Pages:
Author

Topic: UPDATE: BTC-e suspended accounts and hacked accounts [Gathering] - page 2. (Read 5948 times)

newbie
Activity: 24
Merit: 0
Quote
I've recieved a response from BTC-E now

So... How long did the response actually take? You submitted 'Account hacked' tickets to which this respond was refering to?

Glad to know that they are responding after all. I'm waiting for eight days now for any respond..  Undecided
newbie
Activity: 17
Merit: 0
Quote

So let's get this stragiht:
No 2FA for yahoo mail
No 2FA for btc-e
Used same password on both sites.
100 BTC kept in this account.


Obviously the same password was not used on both email and btc-e, or the hacker would have been able to withdraw the funds.

I deleted previous thread because I wanted BTC-E to not get pissed.

I've recieved a response from BTC-E now asking for verification which I have provided. As long as everything work's out I will have nothing bad to say about BTC-E, and continue using the exchange as I have for the past 2 years.
full member
Activity: 358
Merit: 118

I call total BS. When they ban you from chat it has no affect on your account.
I'm sorry if your story is true, but this thread has 2 low post noobs bashing btc-e.
You guys combine truth (i.e thier poor English) with what could be a big pile of lies.


I am a high reputation member "presence" at ronpaulforums.com, I am also the #5 trending username "litepresence" in the BTCe archive.

google "by presence" site: ronpaulforums.com

or check trollbox archive... I'm right there at the top next to davidpate fontas and koolio




I can confirm that a good friend of mine user "Swof" has 1000 LTC currently seized for posting a warning in the troll box "do not click on predictcoin(dot)info" links.

No access 1000 LTC since price was $25/LTC over 30 days ago; last price $17/LTC



This is very real.

litepresence
newbie
Activity: 54
Merit: 0
why not just close down the trollbox it really serves no purpose and it would save a lot of headaches
newbie
Activity: 13
Merit: 0
Another example from the trollbox archive.

Here is a user claiming what happens as he signed up for the predict coin page.
Its of course not to verify he is honest, but there are some signs:

- a normal character starts to spread automated spam lines out of nowhere (why should he? At last he should use a different sentence).
- he is explaning it with a twink and see how confused he is
- there is no one helping as you can see
- the bad domain get posted over and over by more and more accounts
- mods KNOW that domain is malware and even warn & ban it !
- different users told out of nowhere the same story

The twink: http://trollboxarchive.com/search.php?search_type=username&search=Thomassmulders
The original account: http://trollboxarchive.com/search.php?search_type=username&search=thomas89

and again the phishing domain (is a bunch of "predict" domains all using the same layout and all), still active TODAY posted and spread by the btc-e chat:
http://trollboxarchive.com/search.php?search_type=all&search=predictcoin

Please look at the insane amount of used chars - some of that have history never doing anything wrong.
Then, boom, they spread the malware domain - all with the same sentence.

These are, with a good chance, hacked people. Hacked by links who are spread even now by btc-e because
they can't deal in a sane way with domains in the chat.

Example: i just clicked on the users in the link above. http://trollboxarchive.com/search.php?search_type=username&search=wimmah1985

You see how he is starting to spam that link. then something happend.
When i should guess he logged in (the original owner). Then he starts to wonder what happens. Then he is gone - no post anymore
close after he posted the link. That means with a chance he is also suspended.


As far i know there are alot more cases like that. Just check the users!

It can't be that out of nowhere such many users without any negative history started to pop out as long hidden hackers.
I assume many make it not public for some reason, at last they fear a permanent ban and the lose of all asset.

And yes of course - joining such a phishing site with logins/emails you use on your trading site IS stupid.
But not everyone is a computer nerd and to be naive and missing a security mind is no reason to thread people like we see here.

Would it make a difference when the malware domain would be a zero day infection adding a trojan to your site by an automated drive-by-attacken
who added a keyboard logger? I think not.
newbie
Activity: 13
Merit: 0
Let's see some established users verify any of this, because:

...and who named that domain
in the chat was suspended too. Suspended means that the whole account access is dropped and all fund are for that time seized.
...

I call total BS. When they ban you from chat it has no affect on your account.
I'm sorry if your story is true, but this thread has 2 low post noobs bashing btc-e.
You guys combine truth (i.e thier poor English) with what could be a big pile of lies.

Ok, i can show you at last what had happened at btc-e in the last 2 month and how btc-e and the trollbox was
attacked by hackers and malware links and that the site and the mods was not able to deal with it.

Bitcoinwisdom is one of the main chart sites - as many know they warned some time with a popup people that
other domains claimed to be bitcoinwisdom and tried to install maleware. I think enough people had seens that.

So - one major source to spread that malware domain was the trollbox. There was some domains used i can't remember,
some included bitcoinwisdom as frame and had a download link for "better charts" (you can think what it was), some
had java trojaner. The most successful of that domains was the .net variant, which was a fake domain and not releated
to the com. Here is, what happend 8 weeks ago at the trollbox. That was one of the first bigger attacks.

http://trollboxarchive.com/search.php?search_type=all&search=bitcoinwisdom.net

Scroll a bit down - you will see soon rows of rows with that domain, claiming to offer charts.  You will see 2 things.

First, i need on a big screen 14 page down to move through all that rows. Thats alot, the attack was done over several days.
Second, you will see at some point that the user account spreading the line is changing over and over.

The trollboxarchive does not log bans and such but that is what happend. The mods banned the account of the hacker, but that
guy simply created a new one and spamed on.

Well, as i pointed out the chat miss basic protections. So mods was always behind.
They are not to blame, they use the tools they have.

Now, one way to stop the spam (not only malware) was the idea that a user must have at last $100 in its account to post in the chat.
But that did not stopped any hacker.

Because a mod can only ban a user from the chat! NOT suspend the account.
So, what happend? The hacker transfered 10 litecoins or so to the account, spamed, got banned, moved the coins out and to another
new account. That simple. The transfer costs are no problem, every infected user gave him alot more.

That was only the start. One other phishing site was predict-btc, preditinfo and such. And that attack is already going on.
Its incredible to watch, even that hacker was one week not active. Then he attacked again this week.

http://trollboxarchive.com/search.php?search_type=all&search=predictcoin
As you can see, the user spaming that malware domain is changing as fast as mods ban him.

Now, what happens then? The mods banned all this spammer accounts. For weeks or a month.
And then the chat ban weared out. They returned. And the spammer used them partly again.

At that point, because the mods are no team members of btc-e but some exclusive traders (not sure they get payment too),
they needed someone dealing with this incredible amount of known hacker accounts. Look at only the 2 links i gave you.
Search for more "predict" spam. We talk about some dozen accounts, if you count all perhaps hundreds of hacker accounts,
if you look all that different malware links posted in the last 2-3 month in that chat.

They needed to ban then to kill them and to avoid the reuse and all.

But how? you don't work yourself by hand through 8 weeks of chat lines. They did something automated. Like a grep on the data.

And there we are - that is the point where people get caught when they had that patterns too in a chat line.
I am sure the admin or whoever did the bans tried to catch only the hackers but this kind of action always have
some collateral damage. I know it, i had to deal with similiar problems on my own sites.

I hope i was able to explain it good enough: Again - i don't think btc-e tries to scam people or doing harm to poeple.
They was caught on the wrong leg and they missed to deal with a problem in time.
Thats ok - but they should now a bit more helpful.
newbie
Activity: 13
Merit: 0
obviously they detected unusual activity in your account and suspended it.
i'm sure this has a timer , like money hold, and after that it will be reenabled.

i suppose they do this to give you time to "clean" your computer and reset all of your passwords to secure ones,
after that you should then ask them to re-enable your account.

however, as they don't know who is the legit owner, they will most likely not raise the block/money hold until the timer runs out, if you are in a hurry you should add your ID on the ticket.

Hmm oké... that could be the case...

If they only would announce how long this timer will hold my account, things would be a lot less mysterious though.

I have another explanation and a very easy one - its something i faced in my time as webmaster too.

First, read please my comment to the user who told us to use skype.

So, you will see now that there is only one support way - to open a ticket at http://hdbtce.kayako.com/.
Even when we assume a direct contact (however you managed that) you must have a ticket number - or they can't help.
Except one of the owner or core members of that company is your friend or contact.

What is kayako.com? Its a help desk company, selling, renting & hosting a browser based ticket software (called help desk, which
is a standard ticket & consumer managment software).

As you can see here http://www.kayako.com/pricing/ you have to pay $50 bucks per month to use the software "per staff user".
What that means?

Staff user are the number of support members dealing with the software and helping you. Aka how many people are working as a unique support account.
For every support guy dealing with the software you pay $50 bucks. Thats quite a cheap & good offer btw.
Ok, why i pointing that out? You remember that skype account, even its outdated? The real one is "support (thailand)".

