theymos, somebody embedded a sig ... UPDATE !!! - page 2.

anonymoustroll420

full member

Activity: 196

Merit: 101

Quote from: theymos on March 28, 2017, 05:28:22 PM

It seems to me that someone guessed Gleb's password using the password hashes stolen in 2015, since Gleb didn't change his password since then. The Glebonator account may be due to the attacker trying a new password-cracking attack against accounts in alphabetical order, or due to specifically targeting Gleb and incorrectly believing that that account belonged to him, or because Glebonator is the attacker.

Quote from: Gleb Gamow on March 28, 2017, 05:13:39 PM

I still don't see the ones that were sent to me in my In Box, but that may not be important I guess.

I restored those as well now.

It's resolved, awesome.

Gleb, it may be a good idea to post a signed message here from a Bitcoin address that you once posted (the address that used to be on your profile perhaps?) stating that its you and you're in control along with todays date, so that people know it's really you in the hot seat.

theymos

administrator

Activity: 5222

Merit: 13032

It seems to me that someone guessed Gleb's password using the password hashes stolen in 2015, since Gleb didn't change his password since then. The Glebonator account may be due to the attacker trying a new password-cracking attack against accounts in alphabetical order, or due to specifically targeting Gleb and incorrectly believing that that account belonged to him, or because Glebonator is the attacker.

Quote from: Gleb Gamow on March 28, 2017, 05:13:39 PM

I still don't see the ones that were sent to me in my In Box, but that may not be important I guess.

I restored those as well now.

Gleb Gamow

vip

Activity: 1428

Merit: 1145

theymos replaced all the PMs that were sent from my account, the latter ones being by me personally and should be obvious which ones they are. I still don't see the ones that were sent to me in my In Box, but that may not be important I guess.

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: actmyname on March 28, 2017, 04:54:18 PM

Quote from: Al the Alpaca on March 28, 2017, 04:35:07 PM

Okay, I give! Why can't I now log in with the Gleb account but it's showing that I'm logged in?

The online status lingers for a while even after going offline - that's just how it is.

Quote from: Al the Alpaca on March 28, 2017, 04:35:07 PM

Yes, this is Bruno.

EDIT: I see that the Gleb account is no longer online. I'll now log off Al and try to log on Gleb.

True statement.

I'll accept that, with theymos was looking into it. He emailed me and let me know that my PW was randomized and to have me change it again which I did, hence now able to log in.

Thank you, theymos.

actmyname

copper member

Activity: 2562

Merit: 2510

Spear the bees

Quote from: Al the Alpaca on March 28, 2017, 04:35:07 PM

Okay, I give! Why can't I now log in with the Gleb account but it's showing that I'm logged in?

The online status lingers for a while even after going offline - that's just how it is.

Quote from: Al the Alpaca on March 28, 2017, 04:35:07 PM

Yes, this is Bruno.

EDIT: I see that the Gleb account is no longer online. I'll now log off Al and try to log on Gleb.

True statement.

Al the Alpaca

full member

Activity: 205

Merit: 100

The Future Of Work

Okay, I give! Why can't I now log in with the Gleb account but it's showing that I'm logged in?

Are the admins logged in looking at my ~~nefarious~~ activity?

Yes, this is Bruno.

EDIT: I see that the Gleb account is no longer online. I'll now log off Al and try to log on Gleb.

pixelpowered

sr. member

Activity: 434

Merit: 250

Quote from: Gleb Gamow on March 28, 2017, 04:15:54 PM

Quote from: pixelpowered on March 28, 2017, 04:12:18 PM

Glad to hear you secured your account Gleb.
The Steams profile is also reporting the scam to warn users - http://steamcommunity.com/id/KingSalamander
Whomever the perpetrator was, they tried to mess with your reputation and failed.

I see that you changed your pw, bud, just to be safe. How do I really know that ... Grin

(TBC, kidding)

Later, bud.

Yeah, I was lurking and saw what happened.
Then thought of what we were talking about in prior days and the message your sent out last night at March 27, 2017, 10:17:39 PM.
Not a coincidence to me and ya I needed to change it up.

I was also curious if there is a way to protect against embedded sigs? Is it even possible?

Your right Gleb... I could be a cylon and I'm wearing my red dress Cheesy

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: pixelpowered on March 28, 2017, 04:12:18 PM

Glad to hear you secured your account Gleb.
The Steams profile is also reporting the scam to warn users - http://steamcommunity.com/id/KingSalamander
Whomever the perpetrator was, they tried to mess with your reputation and failed.

I see that you changed your pw, bud, just to be safe. How do I really know that ... Grin

(TBC, kidding)

Later, bud.

pixelpowered

sr. member

Activity: 434

Merit: 250

Glad to hear you secured your account Gleb.
The Steams profile is also reporting the scam to warn users - http://steamcommunity.com/id/KingSalamander
Whomever the perpetrator was, they tried to mess with your reputation and failed.

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: Gleb Gamow on March 28, 2017, 03:52:16 PM

Quote from: anonymoustroll420 on March 28, 2017, 03:26:47 PM

Looks like someone may have fell victim:

Quote from: dragoz11 on March 28, 2017, 02:54:39 PM

Gleb Gamow is scammed me Dont Deal With him

İ havent got overwatch gift left now

Looks like the hacker changed the Bitcoin address on your profile too:

Same Bitcoin address used in the scam PM to messe

Damn, I didn't see that. I did just now delete the address but not yet the sig.

Here's a clue, theymos: https://bitcointalk.org/seclog.php

Today at 12:42:58 PM - Gleb Gamow - password changed (I'm the one who changed it)

March 27, 2017, 03:18:24 AM - Glebonator - woke up (I AM NOT Glebonator!)

https://bitcointalksearch.org/user/glebonator-366166

Quote

Name:   Glebonator
Posts:   39
Activity:   39
Position:   Jr. Member
Date Registered:   August 13, 2014, 04:36:44 AM
Last Active:   Today at 08:24:11 AM
ICQ:
AIM:
MSN:
YIM:
Email:   [email protected]
Website:
Current Status:   Offline Offline
Gender:
Age:   N/A
Location:
Local Time:   March 28, 2017, 08:44:25 PM
Trust:   0: -0 / +0
Signature:

Taxing my memory, the Glebonator user account was created to fuck with me: http://web.archive.org/web/20151102134841/https://bitcointalksearch.org/user/glebonator-366166

https://bitcointalksearch.org/user/glebonator-366166;sa=showPosts

Corresponds with an attempt depicted below (any names erased were done by me for obvious reasons) ...

Quote from: K4C on March 28, 2017, 04:01:08 PM

HiHi,

was it you texting me or someone else trying to get a free game?

Sincerly,
Timo

Seriously, it wasn't me. I'm not a gamer!

Bruno

K4C

full member

Activity: 448

Merit: 103

$CYBERCASH METAVERSE

HiHi,

was it you texting me or someone else trying to get a free game?

Sincerly,
Timo

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: anonymoustroll420 on March 28, 2017, 03:26:47 PM

Looks like someone may have fell victim:

Quote from: dragoz11 on March 28, 2017, 02:54:39 PM

Gleb Gamow is scammed me Dont Deal With him

İ havent got overwatch gift left now

Looks like the hacker changed the Bitcoin address on your profile too:

Same Bitcoin address used in the scam PM to messe

Damn, I didn't see that. I did just now delete the address but not yet the sig.

Here's a clue, theymos: https://bitcointalk.org/seclog.php

Today at 12:42:58 PM - Gleb Gamow - password changed (I'm the one who changed it)

March 27, 2017, 03:18:24 AM - Glebonator - woke up (I AM NOT Glebonator!)

https://bitcointalksearch.org/user/glebonator-366166

Quote

Name:   Glebonator
Posts:   39
Activity:   39
Position:   Jr. Member
Date Registered:   August 13, 2014, 04:36:44 AM
Last Active:   Today at 08:24:11 AM
ICQ:
AIM:
MSN:
YIM:
Email:   [email protected]
Website:
Current Status:   Offline Offline
Gender:
Age:   N/A
Location:
Local Time:   March 28, 2017, 08:44:25 PM
Trust:   0: -0 / +0
Signature:

Taxing my memory, the Glebonator user account was created to fuck with me: http://web.archive.org/web/20151102134841/https://bitcointalksearch.org/user/glebonator-366166

anonymoustroll420

full member

Activity: 196

Merit: 101

Quote from: Gleb Gamow on March 28, 2017, 03:38:42 PM

How are my PMs being deleted?

The hacker is deleting them after he sends/reads them...

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Okay, I didn't click your images yet, but I believe it's gonna show the same thing I'm seeing in my email.

How are my PMs being deleted?

Quote

Quote from: dragoz11 on March 28, 2017, 07:38:24 PM

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!

Hello sir why are you not answering to me on icq please dont do this ineed money really please

I have no idea what you're talking about. Currently, my account is being compromised. Sorry, bud.

Proof: https://bitcointalksearch.org/topic/theymos-somebody-embedded-a-sig-update-1846191

Bruno[/size]

Don't answer that. It was the nefarious actor. Password now changed.

anonymoustroll420

full member

Activity: 196

Merit: 101

Looks like someone may have fell victim:

Quote from: dragoz11 on March 28, 2017, 02:54:39 PM

Gleb Gamow is scammed me Dont Deal With him

İ havent got overwatch gift left now

Looks like the hacker changed the Bitcoin address on your profile too:

Same Bitcoin address used in the scam PM to messe

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: messe on March 28, 2017, 02:24:22 PM

Secure your account, mate.
I know he was about to scam me and i'll just play along.

Here's the story
He offered me his items in CS:GO games for $180
Here's a capture of his PM's to me.
http://imgur.com/a/LUJXL

Then i checked and contacted the steam account he sent to me.
Turns out that the steam account owner is not him.
Here's the proof.
http://imgur.com/VLpgMWU
http://imgur.com/4yQKDt1

Then he asked me to send btc equal as $180 to him.
http://imgur.com/QmbInsf

Notes: Change your bitcoin address in your profile, it's the scammer's address.

He still PM me even after you PM me lol

Hey, thanks, bud. That email address is mine. Here's a screenshot ...

As you can see (maybe) I haven't open that top email nor any others depicted. I'm going to now so to view the headers and will post it here to see if anything can be gleaned.

messe

newbie

Activity: 10

Merit: 0

Secure your account, mate.
I know he was about to scam me and i'll just play along.

Here's the story
He offered me his items in CS:GO games for $180
Here's a capture of his PM's to me.
http://imgur.com/a/LUJXL

Then i checked and contacted the steam account he sent to me.
Turns out that the steam account owner is not him.
Here's the proof.
http://imgur.com/VLpgMWU
http://imgur.com/4yQKDt1

Then he asked me to send btc equal as $180 to him.
http://imgur.com/QmbInsf

Notes: Change your bitcoin address in your profile, it's the scammer's address.

He still PM me even after you PM me lol

anonymoustroll420

full member

Activity: 196

Merit: 101

Quote from: Gleb Gamow on March 28, 2017, 02:22:57 PM

Quote from: anonymoustroll420 on March 28, 2017, 02:17:17 PM

Quote from: Gleb Gamow on March 28, 2017, 02:15:56 PM

If they got my password, then there's more serious problems because the one I used for this account is an uber good one - many characters with symbols et al. No way they could've hacked it.

Maybe you got phished or something.

Either way someone is logged into your account as you, and you need to lock them out.

I just tried something in case my password was changed. I'm on Chrome 99.9%, so I went to IE and tried to log in with my password and it wouldn't let me. I came back Chrome and was logged out. Thanks to Chrome saving the PW, I was able to relog in, but couldn't at IE.

I'm now going to look at what password is being using via Chrome advance settings.

Whatever you do, just change it to something new for now until theymos comes here.

Also make your you are on bitcointalk.org and not bitcointalk.pw or any of the other phishing sites.

Gleb Gamow

vip

Activity: 1428

Merit: 1145

Quote from: anonymoustroll420 on March 28, 2017, 02:17:17 PM

Quote from: Gleb Gamow on March 28, 2017, 02:15:56 PM

If they got my password, then there's more serious problems because the one I used for this account is an uber good one - many characters with symbols et al. No way they could've hacked it.

Maybe you got phished or something.

Either way someone is logged into your account as you, and you need to lock them out.

I just tried something in case my password was changed. I'm on Chrome 99.9%, so I went to IE and tried to log in with my password and it wouldn't let me. I came back Chrome and was logged out. Thanks to Chrome saving the PW, I was able to relog in, but couldn't at IE.

I'm now going to look at what password is being using via Chrome advance settings.

anonymoustroll420

full member

Activity: 196

Merit: 101

Quote from: Gleb Gamow on March 28, 2017, 02:15:56 PM

If they got my password, then there's more serious problems because the one I used for this account is an uber good one - many characters with symbols et al. No way they could've hacked it.

Maybe you got phished or something.

Either way someone is logged into your account as you, and you need to lock them out before some newbie gets scammed

Topic: theymos, somebody embedded a sig ... UPDATE !!! - page 2. (Read 2657 times)