Topic: My account was hacked. Please help me. PROOFS inside. (Read 6134 times)

Still without my account. 

I sent it again. Let's see this time. 

only send PM every 3-4 weeks or 30days maybe.. dont flood admins inbox

Badbear said that he didn't want to be bothered with lost/hacked accounts and would not help in the recovery of them.

theymos could either be busy or missed your PM, do note that he is the admin here, he could be getting tons of PM everyday and might slip of yours, perhaps you could resend it once more

and Badbear seems to be away for now, found this on his signature

Ok... I will continue sending. I wanted link my old account with Bitrated :/

I sent also PM to Badbear but no answer

I guess, I was super lucky to get my account back.
Thanks again Admins!
Good luck to you.

Same here,

I provided him with plenty of proof (IP address, email address I signed up with, a signed message from my BTC wallet etc.) but he never replied to my PM's. I later sent him a few PM's asking for a name change (since I made this account just to post about the hack) but he hasn't replied to them as well. Now I am stuck with this sh*tty name

This, and remember to send him all the valid proofs through these PMs. Good luck.

I suggest you keep sending theymos an email every 5-10 days or so. I remember my account got hacked before and they haven't replied for a month! Actually they didn't reply at all, so I just gave up.

Well, if you do like that, you may not get your account. Send PM twice a week or two.


See http://blog.anonymousads.com/2014/03/new-feature-sign-in-with-your-bitcoin.html?m=1. It's outdated but if you know how to go to 'Address' tab, you can do the rest.

   -MZ

This sounds similar to what happened to me. But instead mine was a 999dice.exe supposedly dice bot I downloaded. My account was stolen last month. I've pm'ed both Theymos and Badbear too without a response. I'm gonna start doing it every hour until its resolved. I don't want to be a dick about it, but when someone messages and messages and don't even get a fuck off it does tend to piss ppl off. I know ppl have lives and other shit to do, but goddamn. Whats the point of having these procedures if nothing is going to be done about it. My accounts fucked anyways, but I don't want that theiving whore to possess it.


Edit: I'm also looking for someone to help me out for a sec. I don't know if I'm signing the message right or not. I need someone that will talk to me and let me try to send them one. I have both Coinbase and BTC-QT. Message me plz.

BadBear will also help you. Make sure you give all the proofs in one PM.

   -MZ

Try again to contact theymos, I'm sure he will help you (but he is busy).

3 months later.. 

Still nothing 

Whilst I know it must be frustrating not being able to recover your account it's not just the case of not having enough time (though both theymos and especially Badbear are ridiculously busy with other tasks and account recovery isn't a priority sadly). There are also many issues that can arise from quickly recovering accounts to anyone that asks for them so there needs to be some investigation gone into the situation. Only admins can recover accounts and that's not something you can just outsource. theymos likely has to consider you very trustworthy to give you access to the database so unless Badbear wants to step up and do it the best I can advise is to keep bumping this thread every so often and send another PM once a month or something (as frustrating as that is).

Hello @badbear and @theymos,

One month later...

Is it too hard to answer your PMs?
Is it too hard recover a hacked account?
Is it too hard setup an email confirmation to change the email associated to your bitcointalk account to avoid this?

You both should learn from @mprep. His attitude is entirely exemplary. He's doing a perfect moderation in Altcoins section and is able to answer a PM at the same time.

You both don't have time to answer PMs or recover hacked accounts? OUTSOURCE!

Almost one month later and still no news. 

I can assure that atleticofa account was hacked, lets see if staff can do something.

I think nobody bought my account. The password was changed only one time, 23 November, the day they hacked it. If someone had purchased my account, he would have changed the password..  Come on.. nobody buy an account for 0.65 and don't change the password... So the assumption that my account was sold is most likely wrong. https://bitcointalk.org/seclog.php

I also sent two PM to my account, offering him to provide him another Sr Member account in exchange for mine, and he didn't answer. The current owner of atleticofa is the hacker, no someone that bought the account.


PM id: 3181652

I personally know Atleticofa has been hacked, I hope you can recover your account soon.


-----BEGIN PGP MESSAGE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - https://gpgtools.org
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=mGkz
-----END PGP MESSAGE-----

Did you read my post? Your account was one of 8 that gave fake trust to another account of his that he was building trust on in order to perform an escrow scam. I then linked the post where he sold your account, which explains the PM that guy sent to redsn0w saying he purchased your account. The hacker no longer owns it.

How do you know he is the hacker?

By the way, here is everything I know about the guy that hacked/sold your account.

I contacted today with BadBear, I hope he can do something about.

It's normally only theymos who's handling account issues like this (although BadBear is able to do so too as an admin). With the recent cases of account buying and selling, I'm quite sure that they're absolutely swamped with account issues though...

Without any news 15 days later 

Well then that is another issue of this forum. Is it not?

Maybe. But that's not very fair.

We have around 3 administrators, 5 Global moderators, and 24 moderators.

Why there is a very good chance of not getting my account back if I can proof in some many ways, even in the "official" one proposed by theymos that I'm the owner?

Why with around 30 persons working on this forum only theymos can return stolen accounts? When it's obvious that he doesn't have time for that. Why he does not give that role to someone else? I'm sure there would be many people on this forum willing to collaborate.

By the way, it will be helpful to enable a confirmation email to change the email account associated to btt account. Only that will solve 95% of hacked accounts.

When Vod's account was hacked

When was the last time you seen a account restored to the rightful owner even after they provided enough proof?

maybe not enought , waitting admins to check

Why not?
He provided sufficient proof, did he not?

There is a very good chance you will not be getting your account back. Have everyone neg rep the old one and just make a new one for yourself.

Still no news from administrators.. 

 

He's lying. He didn't buy the account. Because you can see in the seclog https://bitcointalk.org/seclog.php that the last time atleticofa changed the password it was in 23 November, the day he stole my account. If he had bought the account, he would have changed the password.

I sent him 2 PMs 3 days ago. Asking how he got the account. I propose him to give him another Sr Member account if he can prove me that he bought mine. No answer yet.

I've received this PM :

If you can remove it when I recover my account (If I recover), I don't have any problem

I've left a negative feedback for security . Is it a problem for you ?

Up!

good look man! I hope theymos will recovery the best ninja account in whole bitcointalk!

But these messages were not published from my hacked account. I know is the same hacker because I donwloaded the wallet and it's exactly the same that I downloaded when he hacked me, different icon but same size: 606kb for the wallet qt

He always follow the same pattern: He clone a thread from a coin that is going to launch in some minutes and change the wallet to his trojan. First time was ODCCOIN, today was Darkgold, tomorrow who knows

My account (atleticofa) is not banned.

According to the below quote, the hacker published a "Trojan", which would be consider malware. It appears the post has been deleted.
The decision to ban your account is not mine, nor is the decision to unban the account (if applicable) however my experience in this forum would say that it is probably banned and probably not be unbanned (at least from information that is publicly available - I have never seen an account publicly get unbanned)

Luckily nobody published malware yet with atleticofa account

https://bitcointalksearch.org/user/atleticofa-161675

Although it appears that you were previously the owner of atleticofa, I am going to say there is a very good chance that it is now banned as per your above post it was posting malware which is a very good/quick way to get your account banned.

While I certainly agree that it is not fair that someone else can get your account banned when they hack your account, it is also virtually impossible to prove that it was not you spreading such malware.

I know. I'm trying to collect all possible proofs. I sent to theymos a PM just with the proof #1 because I didn't realize of the others. Should I send another with the rest of the proofs? Can some administrator help me? Thank you.





Proof #1: I published my address on the forum in January 12, I edited after the message. But is yet recorded in bitcointa.kl database here: https://bitcointa.lk/threads/ann-usde-unitary-status-dollar-ecoin-mandatory-update-before-block-91-000.234337/page-27#post-4239977

Proof #2: If you go to my trust summary. I left a comment for thekekk in January 22 with are reference. The reference point to the BTC transaction https://blockchain.info/es/tx/86dff12a2088f3cd8a69c2939bf88ba9c6541f2dd733c3a16e414eb552baf7d4 showing that my account 18mKzcMUUHHG79R7NL53fBV3c95ajvS7bk got 0.1BTC

Proof #3: The same happen with the comment I leave for bitcoinguyman, in February 16. The reference point to the transaction: https://blockchain.info/es/tx/562c25ea39d44a05b6b58beeeafd3e8c2acb979e91a6eed1337d7232fc3545ce in which the address 18mKzcMUUHHG79R7NL53fBV3c95ajvS7bk received 0.09BTC as the comment in the trust summary says.

This is the unique way for recover your account : https://bitcointalksearch.org/topic/recovering-hacked-accounts-or-accounts-with-lost-passwords-497545     Good luck .

I know.

I didn't do yet because I can prove I'm the original owner of that account in some many ways and I still have hopes to recover it. But if finally I don't recover I wil tell everyone I know to leave negative feedback.

If your account was hacked , I think some member in the defaultTrust list should left  a negative feedback (for security) :

https://bitcointalk.org/index.php?action=trust;u=161675

Still no answer form theymos.  

I talked with mprep, he told that he will say to administrators. But I suppose only theymos can really do something.


Since 2 days ago someone is posting with my account. Maybe the hacker sell to someone because the messages look normal.  
But in the security log appears that nobody changed the pass again, so probably is the hacker.


https://bitcointalksearch.org/user/atleticofa-161675



And by the way, the same hacker published again the same trojan on this thread some minutes ago:

https://bitcointalksearch.org/topic/--885719

I have 0 bitcoins on my computer so I'm not worried for that, my bitcoins are safe in my Trezor device.

Probably mprep has email notifications for new threads, because he is really fast sometimes.

I don't visit the altcoin section very often so I really cannot speak to how quickly mprep is able to take action on the reports there, although he is the only moderator of the altcoin section and it tends to be very busy (and have a lot of drama).

If this is not your first malware wallet you have downloaded then I might suggest that you be more careful about what you download. Sending out malware can be a very effective way to cheat people out of a lot of money as it can usually easily steal any bitcoin (or any other alt coins) you have stored on your computer, hackers/attackers will often use malware as a result of this.

IDK how much bitcoin you have stored on your computer, but I am sure that you worked hard for however much you have there, and I don't think you would want it to be unfairly stolen from you

In the announcements subforum threads with malware get banned in less than 10 minutes always. At least that's my experience, it's not the first wallet with malware that I downloaded.

Well the topic is deleted now so that is good, however 5 minutes is very quick for a mod to respond to a report, in my experience it usually takes much longer for action to be taken on my reports in general, and in my experience malware reports take the longest for action to be taken (I assume that fewer moderators are able to handle these kinds of reports).

Also you should make the fact that the above dropbox link contains malware more prominent.

This was the thread: https://bitcointalksearch.org/topic/--869842


It was deleted in less than 5 minutes by a mod, it was only one message when I opened. I don't know if there were more people affected, probably no.

What thread did you find the trojan wallet in? Did you report the post for having a link to malware so others do not have the same fate?

The reason for my skepticism is because someone recently made a very similar claim in this thread and it turns out that his account was banned.

My account wasn't banned. My account was stolen.

I downloaded a wallet with a trojan in the ANN section. It was a cloned thread of Odccoin, here is the wallet with the trojan that I downloaded: https://www.dropbox.com/s/kv3rjsgj090ir5g/ODCcoin-wallet-qt.rar?dl=0

Don't open the .exe except you are using a virtual machine.

In the next morning I couldn't access to my account, also I didn't receive new emails from the watched subforums... And then I checked the trust summary of my account and it was a message that says:


So it was stolen for sure. I have proofs that I'm the owner, I own an address that a published on the forum with atleticofa account.

Looking at your last 40 posts, I see that a lot of them are shit posts. Also the "hacker" appears to have not logged in nor posted from your account.

Did your account happened to get banned?

Hello,

My account atleticofa was hacked 5 days ago. The password was stolen and the email was changed.

https://bitcointalksearch.org/user/atleticofa-161675

https://bitcointalk.org/seclog.php

I'm monitoring it and there are no new messages since then for now. The account was stolen as a result of an infected wallet in a false ninja launch. Be careful since now.

Only McAfee was able to detect the trojan in virustotal.com  And only Malwarebytes anti rootkit was able to delete it. The trojan created recurrent .exe files in all the system, and some logs in dclogs folder in roaming.

I contacted theymos following this guide: https://bitcointalksearch.org/topic/recovering-hacked-accounts-or-accounts-with-lost-passwords-497545
But there is no answer yet. How much should I wait? I hope to recover my account.  

___________________________________

EDIT:


 I sent to theymos a PM just with the proof #1 because I didn't realize of the others. Should I send another with the rest of the proofs? Can some administrator help me? Thank you.





Proof #1: I published my address on the forum in January 12, I edited after the message. But is yet recorded in bitcointa.kl database here: https://bitcointa.lk/threads/ann-usde-unitary-status-dollar-ecoin-mandatory-update-before-block-91-000.234337/page-27#post-4239977

Proof #2: If you go to my trust summary. I left a comment for thekekk in January 22 with are reference. The reference point to the BTC transaction https://blockchain.info/es/tx/86dff12a2088f3cd8a69c2939bf88ba9c6541f2dd733c3a16e414eb552baf7d4 showing that my account 18mKzcMUUHHG79R7NL53fBV3c95ajvS7bk got 0.1BTC

Proof #3: The same happen with the comment I leave for bitcoinguyman, in February 16. The reference point to the transaction: https://blockchain.info/es/tx/562c25ea39d44a05b6b58beeeafd3e8c2acb979e91a6eed1337d7232fc3545ce in which the address 18mKzcMUUHHG79R7NL53fBV3c95ajvS7bk received 0.09BTC as the comment in the trust summary says.



I'm trying to collect more proofs contacting people which I made some trades in the forum before. But I think with that three is enought to proof I'm the owner :/