Author

Topic: UPDATE: BTC-e suspended accounts and hacked accounts [Gathering] (Read 5950 times)

newbie
Activity: 3
Merit: 0
Exactly the same thing happend to me except they vanned my account two weeks after the incident.. losing faith in this exchange. Rhey have not responded to my reply. Also although they are ruasian they should provide english support.. any admins from btce can help me?
newbie
Activity: 24
Merit: 0
That's fucked up...

I think when you convince support about your IP adres, you will make a chance.

Gather some of you btc-e autorizantion e-mails, on which your IP is visable. Hopefully they will ignore any attemps of the hackers to change your e-mail.

But, why did you contact btc-e support in the first place?

On this forum you can read this is a tricky business... Lots of fake emails and skype adresses...

Submitting a ticket is a lot of waiting but rather a save way of contacting btc-e support
newbie
Activity: 29
Merit: 0
Well.... I recieved a message again...

Based on my logins and chat history, they concluded that my account was hacked indeed, and re-opend it.

Soo... after two weeks my issue is resolved.

If you have not the connections with moderators like sinx13 has, I suggest you walk through te following procedure, and (in my case) if you are really a victim of hacking, your account will probably re-opend after two weeks:


- Submit a couple of tickets in English as well as in Russian
- Submit these tickets under different issues. I.e. 'Account hacked' and 'account blocked'
- Write down some detailed information. Login autorization e-mails and troll histories.
- Wait...
- Wait...
- Wait... and reply on your ticket you are waiting some time now
- Wait...
- You will recieve a reply with te reason why your account is banned
- Reply that you aware of this but, IF you are really hacked, this ain't your fault (submit again detailed information, chatlogs, autorizations)
- Wait...
- Finally your account wil be enabled again.



So, this is al lot of waiting, but don't worry, if you really are a victim, you get it back, in my case, with my funds still on it...

Good luck!




I'm hacked , hacker pretend to be btc-e support and get a lot of information from me. He applied to change my account email. I find it in time and applied to ban the new email.
I'm now still struggling with the hacker, hacker open a new ticket every day to claim the original email is hacked and the new email is right. I open two new ticket to claim my original email is right and the new email is registered by hacker
newbie
Activity: 24
Merit: 0
Well.... I recieved a message again...

Based on my logins and chat history, they concluded that my account was hacked indeed, and re-opend it.

Soo... after two weeks my issue is resolved.

If you have not the connections with moderators like sinx13 has, I suggest you walk through te following procedure, and (in my case) if you are really a victim of hacking, your account will probably re-opend after two weeks:


- Submit a couple of tickets in English as well as in Russian
- Submit these tickets under different issues. I.e. 'Account hacked' and 'account blocked'
- Write down some detailed information. Login autorization e-mails and troll histories.
- Wait...
- Wait...
- Wait... and reply on your ticket you are waiting some time now
- Wait...
- You will recieve a reply with te reason why your account is banned
- Reply that you aware of this but, IF you are really hacked, this ain't your fault (submit again detailed information, chatlogs, autorizations)
- Wait...
- Finally your account wil be enabled again.



So, this is al lot of waiting, but don't worry, if you really are a victim, you get it back, in my case, with my funds still on it...

Good luck!

newbie
Activity: 24
Merit: 0
There it is, a reaction from the helpdesk


Quote
Good afternoon, with your account in the chat was sending to a phishing site.

The status of my ticket is 'in progress', luckly not 'resolved'  as did your ticket status after this reply sinx13.

Now, ofcourse i still want my account back, so i answerd the following:

Quote
Good afternoon,

Of that i'm very aware. As you see in my submitted ticket, I added an login history.
Which says te following:


Login: wimmah1985
IP: 198.7.62.204
Date and time: 05.02.14 18:15


Login: wimmah1985
IP: 190.0.33.18
Date and time: 05.02.14 18:17

after which I logged in and quickly changed my password with my own Ip-adress:


Login: wimmah1985
IP: 194.151.85.2
Date and time: 05.02.14 18:23

The first and second Ip-adresses ain't mine. The IP adres from which this phising site was send to the troll box was not from my computer (see attached printscreen of the trollbox archive). That's why I submitted a ticket 'account hacked'. After these two logins from different IP-accounts I quickly changed my password. My funds were still there, so except from these trollbox spam the hacker didn't cause much damage. Though.... my account was suspended

How can I prove the last Ip adress on my login history is mine, and the others belong to hackers?
Ik really, really want my account back.

Hope to hear of you soon...

Kind regards,


Willem Cornet


Curious when and what they will reply......
newbie
Activity: 24
Merit: 0
So....

I have to wait a very, very long time?
Or is there a moderator who can do the same for me??
newbie
Activity: 26
Merit: 0
After i had some help from the moderators (and i had some REAL good contacts) my ticket got reopend
and i am now unsuspended after i verified my account.

That was some hell ride and the underlaying problem with their chat is still there.
That is such a good site and then such a trap.

For people without contacts and help from the community the way to an unsuspended account can be very, very long and hard.
newbie
Activity: 24
Merit: 0
Hmm dammit...

Hope this doesn't mean that an earlier hacked account, which the real user fixed, is all time suspendend...

