Bitcoin Forum

Hi everyone.

It seems that my original account has been hacked under the username: bigjme

I have not been active on that account for a long time and have started to receive messages about bitcoin loans.
So far i have received messages from the following usernames: Magic8Ball, SebastianJu, Gelbstich

I have been able to see this much as ther account still had my email address set however it now seems that the email address and password have been changed making me unable to recover it at all.

DO NOT INTERACT WITH THIS ACCOUNT!

If the forum admins would like to email me i can verify it is me how ever they wish. I am also the website owner of cudamining.co.uk so can gladly confirm my validity via putting something on the website.

I am extremely sorry about this and i hope no one has been scammed out of nay money.

Regards,
Jamie

Did you ever post a bitcoin or altcoin address with that account? If you have an old, unedited post with an address you can sign a message with it to prove that you are indeed the owner of the account. See this thread for all the info on doing so. (https://bitcointalk.org/index.php?topic=497545.0)

I went through about 20 pages of your posts though and I didn't see an address posted anywhere. I don't know if the admins would be able to take your website as proof because it may have changed hands in the last few months that your account was inactive. However, if you know some secret details about the account (ex. private messages sent and received, etc.) then the admins may be able to help you out. I thought I read once that BadBear asked a user questions about their account to recover it when it was hacked.

Also, please move this thread to Meta, it doesn't belong in Technical Support.

is this te account you are talking about?
https://bitcointalk.org/index.php?action=profile;u=210860
the account was inactive for 9 months from November 2014, then active again August 2015
how far back can you sign a message?

So you did not ask for a loan today?


and orenz is not an alt of yours?

That looks like the account he's talking about.

---

OP, are you able to sign a message from one of the following two addresses?

1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem
17eJQr8HUaidhNHUGYR7fWKBGonwvcFbz7

Both of those addresses were listed in your signature in 2014 (according to archive.org), and I suspect if you're able to sign a message with either of those that would be sufficient proof for the admins to reset the email address on your account.

Proof 1 (https://web.archive.org/web/20140405104040/https://bitcointalk.org/index.php?action=profile;u=210860)
Proof 2 (https://web.archive.org/web/20140708201755/https://bitcointalk.org/index.php?action=profile;u=210860)

@ColderThanIce

How would i go about moving this? Sorry about putting this in the wrong section.

If the admins can see my old signature, the donation address on that and the cudamining website was: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem

As you can tell, its no small account like his, and has been empty since the end of 2014. I have emails in my inbox from april 2014, including personal messages.
It's amazing how nobody noticed the account went from talking full sentences (about compiling cuda miners, and gpus) to talking extremely bad English


@nydiacaskey01

Yes that is the account. As stated above, i have emails from april last year. Along side my personal bitcoin address i posted above. It may be in some of the account personal messages.

@shorena

I have no alt accounts, i am english and have no social media accounts. And i can even provide screen shots of the bitcoin address posted above.

@ColderThanIce

I can certainly sign if you can show me how to?


Regards,
Jamie

p.s. This 6 minutes between posts is a killer so i am replying as i can

you don't need to move this thread anymore because a mod already moved it to the right section.

I don't think screenshot will prove anything because they can easily be faked.
you can learn how to sign an address by reading this thread (https://bitcointalk.org/index.php?topic=990345.160;topicseen).

here you go: https://bitcointalk.org/index.php?topic=990345.0

If you're still in control of the 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem address please sign the following message with it:



Once you do that, send the signed message to either theymos or BadBear and they should sort everything out in a week or two. If they don't get back to you then I'd suggest bumping this thread once a week or so, just to keep it near the top of the Meta section.  If you aren't sure how to sign a message refer to the thread that --Encrypted-- posted, it shows how to sign a message with every major bitcoin wallet.

Message sent to BadBear,

For everyone else, here is a signed message for you all to check while they look into this.

Address: 1GTdTYN1KdeFNcp3mgX2RffnZH5A5mTem

Message: My account "bigjme" has been hacked/lost. Please reset the email to () or delete the account. The current date is August 18th, 2015.

Signature: H0JGgw7dLNmIk67fL9I314/B9NG8U+Oh8avLQqtIindXHtqx+UFpcV0lT7DLSzGSAq3g3FMDxISxPE1I1AQBzpw=


Again sorry to everyone effected by this

Different format. Signature checks out, but its probably best if you ask for an mail address that actually exists.[1] Accounts do not get deleted.

[1] In the light of the remark by guitarplinker below I removed this part.

I think he might have sent BadBear one with his email address included, just because of the wording in his message below.

Negative trust left on the account. Let me know when you're in control of the account again and I'll remove the negative trust left. But now that you've sent BadBear a message you've basically done all you can, and I wouldn't worry about the hacker doing anything on your account now with the negative trust. However be sure to let us know when you get back into your account.

@shorena

The email to BadBear has my email address in it. i didn't fancy giving it out here.
Just wanted to post something for you to see until the admins resolve the issue.

@guitarplinker

Thank you!

Regards,
Jamie

well crap. looks like Gelbstich gave the loan after all. I think the account is in his possession right now.

https://bitcointalk.org/index.php?topic=1156050.0

Gelbstich has been reckless giving out loans today. He/she will learn soon.

Thank you Encrypted for informing me. I wrote a PM to the OP.

Lets hope you can aggree on something. There has been a similar case and its dragging on for months. The admins tend to not interfere if the account was transfered as part of a deal.

I am sure we will be able to sort something out. After all, the account was inactive for 8 months, i don't plan to use it again

Regards,
Jamie

Ok, first thing first, the account is not gone. It's secured by me.

Well, what should i say... i really don't know why i did not get the idea to tell Gelbstich to ask for a signature when accepting an account as collateral. I think it might be because account buyers are behind it so very much all the time. :)

Anyway... since this is partly my blame i will pay Gelbstich his loss. And when the original owner can provide a signature that proofs his ownership then i will give him the account login.

I checked if the story might be correct. The last PM's are from september 17. The account posted from 7th to 14th august. Before that only until november 3rd. And the posts and language is very different.

So it might very well be true. Except a scammer had a long working plan and is clever.

Automatic email notification for threads was deactivated too.

Looks like i just was welcomed in the club of escrows that had a hacked account in escrow. :D

He posted that signature earlier in this thread so he is indeed the original owner of the account. You can see proof of this bitcoin address being used by bigjme in his signature here (https://web.archive.org/web/20140405104040/https://bitcointalk.org/index.php?action=profile;u=210860).

Thanks for the link. I only found the signature being valid but did not see the cache link. Guess it's proven then. I will give him back his account and give gelbstich his 0.12 bitcoins since i should not have forgotten to think about the signatures.

I will ask the original owner to post on here when it's done.

The account is now back in my name, with a new password, and a new email address.

I am sorry for all the trouble SebastianJu

I've removed the negative trust I had left. I'm glad this is solved, great response by SebastianJu!
Personally I think all 3 were responsible for this for not securing the account enough and not asking for a signed message. I hope both bigjme and Gelbstich generously tip Sebastian.

If i had the bitcoins i would.
Sadly you have seen my empty wallet. If i ever come across any, i will be sure to send a tip when i can

SebastianJu gently sent me the 0.12 BTC. He's surely the best escrow this forum has seen!! He didn't have to pay anything, but he did anyway as you can see.

For anyone who wants to track and trace the imposter, here you can find the btc address the money was sent to:

Also see above, it seems he had a second account also with the same bitcoin address

Regards,
Jamie

Well... this seems to be one of the rare cases where everything got repaired with a hacked account... well... i only paid for missing a crucial point. Though i think it's fair since i should have been thought of it. ::)

I think i don't even want to be angry against the scammer. I mean how poor, he posted with that account in games and rounds and is happy getting 0.12 coins. I mean i feel now like i tipped a bum on the street. I don't await anything when i tip a bum and so i can't really be angry when someone works that hard for scamming that much.

Anyway... i hope the red trust gets removed completely and nothing like that happens again. :)

orenz.

and mucalov91 (https://bitcointalk.org/index.php?topic=1147808.msg12090410#msg12090410) and blackmasker (https://bitcointalk.org/index.php?topic=1147808.msg12090367#msg12090367) (all of them posted in the same thread in the same day with same format, yeah), according to this transaction (https://blockchain.info/tx/9b141cdf64cff78f7616ea70611743ea453a9c62a85a7467b2c478683fe6da3c).

but I'm no blockchain expert so CMIIW.

Indeed, that TX (https://blockchain.info/tx/9b141cdf64cff78f7616ea70611743ea453a9c62a85a7467b2c478683fe6da3c) is signed by all of the 3 address so it's a proof. For reference:


Archive (https://archive.is/a2cuX).


Also robzxxx (https://bitcointalk.org/index.php?action=profile;u=364474).
He posted the address 1A5zW53GG9gcPK4wsbuuhZnPzy7dY8ZNSE here (https://bitcointalk.org/index.php?topic=1147808.msg12096987#msg12096987) (archive (https://archive.is/CYhAL)).
1A5zW53GG9gcPK4wsbuuhZnPzy7dY8ZNSE and 1M5a1Uw6FqD43UyxN8TPJau6SCzKttfoZL cosign this TX (https://insight.bitpay.com/tx/8d21d46cfe13aa25d263b3396a798470f5e316f9d277ec8f550517faca4cddc1).

It looks like this is not the first time this has happened. If you look at this (https://bitcointalk.org/index.php?topic=929617.0;all) thread, you will see that someone else had their account hacked without their password getting changed, then when the real owner realized what was going on he changed his password. It looks like Blazr was able to track the stolen funds to vitha putri (https://bitcointalk.org/index.php?action=profile;u=242987), on this (https://bitcointalk.org/index.php?topic=929617.msg10206369#msg10206369) post.

The above account posted 1Ayn1NnpcBS7djk1D4JF1F5dZX82FBsDST here (https://bitcointalk.org/index.php?topic=1004159.msg10919420#msg10919420) which is part of  0302f4c7ae (https://www.walletexplorer.com/wallet/0302f4c7aec6709a/addresses)

edit: the address that Blazr was able to link to the stolen funds is a dead end with the exception of the single one account....at least with the information that I have access to.

Found more alt of this hacker, https://bitcointalk.org/index.php?topic=1206112.msg14006801#msg14006801