Bitcoin Forum

This was very shocking news i got today
All my account are hacked tomorrow I'm finished but this is to protect other user from any scam

Cloudminr.io Sold his Database for 1 BTC

Please change your password and usernames immediately otherwise all your account will receive a notification of getting hacked

Sharing where is database visible could be dangerous that why i'm hiding the information where the database is located.

Hello,

This is a public service announcement.

Your username, email address, and password for cloudminr.io has been compromised. Earlier today, it was posted at HIDDEN for the world to see.

If you use that same password anywhere else, please change it immediately.

Regards,

Quigley
GetHashing


Account
grtthegreat
TheColdQuasar
plaaster
tekelchi
choupinet74


are in my control he can ask the password by sending a signed message from a address posted before may.

All account listed below are checked on [Suspicious link removed]admofficer,adm@admian.co,175o52E64wHQumzfLFnKrPaukJsvo9pgMb
zonabitcoin,zonabtc@yahoo.com,rere0909
OOOO,bitkoinas@gmail.com,kasu12
TheColdQuasar,miladlaly@gmail.com,london03
letyouearn,nilesht987@gmail.com,9881707685
jackzach,poolminerss@yandex.com,ilikefools
pongly,padraigod0@gmail.com,14P06o1988d
Jayros73,phillip6816@hotmail.com,darkworld13
Nerazzura,fandiseptian2@gmail.com,23091990
Jelanye,aricleather@gmail.com,898colo4gh
tryasthana,tryasthana@gmail.com,tuarik#2008#
gabrielxx02,gabrieltp150@gmail.com,gabrieltp15
plugorankena,megatestastestas@gmail.com,daivaarasta
RRAJA,rajar@live.in,abcd12345
mateusz112345,wroniewicz@go2.pl,mateusz11234
mrccasals,marc.casals@outlook.es,gasol16
Nabeton,nabeton@centrum.cz,NahraBEMEsi
rockie,vutrongthu@gmail.com,123465
Apollon,hash_apollon@t-online.de,%/$ARpyXDCvbduZ&A%/&%D4576%(/A68dfaas4d7
sandykho47,sandykhosasi47@gmail.com,TheMiner47
r3morph3d,r3morph3d@gmail.com,1911978nN!
CS80,chris.sabian.btc@gmail.com,seedysite
VirNivis,messing-floeter@t-online.de,mnonUI/&RT(Gd89687t(FVDBs8a/tAFEW§A(/%RF787zt§§
sanel,sanelx@yahoo.com,odjebaus
activebiz,activebiz01@gmail.com,2002254317
BitBerau,pendi.berau88@gmail.com,cloudminr
action,marketing@cryptomining.net,4tpwfhVfSr
plaaster,kristo3@hotmail.com,Kr1stokr1sto
nofate,noooofate@gmail.com,killswitch
lvalle,lvalle467@gmail.com,Jeebus90
vas000,anime9999999999@gmail.com,Vas_55215521
tekelchi,tekelci.uploader@gmail.com,kadir1234
choupinet74,bitcoin@gites-montagne.com,Tatayoyo1
cico76,cico76@katamail.com,cicorulez1976
starsoccer,jtgbusiness@gmail.com,12\;+%q~neXt1zk]Kot4{.O{g{(12dI
proyectogdl,proyectogdl@gmail.com,holahola
coiner561,coiner561@gmail.com,a8533303a
Ratnet,reyhp21@hotmail.com,carajo21
gumnaam,rohanpandit1992@gmail.com,9810981127r
rob225,rob22569us@yahoo.com,racecar!
znaffe,martintrane0395@gmail.com,snaff0395
Jmancino2,jmancino2@gmail.com,Cccloudminr1}

There is nearly 958 more accounts to check I can't do more than this please take the charge to protect them.

why this is in Meta? isn't this should be in Service Discussion section? this has nothing to do with the forum and not even related

Quickseller said to do that

How do you manage to control greatgreat account?

You just posted the same message in Econony > Securities Subforum
and yeah why is this in this Subforum?

I'm checking and changing all the password to protect the accounts from hack through another browser

I advised to post in meta to give a warning to others to change their passwords in case they were reusing passwords on both Cloudminr.io and the forum. BTCBLOGGER had asked me to do something about the fact that the passwords were being sold.