Still got no response on my tickets...
newbie
Activity: 26
Merit: 0
Update:

Now the answer of the support was:

---------------------------------
Use https://btc.penek.org/chatlog/en

Ticket Details
Ticket ID: ASY-173-8****
Department: Account - banned
Type: Issue
Status: In Progress
Priority: Critical
---------------------------------

I wrote back a deeper explanation - also in the chat logs of their chat log i never did what the
support told me i did. Sigh.
newbie
Activity: 26
Merit: 0
Ok, now i am scared!

I got this reply to my ticket and the ticket was put under resolved??!

-------------------------------------------
"
Good afternoon, with your account in the chat was sending to a phishing site.

made over 500$ today by following signals from |link| and twitters Smiley
"
-------------------------------------------

The line who triggered the phishing filter was some complete different.
"@ALL: go here http://www.google.com/safebrowsing/report_phish/ and add http://predictcoin.info/ - send his shitty domain to malware limbo"

Or the support guy never read my ticket really, saw that i was markt with "link" and copied a standard answer out.
If they believe they can act like that as registered company in the EU then they are brain dead.
newbie
Activity: 6
Merit: 0
My BTC-E account was HACKED and all coins stolen on 2/9/2014,I logged in and was in U.S. dollars and wanted to trade for LTC , I then looked at order history and BTC is being bought in my account! Then I knew something was really WRONG ! I did not put an order to buy BTC !!

I quickly canceled BTC order, but 3.6 BTC had been bought into my account ,then I noticed I have 0 BTC in my account, I have been HACKED !! These Hackers used by email spam to authorize withdrawal.

Contacted BTC-E  Support and have little info from them yet!!  Hope
newbie
Activity: 24
Merit: 0
I'm waiting nine days now...

Suscribed two tickets, one in Russian, one in English...

But after three days they merged those tickets. Would it really usefull to create more tickets for the same problem?

I already replyed a few times on my one ticked.

How many tickets you Suscribed Obama?
newbie
Activity: 26
Merit: 0
@Barrack Obama:

Puh, thats good to hear. I wrote a new ticket, perhaps to be a bit more noisy will help.

Sadly, i got still no answer. I am now suspended since 8 days.

newbie
Activity: 17
Merit: 0
Quote
I've recieved a response from BTC-E now

So... How long did the response actually take? You submitted 'Account hacked' tickets to which this respond was refering to?

Glad to know that they are responding after all. I'm waiting for eight days now for any respond..  Undecided

It took 7 days, not sure why it took so long guess it's just very, very small staff with a huge work load.

They unsuspended my account after verifying with IP, and recent order history.

They say now they are checking my account and will soon enable withdraws.
newbie
Activity: 24
Merit: 0
I agree...

As long as they inform those enlisted accounts by e-mail of the procedure.

Just suspend someone without notify them in any form isn't the right way to treat your customers/members
newbie
Activity: 26
Merit: 0
Hehe lol,  
Quote
sinx13                  2 Weeks Ago   wimmah1985, put his lousy domain on the autoban list
saw this in my troll history. And now were in this same topic. both our 'lousy' domains banned Wink

Yeah, and thats the solution as i said all the time. It was not against you.
It is beyond my mind why they are not doing that (a whitelist or blacklist like the thread owner said).
newbie
Activity: 26
Merit: 0
Hehe lol, 
Quote
sinx13                  2 Weeks Ago   wimmah1985, put his lousy domain on the autoban list
saw this in my troll history. And now were in this same topic. both our 'lousy' domains banned Wink

Its going on and on. Like the thread owner i checked now the trollboxarchive.

There is now a domain called "cointalk (dot) us" which is a fake of cointalk.com.

The same hacker is spaming both: http://trollboxarchive.com/search.php?search_type=username&search=Fabricio

Oh well...
newbie
Activity: 24
Merit: 0
Hehe lol, 
Quote
sinx13                  2 Weeks Ago   wimmah1985, put his lousy domain on the autoban list
saw this in my troll history. And now were in this same topic. both our 'lousy' domains banned Wink
newbie
Activity: 24
Merit: 0
Thnx for sharing sinx13.

In addition, here's mij troll archive. The underscored phrases were typed when my account was hacked...


http://trollboxarchive.com/search.php?search_type=all&search=wimmah1985


matahara                 2 Weeks Ago   bumface, hi. user wimmah1985 with same post in china-chat
wimmah1985          2 Weeks Ago   SlipperyPete, Totally agree
wimmah1985          2 Weeks Ago   mismail82, a coin worth over $20 ain't dead... and it won't
wimmah1985          2 Weeks Ago   zkaraca, Totally agree... the rest is hyped
wimmah1985          2 Weeks Ago   mismail82, LOLsweet dreams
wimmah1985          2 Weeks Ago   btcchoonsy, it wasn't me..don't know what happened
caliente                 2 Weeks Ago   wimmah1985, wtf is wrong with you
wimmah1985          2 Weeks Ago   i was hacked... be aware of same evil folks
btcchoonsy               2 Weeks Ago   wimmah1985, <-- lower than a snakes belly , trying to steal peoples coin , do you                 
                                                       realise the effects this can have for some people Huh??
wimmah1985          2 Weeks Ago   sorry guys
wimmah1985          2 Weeks Ago   rocojo, why are you saying I'm a thief? I can not understand.
kashacharya          2 Weeks Ago   wimmah1985, stop spamming that crap link thats why
sinx13                  2 Weeks Ago   wimmah1985, put his lousy domain on the autoban list
btcchoonsy                   2 Weeks Ago           wimmah1985, <------=== Ban Him
wimmah1985           2 Weeks Ago   made over 500$ today by following signals from http://predictcoin.info/ and twitters Smiley
rocojo                 2 Weeks Ago   wimmah1985, the thief is back!!!!
wimmah1985          2 Weeks Ago   rocojo, heard that for some time now... though they should, I don't believe they'll       
                               add it soon... any links that argument you saying this?
newbie
Activity: 26
Merit: 0
Hello

