you to have some barrier and avoid doing stuff other than crypto. Practice a good OPSEC kabayan 

I created a new wallet for these campaigns since the previous Electrum wallet I had was not segwit, it's a legacy wallet, eats more fees.

Thank you
I clicked it but I did not download anything. It redirected me to Electrum's website but I did not proceed on updating the wallet.

I use Electrum mainly for convenience, it allows sending rewards in batches.

The wallet was dowbloaded from Electrum's official website, around December 2022. I made that new wallet for the Coinomize campaign.
I even verified their signatures at that time to be sure.

There was no similar pop-up like the ones in previous phishing events. Only that little notification on bottom right of the wallet. I did clicked it though and it points me to Electrum's website but I did not download anything from there.

OP, you're in big trouble. because you hold the funds, you have full responsibility for the funds.
it seems that the campaign can no longer continue due to missing funds. one campaign seems to have decided to keep paying for the week. but for a campaign that was just released and should be discontinued. I doubt you can continue, seeing as they give negative feedback on your account. You still have to return it.
You can contact the relevant parties and discuss the best solution to the problem.

In this case we see that the two people most affected, those who hired him, give him the benefit of the doubt. From a distance we cannot know what really happened to him but from the way he acted I am also inclined to think that the most likely scenario is that he was robbed of his funds.

He will have to reach an agreement to pay back the stolen money, even if it is little by little, and it is going to be difficult because the money he is paying back is going to be money that he will not be able to use to buy food for his family.

I am really sorry for this accident you got and hope you will resolve it and come back.

Is the screenshot a message you got after upgrading your Electrum?

I searched and did not find any latest news or reports about Phishing attack on Electrum wallet. A past attack is in 2018 4 years ago. I am not so sure you got a same problem.
Electrum vulnerability allows arbitrary messages, phishing
Electrum Wallet Phishing Attack Nets Hackers $900K in Bitcoin


Does this attack come back?

When did you download that version?

I did not get a message like yours with my wallet.

Sorry for your expensive loss mate @julerz12, that's quite a big amount here in our country but I know you can work on it and cover your loss fund and pay back these two companies.

I've encountered this before but it wasn't version 4.3.2, upon opening the Electrum app on my laptop, there's a pop-up showing that I need to update the current version before I can proceed to make a transaction.  So I went to the official website and downloaded the latest version then deleted the old one, so meaning I didn't click the message pop-up on the screen.  (Everything went fine and that time)
My question is, have you clicked it?

I thought you were not using a hot wallet like Electrum since you've been here quite a long time managing signature and bounty campaigns.
But whatever mistakes it is, just face it and never do another stupid thing as you think to end this world, that doesn't solve the problem.  I read the suggestion of @Hhampuz which is ideal to follow.

(Laban lang Kabayan, kaya mo yan.)

1. If you can't guarantor marketing funds, you shouldn't be in this business.

2. It seems strange to me to create a new wallet (given that you have been working with other clients for more than one year). I would understand if you said that you do this all the time, but this is also strange because having a notebook with different private keys, and constantly switching from one wallet to another is a complete disrespect for your personal time). As a client, I wouldn't send you money if you didn't sign a Bitcoin message from any Bitcoin Address you've previously used to store campaign funds (or at least the one linked to your account here).

Why not use the services of someone who is more experienced in managing campaigns and has extensive experience as a campaign manager, in my opinion @yahoo62278 and @Hampuz are worth replacing than you have to use the services of @Royse777, but if @Julerz12 wants to be responsible and willing to pay or replace  these funds, will it be continued again and continue to use the services of @Julerz12..

I have only participate in one of julerz12's signature campaign and with the way he handles/organises all the activities that takes place in his campaign is just something else most especially his telegram group. I have always viewed him as one of the most organised CM. So I'm curious to know how on earth was it possible for an organised man like julerz12 to get hacked this is really freaking me out.
I have heard of losing funds by copying and pasting addresses if your system is infected with malware but I'm not sure if that's the case here since he said [banned mixer] money stayed in his wallet for up to a week before this hack. Or have hackers have devised a new method of stealing data from our system undetected? Wow this is shocking...


I know that the money is quite alot, with $5000 I would be able to accomplish so many things but that doesn't mean it's more valuable than your life. And just as you said in your post that you have children what do you think will be of them if you should take the suicidal path? Suicide won't stop anything it will only lead to the creation of more pain for those that you're going to leave behind.

All I can say right now is that you should be strong, make sure you check your health because I'm sure losing money that's has enormous has this can cause some mental stress and if perhaps you wish to pay back little by little you need to be alive to accomplish that so please just take your time to relax and don't forget medications. Remember health is wealth.

Now this has happened and even though this is a little difficult for you, you have to stay strong to go through something like this. You have responsibility for your responsibility for your family and of course your previous position regardless of this is your fault or not I think it doesn't matter.
It's not the end of the world and all you need to do is stand tall and face the problems that have happened right now. $5000 is a lot of money for most people but it is still up for grabs and it is certainly not the end of the world as some friends have said before.
You just need to prove that you can get through this and take responsibility for what other people have entrusted to you before. Of course this is a valuable lesson because basically we also need conditions when we are down like this because with that we will be more careful and not careless the next day.