Bitcoin Forum

I just logged into my account and found over a dozen of private messages that were sent/received from my account without my knowledge in last 24 hours. And some negative feedback on my account. It's possible that hacker made scam trades as well.
I have no idea what to do. Please advise.

You'll probably have to repay your debts, unfortunately to the scammed because it was your fault for not securing your account properly in my opinion and otherwise your neg trust will probably never be removed.

Harsh but it's the truth... Lots of scammers trying to use "hacked" as a cover since there is no way to prove that an account is hacked but not actually just the owner changing his password and resetting email etc. from a remote destination.

That said though, personally I believe you. But it's really bad luck, and 1.5 BTC is a lot.

Email address associated with my account was changed to "Shersher4u12@aim.com" and bitcoin address on my profile was also changed to 1JmhzYRUNWqTDVLo1UejN7e1C87sitNMBP by hacker.

My Keybase address was not interfered with. He didn't change account password so I was directly logged into my forun account when I opened bitcointalk.
I started off by changing back my password, email and profile bitcoin address

First off, sign a message both on an aged bitcoin address as well as a PGP signature if you have one to prove that it is actually you, and not actually the scammer/hacker posting on this account right now?

All I can see is password changed 8:15.

Make sure your computer is 100% clean. They accessed your account, but didn't change your password.
This could either mean they know your password, but didn't want to attract any attention to themselfs by changing it OR it could mean they don't know your password either, but they used your computer to post scam threads (since you need to know your password in order to change your password).

I would advice to boot from a clean linux distro, change your password and email from within the clean environment to a new/unique/random one, make sure you have a staked address,.
Afterwards, i'd scan, rescan, re-rescan or even re-install your pc (if unsure), then i'd start to find out who got scammed by your hacker.

I am pretty certain that the hacker didn't change the password because they didn't want to bring attention to themselves as to being the unrightful owner of the account, because when you change your password it shows up in seclog and your trust page and makes it more suspicious.

---

A thing or two here to be learned - should the seclog include email changes as well so that we can document the exact time an account is compromised, if the account hacker chooses not to change the password?

I'll look into what I can do. But, my Keybase account    https://keybase.io/ahmedjadoon is there on my forum profile and hacker didn't modify/change it. The affected person would have verified my identity by Keybase. I shouldn't be blamed entirely for this situation.

Restoring the account via e-mail will result in a lock ban until the owner can verify themselves.

I was talking about changing the email address of an account without changing the password nor resetting the password via an email account.


Yes, by no means you are the only person responsible. Nobody knows when someone will hack you. I'm not blaming you.

It's just that it's hard to prove that you are actually hacked and you are likely to have to repay the damage the hacker has done to be able to get your neg trust removed :( You could sort out some compensation plan with the buyer, I'd say that repaying 70% of the damage would make him pretty happy :D

I sent a warning PM to 5 persons the hacker communicated with from my account.
The sent messages appeared in outbox.

My account was not locked. Maybe, because I just changed the email address. Didn't reset password.

Here are screenshots of the PM's received by hacker
http://images.snoork.com/images/1863968472_Screenshot_2016-11-28-14-28-40.png (http://images.snoork.com/view_image.php?url=images/1863968472_Screenshot_2016-11-28-14-28-40.png)
http://images.snoork.com/images/1230550606_Screenshot_2016-11-28-14-28-50.png (http://images.snoork.com/view_image.php?url=images/1230550606_Screenshot_2016-11-28-14-28-50.png)
http://images.snoork.com/images/1116326949_Screenshot_2016-11-28-14-29-06.png (http://images.snoork.com/view_image.php?url=images/1116326949_Screenshot_2016-11-28-14-29-06.png)
http://images.snoork.com/images/1076789976_Screenshot_2016-11-28-14-29-15.png (http://images.snoork.com/view_image.php?url=images/1076789976_Screenshot_2016-11-28-14-29-15.png)
http://images.snoork.com/images/2941959631_Screenshot_2016-11-28-14-29-20.png (http://images.snoork.com/view_image.php?url=images/2941959631_Screenshot_2016-11-28-14-29-20.png)

