Bitcoin Forum

Other => Meta => Topic started by: itsnotfairhere on September 16, 2017, 09:43:59 PM



Title: My account seems to been hijacked.
Post by: itsnotfairhere on September 16, 2017, 09:43:59 PM
hello i need some help can a admin message me my account seemed to just been hijacked
how can one contact some one about this ?


Title: Re: My account seems to been hijacked.
Post by: itsnotfairhere on September 16, 2017, 09:59:03 PM
can a admin contact me i can no send messages tells me to wait 360 secs over and over


Title: Re: My account seems to been hijacked.
Post by: Mr. Big on September 16, 2017, 10:04:24 PM
Which account is it? PM Theymos or Cyrus following the instructions here: https://bitcointalk.org/index.php?topic=497545.0 ...


Title: Re: My account seems to been hijacked.
Post by: itsnotfairhere on September 16, 2017, 10:07:12 PM
Ok great I have all that info , the problem is every time i try and contact some one i get The last posting from your IP was less than 360 seconds ago. Please try again later. The thing you were trying to post was saved as a draft. This limit decreases substantially as your account becomes more established. so how can i contact them


Title: Re: My account seems to been hijacked.
Post by: itsnotfairhere on September 16, 2017, 10:29:39 PM
Ok great I have all that info , the problem is every time i try and contact some one i get The last posting from your IP was less than 360 seconds ago. Please try again later. The thing you were trying to post was saved as a draft. This limit decreases substantially as your account becomes more established. so how can i contact them

a great question is how they can some one change the email info on the account with out getting a email to the email account on file 1st ?


Title: Re: My account seems to been hijacked.
Post by: mammix2a on September 16, 2017, 10:55:20 PM
Ok great I have all that info , the problem is every time i try and contact some one i get The last posting from your IP was less than 360 seconds ago. Please try again later. The thing you were trying to post was saved as a draft. This limit decreases substantially as your account becomes more established. so how can i contact them

a great question is how they can some one change the email info on the account with out getting a email to the email account on file 1st ?

Yeah im thinking the same, some sort of 2 factor verification is needed to stop this account hijacking happening.


Title: Re: My account seems to been hijacked.
Post by: Vod on September 17, 2017, 02:22:48 AM
hello i need some help can a admin message me my account seemed to just been hijacked
how can one contact some one about this ?


What is your old account name?  We can mark it as a hijacked account until you get it back.


Title: Re: My account seems to been hijacked.
Post by: itsnotfairhere on September 17, 2017, 03:02:01 AM
hello i need some help can a admin message me my account seemed to just been hijacked
how can one contact some one about this ?


What is your old account name?  We can mark it as a hijacked account until you get it back.

winter


Title: Re: My account seems to been hijacked.
Post by: Vod on September 17, 2017, 03:11:01 AM
What is your old account name?  We can mark it as a hijacked account until you get it back.

winter

I see this on the trust page:

This user's email address was changed recently.

This user changed his/her password recently.

The password message is smaller.  Anyone - what does this mean exactly?

Did you ever post/stake a bitcoin address?  Can you point to the post, and then sign a message?


Title: Re: My account seems to been hijacked.
Post by: itsnotfairhere on September 17, 2017, 03:16:51 AM
Yes thats what i saw to
address i used with that account was : 1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH
but it was in my sig
you can see https://bitcointalk.org/index.php?topic=1118436.0
has both my btc and ltc address
1FREEUFC1XWd94X73C1X1KTT32nhZS9Gte
LWiNtErq3AKNndfSzicMcMABjbcQhc5BuC


I can sign messages from any one of those address


Title: Re: My account seems to been hijacked.
Post by: Vod on September 17, 2017, 03:29:53 AM
I can sign messages from any one of those address


Ok, sign it and we can tag the account as stolen until you get it back.


Title: Re: My account seems to been hijacked.
Post by: itsnotfairhere on September 17, 2017, 03:35:57 AM
Address : "1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH"
Message :
"ANYONE THAT READS THIS MESSAGE
MY ACCOUNT WINTER ON BITCOINTALK.ORG WAS HIJACKED ON 9/16/17 AT 7:XX AM EST
THIS MESSAGE IS TO PROVE "itsnotfairhere" IS THE TRUE ACCOUNT HOLDER OF "winter"
TO ALL ADMINS PLEASE MARK "winter" AS HIJACKED UNTILL I CAN RECOVER THE ACCOUNT
THANKS ALOT TO ALL THE ADMINS ON THIS SITE"

Signature : "HBC0KXsBwGZ4nrIAChIAg8UFQxBKrZYNBeJaNCfJpL1BPp+K92kVwc9PSzZDNQjryiYUdsE8FBmU+j4DUDNTIfo="


PLEASE REMOVE THE QUOTES FROM THE ADDRESS/MESSAGE/SIGNATURE


Title: Re: My account seems to been hijacked.
Post by: Vod on September 17, 2017, 03:37:29 AM
Address : "1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH"
Message :
"ANYONE THAT READS THIS MESSAGE
MY ACCOUNT WINTER ON BITCOINTALK.ORG WAS HIJACKED ON 9/16/17 AT 7:XX AM EST
THIS MESSAGE IS TO PROVE "itsnotfairhere" IS THE TRUE ACCOUNT HOLDER OF "winter"
TO ALL ADMINS PLEASE MARK "winter" AS HIJACKED UNTILL I CAN RECOVER THE ACCOUNT
THANKS ALOT TO ALL THE ADMINS ON THIS SITE"

Signature : "HBC0KXsBwGZ4nrIAChIAg8UFQxBKrZYNBeJaNCfJpL1BPp+K92kVwc9PSzZDNQjryiYUdsE8FBmU+j4DUDNTIfo="


PLEASE REMOVE THE QUOTES FROM THE ADDRESS/MESSAGE/SIGNATURE

Verified.  I have tagged the account as stolen.


