■■■My 2013 legendary account was hacked :( help me to find how and to recover it - page 4.

Realerre

member

Activity: 124

Merit: 11

After double-checking all i was albe to, i unlocked the wallet and made a tx.

All went smooth, thanks god

So...seems like they hacked me....maybe I remember wrong and I didn't change the password after the 2015 hack, can someone check this for me?

Regarding account recovery, two weeks are pretty a long time to wait to send a pm to theymos, but I think that spam won't help me, and I already sent 3 message to Cyrus due to wrong format too... what else I can do, besides waiting 2 weeks and upping this thread?

Realerre

member

Activity: 124

Merit: 11

I checked the laptop, seems that I never logged in in bitcointalk since months ago, and I also ran hjiackthis, so I suppose it is safe.

And they did not hacked my android device, because other sites remain untouched. I am pretty sure I did not login to any phishing site, and I use goggle chrome autocompile for passwords.

So how did they hacked me Huh

Realerre

member

Activity: 124

Merit: 11

Quote from: hilariousandco on May 09, 2018, 11:54:48 AM

When did you last change your password here? If you didn't chnage it after the forum hack on May 22 2015 then it was likely cracked. Did you download any alt coin wallets or accidentally log into any phishing sites?

I changed my password adding "123" at the end. I know, shame on me, but they were salted and all....

Usually I use only my android phone to login, but as I said it was necessary to re-log the day before the hack

...Also, It could be I logged in using my Windows laptop. That seems unable to update to the last version of Windows, I stopped updates from services.msc because it was looping downloading and installing "the last version of windows".

I use this pc only to mine deeponions so I didn't bother so much, an avira scan find no viruses and I still have my considerable amount of onions (but I never uncrypted my wallet since days).

Deleting this pc would be really painful to me, but I'm seriously considering to do it before digiting the wallet password again.

hilariousandco

global moderator

Activity: 4046

Merit: 2732

Join the world-leading crypto sportsbook NOW!

When did you last change your password here? If you didn't chnage it after the forum hack on May 22 2015 then it was likely cracked. Did you download any alt coin wallets or accidentally log into any phishing sites?

Realerre

member

Activity: 124

Merit: 11

I noticed that cyrus account posted the last time 1 month ago, he seems to go online daily and to be online now, but looking at his post history makes me think he is not very active in this period.

I don't want to bother abusing PMs, so I will bump this thread daily hoping that it will help to get noticed by some admin.

Besides that, any idea about how I was hacked?

The day before the hack I noticed I logged out and so logged in using Google automatic compile. My password is unique for this site, it was 2 words and 3 numbers, 15+ characters long. No virus or keylogger installed as far as I know, and I was hacked only on bitcointalk.

Realerre

member

Activity: 124

Merit: 11

Yes the above addresses are spammed along all the forum, from 2013

hilariousandco

global moderator

Activity: 4046

Merit: 2732

Join the world-leading crypto sportsbook NOW!

Quote from: Realerre on May 08, 2018, 11:38:33 AM

Here the signed message:

----BEGIN BITCOIN SIGNED MESSAGE-----
Hi,
Someone just hacked my original account (link https://bitcointalksearch.org/user/erre-154985 )
Please help me
Realerre
-----BEGIN BITCOIN SIGNATURE-----
Version: Bitcoin-qt (1.0)
Address: 1errednJJpXhbjgqby9xj8HSjwBci6d19

HJLmrt/iZeKEyuxNZtc6w6lnzhJYj2aqlJg5hRwv7k6DUl9UzdHxH1/BOMGuNT/7Cf5t7lz2JwDsO3CoRBeMnlw=
-----END BITCOIN SIGNATURE-----

Same message, signature form 13wZt74rDowJznv1TACrZVHiPywKAynYCe:

HEucCjcploRKHI3V3t0EF0TxOk90LB36gL3WJrN/5mujDMnMJanWiF3l123Ax5RVGf3Aa2/Syb0aDM2rORj1Ui0=

From 1SoGC63df4ueo1Zum21c9DwUuft5mkyyi:

HKqudeNrfYNnxeUWMyEBrFORgd7l6+gI93BvwW7P6XH1G6Nr+BU3XgHxqjEnuyiCxRE+M8Zys3Qae3+48RGxoTA=

They all verify.

The older the address the better:

Quote from: erre on December 04, 2013, 05:50:30 PM

Quote from: dvdman on December 04, 2013, 04:15:30 PM

10 erre KozmUeGrvc3Yfxs2X5F6gpGqCSRUzxHfG invalida

??

1SoGC63df4ueo1Zum21c9DwUuft5mkyyi

ps: dvdman es un genio

bitserve

legendary

Activity: 1932

Merit: 1610

Self made HODLER ✓

Quote from: Realerre on May 08, 2018, 12:06:05 PM

Thank you very much, I will send you some merit when able

np, good luck on prompt recovery of your account!

Realerre

member

Activity: 124

Merit: 11

Thank you very much, I will send you some merit when able

bitserve

legendary

Activity: 1932

Merit: 1610

Self made HODLER ✓

Here you are: https://bitcointalksearch.org/topic/m.20945919

Realerre

member

Activity: 124

Merit: 11

I don't know how, my account was hacked Angry

I already blocked the account and sent to Cyrus a signed message, I hope it will be resolved soon.

The account should be locked now and I hope the hacker will do no harm, I opened this thread mainly to try to understand how I was hacked. Also, I am pretty sure I posted 2 addresses in the stake thread, but I am not able to find them. Any google master that can help me?

Here the signed message:

----BEGIN BITCOIN SIGNED MESSAGE-----
Hi,
Someone just hacked my original account (link https://bitcointalksearch.org/user/erre-154985 )
Please help me
Realerre
-----BEGIN BITCOIN SIGNATURE-----
Version: Bitcoin-qt (1.0)
Address: 1errednJJpXhbjgqby9xj8HSjwBci6d19

HJLmrt/iZeKEyuxNZtc6w6lnzhJYj2aqlJg5hRwv7k6DUl9UzdHxH1/BOMGuNT/7Cf5t7lz2JwDsO3CoRBeMnlw=
-----END BITCOIN SIGNATURE-----

Same message, signature form 13wZt74rDowJznv1TACrZVHiPywKAynYCe:

HEucCjcploRKHI3V3t0EF0TxOk90LB36gL3WJrN/5mujDMnMJanWiF3l123Ax5RVGf3Aa2/Syb0aDM2rORj1Ui0=

From 1SoGC63df4ueo1Zum21c9DwUuft5mkyyi:

HKqudeNrfYNnxeUWMyEBrFORgd7l6+gI93BvwW7P6XH1G6Nr+BU3XgHxqjEnuyiCxRE+M8Zys3Qae3+48RGxoTA=

Topic: ■■■My 2013 legendary account was hacked :( help me to find how and to recover it - page 4. (Read 1941 times)