Messages sent by hacker
http://images.snoork.com/images/8605607252_Screenshot_2016-11-28-15-31-07.png (http://images.snoork.com/view_image.php?url=images/8605607252_Screenshot_2016-11-28-15-31-07.png)
url=http://images.snoork.com/view_image.php?url=images/1096689478_Screenshot_2016-11-28-15-31-32.png]http://images.snoork.com/images/1096689478_Screenshot_2016-11-28-15-31-32.png[/url]
http://images.snoork.com/images/1158981319_Screenshot_2016-11-28-15-31-39.png (http://images.snoork.com/view_image.php?url=images/1158981319_Screenshot_2016-11-28-15-31-39.png)

http://images.snoork.com/images/2141043377_Screenshot_2016-11-28-15-32-09.png (http://images.snoork.com/view_image.php?url=images/2141043377_Screenshot_2016-11-28-15-32-09.png)
http://images.snoork.com/images/8388862862_Screenshot_2016-11-28-15-32-24.png (http://images.snoork.com/view_image.php?url=images/8388862862_Screenshot_2016-11-28-15-32-24.png)

When was the last time you used your account here and for how long you haven't logged onto the forum?
You might want to redo your passwords for other sites if you have used the same one at multiple places.

That is screwed up. To not have control of your account and that person who sent to you over $1000 in btc. That is insane! :o
You should pay him back because that was not his fault in seeing your previous trades.
Unexperienced members do not know what to look for when trading and are blinded sometimes with just trying to get a trade done fast which is the easiest for them to complete and be done.

I made my last post on 25 November and I last logged in yesterday. I think a few hours before this hack.
 
It's easy for you to say pay back. That is 1.05BTC I need to send for no fault of my own.
The victim need to take major responsibility here. He didn't use escrow. He didn't pay heed to the warning on my profile: "email address changed recently", he didn't verify keybase.io which was visible on my bitcointalk profile.
If Bitcointalk.org was not using this crappy forum software with no two-factor verification for accounts, we would all be safer.

I'm really hurt for the member's loss. And I'm not saying no to helping him out as much as I can but I would need more sensible views from the bitcointalk community in this regard.

It is generally agreed that you have to stand by the actions of your account, even if it is hacked.
Otherwise, too many scammers will cry 'hacked' after cheating their victims.

It has already been established on this forum that you are responsible for your accounts actions. Account security is the responsibility of the account owner. It is far too easy to claim you were hacked then get your account cleaned with a made up story. The only way to restore your good standing is to work out restitution with those your account scammed. This has come up before and this is what the solution was.
Sorry it happened if you are indeed a victim but it is what it is.

Thanks for your input. But, I'm not going to give in to any wrong traditions established at this forum. Lets consider that I send 1.5BTC to the victim now. Since, I can't stay online 24x7 to check if my account is hacked or not. If my bitcointalk account is hacked again tonight and another stupid trader sends 5BTC without checking my profile, do I have to pay him back too?
There is no security measure at this crappy forum to prevent account compromise. There should be at least two-factor authentication. Until the forum software is improved to provide account protection, this should be responsibility of the buyer to verify identity and use escrow.

How bad is your password that you have to fear its hacked again right away? Do you reuse it on other sites? Registered somewhere bitcoin related recently with the same password?


Yes, buyer beware. The forum wasnt hacked though, your account was. If your password is '123456' or you reuse it everywhere it does not matter how good or bad the security of the fourm is.

My password was not easy. It was difficult and I did not use it everywhere. I updated my password to even better but since there is not a single security measure at this forum like email confirmation if IP/location changes, I can never be sure that my account is safe.

Good, but you still need to ask yourself how someone could have gotten it.

Or else some key logger or hidden apps that installed on your mobile/deskstop that you are using. Do you click suspicious link , maybe you are a victim of phishing or somebody use a brute force to your account.

This too me is really hard to believe this story. When a user starts saying this in there defense "..but my account can be hacked again!" there is something amist here.
In saying that then you are implying that everybodies accounts can be hacked at any given time and to not trust no one on this forum. ::)
Not even Theymos account. :-\

Posting details about the email associated with OP's profile after they were hacked

Address(doge I think): DQmrF6eYWien3cM7rdnQtKyoPhcBbpyx
Email :    shersher4u12@aim.com
Reddit : https://www.reddit.com/user/seeingbye   

Source - http://doge.gusgold.com/blacklist/blacklist.php

Hacker's bitcoin address was 1JmhzYRUNWqTDVLo1UejN7e1C87sitNMBP
If it could be hacked once, then there is a possibility that it could be hacked again. And, I don't understand why you act surprised. It's not the first time an account was hacked here on bitcointalk.
Since there is not a single security feature to prevent a stranger for logging in to my account, I can never be sure my is safe.

I am not surprised just stating a point that once a user secures their account it is not very likely it will be hacked into again so soon (within 30 days from the time that it has been hacked into in the first place). Unless you are using a password without alpha numeric characters in place which it is always encouraged to do so too not have password finder programs crack it within that 30 days of when you should of had it changed again.

My password had alphanumeric characters before and now I've updated to add symbols as well. Even if it's hacked again after months or years, It's not logical that the person whose account was hacked should be blamed and demanded pay backs from unless the forum security is improved.

It seems that everybody else is saying otherwise. As Quickseller has pointed that out in the other thread (https://bitcointalk.org/index.php?topic=1695711.msg17019942#msg17019942) on this comprised account. Because if you can not ensure that your account is secure enough then they should ban it so nobody gets scam for this amount again from this very account.
This argument is now getting absurd to say the least. :-[
It comes down to pure common sense if you are able to run your account or not as everybody else here does. :-\

There is no rocket science behind "running" the account but all I'm trying to say is that no one should deal with me without using escrow plus verifying my identity on Keybase.io. I don't want to get blamed like this again. Maybe you along with "everybody else" here are 100% sure that their account can never be hacked but I can never be 100% sure after what happened today. So, I just want everybody to know that they should not blame in future if they didn't use escrow/verified Keybase.io while trading with my account.
Still, if the other community members also think that my demand is absurd, I'll stop using the forum till the account security/forum software is improved and request a ban for my account.

What exactly is your demand again? Not to have to pay back the 1.5btc that was lost because of your account being misused? ::)
The fault goes to the forum administrators for not implementing a security measure that can benefit everyone else to not have to come up with excuses when and if it happens to them?
I think you should bring it up directly with them then instead of asking everybody else their opinions on this situation that totally lies in your hands.

Should I leave this as a permanent negative rating on your account to make sure for the future? (serious question)


I understand you, but did you talk to the person that got scammed? Usually they accept at least part of the blame and might be willing to share the loss evenly. Would that be something you can agree on? Do you accept at least a partial responsibility?

^^^^
Well I would hope so because if not then people here would be getting away with murder trying these attempts knowing they can get off scott free with out paying for the consequences.
I am pretty positively sure that the scam victim would like atleast 70% of their coin back no matter where it came from.

I am accepting the partially responsibility just because of my mistake not check his trust rating I send big amount because if I check first then I never send any thing to this user 

There is no other to blame but you, the reason of not securing your account from being hacked. The question here is how about the people you scammed I mean the people who got scam when your account was hacked. I guess you must repay them not a whole but just partially because do both sides have its reason to blame

Please communicate with me in PM what do you want me to do.

Please throw some light on account security measures on this forum which I didn't avail, so I'm to be blamed for this.
Read my post carefully. My demand is that everyone should use escrow+verify my identity on Keybase.io before trading with me from now onwards or else should take complete responsibilty for loss. Your false negative trust would not hurt me. But, I'm upset with the member's loss and I sent PM to him the moment I got my account back. Still waiting for him to respond though.

Its an offer, not a tread. It can be neutral if you want, but in my expierence those are seldomly read.

Please leave that feedback as neutral.
Also, I have already sent message to victim and offered him to settle. Still waiting for his response.

I am yet to receive any response from the victim about settling. If he doesn't reply soon I'll assume that he has taken full responsibilty and this case should be closed and all negative feedbacks on my profile should be removed.

I don't think that is a very professional way of dealing with things. He clearly wrote in this thread that he is willing to take partial responsibility and split the loss between you guys, so why would you logically assume that he has taken full responsibility. Actually, who would like to take full responsibility?

It seems like you are trying to escape paying off this thing. I mean in my opinion it's not the way to go about it.

Cheers

I am here and waiting for your response about this I am very upset because trying to settle things but its not in my control I am ready to settle but after checking all around me I need 1.05 bitcoins from you if you ready to pay this then I am ready to post here about your clearance because I have very less time 5th December I must pay bank otherwise I am going to lost many things now what you have to say about this ?

I have been waiting for 2 days for his response. I can't check around forever, I have other things in life. I would prefer to discuss settlement in private.

I think talking here is much better and good for both of us