He posted here because he could hide his -ve feedback on this sub forums.

His alt account is BTCBLOGGER. check his feedback.

Not sure how -ve or his alt has anything to do with this, he has no reason to hide -ve feedback. He is simply making the community aware of the situation. Well done OP shame you could not have been this community friendly before the -ve, but... You have done good so I would like to give you a well done mate!

Yeah, I think this can stay in Meta given the fact that op seemingly has control of accounts that are not his and is about forum accounts potentially being hacked. I'm sure an admin will move it if they think otherwise though.

I think no action is taken by bad bear or theymos after my PM I even don't get a single reply from them that's why there are lots of sr. Member and hero member account are for sale on the forum.

Don't even a single message is posted by theymos neither by badbear they can save many accounts from getting hacked.

Feeling very sad about that many peoples funds and account got hacked like mine.

there are numerous threads and posts related to this database leak, I reported all of them but so far, no action from mods/staff. I hope, that they will delete it, even users were stupid and cloudminr also, we should not tolerate this kind of shitty behavior here..

edit: thanks mods for your actions

Can anyone give me the back story on this? Why would cloud minr release this for 1 BTC? Did he pull a scam or something and is trying to get every last dime he can?

Is this ok with forum rules?  I cant imagine this being ok even with good intentions.

I guess I could be wrong.  Just seems like it's a unauthorized accessing of account no matter what intentions are.

K can I change the password of all these accounts to what it is so hackers take these account and then all thing will be assumed as authorised.
If you want me to do this I will do but before that see the digital goods section with lots of bitcointalk account on sale.

https://www.reddit.com/r/Bitcoin/comments/3d13os/what_the_actual_fck_cloudminrio_database_for_sale/ (https://www.reddit.com/r/Bitcoin/comments/3d13os/what_the_actual_fck_cloudminrio_database_for_sale/)

Looks like cloudminr.io has already sold it.

A while back I was thinking about investing in some cloud mining since they seemed to be the cheapest around. Luckily after doing some research, I had a strong suspicion that they were a ponzi scheme.
Too bad I made an account on cloudminr and now have to change a lot of passwords

It is generally a bad idea to reuse passwords because when one site gets compromised, your other accounts are at risk too.

It is actually pretty rare for a site to get hacked so publicly as it did. A much more common hacking would be that someone is able to get ahold of the hashes of the passwords (or the plaintext passwords - if this was the case then the site would have extremely poor security) and then tests those passwords across various sites, hacking accounts very quietly. There are many instances of hackings when the fact that there was a hack was not discovered for several months/year+ (e.g. target).

try a password manager.. and never worry about being a victim to this kind of issue anymore...

Honestly, to be honest, and in all honestly, I can't, repeat, can't believe that such happened given the first of five post above. It's like, wow man!, I'm besides myself. I mean, reread what's quoted again and see for yourself how it's even remotely possible that such leak/selling of passwords could've occurred. And, be honest!

Good idea! May I suggest changing them all from Joseph1 to Joseph2?

LOL that would be awesome I will also do this from 1 to 2
Cool
Thanks for a good idea

Okay, I'm not a hacker, but I can now easily see how much damage could be done with that list. I simply scrolled down and picked out three that seemed to have any sort of value. I successfully logged into other sites that two out of the three administer. Given enough time, I'm sure I could log into financial accounts of a many of these dudes, amassing tens, if not hundreds of dollars worth of cryptocurrencies, namely mostly bitcoins.

Rest assured, others are exactly on that path. Fuckin' amazing!

It's amazing that people reuse usernames, passwords, and emails on shady sites like that.

It will be good if you show a notification in the news section to change all password that are related to cloudminr.io
like this If you are using any wallet other than Bitcoin Core 0.10.x or 0.9.5, then you should not trust incoming transactions until they have ~30 confirmations. More info.

One more thing - Can i make a new account on the forum? or just leave the forum immediately?

After seeing the first 1k users posted on the site yesterday, I tried logging into the gmails of maybe 10 accounts. 5 out of 10 were using the same passwords on cloudminr.io and gmail. Luckily, 4/5 had 2FA enabled, and the other account was disabled by google due to suspicious activity. Either way, from the small sample it became apparent a lot of users are in danger of having their information compromised on many sites. Hopefully everyone who had an account with cloudminr finds out about this and takes appropriate security measures.