Follow these instructions to recover it, and then PM me so I can remove the trust.

https://bitcointalk.org/index.php?topic=497545.0


Title: Re: My account seems to been hijacked.
Post by: Aventhe on September 17, 2017, 03:48:50 AM
Good thing Vod!
 This user just contacted me about managing a campaign for Opporty. Lucky I checked the account out before considering any of his offers.


Title: Re: My account seems to been hijacked.
Post by: itsnotfairhere on September 17, 2017, 03:54:17 AM
Good thing Vod!
 This user just contacted me about managing a campaign for Opporty. Lucky I checked the account out before considering any of his offers.
good that u did this


Title: Re: My account seems to been hijacked.
Post by: Vod on September 17, 2017, 03:59:40 AM
Good thing Vod!
 This user just contacted me about managing a campaign for Opporty. Lucky I checked the account out before considering any of his offers.

If everyone was as diligent as you, there would be no scams.  :)


Title: Re: My account seems to been hijacked.
Post by: Aventhe on September 17, 2017, 05:57:07 AM
This is the PM he sent me:

https://i.imgur.com/pSnA4Cu.png

I have not replied back as it is said to do so in the message. Things got very fishy after he wrote: 'very active' forum member. I decided to check the last posts and they had gaps of up to 2 weeks with not too many posts after them. Then I went to have a look at the 'Trust' on the profile and both Seclog and that says that both password and email were changed today.

https://i.imgur.com/iMKYhQf.png

This was just an hour after he had hacked the account.
To be honest, I think it is just another user who is as hungry as Windpower, wizardee and possibly Hashforce101 to offer their scam Campaign management services for quick money through possible escrow scams. All ICOs should be careful when hiring anyone for their management services.


Title: Re: My account seems to been hijacked.
Post by: itsnotfairhere on September 17, 2017, 06:34:09 AM
the hijacker also posted this message on my account a few days before fully jacking my account

https://bitcointalk.org/index.php?topic=2030529.msg21760627#msg21760627


Title: Re: My account seems to been hijacked.
Post by: itsnotfairhere on September 19, 2017, 12:47:19 AM
still waiting for a reply and a email to reset :( takes a bit i guess


Title: Re: My account seems to been hijacked.
Post by: itsnotfairhere on September 20, 2017, 11:05:51 AM
does anyone know how long it takes to get the account back.


Title: Re: My account seems to been hijacked.
Post by: winter on September 26, 2017, 12:27:11 AM
-----BEGIN SIGNATURE-----
Today is : 9-25-17 , This is the real : winter , My account was hijacked on saturday of last week. I just regain it today. Thanks for locking my account.
-----END SIGNATURE-----
address : <1FREEUFC1XWd94X73C1X1KTT32nhZS9Gte>
signature : <G5lVcQYtHu4ts1v1HWej89nj1HlF2299WJZD1lTOVEpyBUZ4Mg9Ug3T+KkyIftMbpoudz1eRV8pAiyhEmO5IsDY=>


Title: Re: My account seems to been hijacked.
Post by: Vod on September 26, 2017, 05:18:37 AM
Please sign a message from

1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH



Title: Re: My account seems to been hijacked.
Post by: winter on September 29, 2017, 02:02:01 AM
Please sign a message from
1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH

-----BEGIN SIGNATURE-----
Today is : 9-28-17 , This is the real : (winter) , My account was hijacked on 9-16-17 in the early morning
-----END SIGNATURE-----
address : <1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH>
signature : <G6ML5XdZVLkI4/f+aw+GfxLqdOUN5QAkTfwbFCvwwMq4Gc+WYcKXsyyw0a5rG0PCYgTmxlQJ//gcVH4ZxwgJ8B4=>


Title: Re: My account seems to been hijacked.
Post by: doyayipaku on September 29, 2017, 04:06:13 AM
This problem I encountered many other posts on the general forum a problem is hack account. I think the admin of the forum created a private topic to post all the hacking issues on a topic. I feel this problem as a way to spam  :-[ :-[


Title: Re: My account seems to been hijacked.
Post by: Vod on September 29, 2017, 06:24:28 AM
Please sign a message from
1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH

-----BEGIN SIGNATURE-----
Today is : 9-28-17 , This is the real : (winter) , My account was hijacked on 9-16-17 in the early morning
-----END SIGNATURE-----
address : <1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH>
signature : <G6ML5XdZVLkI4/f+aw+GfxLqdOUN5QAkTfwbFCvwwMq4Gc+WYcKXsyyw0a5rG0PCYgTmxlQJ//gcVH4ZxwgJ8B4=>

Trust removed.   :)


Title: Re: My account seems to been hijacked.
Post by: winter on September 29, 2017, 10:25:23 AM
Please sign a message from
1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH

-----BEGIN SIGNATURE-----
Today is : 9-28-17 , This is the real : (winter) , My account was hijacked on 9-16-17 in the early morning
-----END SIGNATURE-----
address : <1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH>
signature : <G6ML5XdZVLkI4/f+aw+GfxLqdOUN5QAkTfwbFCvwwMq4Gc+WYcKXsyyw0a5rG0PCYgTmxlQJ//gcVH4ZxwgJ8B4=>

Trust removed.   :)

Thanks VOD for locking it down until i regained it. Again thanks :)