Thailand? Yes - thats guys doing the base support. And that is normal. That is a hired guys from, well,  thailand doing the daily support.
Working through tickets and all. The name for that is outsourcing and thats how you do that as internet company, big or small.
There is no reason for many trivial support tickets like changing an email or such to burn the time of the admin or some other core members
of btc-e.

Now, here is what i think the problem is and what happend to people who experienced that their initial ticket was handled fast but
then the next step stopped.

The guy in thailand is not a core member of btc. With a chance its an independent internet guy or some student. Thats not bad - he
seems to do a good job. In fact thailand is known to deliver good and inexpensive people for this kind of outsourceing.

That thai guy will see your first ticket and he has some base access to the btc-e core system. For example he can set a flag to block a account.
Or to give an new email free. Such stuff, not critical and not dealing with money or account details related to the assets.

You don't want an outsourced support guy in thailand with access to your acocunt funds , right? And for sure btc-e don't want give
external people access to their hot or cold wallet, internal transaction data or the funds of an account too.

Thats something you want hold inside the company. In best case right in the next room under control of the owners or the high staff members.

So, what happens?

As the first ticket about was written, it was just an account block. The thai guy dealed with that. Because that kind of action must be
handled "in time" at support side, it is important to have a first fast eye on such tickets. You must have enough support guys dealing with
trivial and/or time critical tickets. If that initial ticket had needed like 5 days, the hacker would had already plundered the account and would
be gone. It must be handled in a somewhat close time window.

After he dealed with the hot problem and the account was successful blocked so no one can remove funds and manipulate it, the thai guy
moved the ticket over to someone inside the btc-e company itself. A second support member, an internal btc-e guy who has access to
funds & wallets and who can go in the details to determinate who is who, what the hacker did and how the real account status it.

That is, how a help desk ticket system works and why you have to pay for every staff member.

And that is now the explanation, why the ticket was handled one time fast and then slow. The fast must be fast or it will fail.

The slow is the worse one and the problem
. That support step is going wrong atrm. That btc-e support staff member , who ever he or she is, is not doing the right job.
He does not communicates, he did not gives signals and it needs far to long.

That is the point this thread hooks in. To suspend a account is one thing - to let it unexplained suspended and drop the communication
is another. Because hacked or suspended by other system - at last a core support member must deal with it and i assume they have
not a dozen of that sitting there.
newbie
Activity: 13
Merit: 0
just contact them via skype or icq

This is one of the things where i don't know what to say...
Or alot.

First: This problem has nothing really to do with btc-e as exchange - and they can't fix it.
Its just an ill advise and btc-e already removed official support lines to skype from their site.

Ok, in simple words: Following this "suggestion" will lead you with a high chance to a hacker who will try to steal the account.
Lets me show why.

If you look at the btce-e.com site you will notice that there is no hint to any skype, icq or any other support medium as the 2
links on their frontpage - the "support" link listed by contacts  under the chat & twitter box and the support link in the main menu.

Both leads to this page: http://hdbtce.kayako.com/

This is the official and ONLY way to contact the support.
That is also the only way to open a ticket. No ticket, no support.

In theorie, the support can contacted in the chat - but checking the support chat history shoes that
the support only answered 2 times in the last 6 month. Half a year ago it was different, since that the
support account was not used for answers in the chat:
http://trollboxarchive.com/search.php?search_type=username&search=support

I assume that was the date where btc-e buyed the help desk at kayako.com and outsourced the non critical
support questions to some externals. Which is nothing special, alot companies does the same.

So, skype... How should we do that?
Lets try it. We search for "btc-e support".

This is what you will see:
https://imageshack.com/i/j7c0h4j

As you can see we alot support there - 7!! account claiming to be the btc-e support.

Well... at last one should be the official one. 1 or 2 perhaps are some special case one.
But 50% or more of that are just hackers waiting for poor noobs and their accounts.
How is that possible?

Simple: Skype is not an unique address system but a name system. Anyone can select the name
btc-e support and even if you know the EXACTLY name the search will also list the hackers.
Thats not a bug but the design. Like a phone book will give you all members of the same name and it will
not pre select for you.

So... lets play russian roulette... which one?
I mean it... What would you select? Everyone reading this can also search this forum, i don't post links to the sad
threads here where people posted their experience with the hackers and their accounts. Not funny.

There is one way to know the right skype account- where even IS NOT SURE its still valid or in the meantime overtaken by
some hackers - there is no official link anymore.

Here is a a trollbox archive link where a chat moderator tells a user the right skype channel - and some more:
http://trollboxarchive.com/search.php?search_type=all&search=Thomassmulders

Quote: "bumface    ... Thomassmulders, support.btc-e hdbtce.kayako.com (thailand ) is real"
and
"bumface, thnx mate the other one is asking for passwords to " fix" your problems"

So, this tells us 2 things: the real support name and the fact the mods and btc-e knows that the others
are not real.

What means not real? Well, thats clear, or? That are the hackers.

Now, everyone in this thread and reading - ask yourself: How would normal experienced user in terms of the internet and all
handled this? How big is the chance that he comes to this thread, reads the answers to this thread who claims me and the other persons
with the similar problems are noobs and perhaps telling not the truth?

But the guy giving the advise which leds to more hackers as real support is not commented ?
Make your mind. Its not good.

newbie
Activity: 24
Merit: 0
Hmm oké... that could be the case...

If they only would announce how long this timer will hold my account, things would be a lot less mysterious though.
member
Activity: 80
Merit: 12
obviously they detected unusual activity in your account and suspended it.
i'm sure this has a timer , like money hold, and after that it will be reenabled.

i suppose they do this to give you time to "clean" your computer and reset all of your passwords to secure ones,
after that you should then ask them to re-enable your account.

however, as they don't know who is the legit owner, they will most likely not raise the block/money hold until the timer runs out, if you are in a hurry you should add your ID on the ticket.
newbie
Activity: 24
Merit: 0
Agree on that, but they would be much more top notch if they replyed on tickets of suspended user accounts...
sr. member
Activity: 644
Merit: 250
BTC-e are really top notch, especially their trading engine. To bad they are Russian sponsored, incorporated in Cyprus with the servers in Bulgaria. But hey....it's the early age in Bitcoin development right ?
newbie
Activity: 24
Merit: 0
Well yeah, I'm an so called 'post noob too', but never the less; I've got the same problem. Noticed my account was hacked; quickly changed my password; and everything seemed allright again: My funds were still there and there were no false logins on my account anymore.

The next day I wanted to trade on my account, but suddenly I was suspended. Thran, I agree this is a adequate action of btc-e . I appreciate their awareness of hacked accounts. And it's OK for me they freeze an account some time if it's been hacked (or an attempt of it)

But then my attemps to regain my account and funds failed. Filled in a couple of tickets (in English and Russian) but after a week: no repley at all...

This frustrates me. Why do they have an ticket option 'account hacked' but don't answer any of them. Also, it should be helpful is they send an automatic e-mail when your account is hacked, which states out an procedure and time of this suspend. In stead I was suprised to see my account suspended after a day... an now don't know how or when I get my account and funds back.

To make clear: I'm not an BTC-e basher. I enjoyed trading on their site...
member
Activity: 110
Merit: 10
Hello!

I have a similiar problem, and a friend of mine told me his account containing funds is also suspended out of nowhere!

BTC-E has suspended my account containing 100 BITCOINS after I reported my email being hacked and requested withdraw be locked until I could recover my email.

I got a reply within two hours saying withdraws would be locked, and I was very pleased.

The next day I recovered my email address and changed my btc-e password, and saw that my account is suspended still. I know for a fact all my funds are still safe in my account because when the hacker changed btc-e password to access my account withdraws are auto locked for two days.

So I make a ticket first day asking for my account to be unsuspended, no response. I keep making tickets for the next 6 days and have received not ONE single response.

I have been trading on btc-e for YEARS. This should not happen. It is very suspicious to me, that they replied nearly instantly on my first ticket asking to lock withdraws, but not on one of my 20 tickets I have made asking for a reply as to my account being unsuspended. I have told BTC-E if I do not recieve a response in next week Im hiring a lawyer and contacting authorities.

THIS IS RIDICULOUS.

For someone who's payed thousands of dollars to btc-e in past years this should not be happening, it's either a scam that's taking place, or very big problems for BTC-E owners and they have 0 time to respond to tickets?

I don't know WHAT is up with BTC-E but all I know is do NOT deposit ANY money in the site until these issues are resolved with users.


You already have a thread about this:

BTC-E Account containing 100 BITCOINS hacked!
https://bitcointalksearch.org/topic/btc-e-account-containing-100-bitcoins-hacked-451267


Why did you edit your opening post in the other thread that this issue is resolved? Your original post is quoted by the 2nd post of that thread.

Quote
I have been longtime BTC-E trader. Recently, a ton of yahoo accounts have been hacked and it's all over the news.

I was one of them.
So your yahoo mail account was hacked...


Quote
I foolishly used the same password to login to my email that i used to register my btc-e account..
You used the same password for yahoo email and btc-e and kept 100 BTC in that account???


Quote
The hacker was able to get into my email assocaited with my btc-e account and changed my security questions and backup email for that account. He then hacked into my btc-e account and changed the login information.

So let's get this stragiht:
No 2FA for yahoo mail
No 2FA for btc-e
Used same password on both sites.
100 BTC kept in this account.

and you blame btc-e for your own stupidity?


6 days have passed since you edited your opening post in the other thread that the issue was resolved.

And why the need to post in another thread on this issue?
legendary
Activity: 2114
Merit: 1040
A Great Time to Start Something!
Let's see some established users verify any of this, because:

...and who named that domain
in the chat was suspended too. Suspended means that the whole account access is dropped and all fund are for that time seized.
...

I call total BS. When they ban you from chat it has no affect on your account.
I'm sorry if your story is true, but this thread has 2 low post noobs bashing btc-e.
You guys combine truth (i.e thier poor English) with what could be a big pile of lies.
member
Activity: 112
Merit: 10
Minning powa
just contact them via skype or icq
newbie
Activity: 17
Merit: 0
Hello!

I have a similiar problem, and a friend of mine told me his account containing funds is also suspended out of nowhere!

BTC-E has suspended my account containing 100 BITCOINS after I reported my email being hacked and requested withdraw be locked until I could recover my email.

I got a reply within two hours saying withdraws would be locked, and I was very pleased.

The next day I recovered my email address and changed my btc-e password, and saw that my account is suspended still. I know for a fact all my funds are still safe in my account because when the hacker changed btc-e password to access my account withdraws are auto locked for two days.

So I make a ticket first day asking for my account to be unsuspended, no response. I keep making tickets for the next 6 days and have received not ONE single response.

I have been trading on btc-e for YEARS. This should not happen. It is very suspicious to me, that they replied nearly instantly on my first ticket asking to lock withdraws, but not on one of my 20 tickets I have made asking for a reply as to my account being unsuspended.

For someone who's payed thousands of dollars to btc-e in past years this should not be happening, it's either a scam that's taking place, or very big problems for BTC-E owners and they have 0 time to respond to tickets?

EDIT: I have recieved a response from BTC-E, they have asked for verification in form of IP, trade history, and method of account funding. I am very pleased. My post will be deleted once I get my account back.
newbie
Activity: 13
Merit: 0
You are a Mt. Gox sock puppet:

Perhaps we should hear him out and see what others have to say and perhaps be helpful before we go all "HE'S A NOOB, GET HIM!" on him?

Fair enough. I am just trying to make people aware of the possibility, because there is a lot of FUD spreading right now about other exchanges/Bitcoin protocol in an attempt to justify MtGox's actions. A lot of these posters are newbies with only a few posts.

Apologies if the poster is a genuine new member. (I deleted the post)

I ensure i am serious, if needed i can give a proof of over 10 years history in the open source szene and the internet at all.
With a good chance users from this forum had contact with one of my projects in the past.

Anyway, i hope i have enough sane arguments to point out my and btc-e's problem so i don't need to throw that in.

If something is not clear or i make no sense, please point it out - i will try to give more examples or infos.
member
Activity: 110
Merit: 10
You are a Mt. Gox sock puppet:

Perhaps we should hear him out and see what others have to say and perhaps be helpful before we go all "HE'S A NOOB, GET HIM!" on him?

Fair enough. I am just trying to make people aware of the possibility, because there is a lot of FUD spreading right now about other exchanges/Bitcoin protocol in an attempt to justify MtGox's actions. A lot of these posters are newbies with only a few posts.

Apologies if the poster is a genuine new member. (I deleted the post)
newbie
Activity: 13
Merit: 0
What does the [Gathering] is square brackets mean?

It means that people with the same problem should add at last a "me too".

This will help to see there are more poor victims or only me and swof.

Perhaps all happens because the support there speaks mainly russian and little english, you have
to submit bank data for banking problems for example (following suggestions from the mods)
with an russian copy if you want the support to success.

This thread is not to mark, harm or flame btc-e - its there to get a problem solved.
And even i say "its mainly btc-e's fault" does not means i am biased.
I can live with small problems and glitches - but this is a serious one and its also in the interest of btc-e to solve it.

And no, i am not a noob - that is the problem. I know exactly how critical, stupid and easy to solve that chat problem is.
I can fix it in nearly every implementation you can assume. I already fixed problems like that on other sites.
That is mainly what gives me a bad feeling, because i know that even some simple blogs care more about such a problem as
btc-e did in the past. That must change.
Pages:
Jump to: