Author

Topic: ■■■My 2013 legendary account was hacked :( help me to find how and to recover it (Read 1904 times)

member
Activity: 124
Merit: 11
member
Activity: 124
Merit: 11
member
Activity: 124
Merit: 11
member
Activity: 124
Merit: 11
Up



(And some ass to get attention)
member
Activity: 124
Merit: 11
member
Activity: 124
Merit: 11
member
Activity: 124
Merit: 11
member
Activity: 124
Merit: 11
legendary
Activity: 2674
Merit: 2965
Terminated.
Why did a moderator deleted all my "up" posts?

Help me to retrieve my account instead!

Lauda maybe can help you. I can't believe more effort is not give to help legends who have put a lot of effort into this forum.

Especially if you have signed a message proving you are the original owner.

Who can you not get your account back ?

were you a frequent poster and contributor to this forum?
Am I missing something here? How exactly may this kitty be of assistance here?
member
Activity: 124
Merit: 11
Why did a moderator deleted all my "up" posts?

Help me to retrieve my account instead!

Lauda maybe can help you. I can't believe more effort is not give to help legends who have put a lot of effort into this forum.

Especially if you have signed a message proving you are the original owner.

Who can you not get your account back ?

were you a frequent poster and contributor to this forum?


I made thousands of posts, some of them were not shitposting.


Not that that sounds very encouraging to fight for  - -still those that tend to undersell themselves are often the best types.

I still think a legend account should be renewed quickly if the signed message proves it is theirs.

PM lauda and see. Can't hurt.

Also I will come back to this thread now and again and help keep it current. Shame to be hacked. I often wonder why we can not select to have 2 stage auth via email as optional would help i think.


Yes, it was a shame....i think i was a phising victim, but i wasn't able to find anything in my browser chronology.
I took something like 3 or 4 tips during 2017 helping people, and you know how difficult it was here, and I had some positive trust.
You can check my story and posting, I made some shitposting during the time of course, but I didn't even used a paid signature for years (until bitmixer start paying me 0.001 btc per post), and I think my person and account have some value here.

Thank you for your support, I will try laura too...
legendary
Activity: 2100
Merit: 1167
MY RED TRUST LEFT BY SCUMBAGS - READ MY SIG
Why did a moderator deleted all my "up" posts?

Help me to retrieve my account instead!

Lauda maybe can help you. I can't believe more effort is not give to help legends who have put a lot of effort into this forum.

Especially if you have signed a message proving you are the original owner.

Who can you not get your account back ?

were you a frequent poster and contributor to this forum?


I made thousands of posts, some of them were not shitposting.


Not that that sounds very encouraging to fight for  - -still those that tend to undersell themselves are often the best types.

I still think a legend account should be renewed quickly if the signed message proves it is theirs.

PM lauda and see. Can't hurt.

Also I will come back to this thread now and again and help keep it current. Shame to be hacked. I often wonder why we can not select to have 2 stage auth via email as optional would help i think.
member
Activity: 124
Merit: 11
Why did a moderator deleted all my "up" posts?

Help me to retrieve my account instead!

Lauda maybe can help you. I can't believe more effort is not give to help legends who have put a lot of effort into this forum.

Especially if you have signed a message proving you are the original owner.

Who can you not get your account back ?

were you a frequent poster and contributor to this forum?


I made thousands of posts, some of them were not shitposting.
Now, I feel bad when I write on this forum and i rarely post, my account was like my identity here.
If someone can help me, please do so.
As far as I understood only theymos and Cyrus can help me, but if some hi-rank moderator can draw their attention on this please do so, many months passed now  Cry
legendary
Activity: 2100
Merit: 1167
MY RED TRUST LEFT BY SCUMBAGS - READ MY SIG
Why did a moderator deleted all my "up" posts?

Help me to retrieve my account instead!

Lauda maybe can help you. I can't believe more effort is not give to help legends who have put a lot of effort into this forum.

Especially if you have signed a message proving you are the original owner.

Who can you not get your account back ?

were you a frequent poster and contributor to this forum?
member
Activity: 124
Merit: 11
Why did a moderator deleted all my "up" posts?