Hackers sell 79,267 Cloudminr accounts for ONE Bitcoin (http://www.theregister.co.uk/2015/07/14/cloudminr_hack_80000_bitcoin_miners_exposed/)

In this day and age it is honestly surprising.  I recommend using a different password for every site.  Yes it can be a pain, but there is good software to help with it.

If you use one for each site... if you see a database you can tell which site from password... kinda neat.   Normally leaks tell where they are from but if they didnt you could still tell.


BadBear if you could please tell me the rules on this if you have time.  Is it actually ok for someone with good intentions to change passwords on this site?  It just sounds like unauthorized access to me, and even with good intentions I just am really surprised anyone is doing it.  Below is what caused me to ask:

Not against the rules, no.

Is your problem that it happened, or that you don't trust the person who did? Would you still expect action taken if it were someone you know and trust?

I'm going to delete this account by changing its password to random one
you can email me or PM me on my real account BTCBLOGGER for anything you want.

Account DeveloperinDemand deleted and password is changed to KkSqq+XV5x{HBnCpmj4s8Dv;3%SH2yc&`KP=EBz4,VLD+xzm#d'<2V3"$q.\b*'b3@2fw-#MK*DC<wh]tq%d=6EVMrd!Lyv=MISSING%\7e}TY[_+}~yneN5xVhB#N#[hcY^DY=8BQj'8="A{249JLMu3~h%3p\q9:CJx5#%Zk@&DN(BxJFUsv6sdy)Jrmv",KK5XhW%U!H@e.6Y8Ft}<#xfy@/q]B9L6VS"m'+J6<6ehC@""tAvj8U(MEMA;B2j

That is defiantly not the password you changed it to...

Yes, it is I just replaced few symbols with word missing that's all.

In the marketplace some one is selling this database. Passwords are just stored in plain text :(.

If allowed my fear is someone claiming it is for good "to stop hackers" and just collect accounts.   I'm guessing a list is made of usernames and passwords.   I guess I don't like the idea of someone being able to claim being a good guy when making a list of accounts and passwords.

I guess it's becuse it could be sold and we see lots of unused accounts, from people who claim they were good at first changing passwords.  I guess I see them doing the same as the "bad guys".

Ohh well guess I'm over thinking it.  But was nothing against OP.

Indeed, though they've probably learned the hard way now.


There's nothing anyone can do about it if their details are public, but if he's actually saving the people from having their accounts hacked it's best that someone with good intentions does it than someone with nefarious ones.


And what would you suggest be done about it? Say "no, you can't do it"? Not going to stop anyone is it (good or bad)?

grtthegreat will be back in few minutes as he is in my contact and i'm trying to verify details
After verification he will be online
Cheers

I guess it's true.  I can see how it's a crappy situation no matter which way you go about it. 

I have been thinking about it but everything seems to have a downside.  Best would be able to run a script that looks for emails/username in database and changes password if on it, and emails a reset password email.  But the big problem is the people who did not use a real email.  So causes a headache still.

I guess noting can really be done except hoping users start to use different passwords.  Seems to be only easy/simple way to keep this from happening.

Cloudminr.io is being accused of running a ponzi scheme... they still have the site down!

"This Account Has Been Suspended"

Do you think you will ever see the site up again?

Right after Mt. Gox and BitInstant open up for trade.

YOU HAVE BEEN FUCKED, FINALLY. Don't create another new account and beg for new projects by using your holy shit companies like osiztechnologies.com / osiz technologies / web solusionz / and other crappy scam names.

Veliya pongada ayokiya raskalgala  ;D

Couldn't agree more.

For years the discussion of safer passwords has been running, and tools developed to create safer password and keep them safer, but nothing happens even on sites where money is involved. I'm not even sure the password were stored in clear text, as Jack would give you 99 percent of the above.

Exactly this. I've been using KeePass for years now and I've never had a problem. If a website is hacked and my login details are posted online, that's no big deal. Just generate a new password for the site and keep going. I'm not sure why more people don't use password managers like that, just remember your master password and then no need to worry about any of your other logins.

Password sent to grtthegreat1

I don't get it how you double use passwords on shady sites like that.

easiest way is to use lastpass or any other password manager for this kind of sites.

TheColdQuasar
plaaster
tekelchi
choupinet74
Still have these accounts in my control.