My account is suspended too but i was never hacked and there was no other problem with my account.
Litepresence knows also about me and my asset. Yes, this is my first post. I am here to search for help.

The reason for my ban is here:
http://trollboxarchive.com/search.php?search_type=username&search=sinx13

Everyone can see that i  suggested to add the phishing site to http://www.google.com/safebrowsing/report_phish/, which would
at last block the site in most browsers so people don't think its valid because posted in the chat.
The trollboxarchive messed up the chat line perhaps the auto suspension bot too.

Instead as helpful i got suspended.
Everyone can see that i have a clean history and my account  got suspended 2 hours after that line was written.
I never was hacked, never promoted spam, never did anything wrong. I am a btc-e member since mai or april 2013.

I can proof my asset too because i am also a trader at cryptotrader.org using their and the BTC-e api and my trades
got documented outside btc-e.

I have good contacts to the chat moderators and they tried to help and and write PMs to the admin that it was an
accident and of course i opened in the same hour a ticket. But that did not helped or the admin(s) even not
talks with their own mods.

My account is now banned over a week. No comment, no email, no communication, nothing.

I am aware that the days right now are busy for the admins & exchanges but when i see how long other got suspended without
any help then i am scared.

I will report here now how this will go on.

As a note: So far i was pretty happy with btc-e. Its perhaps the best exchange at this moment and i can't understand
why they allow that their reputation get damaged here in such a way. It makes no sense to me and that is what
me (and i think litepresence too) scares. It would cost only a bit work to fix all this, cleaning  the open suspension tickets
and everyone would vote for btc-e as exchange #1.

newbie
Activity: 24
Merit: 0
Quote
I've recieved a response from BTC-E now

So... How long did the response actually take? You submitted 'Account hacked' tickets to which this respond was refering to?

Glad to know that they are responding after all. I'm waiting for eight days now for any respond..  Undecided
newbie
Activity: 17
Merit: 0
Quote

So let's get this stragiht:
No 2FA for yahoo mail
No 2FA for btc-e
Used same password on both sites.
100 BTC kept in this account.


Obviously the same password was not used on both email and btc-e, or the hacker would have been able to withdraw the funds.

I deleted previous thread because I wanted BTC-E to not get pissed.

I've recieved a response from BTC-E now asking for verification which I have provided. As long as everything work's out I will have nothing bad to say about BTC-E, and continue using the exchange as I have for the past 2 years.
full member
Activity: 358
Merit: 118

I call total BS. When they ban you from chat it has no affect on your account.
I'm sorry if your story is true, but this thread has 2 low post noobs bashing btc-e.
You guys combine truth (i.e thier poor English) with what could be a big pile of lies.


I am a high reputation member "presence" at ronpaulforums.com, I am also the #5 trending username "litepresence" in the BTCe archive.

google "by presence" site: ronpaulforums.com

or check trollbox archive... I'm right there at the top next to davidpate fontas and koolio




I can confirm that a good friend of mine user "Swof" has 1000 LTC currently seized for posting a warning in the troll box "do not click on predictcoin(dot)info" links.

No access 1000 LTC since price was $25/LTC over 30 days ago; last price $17/LTC



This is very real.

litepresence
newbie
Activity: 54
Merit: 0
why not just close down the trollbox it really serves no purpose and it would save a lot of headaches
newbie
Activity: 13
Merit: 0
Another example from the trollbox archive.

Here is a user claiming what happens as he signed up for the predict coin page.
Its of course not to verify he is honest, but there are some signs:

- a normal character starts to spread automated spam lines out of nowhere (why should he? At last he should use a different sentence).
- he is explaning it with a twink and see how confused he is
- there is no one helping as you can see
- the bad domain get posted over and over by more and more accounts
- mods KNOW that domain is malware and even warn & ban it !
- different users told out of nowhere the same story

The twink: http://trollboxarchive.com/search.php?search_type=username&search=Thomassmulders
The original account: http://trollboxarchive.com/search.php?search_type=username&search=thomas89

and again the phishing domain (is a bunch of "predict" domains all using the same layout and all), still active TODAY posted and spread by the btc-e chat:
http://trollboxarchive.com/search.php?search_type=all&search=predictcoin

Please look at the insane amount of used chars - some of that have history never doing anything wrong.
Then, boom, they spread the malware domain - all with the same sentence.

These are, with a good chance, hacked people. Hacked by links who are spread even now by btc-e because
they can't deal in a sane way with domains in the chat.

Example: i just clicked on the users in the link above. http://trollboxarchive.com/search.php?search_type=username&search=wimmah1985

You see how he is starting to spam that link. then something happend.
When i should guess he logged in (the original owner). Then he starts to wonder what happens. Then he is gone - no post anymore
close after he posted the link. That means with a chance he is also suspended.


As far i know there are alot more cases like that. Just check the users!

It can't be that out of nowhere such many users without any negative history started to pop out as long hidden hackers.
I assume many make it not public for some reason, at last they fear a permanent ban and the lose of all asset.

And yes of course - joining such a phishing site with logins/emails you use on your trading site IS stupid.
But not everyone is a computer nerd and to be naive and missing a security mind is no reason to thread people like we see here.

Would it make a difference when the malware domain would be a zero day infection adding a trojan to your site by an automated drive-by-attacken
who added a keyboard logger? I think not.
newbie
Activity: 13
Merit: 0
Let's see some established users verify any of this, because:

...and who named that domain
in the chat was suspended too. Suspended means that the whole account access is dropped and all fund are for that time seized.
...

I call total BS. When they ban you from chat it has no affect on your account.
I'm sorry if your story is true, but this thread has 2 low post noobs bashing btc-e.
You guys combine truth (i.e thier poor English) with what could be a big pile of lies.

Ok, i can show you at last what had happened at btc-e in the last 2 month and how btc-e and the trollbox was
attacked by hackers and malware links and that the site and the mods was not able to deal with it.

Bitcoinwisdom is one of the main chart sites - as many know they warned some time with a popup people that
other domains claimed to be bitcoinwisdom and tried to install maleware. I think enough people had seens that.

So - one major source to spread that malware domain was the trollbox. There was some domains used i can't remember,
some included bitcoinwisdom as frame and had a download link for "better charts" (you can think what it was), some
had java trojaner. The most successful of that domains was the .net variant, which was a fake domain and not releated
to the com. Here is, what happend 8 weeks ago at the trollbox. That was one of the first bigger attacks.

http://trollboxarchive.com/search.php?search_type=all&search=bitcoinwisdom.net

Scroll a bit down - you will see soon rows of rows with that domain, claiming to offer charts.  You will see 2 things.

First, i need on a big screen 14 page down to move through all that rows. Thats alot, the attack was done over several days.
Second, you will see at some point that the user account spreading the line is changing over and over.

The trollboxarchive does not log bans and such but that is what happend. The mods banned the account of the hacker, but that
guy simply created a new one and spamed on.

Well, as i pointed out the chat miss basic protections. So mods was always behind.
They are not to blame, they use the tools they have.

Now, one way to stop the spam (not only malware) was the idea that a user must have at last $100 in its account to post in the chat.
But that did not stopped any hacker.

Because a mod can only ban a user from the chat! NOT suspend the account.
So, what happend? The hacker transfered 10 litecoins or so to the account, spamed, got banned, moved the coins out and to another
new account. That simple. The transfer costs are no problem, every infected user gave him alot more.

That was only the start. One other phishing site was predict-btc, preditinfo and such. And that attack is already going on.
Its incredible to watch, even that hacker was one week not active. Then he attacked again this week.

http://trollboxarchive.com/search.php?search_type=all&search=predictcoin
As you can see, the user spaming that malware domain is changing as fast as mods ban him.

Now, what happens then? The mods banned all this spammer accounts. For weeks or a month.
And then the chat ban weared out. They returned. And the spammer used them partly again.

At that point, because the mods are no team members of btc-e but some exclusive traders (not sure they get payment too),
they needed someone dealing with this incredible amount of known hacker accounts. Look at only the 2 links i gave you.
Search for more "predict" spam. We talk about some dozen accounts, if you count all perhaps hundreds of hacker accounts,
if you look all that different malware links posted in the last 2-3 month in that chat.

They needed to ban then to kill them and to avoid the reuse and all.

But how? you don't work yourself by hand through 8 weeks of chat lines. They did something automated. Like a grep on the data.

And there we are - that is the point where people get caught when they had that patterns too in a chat line.
I am sure the admin or whoever did the bans tried to catch only the hackers but this kind of action always have
some collateral damage. I know it, i had to deal with similiar problems on my own sites.

I hope i was able to explain it good enough: Again - i don't think btc-e tries to scam people or doing harm to poeple.
They was caught on the wrong leg and they missed to deal with a problem in time.
Thats ok - but they should now a bit more helpful.
newbie
Activity: 13
Merit: 0
obviously they detected unusual activity in your account and suspended it.
i'm sure this has a timer , like money hold, and after that it will be reenabled.

i suppose they do this to give you time to "clean" your computer and reset all of your passwords to secure ones,
after that you should then ask them to re-enable your account.

however, as they don't know who is the legit owner, they will most likely not raise the block/money hold until the timer runs out, if you are in a hurry you should add your ID on the ticket.

Hmm oké... that could be the case...

If they only would announce how long this timer will hold my account, things would be a lot less mysterious though.

I have another explanation and a very easy one - its something i faced in my time as webmaster too.

First, read please my comment to the user who told us to use skype.

So, you will see now that there is only one support way - to open a ticket at http://hdbtce.kayako.com/.
Even when we assume a direct contact (however you managed that) you must have a ticket number - or they can't help.
Except one of the owner or core members of that company is your friend or contact.

What is kayako.com? Its a help desk company, selling, renting & hosting a browser based ticket software (called help desk, which
is a standard ticket & consumer managment software).

As you can see here http://www.kayako.com/pricing/ you have to pay $50 bucks per month to use the software "per staff user".
What that means?

Staff user are the number of support members dealing with the software and helping you. Aka how many people are working as a unique support account.
For every support guy dealing with the software you pay $50 bucks. Thats quite a cheap & good offer btw.
Ok, why i pointing that out? You remember that skype account, even its outdated? The real one is "support (thailand)".

Thailand? Yes - thats guys doing the base support. And that is normal. That is a hired guys from, well,  thailand doing the daily support.
Working through tickets and all. The name for that is outsourcing and thats how you do that as internet company, big or small.
There is no reason for many trivial support tickets like changing an email or such to burn the time of the admin or some other core members
of btc-e.

Now, here is what i think the problem is and what happend to people who experienced that their initial ticket was handled fast but
then the next step stopped.

The guy in thailand is not a core member of btc. With a chance its an independent internet guy or some student. Thats not bad - he
seems to do a good job. In fact thailand is known to deliver good and inexpensive people for this kind of outsourceing.

That thai guy will see your first ticket and he has some base access to the btc-e core system. For example he can set a flag to block a account.
Or to give an new email free. Such stuff, not critical and not dealing with money or account details related to the assets.

You don't want an outsourced support guy in thailand with access to your acocunt funds , right? And for sure btc-e don't want give
external people access to their hot or cold wallet, internal transaction data or the funds of an account too.

Thats something you want hold inside the company. In best case right in the next room under control of the owners or the high staff members.

So, what happens?

As the first ticket about was written, it was just an account block. The thai guy dealed with that. Because that kind of action must be
handled "in time" at support side, it is important to have a first fast eye on such tickets. You must have enough support guys dealing with
trivial and/or time critical tickets. If that initial ticket had needed like 5 days, the hacker would had already plundered the account and would
be gone. It must be handled in a somewhat close time window.

After he dealed with the hot problem and the account was successful blocked so no one can remove funds and manipulate it, the thai guy
moved the ticket over to someone inside the btc-e company itself. A second support member, an internal btc-e guy who has access to
funds & wallets and who can go in the details to determinate who is who, what the hacker did and how the real account status it.

That is, how a help desk ticket system works and why you have to pay for every staff member.

And that is now the explanation, why the ticket was handled one time fast and then slow. The fast must be fast or it will fail.

The slow is the worse one and the problem
. That support step is going wrong atrm. That btc-e support staff member , who ever he or she is, is not doing the right job.
He does not communicates, he did not gives signals and it needs far to long.

That is the point this thread hooks in. To suspend a account is one thing - to let it unexplained suspended and drop the communication
is another. Because hacked or suspended by other system - at last a core support member must deal with it and i assume they have
not a dozen of that sitting there.
newbie
Activity: 13
Merit: 0
just contact them via skype or icq

This is one of the things where i don't know what to say...
Or alot.

First: This problem has nothing really to do with btc-e as exchange - and they can't fix it.
Its just an ill advise and btc-e already removed official support lines to skype from their site.

Ok, in simple words: Following this "suggestion" will lead you with a high chance to a hacker who will try to steal the account.
Lets me show why.

If you look at the btce-e.com site you will notice that there is no hint to any skype, icq or any other support medium as the 2
links on their frontpage - the "support" link listed by contacts  under the chat & twitter box and the support link in the main menu.

Both leads to this page: http://hdbtce.kayako.com/

This is the official and ONLY way to contact the support.
That is also the only way to open a ticket. No ticket, no support.

In theorie, the support can contacted in the chat - but checking the support chat history shoes that
the support only answered 2 times in the last 6 month. Half a year ago it was different, since that the
support account was not used for answers in the chat:
http://trollboxarchive.com/search.php?search_type=username&search=support

I assume that was the date where btc-e buyed the help desk at kayako.com and outsourced the non critical
support questions to some externals. Which is nothing special, alot companies does the same.

So, skype... How should we do that?
Lets try it. We search for "btc-e support".

This is what you will see:
https://imageshack.com/i/j7c0h4j

As you can see we alot support there - 7!! account claiming to be the btc-e support.

Well... at last one should be the official one. 1 or 2 perhaps are some special case one.
But 50% or more of that are just hackers waiting for poor noobs and their accounts.
How is that possible?

Simple: Skype is not an unique address system but a name system. Anyone can select the name
btc-e support and even if you know the EXACTLY name the search will also list the hackers.
Thats not a bug but the design. Like a phone book will give you all members of the same name and it will
not pre select for you.

So... lets play russian roulette... which one?
I mean it... What would you select? Everyone reading this can also search this forum, i don't post links to the sad
threads here where people posted their experience with the hackers and their accounts. Not funny.

There is one way to know the right skype account- where even IS NOT SURE its still valid or in the meantime overtaken by
some hackers - there is no official link anymore.

Here is a a trollbox archive link where a chat moderator tells a user the right skype channel - and some more:
http://trollboxarchive.com/search.php?search_type=all&search=Thomassmulders

Quote: "bumface    ... Thomassmulders, support.btc-e hdbtce.kayako.com (thailand ) is real"
and
"bumface, thnx mate the other one is asking for passwords to " fix" your problems"

So, this tells us 2 things: the real support name and the fact the mods and btc-e knows that the others
are not real.

What means not real? Well, thats clear, or? That are the hackers.

Now, everyone in this thread and reading - ask yourself: How would normal experienced user in terms of the internet and all
handled this? How big is the chance that he comes to this thread, reads the answers to this thread who claims me and the other persons
with the similar problems are noobs and perhaps telling not the truth?

But the guy giving the advise which leds to more hackers as real support is not commented ?
Make your mind. Its not good.

newbie
Activity: 24
Merit: 0
Hmm oké... that could be the case...

If they only would announce how long this timer will hold my account, things would be a lot less mysterious though.
member
Activity: 80
Merit: 12
obviously they detected unusual activity in your account and suspended it.
i'm sure this has a timer , like money hold, and after that it will be reenabled.

i suppose they do this to give you time to "clean" your computer and reset all of your passwords to secure ones,
after that you should then ask them to re-enable your account.

however, as they don't know who is the legit owner, they will most likely not raise the block/money hold until the timer runs out, if you are in a hurry you should add your ID on the ticket.
newbie
Activity: 24
Merit: 0
Agree on that, but they would be much more top notch if they replyed on tickets of suspended user accounts...
sr. member
Activity: 644
Merit: 250
BTC-e are really top notch, especially their trading engine. To bad they are Russian sponsored, incorporated in Cyprus with the servers in Bulgaria. But hey....it's the early age in Bitcoin development right ?
newbie
Activity: 24
Merit: 0
Well yeah, I'm an so called 'post noob too', but never the less; I've got the same problem. Noticed my account was hacked; quickly changed my password; and everything seemed allright again: My funds were still there and there were no false logins on my account anymore.

The next day I wanted to trade on my account, but suddenly I was suspended. Thran, I agree this is a adequate action of btc-e . I appreciate their awareness of hacked accounts. And it's OK for me they freeze an account some time if it's been hacked (or an attempt of it)

But then my attemps to regain my account and funds failed. Filled in a couple of tickets (in English and Russian) but after a week: no repley at all...

This frustrates me. Why do they have an ticket option 'account hacked' but don't answer any of them. Also, it should be helpful is they send an automatic e-mail when your account is hacked, which states out an procedure and time of this suspend. In stead I was suprised to see my account suspended after a day... an now don't know how or when I get my account and funds back.

To make clear: I'm not an BTC-e basher. I enjoyed trading on their site...
member
Activity: 110
Merit: 10
Hello!

I have a similiar problem, and a friend of mine told me his account containing funds is also suspended out of nowhere!

BTC-E has suspended my account containing 100 BITCOINS after I reported my email being hacked and requested withdraw be locked until I could recover my email.

I got a reply within two hours saying withdraws would be locked, and I was very pleased.

The next day I recovered my email address and changed my btc-e password, and saw that my account is suspended still. I know for a fact all my funds are still safe in my account because when the hacker changed btc-e password to access my account withdraws are auto locked for two days.

So I make a ticket first day asking for my account to be unsuspended, no response. I keep making tickets for the next 6 days and have received not ONE single response.

I have been trading on btc-e for YEARS. This should not happen. It is very suspicious to me, that they replied nearly instantly on my first ticket asking to lock withdraws, but not on one of my 20 tickets I have made asking for a reply as to my account being unsuspended. I have told BTC-E if I do not recieve a response in next week Im hiring a lawyer and contacting authorities.

THIS IS RIDICULOUS.

For someone who's payed thousands of dollars to btc-e in past years this should not be happening, it's either a scam that's taking place, or very big problems for BTC-E owners and they have 0 time to respond to tickets?

I don't know WHAT is up with BTC-E but all I know is do NOT deposit ANY money in the site until these issues are resolved with users.


You already have a thread about this:

BTC-E Account containing 100 BITCOINS hacked!
https://bitcointalksearch.org/topic/btc-e-account-containing-100-bitcoins-hacked-451267


Why did you edit your opening post in the other thread that this issue is resolved? Your original post is quoted by the 2nd post of that thread.

Quote
I have been longtime BTC-E trader. Recently, a ton of yahoo accounts have been hacked and it's all over the news.

I was one of them.
So your yahoo mail account was hacked...


Quote
I foolishly used the same password to login to my email that i used to register my btc-e account..
You used the same password for yahoo email and btc-e and kept 100 BTC in that account???


Quote
The hacker was able to get into my email assocaited with my btc-e account and changed my security questions and backup email for that account. He then hacked into my btc-e account and changed the login information.

So let's get this stragiht:
No 2FA for yahoo mail
No 2FA for btc-e
Used same password on both sites.
100 BTC kept in this account.

and you blame btc-e for your own stupidity?


6 days have passed since you edited your opening post in the other thread that the issue was resolved.

And why the need to post in another thread on this issue?
legendary
Activity: 2114
Merit: 1040
A Great Time to Start Something!
Let's see some established users verify any of this, because:

...and who named that domain
in the chat was suspended too. Suspended means that the whole account access is dropped and all fund are for that time seized.
...

I call total BS. When they ban you from chat it has no affect on your account.
I'm sorry if your story is true, but this thread has 2 low post noobs bashing btc-e.
You guys combine truth (i.e thier poor English) with what could be a big pile of lies.
member
Activity: 112
Merit: 10
Minning powa
just contact them via skype or icq
newbie
Activity: 17
Merit: 0
Hello!

I have a similiar problem, and a friend of mine told me his account containing funds is also suspended out of nowhere!

BTC-E has suspended my account containing 100 BITCOINS after I reported my email being hacked and requested withdraw be locked until I could recover my email.

I got a reply within two hours saying withdraws would be locked, and I was very pleased.

The next day I recovered my email address and changed my btc-e password, and saw that my account is suspended still. I know for a fact all my funds are still safe in my account because when the hacker changed btc-e password to access my account withdraws are auto locked for two days.

So I make a ticket first day asking for my account to be unsuspended, no response. I keep making tickets for the next 6 days and have received not ONE single response.

I have been trading on btc-e for YEARS. This should not happen. It is very suspicious to me, that they replied nearly instantly on my first ticket asking to lock withdraws, but not on one of my 20 tickets I have made asking for a reply as to my account being unsuspended.

For someone who's payed thousands of dollars to btc-e in past years this should not be happening, it's either a scam that's taking place, or very big problems for BTC-E owners and they have 0 time to respond to tickets?

EDIT: I have recieved a response from BTC-E, they have asked for verification in form of IP, trade history, and method of account funding. I am very pleased. My post will be deleted once I get my account back.
newbie
Activity: 13
Merit: 0
You are a Mt. Gox sock puppet:

Perhaps we should hear him out and see what others have to say and perhaps be helpful before we go all "HE'S A NOOB, GET HIM!" on him?

Fair enough. I am just trying to make people aware of the possibility, because there is a lot of FUD spreading right now about other exchanges/Bitcoin protocol in an attempt to justify MtGox's actions. A lot of these posters are newbies with only a few posts.

Apologies if the poster is a genuine new member. (I deleted the post)

I ensure i am serious, if needed i can give a proof of over 10 years history in the open source szene and the internet at all.
With a good chance users from this forum had contact with one of my projects in the past.

Anyway, i hope i have enough sane arguments to point out my and btc-e's problem so i don't need to throw that in.

If something is not clear or i make no sense, please point it out - i will try to give more examples or infos.
member
Activity: 110
Merit: 10
You are a Mt. Gox sock puppet:

Perhaps we should hear him out and see what others have to say and perhaps be helpful before we go all "HE'S A NOOB, GET HIM!" on him?

Fair enough. I am just trying to make people aware of the possibility, because there is a lot of FUD spreading right now about other exchanges/Bitcoin protocol in an attempt to justify MtGox's actions. A lot of these posters are newbies with only a few posts.

Apologies if the poster is a genuine new member. (I deleted the post)
newbie
Activity: 13
Merit: 0
What does the [Gathering] is square brackets mean?

It means that people with the same problem should add at last a "me too".

This will help to see there are more poor victims or only me and swof.

Perhaps all happens because the support there speaks mainly russian and little english, you have
to submit bank data for banking problems for example (following suggestions from the mods)
with an russian copy if you want the support to success.

This thread is not to mark, harm or flame btc-e - its there to get a problem solved.
And even i say "its mainly btc-e's fault" does not means i am biased.
I can live with small problems and glitches - but this is a serious one and its also in the interest of btc-e to solve it.

And no, i am not a noob - that is the problem. I know exactly how critical, stupid and easy to solve that chat problem is.
I can fix it in nearly every implementation you can assume. I already fixed problems like that on other sites.
That is mainly what gives me a bad feeling, because i know that even some simple blogs care more about such a problem as
btc-e did in the past. That must change.
legendary
Activity: 1232
Merit: 1195
What does the [Gathering] is square brackets mean?
newbie
Activity: 13
Merit: 0
You are a Mt. Gox sock puppet:

Name:    Thran
Posts:    3
Activity:    2
Position:    Newbie
Date Registered:    Today at 01:04:24 PM
Last Active:    Today at 04:21:54 PM

Sigh... so, the first answer i get is a conspiracy theory... Yes, that gives me a good feeling when i think about my money.

What the heck will gox or the illuminati gain from this thread in any way?
Stay away from gox, it sucks and it sucked 8 month ago already, thats the reason i traded on btc-e and not on gox.

EDITED

I don't want that they are shot because that and there is no need to avoid btc-e or anything.
If you want join an exchange now, btc-e should be high on the list.
Except you should perhaps avoid the trollbox because its not only more healthy for your computer but for your brain at all.

BTC-e is a fine trading platform when it comes to trading, there is nothing bad to say and i did not.
That does not changes anything i said - they HAVE the trollbox, the trollbox GOT flooded by trojaner spam and
they DID suspended wrong accounts as collateral damage because they miss the right user protection and perhaps
they even miss it right now - they never communicated that and communication is the real problem here.

The mess is simple the second level: Their support service is a outsourced crap, their dealing with the trollbox amateurish and when this thread helps
to fix only one of that topics then all will win alot, including btc-e itself.

Please also look in this thread: https://bitcointalk.org/index.php?topic=417094.20

And yes, i joined exactly because that. Why should i without? There is not much to say on my side beside that.
sr. member
Activity: 434
Merit: 250
You are a Mt. Gox sock puppet:

Name:    Thran
Posts:    3
Activity:    2
Position:    Newbie
Date Registered:    Today at 01:04:24 PM
Last Active:    Today at 04:21:54 PM
Let's see other reply 1st, but yeah this may actually be true thought.
newbie
Activity: 13
Merit: 0
UPDATE:

After browsing the trollbox archive (the chat archive for the btc-e chat trollboxarchive.com)
and checking the spaming accounts and user i found more very clear signs whats happens RIGHT NOW on btc-e.
BTC-e is through the chat under a malware attack and they can't fix it.
Please read this update i also posted on page 2 so you get whats going on.

This is the malware domain, posted over and over in the thread since weeks, using hacked accounts which then
got suspended: http://trollboxarchive.com/search.php?search_type=all&search=predictcoin

########
to check it by yourself, click on the different usernames in the link above to follow their chat history. You can see how many old accounts are there.

You can also see how their behaviour changed. Thats is clearly the same user accessing different accounts or the same bot.

- EVERY HACKED ACCOUNT even when half a year old and more and with a clean history vanished forever after he droppped the malware link
- that means this accounts never recovered
- we speak for patterns & accounts since 4-6 weeks ago and more - that means suspended accounts in the limbo since mid/end december,
at last that is the impression what the archive gives

The seized/holded amount of dollar must be somewhat high. There is no sign they was able to access their asset so far.

########


---------------------------

Another example from the trollbox archive.

Here is a user claiming what happens as he signed up for the predict coin page.
Its of course not to verify he is honest, but there are some signs:

- a normal character starts to spread automated spam lines out of nowhere (why should he? At last he should use a different sentence).
- he is explaning it with a twink and see how confused he is
- there is no one helping as you can see
- the bad domain get posted over and over by more and more accounts
- mods KNOW that domain is malware and even warn & ban it !
- different user with different and clean chat history are spaming out of nowhere the malware link

The twink: http://trollboxarchive.com/search.php?search_type=username&search=Thomassmulders
The original account: http://trollboxarchive.com/search.php?search_type=username&search=thomas89

**************************

and again the phishing domain (is a bunch of "predict" domains all using the same layout and all), still active TODAY posted and spread by the btc-e chat:
http://trollboxarchive.com/search.php?search_type=all&search=predictcoin

**************************

Please look at the insane amount of used chars - some of that have history never doing anything wrong.
Then, boom, they spread the malware domain - all with the same sentence.

These are, with a good chance, hacked people. Hacked by links who are spread even now by btc-e because
they can't deal in a sane way with domains in the chat.

Example: i just clicked on the users in the link above. http://trollboxarchive.com/search.php?search_type=username&search=wimmah1985

You see how he is starting to spam that link. then something happend.
When i should guess he logged in (the original owner). Then he starts to wonder what happens. Then he is gone - no post anymore
close after he posted the link. That means with a chance he is also suspended.


As far i know there are alot more cases like that. Just check the users!

It can't be that out of nowhere such many users without any negative history started to pop out as long hidden hackers.
I assume many make it not public for some reason, at last they fear a permanent ban and the lose of all asset.

--------------------------

ORIGINAL POST:

BTC-e suspended alot accounts in the past weeks as their chat was overrun by hackers posting malware links on their (unprotectd aka no whitelist/pre moderation) ajax chat called the trollbox.

To deal with that, they started to use in the last month some pretty basic grep & ban protocol here and there to suspend the accounts of the hackers.

What was a good move in general had some bad side effects: People who tried to warn to access a bad domain and who named that domain
in the chat was suspended too. Suspended means that the whole account access is dropped and all fund are for that time seized.

In my case btc-e seized some bigger amount of $ which i am not able to access for over a week now.
Now, that would be no problem if there that was a way to communicate with btc-e or to withdraw the fund and stop trading.

There are other cases people had no access to their account for a much longer time:
https://bitcointalk.org/index.php?topic=417094.20

But the fact is, that there is no way to communicate:
- you are blocked from all direct site access so you are not able to PM moderators, admins or support
- your have to open a support ticket on a different domain (hdbtce.kayako.com) where your ticket is marked as assigned
but no one is talking to you, answering your question or whatever (after one week)
- if you are in coins you better hope the market did not crash or you are doomed to lose

Let me point out that the problem with the malware is a problem which escalated mainly because BTC-e never added any working spam protection
to their chat. A site is responsible for what is posted on it and it can't be that i add a chat on a trading site where millions are traded and i
simply miss to add a modern spam protection like whitelist and JIT moderation (just in time moderation, which is analysing posts for patterns like unknown
domains and put them on a moderation queue instead make them public).

ATM everyone is blaming gox for using an outdated and/or amateurish working wallet but how is that more worse as a site allowing criminals to
post trojaner links and password stealers over weeks and month on their frontpage just because they are not able to add a whitelist or link excluder to
a simple ajax chat? I and every common web programmer can add such a thing in less a day including testing. There are not many technologies on the web
that are common and already tested like a domain or email grep, whitelisting and chat moderation.

Who else is in the same situation? Who can't access their account and their fund?
Who had money or coins on btc-e seized and how long now?
Jump to: