Topic: My Hero Member Account Hacked. please help (Read 1191 times)

Do you know how long the queue is ?
No replies yet to my emails.

It doesn't matter if you do have the option of proving your account by sign messages from whatever address you've posted in the past, I'm sure the recovery team will take that into account.

If you have emailed them then I believe your case is in the queue and you will have to wait patiently. They can get it done in a week, a month, or maybe a year if all the evidence you present isn't convincing enough ^{[just a guess]} but hopefully not. But be patient, your case will be processed soon after the investigation.

No news, no emails to my Inbox yet ...

---

jkoil did not use BTC address on this forum. Only official address of jkoil is the one, which was set to him in NEM ICO. And from that address/wallet was sent a signed message to recoveries_*@bitcointalk.org 10 days ago.

Seems to be a difficult case ...

yea ...
"The other one's pw is currently "out of my memory""

Now found the pw for it. And it does not work. When sending a pw recovery request to the operator, there is shown this info:
"Send instructions to my contact email address: b******@gmail.com
 Send release code for a new password to my cell phone: +880*******020"

And certainly, those contact informations are not mine


Edit:
BD-phone matches with the "cricket interests" ...

Sorry, my mistake. Looks like I was checking the wrong profile. It appears your password was changed (password reset via email) for the first time on June 13th, 2022, at 2:41:17.
You can check it yourself at: https://bpip.org/Profile?id=206476

As far as I know, a hacker couldn't have done it without access to your email account.

Currently no trace of such an email. If that happened 2 - 5 years ago, I likely deleted it, coz in those days "everything was fine".

In the case you have changed the email address associated with your bitcointalk account, you should see an email sent to your old email address regarding the email address change.

No idea. I guess BTT admins know, which email was used. My bad memory in this case

Now checking the emails of my 'current' account:
 there are emails from
  - Exchanges
  - NEM Forum, NXT Forum (both already old and shutdown),
  - and finally some from Bitcoin Forum, but old too, eg. this from  2014

    11/20/2014 at 4:07 AM
  
    "You have just been sent a personal message by kodtycoon on Bitcoin Forum.
IMPORTANT: Remember, this is just a notification. Please do not reply to this email.
The message they sent you was:
ok thank you. no that shouldnt do any harm.. hope to see you on the podium!
Reply to this Personal Message here: https://bitcointalk.org/index.php?action=pm;sa=send;f=inbox;pmsg=3119542;quote;u=174773

------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder"



Have to admit that there is a chance that I have changed the email account in BTT account some years ago (after there was some warnings or something).
And that email account was not so active one for me in other issues. If that is the case I have relied on my BTT account : I will always see the account name in my BTT account and then check that email account every now and then.

I found from my files 2 je*.com email addresses, which I suspect to be the candidate for the "latest email in BTT";
other one has been for (mainly) Youtube and that one's pw does not work anymore. Hacked?
The other one's pw is currently "out of my memory"  


My latest posting by "jkoil" was on May 12, 2022.
Is it known that the hack was made on May 4th?

---

I still skip password generators ...
until it is known what has happened here.
I may be guilty for "overlooking" (looking down) to make strong and safe pw to some "not-money-related" accounts. I have accounts in quite many sites ... yea, maybe I could use some manager, but anyway I would leave the most valuable pws out of pw manager. Papers etc. with possible "encrypting" are best stores for those ... I know think.

---

If I remember my postings correctly, there is no need to imagine

Edit: clarif.




[moderator's note: consecutive posts merged]

The Curious Case of Jkoil's Account

So is your gmail account also compromised or not? How was the hacker able to reset the password through the e-mail on May 4th?

Damned... that kind of NEM-picture I should have made in 2014 to get a stake of NEM without paying for it.

This escalated quickly !



All 2, 3 or how many you are can follow the steps here https://bitcointalksearch.org/topic/recovering-hackedlost-accounts-5089777 and we'll figure it out next week.

Then follow the right procedure to recover the account if you are the original owner. I am sure the account recovery team will have ways to prove if you are the original owner.
One of them is by writing to them through an email address that was used for registering the account.

Apparently he had access to the email account and just changed his password by himself.

If you say that the account is actually yours follow the steps in this thread: https://bitcointalksearch.org/topic/recovering-hackedlost-accounts-5089777

It appears nothing is that simple around here...

Well, you are "back" in a wrong profile.
I am the original jkoil.

How have you been "helped"??



jkoil (original)

Are you being serious right now ? how was the hacker able to change the recovery number and email of you email account? what email provider do you use, I am asking because I know  that if you are using Gmail, then, a hacker can not change you recovery number without having access to your phone, I have changed the recovery number of one of my Gmail account recently and I was sent a verification code to the old number which I entered in a box provided before my recovery number got shifted to the new one I provided.

Sorry to say this but I kind of find it hard to believe your account hack story, are you sure you didn't try selling your account and buyer asked you to send account details first and you foolishly did, the buyer then hijacked your account and refused to pay, and now, you want the community to believe your account was hacked....this is me thinking 

He might be lucky that the hacker didn't change his account email ^{[or the new owner didn't change it]} so he might still be able to reset his password via e-mail. This user-generated recovery does not involve the account recovery team as the account owner only resets the password via a link sent to the e-mail to reset the password. But it will be very difficult if the hacker has changed the account e-mail because the account recovery must involve the recovery team, and the only way to get the account back is to prove it by signing bitcoin message.

Imagine if a user never used a bitcoin address anywhere on this forum or he forgot about the wallet he was using. It will definitely make it even more difficult to get his account back ^{[perhaps not even anymore]} because the recovery team won't trust him as easily as one might think.

Glad to hear and read that you got your Account back and also your email Account !
I removed my support already from the Flag against you.
You have to write to other also to get the rest and fully removed and for the negative feedback you have to write to logfiles !
For the flag support this are the Users that should be removing the support on it and then it gets inactive.
nutildah, Darker45, lovesmayfamilis, logfiles, hZti

You should be take care more of your Email Account and personal things in the future.
Welcome back jkoil

Edit :
Changed my mind after readed this one here : https://bitcointalksearch.org/topic/m.60529953

When I wrote my text I had not yet read the other thread (click here) completely. Is not so easy to always keep the whole forum live in view
Here it was about the general access and what actually happened with the account is certainly clarified in the mentioned thread.

Something dubious it is (as you say) in any case.

Well but the point is that it is for sure not the original owner, that writes here. The Account was sold including the email account login data. The buyer or hacker now simply reseted the password via the email that he also has access to and now claims that he is again the original owner of jkoil which we have 0 proof of so far. So I wouldn't be shure on your spot if you really welcome the right person back   That his writing style also changed a lot doesn't look good either.

Yes I had already seen it
And Bitcoin_Arena has also cleared up the issue.

Anyway my statement is not wrong.
The recovery team is doing a great job (even if they were not involved here)  

@all - Now please do not tag again because my Telegram bot is already going crazy today.

I think you are mistaken. Jkoil did not deal with the bitcointalk account recovery team at all. He only dealt supposedly with the gmail account recovery team and therefore now claims to have take back control of his bitcointalk account. See here https://bitcointalk.org/seclog.php and search for user jkoil. If he would have dealt with the account recovery team it would say there:

27 April 2022, 16:00:54 - user - manual recovery, ownership change queued (completed)
04 May 2022, 16:25:01 - user - manual recovery, previously-queued ownership change completed
04 May 2022, 16:50:55 - user - password reset via email
04 May 2022, 16:51:01 - user - woke up

All user jkoil did was reset his password via email. Since account and email was sold together this does proof nothing.





edit: See post of Rizzrack

About that...



He allegedly managed to get the gmail account back and then he changed the password for this bitcointalk account.
The password was changed today indeed.
But we had nothing to do with any of that except my post from yesterday.

It has nothing to do with the account's recovery team or cryptios though. jkoil claims the person hacked his account and email address and didn't change the email address. So he recovered the email address with the help of google support and then got back his account. So if I understand, no email was written to the cryptios team.

I am glad to see that Op has successfully recover his hack account Soo quicky. Keep safe your account and email now . always use strong password .Which hackers can never guess . Hope everyone will remove there negative feedback  Against your account. Good luck

I'm glad to see a positive example of the back hacked account. it was not so quick and easy once upon a time.
I withdraw my support to flag against you.

Yeah, seriously.  I remember a time when account recovery was next to impossible if you got hacked, but things seem to have gotten easier in the past few years.

Glad you got your account back, jkoil.  I just removed my neg and hopefully others will do likewise.

Glad to hear.


I'm always happy when the recovery team works so well
The flag and also negative trusts will certainly still be removed in my opinion and then your account will be as if nothing had happened.

Update

I was finally able to recover my email. They gave me an option after I reported to Google Support. They wanted to know about the exact month and year. in which I opened this email. They allowed me to enter new password. because I able to entered the correct information there.

One more good news is that.  The hacker did not change the original mail from my account. He set a strict security on my email and he probably sold the account with either the original email.  To get a higher price. I don't know exactly if something like this happened. I was able to recover my Bitcointalk account with email. But my account is now in a lot of danger where two red Trust and one red flags have been given by DT. I am requesting to remove the red trust & flag from my account.

Note- Thanks to everyone here who showed me different ways to help. Although I got my Bitcointalk  account back with my email. I don't know if the red trust in my account will be lifted now. However, it does not motivate me. But it's too big for me to get back my personal documents, including my email.

In this case, what you write so that the forum can help you is simply impossible. As much as we all want to help, we just can't. I hope the hacker doesn't use your data. And in the end, if something happens to your data, try to keep this topic. At least a little, she will be able to tell you that your data was used by another person, but you have proof that it was not you.

To be honest, we very often leave our data on the Internet without any concern at all, although this can sometimes be dangerous for us. But in most cases, our data is lost on the network.

Just think positively. May you be all right.

According to my knowledge, Google doesn't provide live support for account recovery, and the only recovery option they provide is described here: https://support.google.com/accounts/answer/7682439?hl=en

I hope you have a successful recovery, but if you are unable to prove ownership after following the recovery instructions then, I'm afraid, your account is lost.

If you had a signed message or some sort of proof we could lock that bitcointalk account. At a first glance could not see any posted address. Might want to check this thread out: https://bitcointalksearch.org/topic/recovering-hackedlost-accounts-5089777

Regarding the email... there still might be a few ways you can recover it. See here: https://sites.google.com/view/restorecompromisedemailid

Getting your account back:
A signed wallet address from a previously stated address on the forum might help you prove you are indeed actually owner of the said account! Also, a password recovery could help too but, your no longer in charge of your mail address. You might excuse the forum for following protocols and not just give in to your cry for help as changing or password and emails are regular activities for security reasons by users on the forum.
Needless to say, personally, I feel it's important that you use an active but not an extremely official email on your accounts of the forum.

About a possible mail recovery, if you had an alternative linked mail address or phone number attached for which the hacker is yet to deactivate, you might have a chance.

Give more attention to security in case of next time and save yourself a deal of trouble.

Note: Avoid spamming by posting consecutive responses, evident as at above. You might want to fuse them and you know better not to respond to everything except necessary.

I am not worried about personal message of this forum . i am worried about my some personal document like photo, nid , pasport etc. which document i have stored on google drive and dropbox.

Since i use Google email. so i send a report to google yesterday. i am now waiting for the result.
According to BPIP report ,the hacker not yet changed the orginal email from the bitcointalk account. maybe hacker sold my account with orginal mail for get  high price.

It probably wasn't an or. OP's account must have been hacked or compromised first before it was sold. Sold accounts on the forum are probably either farmed or hacked, but most likely more of the latter when it involves high ranks.

Anyway, as others have pointed out, it seems OP doesn't care about his/her forum account as much as his/her email. He/she's got personal documents in his/her email. Unfortunately, this forum does not offer email recovery services.

OP, please contact the support of email provider and present your case in detail.

I would say that the OP has a bigger hope to return access to the email associated with his forum account. but if I understood correctly, the hacker changed the email so it is very possible that even a hacker does not have access to the OP's email address.
he himself says that it is not a problem if he does not get access to the forum with that acc, and since a long time has passed, I believe that the personal documents he mentions are not that important to him either (if they were important, he would have asked for them earlier).
This case can be closed.

The account was recently part of those accounts that we being sold, and it got tagged b y DT members. If OP is serious and contacts the recovery team. I believe they have more than enough evidence to know if he's the real owner.

Actually everybody could claim to be the real owner of an account that is not used for some months.
Luckily is not so easy to get access to somebodyelse's account.

There are many password generators available today with varying degrees of difficulty and desired lengths. I find it very good at storing and protecting passwords.
With hundreds of different accounts, it's really hard when you try to think of how to set it up and where to store it. I have close to 200 passwords to keep and I won't have enough time to write them all down in a notebook and turn them over whenever I need to.

You can refer to Enpassor, Keepass Password Manager, it can be stored directly on your computer locally, but it is safer if you buy a separate SSD and store them. Connect only when needed.

damn im sorry for what you happened to you but hacked can be recovered like all above me said.

this account @dansus021 is actually been hacked I follow the procedure and finally landed to me safely and I know that it can be recovered after 3 years or so.

after your emailed they need some kind of proof that you are really the owner in my case they need Bitcoin sign message and only wait for other days and boom finally it back.

and guys little bit advice don't use same password in any of your account I think I got hacked because I'm using same password in anything 

There is [BEWARE] Sim Port Attack and 2 factor authentication for email but it depends on how you set up password for your email and whether as well as how you set up 2FA for your email. Recovery email is a one of last resort to recover your email.

Each email provider has different security mechanism as well as recovery method for users from Back up codes, 2FA or recovery (alternate) email. You must to read their guides or their warning/ reminder that regularly pops-up if you have yet set up enough security for your email.

If I remember correctly, when we set up email account security, in addition to asking for a phone number, google also asks us to set up a recovery email. If your primary email is hacked or your password is changed unexpectedly, it will send you a notification to the recovery email. please double check that you have them set up, if so check your alternate email inbox.

I don't remember exactly reading somewhere if our email was hacked and we completely lost access. The last way we can do it is to send report to support and information including primary email, recovery email, phone number and most importantly, the date you created the email account.

It looks like you are looking for your email account to be recovered and not your bitcointalk account. the forum cannot help you recover your email but if you are looking for your bitcointalk account to be recovered, follow the instruction on the thread OcTradism shared.

I’m sorry to hear that. But I assume that you have not taken your time in adding additional layers of security like the 2FA (two-factor authentication), Google authenticator, etc. Also I think your password is “easy” which leads him to successfully change your recovery number and email, but correct me if I’m wrong.

But usually if you attempt to change your recovery number, it should have sent you an SMS confirmation on your phone regarding the attempt. If you have approved that without having second thoughts or so, well that’s how the hacker ended up taking full control of your account. 

It is your responsibility to take care of your email’s security no matter what. Additional layers of security will make the hacker find difficulty in compromising your email account.

I learned my hard lesson back then when my Telegram got compromised because of not setting up additional security layers like 2FA, password, etc., but good thing I have fully recovered and taking back the control of my Telegram account from the hacker. 

All of our social media accounts should have added security layers, and it’s not good to store your important documents in your email or in the cloud. Better invest yourself an external SSD drive to store it offline next time.

There is no way to recover your email if you use gmail because everything is already in hackers control.
https://support.google.com/accounts/thread/139405534/how-do-i-recover-my-hacked-account-if-the-hacker-changed-the-phone-number-for-the-verification-code?hl=en
and this is a lesson not to save any important data in email.

On your e-mail account, did you only use a password without 2fa or google authenticator? Your password must not have been very complicated either, right?

Did you link the second e-mail to your main e-mail in order to recover?

It's an unfortunate story, but you had to be on the safe side to prevent losing access to important information on email drive. Also, a reminder that it is better not to store personal information in this way.

Since the old posts of account jkoil are written in a significant better english than the starting post of this topic I somehow doubt that it the original owner that posts here. The account of jkoil was inactive for some month now and there was no complaining. Then the account was sold a few days ago and the selling was exposed. It is a very interesting coincidence that after the selling was exposed and as a result the account of jkoil was tagged, the original owner appears and writes in bad english that he wants his account back. But I can not judge how is the OP, if he is the owner, seller or buyer. As it was written before you can contact the forum account recovery team. They have all the tools and data to recover and I will trust their judgement. One thing that you will have to consider is, that you first need to regain access to your email account.

I’m not sure if I’ve misinterpreted your post, If seems that you’re not really concerned with your Hero Bitcointalk account, but rather with your email account (and derivates it could facilitate access to). If that were so, the OPs title would be somewhat misleading, as the Hero account is secondary to the narrative.

Regarding email recovery, there’s not much that can be said other than what your email provider will have described in the recovery procedures. Failing that, there doesn’t seem to be that much else to do to regain control, although it will depend on factors that have not been specified (i.e. specific email provider, possible linked email accounts and or phones for recovery purposes, and so forth).

As to the Hero account, the recovery procedure has been linked in the posts above, were you to eventually become interested in regaining control.

As I understand it, the OP is more focused on recovering his email. This is right? Or are you worried about private messages in your PM on the forum?

To restore email, if a hacker hacked it, then you probably registered with a phone number, so try to restore using your phone, or backup mail if you added it to your account.

Otherwise, there is no longer any possibility of email recovery.



Looking back, this user knows how to create passwords....



However, it didn't work for him, or he's not a real user.

It can be a point but if real owners can prove ownership, they can get their accounts back. It is another risk for account buyers. Creating and building up an own account is the best and the safest.

[Guide] How to create a strong/ secure password.

You should sign and stake your Bitcoin address as one of ownership proofs.
Stake your Bitcoin address here

Account involved on selling is hard to recover because there’s a chance that the old owner sell it intentionally and he wants to claim back the ownership after the sales by applying the benefit of the doubt that his account got hacked and sold by someone. Either way the account reputation is already a messed even if you recover or not.

Just like what @Maus point out, You should setup a strong password so that your account will not be easily hacked. Recovering a clean account is already hard process so what’s more for an account involved in account selling.

You must read and follow steps to recover your account
Forum account: security, privacy, and recovery

• Account recoveries are moving again
• Recovering hacked/lost accounts
• FYI: "ownership change queued"
• Cryptios.

It's terrible practice. You should not do it at beginning. Personal documents should not be stored in email or Dropbox or Google Drive. You should store it on your device and best, offline, air-gapped.

You must read user manual and recovery guide of that email service.

Nobody can. If someone says they can help you to recover your email access, they will get that email from you (likely another hacker).

Is your account actually compromised, or was it sold and transferred to a new owner[1] as a result? The change of email and password reset also reflected on bpip[2]

There may be a way to recover[3] your bitcointalk account, however given the allegations of account sale, I doubt the admin would help you. Plus, the email you have used in your bitcointalk account has nothing to do with the forum as it is your responsibility to improve its security from the get-go.

[1] https://bitcointalksearch.org/topic/investigation-fighting-the-account-mafia-5404539
[2] https://bpip.org/Profile?id=206476
[3] https://bitcointalksearch.org/topic/recovering-hackedlost-accounts-5089777

I am the owner of the  account of jkoil . My account has been hacked by hackers. hacker hacked my email and reset the password. I have been inactive in this forum for a long time. that's why it is doesn’t matter If I don't get back my Bitcointalk account. But i have many personal document on my email  drive & dropbox. I am very scared for that document. My email's recovery system  is not working for me . hackers changed recovery Number & email. Is there any way I can get my email back? Please help me.