Help me to retrieve my account instead!
member
Activity: 462
Merit: 14
I really hate those people who are good for nothing hacking accounts like this. At first i only thought that a savage is only happening in the real world or outside of the forum but seeing this threads concludes that even here in the forum there are really this kind of people who are hacking BCT accounts and a not just ordinary account because it was a legendary rank.
member
Activity: 124
Merit: 11
Someone deleted an ass image that I posted to up this thread, and this is very sad...why delete asses? Send a message to theymos addressing the issue instead
member
Activity: 588
Merit: 43
Some rules to avoid the hack

-Download untrusted wallets in a virtual machine
-Use a virgin email to the forum account
-Save the website on bookmarks
-Always check

Can "Secret question" function somehow prevent hacking? I wonder, if the hacker picked up the password then why account owner didn't get mail that someone entered his account from another IP. Protection of accounts is not at the highest level Sad
member
Activity: 124
Merit: 11
Up and asking for community's help
member
Activity: 124
Merit: 11
I was just fishing on the dock when I noticed my old johnboat sinking. I figured I'd go bailing out water, 'cause I might want to drop my line in the middle of the lake later. And what do I see but a guy with a pail dutifully scooping out water from his yacht! He's been marking the days in paint on the side of the quarters. Sisyphus, one must consider you happy.

My account got hacked. I haven't logged into these forums in years.



SMF 1.1 has been discontinued since March.

Sorry about your yacht. And my johnboat. I guess in order to have a boat in these waters, it's also your responsibility to have a time machine to stop thieves of tomorrow.

Do you think that simplemachine discontinuing upgrades have something to do with the hack? I don't see massive hacks here...

Also, UP!
newbie
Activity: 1
Merit: 0
I was just fishing on the dock when I noticed my old johnboat sinking. I figured I'd go bailing out water, 'cause I might want to drop my line in the middle of the lake later. And what do I see but a guy with a pail dutifully scooping out water from his yacht! He's been marking the days in paint on the side of the quarters. Sisyphus, one must consider you happy.

My account got hacked. I haven't logged into these forums in years.

https://i.imgur.com/DoZdSNC.png

SMF 1.1 has been discontinued since March.

Sorry about your yacht. And my johnboat. I guess in order to have a boat in these waters, it's also your responsibility to have a time machine to stop thieves of tomorrow.
member
Activity: 124
Merit: 11
I am even fearing theymos and Cyrus are somehow filtering my messages,

I doubt it. I'm not sure there's a way to block your messages without you knowing so (if they blocked you it would say as such). They're either just purposely not opening anything they see to do with account recoveries or are just ignoring them and not looking into verifying them at all. Messages can also get buried very fast due to multiple users messaging moderators and as admins they probably receive the most mail of all staff, but they can't all be getting buried because I haven't seen an account publicly restored in many many months nor do other people seem to be getting a response at all about it. theymos has stated he doesn't have time to look into them because he's busy coding the forum but I haven't heard a response from Cyrus. He also either doesn't have the time or just can't be bothered. Unless more admins are added or theymos codes the automatic recovery tool and implements that then I can't see accounts getting recovered anytime soon, sadly.

So, i need to make noise.
What kind of noise would have the best probability to be noted by admins, in your opinion?


EDIT: shame on me, I did this:
https://bitcointalksearch.org/topic/m.44579189
legendary
Activity: 2954
Merit: 3060
Join the world-leading crypto sportsbook NOW!
I am even fearing theymos and Cyrus are somehow filtering my messages,

I doubt it. I'm not sure there's a way to block your messages without you knowing so (if they blocked you it would say as such). They're either just purposely not opening anything they see to do with account recoveries or are just ignoring them and not looking into verifying them at all. Messages can also get buried very fast due to multiple users messaging moderators and as admins they probably receive the most mail of all staff, but they can't all be getting buried because I haven't seen an account publicly restored in many many months nor do other people seem to be getting a response at all about it. theymos has stated he doesn't have time to look into them because he's busy coding the forum but I haven't heard a response from Cyrus. He also either doesn't have the time or just can't be bothered. Unless more admins are added or theymos codes the automatic recovery tool and implements that then I can't see accounts getting recovered anytime soon, sadly.
member
Activity: 124
Merit: 11
People say it usually takes 6 months to a year, just hang in there. It will be recovered soon hopefully.

No. It's somewhere between months to never. Realerre and everyone else are unfortunately just wasting their time right now.

Why am I wasting my time? I have not the intention to give up.

Because you are wasting your time until things change around here. I'm just being honest. I didn't say you should give up but if the admins aren't restoring accounts at all right now (which they aren't) then that's like you screaming away to yourself in a locked room where nobody can hear you.

It's very sad, I just hoped that some "big" moderator, like you, could help me to get in contact with admins... I was even tempted to send you a PM asking for that because you were very nice at the start of this thread, why are you now suggesting to surrender?

I'm powerless here. I've messaged them multiple times about your case and many others:



Either two things happen when I message them about these cases. I get no response at all or cyrus will say something along the lines of "I think I looked into this but something didn't add up" which I'm almost certain is his go-to excuse for not looking into it. I mean, that certainly sounds better than "I couldn't be bothered investigating it".

I think my case don't need any "investigation" at all.

Maybe it does or maybe it doesn't but I doubt it was even looked into. Most cases are likely open and shut or require minimal investigation but they're seemingly not done at all. Good luck on getting your account back and all, but unless they suddenly start looking into all the cases or theymos finally implements the automatic system for recovering them then realistically it's just not going to happen anytime soon. I'm just being realistic.
I think that my account should be locked, but it's still not pleasant at all.

Thank you everybody for your support, and again....UP!!!

It is locked. Can you still log into it? I'm guessing not though since it was hacked.

I have no access to it, but it's locked for the hacker. I even tried to contact him via the mail he used for reset, but probably it was a drop-out address.

The most frustrating thing is that Cyrus initially responded, and he asked if I was still in control of the original mail, and I answered "yes"... I answered like 10 times, but no contact till then.

I am even fearing theymos and Cyrus are somehow filtering my messages, although I did never spam too much (I even tried subjects like "important read me", but only once)
legendary
Activity: 2954
Merit: 3060
Join the world-leading crypto sportsbook NOW!
People say it usually takes 6 months to a year, just hang in there. It will be recovered soon hopefully.

No. It's somewhere between months to never. Realerre and everyone else are unfortunately just wasting their time right now.

Why am I wasting my time? I have not the intention to give up.

Because you are wasting your time until things change around here. I'm just being honest. I didn't say you should give up but if the admins aren't restoring accounts at all right now (which they aren't) then that's like you screaming away to yourself in a locked room where nobody can hear you.

It's very sad, I just hoped that some "big" moderator, like you, could help me to get in contact with admins... I was even tempted to send you a PM asking for that because you were very nice at the start of this thread, why are you now suggesting to surrender?

I'm powerless here. I've messaged them multiple times about your case and many others:



Either two things happen when I message them about these cases. I get no response at all or cyrus will say something along the lines of "I think I looked into this but something didn't add up" which I'm almost certain is his go-to excuse for not looking into it. I mean, that certainly sounds better than "I couldn't be bothered investigating it".

I think my case don't need any "investigation" at all.

Maybe it does or maybe it doesn't but I doubt it was even looked into. Most cases are likely open and shut or require minimal investigation but they're seemingly not done at all. Good luck on getting your account back and all, but unless they suddenly start looking into all the cases or theymos finally implements the automatic system for recovering them then realistically it's just not going to happen anytime soon. I'm just being realistic.
I think that my account should be locked, but it's still not pleasant at all.

Thank you everybody for your support, and again....UP!!!

It is locked. Can you still log into it? I'm guessing not though since it was hacked.
member
Activity: 124
Merit: 11
Verified message myself, all seems ok.

It just seems like another case of being stuck in limbo, even after providing all the evidence required by the mods. Very sad.

People say it usually takes 6 months to a year, just hang in there. It will be recovered soon hopefully.

No. It's somewhere between months to never. Realerre and everyone else are unfortunately just wasting their time right now.

It's insane isn't it? You spend years of your life here, making connections, business and so on, getting some sort of reputation, then all of a sudden your account gets hacked and suddenly you have a bunch of PMs and unfinished deals with people which you cannot complete because you cannot access your account.

Then you go and check what's needed to get it back, comply with all the requirements and all you get is an endless waiting queue.

It's just scary to think it can happen to any of us. This thread shows not even Legendary members are safe. Im just hoping theymos eventually spends some serious time cleaning the backlog of accounts that have delivered the required proof and have been waiting for months. It's just not fair.
It already did happened to me. I really don't know how the hacker was able to get hold of my account. Fortunately though, I was able to get it back and outsmart the person who took my account. I can feel the pain and the anguished that the OP is going through with every coming weeks without any reply. And if you will noticed, the hackers are already abusing your merit so I suggest that DT members to look at those 4 accounts receiving the OP's merit after the hacked.

I think that my account should be locked, but it's still not pleasant at all.

Thank you everybody for your support, and again....UP!!!
sr. member
Activity: 2618
Merit: 439
Verified message myself, all seems ok.

It just seems like another case of being stuck in limbo, even after providing all the evidence required by the mods. Very sad.

People say it usually takes 6 months to a year, just hang in there. It will be recovered soon hopefully.

No. It's somewhere between months to never. Realerre and everyone else are unfortunately just wasting their time right now.

It's insane isn't it? You spend years of your life here, making connections, business and so on, getting some sort of reputation, then all of a sudden your account gets hacked and suddenly you have a bunch of PMs and unfinished deals with people which you cannot complete because you cannot access your account.

Then you go and check what's needed to get it back, comply with all the requirements and all you get is an endless waiting queue.

It's just scary to think it can happen to any of us. This thread shows not even Legendary members are safe. Im just hoping theymos eventually spends some serious time cleaning the backlog of accounts that have delivered the required proof and have been waiting for months. It's just not fair.
It already did happened to me. I really don't know how the hacker was able to get hold of my account. Fortunately though, I was able to get it back and outsmart the person who took my account. I can feel the pain and the anguished that the OP is going through with every coming weeks without any reply. And if you will noticed, the hackers are already abusing your merit so I suggest that DT members to look at those 4 accounts receiving the OP's merit after the hacked.
member
Activity: 124
Merit: 11
Reading from the first page till here. I think you will need more time till you could received answer from admin. Good luck.

Thank you.


Up!
newbie
Activity: 140
Merit: 0
Reading from the first page till here. I think you will need more time till you could received answer from admin. Good luck.
member
Activity: 124
Merit: 11
People say it usually takes 6 months to a year, just hang in there. It will be recovered soon hopefully.

No. It's somewhere between months to never. Realerre and everyone else are unfortunately just wasting their time right now.

Why am I wasting my time? I have not the intention to give up.
It's summer now, but in September, when admins should be working "for sure", I think I will start a spam campaign (I could even pay for that) or something "heavy" to be noticed.

It's very sad, I just hoped that some "big" moderator, like you, could help me to get in contact with admins... I was even tempted to send you a PM asking for that because you were very nice at the start of this thread, why are you now suggesting to surrender? I have signed message and I complied to the requested format, I think my case don't need any "investigation" at all.

Verified message myself, all seems ok.

It just seems like another case of being stuck in limbo, even after providing all the evidence required by the mods. Very sad.

People say it usually takes 6 months to a year, just hang in there. It will be recovered soon hopefully.

No. It's somewhere between months to never. Realerre and everyone else are unfortunately just wasting their time right now.

It's insane isn't it? You spend years of your life here, making connections, business and so on, getting some sort of reputation, then all of a sudden your account gets hacked and suddenly you have a bunch of PMs and unfinished deals with people which you cannot complete because you cannot access your account.

Then you go and check what's needed to get it back, comply with all the requirements and all you get is an endless waiting queue.

It's just scary to think it can happen to any of us. This thread shows not even Legendary members are safe. Im just hoping theymos eventually spends some serious time cleaning the backlog of accounts that have delivered the required proof and have been waiting for months. It's just not fair.

Thank you for your support. It's really disturbing me to write here without my real account, after many years it's like wearing a wrong skin. I was very patient, but three and an half months seems enough to get a response (i even got a quick response from Cyrus, but nothing since then...)
legendary
Activity: 1372
Merit: 1252
Verified message myself, all seems ok.

It just seems like another case of being stuck in limbo, even after providing all the evidence required by the mods. Very sad.

People say it usually takes 6 months to a year, just hang in there. It will be recovered soon hopefully.

No. It's somewhere between months to never. Realerre and everyone else are unfortunately just wasting their time right now.

It's insane isn't it? You spend years of your life here, making connections, business and so on, getting some sort of reputation, then all of a sudden your account gets hacked and suddenly you have a bunch of PMs and unfinished deals with people which you cannot complete because you cannot access your account.

Then you go and check what's needed to get it back, comply with all the requirements and all you get is an endless waiting queue.

It's just scary to think it can happen to any of us. This thread shows not even Legendary members are safe. Im just hoping theymos eventually spends some serious time cleaning the backlog of accounts that have delivered the required proof and have been waiting for months. It's just not fair.
global moderator
Activity: 3990
Merit: 2717
Join the world-leading crypto sportsbook NOW!
People say it usually takes 6 months to a year, just hang in there. It will be recovered soon hopefully.

No. It's somewhere between months to never. Realerre and everyone else are unfortunately just wasting their time right now.
member
Activity: 226
Merit: 30
so.. hru?
People say it usually takes 6 months to a year, just hang in there. It will be recovered soon hopefully.
member
Activity: 124
Merit: 11
Please...almost 3 MONTHS PASSED!!
member
Activity: 124
Merit: 11
member
Activity: 124
Merit: 11
member
Activity: 124
Merit: 11
member
Activity: 124
Merit: 11
Please...
Code:

                ,.=ctE55ttt553tzs.,                              
             ,,c5;z==!!::::  .::7:==it3>.,                        
          ,xC;z!::::::    ::::::::::::!=c33x,                      
        ,czz!:::::  ::;;..===:..:::   ::::!ct3.                    
      ,C;/.:: :  ;=c!:::::::::::::::..      !tt3.                  
     /z/.:   :;z!:::::J  :E3.  E:::::::..     !ct3.                
   ,E;F   ::;t::::::::J  :E3.  E::.     ::.     \ttL              
  ;E7.    :c::::F******   **.  *==c;..    ::     Jttk              
 .EJ.    ;::::::L                   "\:.   ::.    Jttl            
 [:.    :::::::::773.    JE773zs.     I:. ::::.    It3L            
;:[     L:::::::::::L    |t::!::J     |::::::::    :Et3            
[:L    !::::::::::::L    |t::;z2F    .Et:::.:::.  ::[13    please  
E:.    !::::::::::::L               =Et::::::::!  ::|13        help
E:.    (::::::::::::L    .......       \:::::::!  ::|i3          me
[:L    !::::      ::L    |3t::::!3.     ]::::::.  ::[13            
!:(     .:::::    ::L    |t::::::3L     |:::::; ::::EE3            
 E3.    :::::::::;z5.    Jz;;;z=F.     :E:::::.::::II3[            
 Jt1.    :::::::[                    ;z5::::;.::::;3t3            
  \z1.::::::::::l......   ..   ;.=ct5::::::/.::::;Et3L            
   \t3.:::::::::::::::J  :E3.  Et::::::::;!:::::;5E3L              
    "cz\.:::::::::::::J   E3.  E:::::::z!     ;Zz37`              
      \z3.       ::;:::::::::::::::;='      ./355F                
        \z3x.         ::~======='         ,c253F                  
          "tz3=.                      ..c5t32^                    
             "=zz3==...         ...=t3z13P^                        
                 `*=zjzczIIII3zzztE3>*^`      

                 
member
Activity: 124
Merit: 11
Really, I'm getting a bit nervous now....
member
Activity: 124
Merit: 11
2 MONTHS passed now  Sad

Please somebody help me, or at least tell me why I can't recover my account
member
Activity: 124
Merit: 11
Palese take a look at my issue...
member
Activity: 124
Merit: 11
Can maybe a mod send a message to an admin addressing my situation? That would be greatly appreciated, if possible.
member
Activity: 124
Merit: 11
member
Activity: 124
Merit: 11
Hi mate!

I have tagged your account for being hacked
Once you solve this problem, and restore access to your account, pm me so that I can remove the tag

Thank you, but the account is blocked and the hacker have no way to use it, so please remove the tag, it is not needed.

Still no response....I wonder why, after the first contact I was hoping it would had been resolved soon...
member
Activity: 317
Merit: 13
★Adconity.com★
Hi mate!

I have tagged your account for being hacked
Once you solve this problem, and restore access to your account, pm me so that I can remove the tag
member
Activity: 124
Merit: 11
Still no response, so i sent a second message to both Theymos and Cyrus

....UP!!!
member
Activity: 124
Merit: 11
What additional info did he request?

If I was still in control of the email originally linked to the account, and I answered that I am, two times.

Cannot imagine why he didn't answered since then Sad
global moderator
Activity: 3990
Merit: 2717
Join the world-leading crypto sportsbook NOW!
What additional info did he request?
member
Activity: 124
Merit: 11
Almost a month passed, still I didn't understood how I was hacked, and getting a response from Cyrus and then nothing for 2 weeks is even more frustrating than no response  Cry
member
Activity: 124
Merit: 11
Still no answer from Cyrus, so I up this thread
member
Activity: 124
Merit: 11
Seems to me that chrome autofill check the url, I am not 100% sure I used it (maybe 90%), but seems strange to me that I login in a phishing site, because I can't find it in my chronology.


Meanwhile Cyrus responded and asked for some additional info that I gave, but I got no response since that a couple of days ago, so.... UP!
staff
Activity: 3304
Merit: 4115
I always thought that autofills key the passwords to hostname or domain name contained in the canonical URL. They are not tricked by phishing sites where the domain name is mistyped or simply looks the same visually to the real site.
That depends on the type of autofill used. Sometimes autofill features just save the password, and ask you if you want to input your saved password on the site. Another example, Keepass has a auto complete feature which will auto complete your password by finding certain strings of text and inputting your your username/password that way. This doesn't check whether the URL is correct unless, you've specifically specified that in Keepass.

I'm unfamiliar with chrome/firefox auto fill but, I know that they have an option to automatically fill in credit cards, and other information which isn't specifically related to a certain URL.

When I went to a known site and I saved the password, both username and password would be autocopiled and in yellow background. I think this function will only work for known urls, I am pretty sure I used it, and I can't find any phishing link in my chronology (but searching is difficult because of mobile, I could have missed it).

Still, I'm wondering if I changed the password after the 2015 hack. I think I did so but I'm not 100% sure...
I'm guessing you are using your browsers autofill feature then.

If it 100% checks the URL then you may be alright to use auto fill. Although, I would check this to be sure for the future as I mentioned above not all auto fill features work like that.
donator
Activity: 1617
Merit: 1012
Think You for the hint, i reviewed my chronology but I can't find anything suspicious... also, Google autofill shouldn't work on a phishing site....or not?
I think I login from the login button...because it seemed like I was logged out. I think I was not redirected, but I am not 100% sure
If it autofills your password and username then yes. It's just like you typing it in. The way phishing sites work is that they make their site look identical to their target site and only have a different url and database. When you log in they'll see what you've tried to log in with, and will then try and use it on the actual site. I didn't even know autofill was a thing on modern browsers, but I would recommend taking that off right away.

I always thought that autofills key the passwords to hostname or domain name contained in the canonical URL. They are not tricked by phishing sites where the domain name is mistyped or simply looks the same visually to the real site.
member
Activity: 124
Merit: 11
Really, i don't know why email confirmation is not required to a password change, considering how much this forum is prone to hack attacks.

Still no answers from Cyrus, UP!
member
Activity: 124
Merit: 11
Some rules to avoid the hack

-Download untrusted wallets in a virtual machine
-Use a virgin email to the forum account
-Save the website on bookmarks
-Always check


On the Admin side, they could require email verification for password change.
That would be great
legendary
Activity: 2534
Merit: 1517
#1 VIP Crypto Casino
Some rules to avoid the hack

-Download untrusted wallets in a virtual machine
-Use a virgin email to the forum account
-Save the website on bookmarks
-Always check
member
Activity: 124
Merit: 11
Many days passed, still I didn't manage to understand how I was hacked, still no response from Cyrus.

Bump
member
Activity: 124
Merit: 11
Think You for the hint, i reviewed my chronology but I can't find anything suspicious... also, Google autofill shouldn't work on a phishing site....or not?
I think I login from the login button...because it seemed like I was logged out. I think I was not redirected, but I am not 100% sure
If it autofills your password and username then yes. It's just like you typing it in. The way phishing sites work is that they make their site look identical to their target site and only have a different url and database. When you log in they'll see what you've tried to log in with, and will then try and use it on the actual site. I didn't even know autofill was a thing on modern browsers, but I would recommend taking that off right away.

When I went to a known site and I saved the password, both username and password would be autocopiled and in yellow background. I think this function will only work for known urls, I am pretty sure I used it, and I can't find any phishing link in my chronology (but searching is difficult because of mobile, I could have missed it).

Still, I'm wondering if I changed the password after the 2015 hack. I think I did so but I'm not 100% sure...
staff
Activity: 3304
Merit: 4115
Think You for the hint, i reviewed my chronology but I can't find anything suspicious... also, Google autofill shouldn't work on a phishing site....or not?
I think I login from the login button...because it seemed like I was logged out. I think I was not redirected, but I am not 100% sure
If it autofills your password and username then yes. It's just like you typing it in. The way phishing sites work is that they make their site look identical to their target site and only have a different url and database. When you log in they'll see what you've tried to log in with, and will then try and use it on the actual site. I didn't even know autofill was a thing on modern browsers, but I would recommend taking that off right away.
member
Activity: 124
Merit: 11
The day before the hack I noticed I logged out and so logged in using Google automatic compile.
I am pretty sure I did not login to any phishing site, and I use goggle chrome autocompile for passwords.
you mean Google Autofill/Autocomplete password?
did you re-log intentionally (open login page from bookmark) or were you re-directed to login page?
if the latter happened, you could be logging into a phishing site Undecided happened to me a few weeks ago
but luckily I noticed the wrong url, so I just closed the page and reopened the forum from my bookmark
can you remember the time you logging in and check your browser history to make sure you were on the real login page at that time
just in case there is a way to trick autocomplete to work with fake login page

Quote
May 08, 2018, 10:06:56 AM - erre - password reset via email
Quote
This user's password was reset recently.
This user's email address was changed recently.

Think You for the hint, i reviewed my chronology but I can't find anything suspicious... also, Google autofill shouldn't work on a phishing site....or not?
I think I login from the login button...because it seemed like I was logged out. I think I was not redirected, but I am not 100% sure
hero member
Activity: 1232
Merit: 738
Mixing reinvented for your privacy | chipmixer.com
The day before the hack I noticed I logged out and so logged in using Google automatic compile.
I am pretty sure I did not login to any phishing site, and I use goggle chrome autocompile for passwords.
you mean Google Autofill/Autocomplete password?
did you re-log intentionally (open login page from bookmark) or were you re-directed to login page?
if the latter happened, you could be logging into a phishing site Undecided happened to me a few weeks ago
but luckily I noticed the wrong url, so I just closed the page and reopened the forum from my bookmark
can you remember the time you logging in and check your browser history to make sure you were on the real login page at that time
just in case there is a way to trick autocomplete to work with fake login page

Quote
May 08, 2018, 10:06:56 AM - erre - password reset via email
Quote
This user's password was reset recently.
This user's email address was changed recently.
member
Activity: 124
Merit: 11
After double-checking all i was albe to, i unlocked the wallet and made a tx.

All went smooth, thanks god Smiley

So...seems like they hacked me....maybe I remember wrong and I didn't change the password after the 2015 hack, can someone check this for me?

Regarding account recovery, two weeks are pretty a long time to wait to send a pm to theymos, but I think that spam won't help me, and I already sent 3 message to Cyrus due to wrong format too... what else I can do, besides waiting 2 weeks and upping this thread?
member
Activity: 124
Merit: 11
I checked the laptop, seems that I never logged in in bitcointalk since months ago, and I also ran hjiackthis, so I suppose it is safe.

And they did not hacked my android device, because other sites remain untouched. I am pretty sure I did not login to any phishing site, and I use goggle chrome autocompile for passwords.

So how did they hacked me Huh
member
Activity: 124
Merit: 11
When did you last change your password here? If you didn't chnage it after the forum hack on May 22 2015 then it was likely cracked. Did you download any alt coin wallets or accidentally log into any phishing sites?

I changed my password adding "123" at the end. I know, shame on me, but they were salted and all....

Usually I use only my android phone to login, but as I said it was necessary to re-log the day before the hack

...Also, It could be I logged in using my Windows laptop. That seems unable to update to the last version of Windows, I stopped updates from services.msc because it was looping downloading and installing "the last version of windows".

I use this pc only to mine deeponions so I didn't bother so much, an avira scan find no viruses and I still have my considerable amount of onions (but I never uncrypted my wallet since days).

Deleting this pc would be really painful to me, but I'm seriously considering to do it before digiting the wallet password again.
global moderator
Activity: 3990
Merit: 2717
Join the world-leading crypto sportsbook NOW!
When did you last change your password here? If you didn't chnage it after the forum hack on May 22 2015 then it was likely cracked. Did you download any alt coin wallets or accidentally log into any phishing sites?
member
Activity: 124
Merit: 11
I noticed that cyrus account posted the last time 1 month ago, he seems to go online daily and to be online now, but  looking at his post history makes me think he is not very active in this period.

I don't want to bother abusing PMs, so I will bump this thread daily hoping that it will help to get noticed by some admin.

Besides that, any idea about how I was hacked?

The day before the hack I noticed I logged out and so logged in using Google automatic compile. My password is unique for this site, it was 2 words and 3 numbers, 15+ characters long. No virus or keylogger installed as far as I know, and I was hacked only on bitcointalk.
member
Activity: 124
Merit: 11
Yes the above addresses are spammed along all the forum, from 2013 Smiley
global moderator
Activity: 3990
Merit: 2717
Join the world-leading crypto sportsbook NOW!
Here the signed message:

----BEGIN BITCOIN SIGNED MESSAGE-----
Hi,
Someone just hacked my original account (link https://bitcointalksearch.org/user/erre-154985 )
Please help me
Realerre
-----BEGIN BITCOIN SIGNATURE-----
Version: Bitcoin-qt (1.0)
Address: 1errednJJpXhbjgqby9xj8HSjwBci6d19

HJLmrt/iZeKEyuxNZtc6w6lnzhJYj2aqlJg5hRwv7k6DUl9UzdHxH1/BOMGuNT/7Cf5t7lz2JwDsO3CoRBeMnlw=
-----END BITCOIN SIGNATURE-----

Same message, signature form 13wZt74rDowJznv1TACrZVHiPywKAynYCe:

HEucCjcploRKHI3V3t0EF0TxOk90LB36gL3WJrN/5mujDMnMJanWiF3l123Ax5RVGf3Aa2/Syb0aDM2rORj1Ui0=

From 1SoGC63df4ueo1Zum21c9DwUuft5mkyyi:

HKqudeNrfYNnxeUWMyEBrFORgd7l6+gI93BvwW7P6XH1G6Nr+BU3XgHxqjEnuyiCxRE+M8Zys3Qae3+48RGxoTA=



They all verify.

The older the address the better:


10 erre KozmUeGrvc3Yfxs2X5F6gpGqCSRUzxHfG invalida


??

1SoGC63df4ueo1Zum21c9DwUuft5mkyyi

ps: dvdman es un genio
legendary
Activity: 1862
Merit: 1530
Self made HODLER ✓
Thank you very much, I will send you some merit when able Smiley

np, good luck on prompt recovery of your account!
member
Activity: 124
Merit: 11
Thank you very much, I will send you some merit when able Smiley
legendary
Activity: 1862
Merit: 1530
Self made HODLER ✓
member
Activity: 124
Merit: 11
I don't know how, my account was hacked  Angry

I already blocked the account and sent to Cyrus a signed message, I hope it will be resolved soon.

The account should be locked now and I hope the hacker will do no harm, I opened this thread mainly to try to understand how I was hacked. Also, I am pretty sure I posted 2 addresses in the stake thread, but I am not able to find them. Any google master that can help me?

Here the signed message:

----BEGIN BITCOIN SIGNED MESSAGE-----
Hi,
Someone just hacked my original account (link https://bitcointalksearch.org/user/erre-154985 )
Please help me
Realerre
-----BEGIN BITCOIN SIGNATURE-----
Version: Bitcoin-qt (1.0)
Address: 1errednJJpXhbjgqby9xj8HSjwBci6d19

HJLmrt/iZeKEyuxNZtc6w6lnzhJYj2aqlJg5hRwv7k6DUl9UzdHxH1/BOMGuNT/7Cf5t7lz2JwDsO3CoRBeMnlw=
-----END BITCOIN SIGNATURE-----

Same message, signature form 13wZt74rDowJznv1TACrZVHiPywKAynYCe:

HEucCjcploRKHI3V3t0EF0TxOk90LB36gL3WJrN/5mujDMnMJanWiF3l123Ax5RVGf3Aa2/Syb0aDM2rORj1Ui0=

From 1SoGC63df4ueo1Zum21c9DwUuft5mkyyi:

HKqudeNrfYNnxeUWMyEBrFORgd7l6+gI93BvwW7P6XH1G6Nr+BU3XgHxqjEnuyiCxRE+M8Zys3Qae3+48RGxoTA=

Jump to: