Bitcoin Forum

Hi All/Admin/Moderator

My primary bitcointalk account is hacked that is why i have created a new account to get in contact with admin/moderators to help me recover my original account.

Orignal account
username : hunkey600
email : hunkey600@gmail.com
Position : Full Member


When i am trying to login it says password incorrect, Then i try to recover it using recovery option

1) By using username (hunkey600) - It says email has been sent but i have not received.
2) By using email (hunkey600@gmail.com) : It says user does not exist

I think someone has changed my email to recover password.


How i doubt my account has been hacked

There was a guy from bitcointalk skyped me, name (nizam) and asked was i selling bitcoins then he started abusing me when i said no he created some abusive files on my desktop after than i not able to login bitcointalk.

Even my gmail detected some suspicious activity and asked me to reset my password.

I am not able to paste that chat from skype since i blocked that user and now skype chat is gone.

Please can you help me, what should i do?

Please admin/mod/users?



Skype chat
yo m8
[09-06-2015 23:38:51] Nizam .: you from hackforums?
[09-06-2015 23:38:56] HF: hey
[09-06-2015 23:38:57] HF: yes
[09-06-2015 23:39:03] Nizam .: are you l33t or ub3r?
[09-06-2015 23:39:19] HF: I an new to HF
[09-06-2015 23:39:22] Nizam .: oh
[09-06-2015 23:39:23] Nizam .: kk
[09-06-2015 23:39:25] Nizam .: i need btc
[09-06-2015 23:39:31] Nizam .: i can do bank transfer
[09-06-2015 23:39:33] Nizam .: to your bank
[09-06-2015 23:39:36] Nizam .: if you want
[09-06-2015 23:39:37] Nizam .: i go first
[09-06-2015 23:39:40] Nizam .: i need 0.8 btc
[09-06-2015 23:39:41] Nizam .: do you have?
[09-06-2015 23:39:50] HF: i don't have 0.8
[09-06-2015 23:39:57] Nizam .: how much
[09-06-2015 23:39:59] Nizam .: you have
[09-06-2015 23:40:00] HF: 0.3
[09-06-2015 23:40:12] Nizam .: kk
[09-06-2015 23:40:13] Nizam .: i buy
[09-06-2015 23:40:15] Nizam .: if you proof me
[09-06-2015 23:40:17] Nizam .: you have 0.3
[09-06-2015 23:40:21] Nizam .: i send you the money first
[09-06-2015 23:40:24] Nizam .: i pay +10%
[09-06-2015 23:40:26] Nizam .: of the value
[09-06-2015 23:40:37] HF: i am not taking bank transfer
[09-06-2015 23:40:43] Nizam .: what do you take
[09-06-2015 23:40:51] HF: perfect money only
[09-06-2015 23:40:55] Nizam .: kk
[09-06-2015 23:40:57] Nizam .: have also that
[09-06-2015 23:41:05] Nizam .: proof me
[09-06-2015 23:41:06] Nizam .: you have 0.3
[09-06-2015 23:41:11] Nizam .: i go first
[01:43:02] Nizam .: fag?
[01:43:12] Nizam .: you have not
[01:43:13] Nizam .: trying tos cam
[01:43:14] Nizam .: scam
[01:43:19] Nizam .: fuck you
[01:43:33] HF: there is something fishy about you man
[01:43:41] HF: how did you find me?
[01:43:47] Nizam .: bitcointalk
[01:43:57] HF: I never said I am selling
[01:44:04] Nizam .: i found your Skype there
[01:44:25] HF: sorry man
[01:44:36] HF: its hard to trust
[01:44:44] Nizam .: what
[01:44:45] Nizam .: i go first
[01:44:48] Nizam .: you dont go firsst
[01:44:52] Nizam .: only show me 0.3 btc
[01:44:53] Nizam .: proof
[01:45:33] HF: i'll let you know if its not urgent
[01:45:58] Nizam .: its urgent
[01:46:07] HF: scammer
[01:46:15] Nizam .: who me?
[01:46:18] Nizam .: lol
[01:46:44] HF: sorry why are you forcing to sell the coins
[01:46:48] HF: plz stop
[01:46:51] HF: I don't wanna sell
[01:46:54] HF: scammer
[01:46:57] Nizam .: you dont have
[01:48:08] Nizam .: open your desktop
[01:48:57] Nizam .: see file names
[01:48:59] Nizam .: of your files
[01:49:06] HF: now get lost
[01:49:25] Nizam .: you can edit that
[01:49:26] Nizam .: scammer
[01:49:36] HF: get lost moron
[01:49:40] Nizam .: wait
[01:49:41] Nizam .: i show you
[01:49:43] Nizam .: who is a moron





Thanks in advance

How was he able to put malicious files on your computer?

I've left negative feedback on your account because the site that is being spammed highly likely contains some sort of virus or malware as well as being a ponzi scam. If it does turn out your account was compromised then I will remove or change it to neutral.

Was the Skype account possibly Nizamhekker and/or nizamcc?

The above Skype name is associated with the hacking of yussuf89.

yes right Nizamhekker, please help

That is almost certainly the same person. Here is what I have on him (thanks to MadZ):


Also two of the above accounts appear to have been in control of by marcotheminer after the relevant addresses were posted (he claims to have acquired them via defaulted loans), hence the lack of negative trust. (refrence (https://bitcointalk.org/index.php?topic=964525.msg10558580#msg10558580))

Now what should i do, is it possible i can get my account back? Can admin help?

Wait for marcotheminer to sell it, the new owner will create a bitcoin dice site that will ultimately fail then the new owner will hopefully give it back to you  :D

You mean, marcotheminer is guy who hacked my account? Now he gonna sell that? Admin won't do do anything to help me?

LOL. That was a joke. I somewhat doubt that he is the one that hacked your account. From what I can tell the person who hacked your account is someone that primarily speaks Germin, but other then that I have very little on him (you can look at this (https://bitcointalk.org/index.php?topic=964525.msg10558580#msg10558580) post to get all the info I have on your hacker).

It is hard to say for sure if your account will be recovered to you or not. You will at the very least need to provide a signed message to prove your ownership of the account (see this (https://bitcointalk.org/index.php?topic=497545.0) thread[/url]).

Don't bother recovering the account, it was banned today for spamming ref links (54 posts in total).

Abusing the guy that is responsible for your weekly shilling paycheck. How hypocritical.

how long was the ban? can high ranking members be permanently banned?

But this is so not right, i didn't sapm anything account was compromised it was done by hacker only. why would i do that?

He is also a knowm scammer as stated on this thread. Please let me recover my account?

Can you explain what does signed message mean, how to create one to recover account and is there any other way to recover plz help?

Here (https://bitcointalk.org/index.php?topic=990345.0) are instructions and a tutorial in reference to how to sign a message.

Assuming that your claims are true, even though you did not personally spam the forum, it is still your responsibility to maintain your proper security practices to keep control of both your monty and your account.

Although I have not seen eye to eye with grue in the past, I would agree with his statement in this case. It is neither his nor my decision to un-ban your account, nor is it either of our decisions to recover your account, however I find it somewhat unlikely that your account will get un-banned or recovered. I would also opine that it would be acceptable to allow you to create a new account to start fresh from without you being considered to be ban evading.

Even if your account were to get recovered and un-banned, it would be hard to tell for sure that you have properly secured your computer to prevent a similar attack from happening in the future.

Can i use address for my sign message which i have used on my account (hunkey600), like i made few posts with my address on bitcointalk stating that as my payout address and i am in countrol of that, can i use that?

Or which address i use for sign?

how can he create file on your dekstop..
did you gave him remote access or other stuffs like that?

If you have posted an address in the past and have not edited that post then you should be able to use that address, however it is not guaranteed that theymos is going to be willing to put in the time to research to determine if it is appropriate to restore your account to you or not (for example to check if the account was likely sold)

In this post https://bitcointalk.org/index.php?topic=1002314.msg10882770#msg10882770 you have mentioned a transaction from this address:
16yev2dQTWJVMWY2UisqBVe5Gd7gPbfG6F

In this post https://bitcointalk.org/index.php?topic=1025346.msg11141473#msg11141473 you have mentioned this address:
3DemdXvbncdTXDofuUatv48vxHkU53PhXH

Do you think you can sign mesage from both or any one of these addresses?

These are old posts. We will not trust any post made after recent server compromise which was on 25th May.

I have sent the admin a signed message lets hope he replies positive, i sent him a post older than 25th may also. Will that work?

If you have sent the signed message to theymos, you may have to be patient. He rarely gets a chance to look at all the stuff he receives.

You may as well post it here, so other staff and community members can verify and support you (and can stay away from hacked account until it is handed over to you again).

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account hunkey600 has been hacked/lost. Please reset the email to hunkey600@gmail.com. The current date is 10/06/2015.

-----BEGIN SIGNATURE-----
16yev2dQTWJVMWY2UisqBVe5Gd7gPbfG6F
G/KEpo7/IbF6Vrzau1gV8MagApjRXYTqFPulAywMZ1yXCnioARnMXdx1yLOrqOWI71xSuaztBpzzeO+u1/bXd7c=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: ...

First
https://bitcointalk.org/index.php?topic=1061699.0

Re: CryptoHours.com - 2% Per Hour - 100% Profit in 100 Hours - 15+ Altcoins - 10% Ref Commission
May 15, 2015, 05:59:55 PM
Reply with quote  #11
They are not paying all SCAM!!!!!1

16yev2dQTWJVMWY2UisqBVe5Gd7gPbfG6F

Second
https://bitcointalk.org/index.php?topic=1058526.20

Hi Admin,

I made a deposit of 0.05 to address (3HDGqFWquEXD3txLv5uUrJfFsGoEN9tmKh). Tx id

https://blockchain.info/address/3HDGqFWquEXD3txLv5uUrJfFsGoEN9tmKh

But my payout address is displayed blank, can you plz update

payout address : 16yev2dQTWJVMWY2UisqBVe5Gd7gPbfG6F

--------------------------------------------------------------------------------------------------------------------------
Hi All,

My account (hunkey600) is hacked and i have sent a signed message as showed above to admin. I have also highlighted my posts which included my signed address. Please let me know if i will be get my account back.

Admin/Mod please help since i have the signed message too.

Thanks

ohh...too funny..
probably this guy canknow something about hacked accounts..
moron these urdu language..cant understand anything..

https://bitcointalk.org/index.php?topic=1086187.0

I translated it using Google and it looks like he is selling stolen forum accounts information for BTC.
Reported to mods. Thanks.

Here's the translation:
They give me emmense happiness taht has got on this forum is not security, btw i dont have any gurdge hack this forum, but I need a few coins and tested on this device simple forum by injection .. I tried to hack rider site PTP, and managed successfully 500+ $ I see this forum for Bitcoin, there are fewer people who want Bitcoin here, so I'm doing tricks on your forum, I found the forefront of 500+ user names and passwords, and I do not want any accounts only sale .. link from satoshibox contain buy cars with full outline of the data base table and with 20 accounts of all 100+ category..somewhere such activity, I do not know to deal with activity but most of them made in 2014 accounts. Thanks .. snapshot of one part of the database schema ...

what it means?? is it true...what is rider site ptp..

I think there is someone who is easily able to hack bitcointalk account as stated in above translation too. Admin should take some measures to avoid this. I am still waiting for reply from admin for my signed message.

Can anyone tell me how to verify signed message?

https://brainwallet.org/#verify

Extensive tutorial on signing and verifying:
https://bitcointalk.org/index.php?topic=990345.0


EDIT:
I have verified your message and it is verified to be from the address you provided. All good.
Probably some admin/mod can now take action to hand over the account to you.

Thank you so much for verifying.

Can admin/mod look into this fast, this is not good to have accounts in someone else's hand, they can misuse or sell my account, plz any way to verify it fast and come to conclusion. Thanks

Adin/Mod,

My sign is verified by one of the trusted user, can you please make sure my hacked account is not misused/sold. I don't understand why there is delay, i mean what could be more important than a user account is hacked. i mean delaying processing my request is really not professional even when i provided everything you guys requested.

You can PM BadBear or other staff members if theymos takes long time to respond.

You can search for admin/staff members here:
https://bitcointalk.org/index.php?action=mlist;sa=search
(Just put "admin" or "staff" in the search field and tick 'search by position')

You can even see their online status in the search results, so you can easily decide who to contact for fast action.

Quoted in case hacker edits the post

Please don't PM other Staff members, we can't do anything for you. Only BadBear and Theymos have the power to help you out, but both are very busy so it can take a while before something happens.

ok atleast you could make sure that hacker does not misuse/sell the account, alteast apply some restriction to my hacked account since i proved my signed message and after BaBear and Theymos are free they can look into this. Please do that.

Your account has been banned, didn't you read grue's post? They can't do anything with it. Even if the person sells your account, it would still get recovered.

So the best OP can do now is wait until theymos gets time to recover his account, and hope the account remains banned until then.  ::)

Theymos or BadBear, but yes, all he can do right now is wait. The account has been banned for at least 14 days (as that is the lowest punishment for constant referral spam, if I remember correctly), so there is no need to worry.

so even if the account is recovered it will remain banned fopr 14 days or ban will be removed after it is recovered and also i got negative trust due to this hack, will that be removed afterwards or not, since i didn't spam i already proved to you my account is hacked and there is no reason for me to spam. Since this was not done intentionally and not done by me it should be removed?

Most likely your account will be un-banned because it is proven that it was not you who was spamming.

Regarding negative trust: only the people who gave you negative trust can remove it. So you should show them this thread and request to remove the -ve trust. Most people will do that after being convinced that the account was hacked.

ok thanks sgk for your support through out the day.

Still nothing from admin on this, i have been waiting whole day but no action is taken, Admin/Mod plz help?

wtf?

Is this guy serious about hacking the forum at will?.......or is he simply in hold of passwords (successfully hacked) from the recent database theft?

Hunkey, you owe us a better explanation of how your account was hacked. Did you give this guy remote access or what?

No man i didn't gave this guy any remote access i already pasted skype chat i had with him, he initially asked me if was selling bitcoins, then after some time i said no, i never advertised that i am selling bitcoins. I asked him how did he found my skype id , he said from boitcointalk or hackforms. When i said no he started abusing me and when i asked him to to leave. He created some abusive files on my desktop (donno how he did that but there were 8-10 files were on my desktop, you can also check chat he said that he has created those files). After that i am not able to login bitcointalk and someone was spamming from my account, even i had a warning from google mail with suspicious activity and asked me to reset my password. Even my C drive/internet explorer is also showing some error.

No i am formatting my windows and i will be having new windows now. Please let me know if you guys need any further information. Maybe this is some injection he applied to my system i really don't know what mistake i did.

Sounds like your computer has been compromised. The hacker likely compromsied your PC via malware or an exploit, I think he must've then contacted you in skype and asked to buy bitcoins so that you would open your wallet and you might enter your password etc. You need to reinstall your OS, keep it updated and be more careful in the future. Also change all of your passwords and never use those passwords again.

Yes i agree with you, i will be doing the same.

that guy pmed me on skype,  saying something in othere muslim languages..cant read,only one thing i could read was racerptp hacked, targget here btc.......like so many broken english words.

Hi Admin/Mods,

Can you guys please help its been two days, plz help recover my orignal account (hunkey600). Thanks

Hi Admin/Mod,

Can you please atleast give me some updates some much time it could talk, this feels like i am fool here messaging and you don't bother to take any action.

You might be waiting awhile. Look around the meta section, you'll see others have waited months and still haven't gotten their account returned. Don't get your hopes up, move on, secure your new account a little better this time.

But what is there problem? I mean when i have proven that it is my account. Also then why admin has created a separate thread that "send me a PM with signed message if your account is hacked or lost" if they don't want to help anyone.

There is always the possibility that you sold the account and then are trying to recover it after receiving an agreed upon payment. It takes a good amount of effort to determine if this is the case or not. It is also often the case that this exactly is happening and would not be appropriate to recover the account to the prior owner.

There is also the possibility of malware on the owners computer which could result in the hacker being able to sign a message from an old address but not have access to the password to the account. 

I know it might sound wrong, but I'm pretty sure they only recover higher ranked accounts that could do some serious damage if left with the hacker or if they strongly believe the account wasn't sold and was indeed hacked.  I believe it was Vod who was able to get his back pretty quick while others continue to wait.

I don't think this account is meant to be sold since it was banned for spamming so if hacker wanted to sell this he would never spam and get negative trust, no one will buy negative trust account.

Secondly i am owner and my only bitcointalk account is compromised since this does not have 2FA or better security, so i have reinstalled my OS and changed all my passwords and i am in possession of all my wallets/accounts.

Last, how could anyone send the signed message if they don't have access to wallet, i mean i have proved my signed message.

I mean what else do they need to prove that this is my account. Admin/Mod never come and reply here. If they have any doubt they should check/ask me. But they keep on ignoring.

Such a  bad support, i think they should delete there thread where they say they will recover hacked/lost account.

Can anyone tell me why they are not looking into my request or they don't want to or any other reason or this is what admin usually does he does not give a shit about users and busy making money.

Normally they do recover the account if you have proven the ownership by signing a message. It might just that theymos might be busy with somehting esle, especially when there have been forum hacks and several accounts are vulnerable and possibly hacked.

Take a look at this:
https://bitcointalk.org/index.php?topic=497545.0


I know you have already signed a message. You might want to draft a PM EXACTLY as described above and send it to theymos just to be double-sure. Make sure to notice the bold part. You cannot recover the account using same email address.

My accounts password has been reset as per the admin password reset thread,

June 09, 2015, 08:27:12 PM - hunkey600 - password changed

https://bitcointalk.org/seclog.php

Admin/Mod plz take some action and help me.

Inspite of repeated reminder, nothing is happening. They will not look into this?

They don't always recover accounts. It can be difficult to figure out if the account has been sold or not and in the past theymos has been tricked into giving an account to the wrong person, so admins seem to only recover accounts when it is an extremely straight forward case. If you aren't getting much help you are best off creating a new account.

Can someone help this guy. Its painful to sit and watch. Surely its not hard to fix now he has proven his case?

Exactly. He has even signed a message from an address evidently belonging to him. This is very straight forward case. Just give him the account already!

It is so easy to say to create a new account what about my position i made in such a long time, its better i quit bitcointalk.

Second, Then why theymos has created a thread stating they can recover hacked accounts if we provide signed message, i mean if they can't recover they should atleast say 'No' i won't ask again but they are not even replying.

Third, If they are suppose to recover only selective accounts as you said then they should also mention that condition in there thread since i already provided signed message and it is not my mistake if theymos got tricked during recovering accounts in past and due to this we (innocent) users are suffering who got genuinely hacked by someone. This is so wrong wrong its upto them which account they recover and which not.

Also if they got tricked in the past then they should come with some better solution on this, because sometimes it happens when user losses its account and one one wants to lose his/her account it just happens.

Theymos is a shitty admin, restore his access already!

Yeah but we are in loss coz of his shittiness

I'm just asking this out of curiosity. but did you create that account using the same email as the hacked one?

----------------
apparently your account was banned almost the same time this topic was made. I think that's why your account hasn't been recovered yet. there's no way to be sure if that account was really hacked or if you lied (sorry) and created this topic in hope to get the ban lifted.

No i have used different email for this account since i read theymos thread i should not create new account with same email.

So you mean i created this new account to get ban lifted i don't even had access to my original account it is useless to get ban lifted. Also i have spent so many days to become FULL MEMBER and i will get myself ban just doing some shitty spamming on forum, is it really worth?

I know its hard to prove here that my account was hacked but i did my best to prove, i pasted my skype chat i had with hacker, also my account password was reset (as per theymos thread of changed password) also most of the guys here (like quickseller) know guy is a known hacker from past. Also i have given my signed message here as requested. Now tell me what else is left? i don't know what else to do now.

Yes i created this account as soon my orignal account was hacked, because i was automatically logged out from my original account and hacker told me in skype chat he has created some malicious files on my desktop and i was not able to reset/change password or login my orignal account then i had to create a new account to communicate with admin.

Man, I don't think there is much else you can do other than to hope a staff member lifts the ban.  I guess you could try messaging each one but I would recommend only sending ONE message per staffer with all the details and evidence.  That is the only thing I can think to recommend you do bro.   :(

I wouldn't do that


--------------

and I don't know if the account will be recovered at all


hope it will, tho

Now what should i call admin?

What is admin's problem now i sent him PM twice?

Does this mean he will not give my account back? Every time someone loses their account he will do same?

Guys, what if this has happened with you and admin had did the same, don't you felt bad?

I can understand your Problem ,  dont know about Theymos but Badbear is quick often in such decisions , i think you should send Pm to Badbear , remember to Add an Attractive , catchy subject so that he might Read it soon.

Hope you Get Your Account Back !