Someone hacked my account (Restored) - page 5.

ndnh

legendary

Activity: 1302

Merit: 1005

New Decentralized Nuclear Hobbit

Quote from: thekool1salt on March 21, 2015, 01:25:20 AM

Now its like 2 weeks but still no reply? Can any one contact theymos on my behalf. I really need my account back.

Address used here:
https://bitcointalksearch.org/topic/loans-without-interest-micro-loans-744287
https://bitcointalksearch.org/topic/closed-cryptomineio-jan-campaign-875272
https://bitcointalksearch.org/topic/m.9658487

https://bitcointalk.org/index.php?topic=875272.msg9671229;topicseen#msg9671229
(I think payment is also received)

Confirmed that this address belongs to thekool1s

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
3.9.2015, New email: [email protected]
-----BEGIN SIGNATURE-----
1A9H6pMR1V1ZagYvDKDCpSBueRaNvP6BHv
G5A/eXiCejQ4GK8hGkFiEj0zyDDKmKDW+rQKdUK6h1jBGCIE8r7OtQL04PoLVnpTDexEYp+5iPrJM0XYSKEEvus=
-----END BITCOIN SIGNED MESSAGE-----

From:

Quote from: thekool1salt on March 09, 2015, 12:56:59 AM

I just sent a pm to theymos, I have signed the address which i was using for receiving bitmixer payments. I have used this address for few transactions here before "marcotheminer" can confirm this address too.

Some payments i received: https://blockchain.info/tx/1fbaaf065fcb5d935fe4a757668f1e6c2e8285068b3b14abc716e234910fb583

https://bitcointalksearch.org/topic/155-return-on-investment-pool-05-844776

I signed the address and it gave me this:

G5A/eXiCejQ4GK8hGkFiEj0zyDDKmKDW+rQKdUK6h1jBGCIE8r7OtQL04PoLVnpTDexEYp+5iPrJM0XYSKEEvus=

I dont understand properly how signing works so here is the message too Cheesy

3.9.2015, New email: [email protected]

Confirmed that thekool1salt controls the address.

thekool1salt

member

Activity: 85

Merit: 10

Now its like 2 weeks but still no reply? Can any one contact theymos on my behalf. I really need my account back.

thekool1salt

member

Activity: 85

Merit: 10

I have not sent more messages just waiting for a reply, I will wait then.

Chijio

full member

Activity: 126

Merit: 100

Quote from: thekool1salt on March 16, 2015, 01:48:03 AM

No reply so far Sad

Can anyone bring Theymos attention to this?

just wait for update from theymos, maybe he is looking for a few things about your account recovery, just dont send multiple of PMs to him or he will ignore your messages and you will not be able to retrieve your account back again

Muhammed Zakir

hero member

Activity: 560

Merit: 509

I prefer Zakir over Muhammed when mentioning me!

Quote from: thekool1salt on March 16, 2015, 01:48:03 AM

No reply so far Sad

Can anyone bring Theymos attention to this?

theymos reads all. He give low priority to these things. Wait sometime and send PM once in 3-4 weeks. Hopefully, we can see better feature to solve this in new forum software.

thekool1salt

member

Activity: 85

Merit: 10

No reply so far Sad

Can anyone bring Theymos attention to this?

thekool1salt

member

Activity: 85

Merit: 10

I sent 1 pm before when i did not know about the template then i sent another pm with proper template which was given, Then a pm with proof that it is my account, I think he got angry Cheesy

Berau

sr. member

Activity: 448

Merit: 250

He said to only send him 1 PM.

So if you're spamming his PM inbox with loads of the same stuff he's probably not happy right now Wink

Neonecrox13

member

Activity: 112

Merit: 10

SAD - no longer active

Quote from: thekool1salt on March 09, 2015, 12:39:17 PM

No reply from theymos so far, He was active today i have seen his activity what should i do?

I've been doing this for weeks. Keep at it.

thekool1salt

member

Activity: 85

Merit: 10

No reply from theymos so far, He was active today i have seen his activity what should i do?

thekool1salt

member

Activity: 85

Merit: 10

yes i have already posted a proof too that it is hacked, I have signed the btc address which i used long ago in my thread. Read my responses you will know. The account is hacked. I have not posted for like 2-3 weeks if i remember correctly but the latest post is on bitmixer thread. Just read my responses i have proved it is hacked.

Berau

sr. member

Activity: 448

Merit: 250

Quote from: thekool1salt on March 09, 2015, 12:56:59 AM

I just sent a pm to theymos, I have signed the address which i was using for receiving bitmixer payments. I have used this address for few transactions here before "marcotheminer" can confirm this address too.

Some payments i received: https://blockchain.info/tx/1fbaaf065fcb5d935fe4a757668f1e6c2e8285068b3b14abc716e234910fb583

https://bitcointalksearch.org/topic/155-return-on-investment-pool-05-844776

I signed the address and it gave me this:

G5A/eXiCejQ4GK8hGkFiEj0zyDDKmKDW+rQKdUK6h1jBGCIE8r7OtQL04PoLVnpTDexEYp+5iPrJM0XYSKEEvus=

I dont understand properly how signing works so here is the message too Cheesy

3.9.2015, New email: [email protected]

Idk very much about signing messages but I think you need to state today's date, what happened and stuff. I also think it would be better if you can openly state your account name.

Something like "Today is March 9, 2015. My account x was hacked."(Fill in x with your hacked account name.)

I might be wrong since I don't really sign messages and stuff, but I read Quickseller's posts and I believe this way of doing this is correct.

thekool1salt

member

Activity: 85

Merit: 10

Found a proof its hacked Angry

https://bitcointalk.org/index.php?topic=425135.1840, Page 93, Second last post.

I never posted on btcmixer. And it was on 3 March, Its 100% hacked.

thekool1salt

member

Activity: 85

Merit: 10

I just sent a pm to theymos, I have signed the address which i was using for receiving bitmixer payments. I have used this address for few transactions here before "marcotheminer" can confirm this address too.

Some payments i received: https://blockchain.info/tx/1fbaaf065fcb5d935fe4a757668f1e6c2e8285068b3b14abc716e234910fb583

https://bitcointalksearch.org/topic/155-return-on-investment-pool-05-844776

I signed the address and it gave me this:

G5A/eXiCejQ4GK8hGkFiEj0zyDDKmKDW+rQKdUK6h1jBGCIE8r7OtQL04PoLVnpTDexEYp+5iPrJM0XYSKEEvus=

I dont understand properly how signing works so here is the message too Cheesy

3.9.2015, New email: [email protected]

Quickseller

copper member

Activity: 2996

Merit: 2374

Quote from: grue on March 09, 2015, 12:38:03 AM

Quote from: Quickseller on March 08, 2015, 03:00:57 PM

[...]
A search of the security log shows that the password was reset via email twice today (this is likely the result of my test above and one other person's similar test. Other then that the most recent password change was on February 23, which is over a week after you last posted which would imply that your password was not hacked.
[...]

I just did a quick test, if you send a password reset email and don't click on the link, it doesn't show up on seclog. so most likely the two resets were by the hacker.

Well the seclog shows the password was reset via email at March 08, 2015, 06:50:34 PM and and March 08, 2015, 07:00:53 PM. The OP was made on March 08, 2015, 06:36:48 PM, or a good ~25 minutes prior to the first password reset via email.

There is a lot of potential speculation that can be done regarding who or what caused these password resets via email, however I think it is safe to say that whoever changed the password on February 23, 2015, 06:45:54 PM (the most recent prior password change) probably consented to such a password change (either directly or through an [escrow] agent), as almost two weeks had passed since the password had changed and several (three per the post history) posts were made since the password was changed.

Prior to the password being changed on the above date/time was a post in late January, and prior to that was numerous sporadic posts that were (IMO) being made in order to capture activity points every two weeks.

grue

legendary

Activity: 2058

Merit: 1452

Quote from: Quickseller on March 08, 2015, 03:00:57 PM

[...]
A search of the security log shows that the password was reset via email twice today (this is likely the result of my test above and one other person's similar test. Other then that the most recent password change was on February 23, which is over a week after you last posted which would imply that your password was not hacked.
[...]

I just did a quick test, if you send a password reset email and don't click on the link, it doesn't show up on seclog. so most likely the two resets were by the hacker.

thekool1salt

member

Activity: 85

Merit: 10

This address was on profile link : 1A9H6pMR1V1ZagYvDKDCpSBueRaNvP6BHv and my second address is: 1Ly7eNJd1FPvjtFzgmZYBKoAuDqWov6ZhP I have used only these two address for bitcointalk.

I can sign these. The problem is i am 90% sure that the email i used was [email protected] and i have not received the reset email. I also received couple of bitmixer payment on the first address too, small ones.

I will contact theymos, I think its the only solution because i have tried all things Cheesy

freedomno1

legendary

Activity: 1806

Merit: 1090

Learning the troll avoidance button :)

I guess in this case when in doubt CTRL C CTRL P
Make sure to not include the blank space when highlighting then try signing in.
(Prevents spelling error)

hilariousandco

global moderator

Activity: 3990

Merit: 2717

Join the world-leading crypto sportsbook NOW!

Seems like you might just be making an error given quick's analysis. Make sure you're typing in the correct username for a start but have you checked your browser to see if the password is saved? Have a look in your browsers settings.

Quote from: ZuZ on March 08, 2015, 01:50:50 PM

Usernames might be case sensitive...

They're not.

Quickseller

copper member

Activity: 2996

Merit: 2374

Quote from: thekool1salt on March 08, 2015, 01:36:48 PM

Guys i cannot login into my account someone hacked my account i think. When i reset password via email it says username doesnot exist. What should i do? It was a senior account. Is there any bug or my account is hacked. And my Answer has been changed too Sad

A search for the username "Thekool1s' results in this result. An attempt to login with Thekool1s as the username and ~5 random letters as the password, results in an error message saying that I entered the incorrect password (this is expected).

An attempt to reset the password using the username results in the following message "A mail has been sent to your email address. Click the link in that mail to set a new password." so I would assume that whatever email you had set it to should have received a password reset email.

A search of the security log shows that the password was reset via email twice today (this is likely the result of my test above and one other person's similar test. Other then that the most recent password change was on February 23, which is over a week after you last posted which would imply that your password was not hacked.

If you have both forgotten your email and password (or no longer have access to the email associated with the account, then you can have theymos reset the email address to one of your choice by following the instructions on this thread

Topic: Someone hacked my account (Restored) - page 5. (Read 5741 times)