Topic: Someone Loan using My Account - page 5. (Read 2638 times)

I have sent a PM to Woodie yesterday. He was active after the PM was sent and made a post in the forum too. Maybe he is trying to find out that what actually happened before clarifying the situation. Otherwise, he hasn't checked the message.

Moreover, there is no password change history for him in BPIP. Maybe the hacker still have the access to mdgabrielzim account. I think sending him a PM isn't going to help in this case.

 


Strangely, you make a statement like that when you're asking about the implications for the OP. You should also read the OP's assurance that he promises to repay the debt taken by the hacker in his name. I think that many would not go to such an extent, begging to come up with another solution to the issue. Although, for the reputation of the OP, returning the debt would be the right move.

If Woodie's account was hacked too, he might have something to say. I've read Peanutswar's posts as well, and it doesn't seem he shared any info about how the hacker got control of his account. He only said he might get a DOM attack. Someone else posted that it's possible that the hacked stole their session cockies or something like that. It's only possible if they have visited some links given by the hacker. 30 June is not too long ago. I haven't checked their profile yet. But, it would be great if Peanutswar write them a PM and they write if they have something to share.


Long story short, Someone from the Peanutswar account takes a $1000 loan from sashan's lending service. Later, the funds were transferred to an address that was used by mdgabrielzim a month ago (it seems this account was hacked too). The same address that was used to loan by the Peanutswar account sent some funds to another address that was used by Woodie to request a loan. Later, Woddie said he did not request a loan, and he didn't recognize the address. That means his account was hacked too.

The ultimate victim is Peanutswar at this moment.
But, it's a mystery how the hacker get access to these accounts?

But still, It would be great if any of them could come here and share more details about the incident. Taking control of someone else's account is a serious issue, and it would be good to learn more about the circumstances. Were their computers infected? Did they unknowingly click on suspicious links?

After going through the entire thread, I still don't understand what really happened.

Before you make the suggestion, maybe you can also trying to following the topic trend + try to overview the account or case of the account you're mention.
- mdgabrielzim last active was (30 June).
- Woodie trying to make a requested loan with that address for 900$ and getting rejected. However, Woodie it's self questioned the loan 900$ by saying to the thread that's he don't make any loan requests. It's a clear indicator that, someone got access to his account after that incident he told "shasan" to only give him a loan with signed message. I also checking his "BPIP" on the same day he send that message, he changed the password (got move from him, since that unusual activity from his account).

Don't you guys expect mdgabrielzim and Woodie to come to this thread and explain what happened? Did anyone send a DM to any of them? TryNinja's bot has not been working for the last 24 hours, so mentioning their name won't work for now. Since this has happened with Peanutswar, Can you please DM them to come into this thread and ask if they have anything to say?

Edit: I also ask others to try to understand before writing anything, but sometimes I do the same thing. Sorry for the misunderstanding!

Extraordinary everyday!
People are putting their brain in use to advance their standard of living or to be more comfortable or profitable and others are still very intelligent in the negative part. Look at how everything was executed smoothly and I guess Op became aware when he saw a negative feedback on their profile.

I have not taken a loan before, but I think there is a thread in the service section where the matter of loan is discussed extensively and agreed before execution?

Joke? 

Discord Community Management? Does that mean jobs are offered for you for Moderator/Admin, or something like that?

I faced the same case 2 month+ ago, the difference is for (Discord Account) not BTT. It's for (Mod/Admin) jobs, the scammer targeting people who at least moderated a project and shared a phishing/scam.

---

I am wondering are @OP going to be responsible for the fund loan by a scammer, and need to repay it. Or is there some other solution/discussion between @OP and the lender for these cases?
--
First time to see, session-hijacking.

I agree with you that some concessions could be made to the OP, as the situation is not simple. Nevertheless, similar cases have already happened on the forum, and I think that everyone should take a closer look at the security of their system. Don't save your passwords in browsers, and also, I think the OP was running on a Windows system and might have some keylogger loaded, or indeed, as SamReomo wrote, a cookie session was stolen. I looked up some information about this, and I think we should know how we can protect ourselves from it.

https://learn.g2.com/session-hijacking

This is a very bad situation and I can't question you how and when it happened, just of few days ago my TG was hacked and I did get notification from my account. That so so device login in my TG from Brazil and I was shocked how could someone login my telegram account without them requesting for OTP to access the telegram, I was weird about the whole situation and how come about it.

Immediately I chatted a fellow local board user explaining to him on the recent activity and he was shocked to see my tg was hacked and immediately the hacker change my username and profile picture to his own, what I did was to go to settings and terminates all active session. This made me start wondering what if I have important thing stored as draft or something else what would have been my fate right now meaning I would had lost all thing.

Then lastly, I would love to say with what happened to peanutswar if my account request for a loan or change of address do not give without me signing a message from my current address in bestchange sig or maybe someone using TG to pm you and start relating with you about a loan please I don't carry out such action and even if I must request for a Loan I have to sign message and post to thread and to the lender. It was from my case I believe hacking is real and scamming is real. This happened immediately I fell asleep when I wasn't active online.


My question is does anyone also experience same thing as well?

Sorry for both OP and Sashan that this happen.  
Respect to you @Peanutswar that you take it the way you do and repaying. I hope you will recover from this..
 I could help you to pay back little bit like $10 if you send me your wallet address.


@LoyceV may I ask you for a favour? could you please also leave me the neutral feedback to that I never will ask for a loan just for safety.
I will never been needing a loan in the near future (ever)
Maybe I won't be a newbie forever and would be granted a loan in the future, and this thing was a very smart idéa to avoid problems like these (if my account would end up hacked in the future)

Thanks in advance!  

Oh no this is a very bad situation but how could someone login your account and apply for a loan without your knowledge or could it be after your absence and inactive the hacker has been using your account without your knowledge? Do we say the forum should enable a login notification whereby if there's a any unusual activity we get notified via our mails and any other notification medium to ensure the security of our account?

Sincerely speaking, having gone through op's statement I am beginning to be afraid because I won't know what may happen to others or even to me. Before given out loan they should sign message with their current address on a campaign before they can receive loan otherwise if such person fails to sign a message then the loan shouldn't be granted to the requester. Because to what happened to peanutswar is a great lost and a kind of imposing unwanted bill or debt to him or her to start paying $1000 that he didn't plan of.

That's very huge amount of money compared to our currency and is a kind of mind blowing to accepting unnecessary bill. Well I will like to plead with shasan to have patient with op as this could likely happened to anyone out there and if possible the interest should be cancelled for him to be able to clear the whole debt and also for a little extension as I believe even in 10 weeks he can't still pay off the debt, since the average weekly payments from his campaign currently will be $70 to $90, so with this pay rate I don't think he can be able to pay $1k within the next 10 weeks so I think 13 weeks payment can be able to clear the debt.

Except op has other physical business he is doing to generate money to pay quickly before 10 weeks.
I sincerely sympathized with you on this bad ugly situation you are facing right. Please take heart sir and again try increase your account security as you may not predicted what would happened next.

Seems like there's a lot too not only me as per checking the date its 6-30-23 and in my case the incident starts on 7-06-23, I guess before taking loan they must need to raise up a Signed / Verified address before accepting loans, and the same time hoping in the future have another layer of security in the forum too. This guy is lucky only have ~400 USD and mine takes a thousand USD just to clean my name here.

@CryptoHFs sorry for the DM the forum does not load properly.

@LoyceV Can I have that tag too that I will never take a loan here in the community.

Beside this, I just noticed another address is connected with the hacker TRX address which has been used in the lending board for loan request. 900 USDT loan was requested by user Woodie two times in shasan lending service. Like the previous case, those loan request post have been deleted by the user (check in Ninjastic). Anyway, it seems like shasan had noticed one of those loan requests and declined it. Here is the address which was used for the loan request


Connection between the hacker address which was used in Peanutswar loan request and Woodie loan request.


(Transaction link)

Woodie was worried about the loan request and made a post in shasan lending thread, but he has deleted that post too. What's going on actually? Peanutswar ~ mdgabrielzim ~ Woodie, how big the hacking attempt is?

Since I joined this forum, I have not seen a case like this, although in my place, someone has used a friend's Mobile phone to request a Loan, collected a loan that's about $800, and disappeared. Another case was that one dude collected his friend's debit card, withdrawn all the money in his account, and disappeared. Those two cases was not really a pleasant experience, but lastly, they courted the two of them after some months.

But in this situation, this is a Blockchain transaction, and there is no way you can catch this thief. I really feel sorry for this kind of experience. It's very painful having to repay this kind of money for the fact that you were not even the one who sent it.

---

---

Edit

Instead of creating a separate thread, I would like to make it Open that any time I am requesting a loan, it will likely be a loan on only Bitcoin and USDT, for which I will use my Bitcoin address, which I have been using here and also my BEP-20 USDT address which are in the bracket below.( BTC address bc1qkcnglxmm8hxr9lzxdk95e5jj3xcujag442zxgu and Bep-20 USDT address 0x9eb9c615ed45f3a17365d2041e6fdb36a1df8621).

Any loan request using any other address if not those above two listed adress should never be granted. I will use this as proof should there be any incident like this on my account any day.



Cheers 🥂, Dr.Bitcoin_Strange 👺👺

kenzawak.

In this thread everyone forget to pick this, I hope this will give some clue about what happened to the account since its clear that address used to take loan is under control of hacker and made a transaction with one of the forum member. Either the hacker send the funds to his own addresses or used it for any service or deal among forum member.

So @mdgabrielzim can give some clarification about the incident which may find the way for further investigation.

Peanutswar - this is a very unpleasant experience about you. But anyway - you don't seem to be running away from the fact that you have to bear the consequences of this incident.

Of course it is a downright scary occurrence if someone manages to get into an account that is highly reputable. Intruders can take advantage of account reputation for profit by making loans instead of changing password and email and selling account. This might be a new trend for intruders - and I hope I can prevent the same from happening in the future. I didn't take out a loan and probably never will - so someone has to really verify anything if one day this account applies for a loan.

Why wait 30 days after someone has signed a message from an old staked address to remove a tag? You should assume that the person making such a request may be in desperate need of a loan.

A signed message is enough IMO.