Bitcoin Forum

Other => Meta => Topic started by: WeAreSoSory on June 21, 2018, 07:53:25 AM



Title: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on June 21, 2018, 07:53:25 AM
My account has been hacked at May 17. I did what I have to do to get back. I have singed a message with my Bitcoin adress which I posted to account recovery topic. ???
I don't know how, my account was hacked :(
I already blocked the account and sent to Cyrus a signed message, I hope it will be resolved soon.
The account should be locked now and I hope the hacker will do no harm, I opened this thread mainly to try to understand how I was hacked.


Here the signed message:
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account Quite has been hacked/lost. Please reset the email to sonses10@gmail.com. The current date is 21.06.2018.
-----BEGIN SIGNATURE-----
18rHTUS5VfsBupSqXqxoj5nPwsWweRoE2f
ILLelKV90R40Ul0sP/f2MMYhbP7z6osqfm0Z5v6A3wx1M9uB7wQ2dCCStqoEhQ5ciipaOaAPT4bCCCIvqzQpwcI=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: https://bitcointalk.org/index.php?action=profile;u=239265   (Bitcoin address: 18rHTUS5VfsBupSqXqxoj5nPwsWweRoE2f)

Evidence:
My BTC address; On the Bitcointalk.org profile, you can see the "Bitcoin address" section of the Google WebCache resource below. April 17, 2018, 12:57:15 AM
https://webcache.googleusercontent.com/search?q=cache:BgnTzLCuLUIJ:https://bitcointalk.org/index.php%3Faction%3Dprofile%3Bu%3D239265+&cd=1&hl=tr&ct=clnk&gl=tr

Again, to verify the BTC address in my profile; If I check my profile at https://web.archive.org, we can see that my BTC address appears on Bitcoin address on November 26, 2017, 01:26:19 PM.
Here: https://web.archive.org/web/20171126132619/https://bitcointalk.org/index.php?action=profile;u=239265


EDiT: http://archive.fo/ZAQjk
I recorded the archive. Because the Google cache record has been refreshed.

Google cache entries are also here.
02/november 2017
https://cdn.steemitimages.com/DQmSExvEKoBCZVSYBkKAbVHH8u82Hd6Fpeng3Gkoiu22HZn/Location%20ETH.PNG

https://cdn.steemitimages.com/DQmQfCApMD8Rn4YTE119Z4Mn6ckpLYRa1hiJ6FFvNxQJBWj/search.png
https://cdn.steemitimages.com/DQmZco5LSZHPjjZde6guE1o2Ehv6F3ukCuGnxCWo9YSiLHo/webcache.png

incoming mail when my account rings.
https://cdn.steemitimages.com/DQmbyDjL6tMPTmYpgQPNt6e739bQGkq7Cf7z3rGzut3KSNn/mail.png
incoming mail when my account rings.
https://cdn.steemitimages.com/DQmeZqTYVxA4E3AvLoNMXarYjPapeEgxXgYfUXD5Nfz3vCx/mail%20change.png


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: Steamtyme on June 21, 2018, 10:03:51 AM
Pretty sure you will receive the same answers as this person did

https://bitcointalk.org/index.php?topic=3652698.0

Really comes down to getting sucked in by a phishing link or having not changed your password after one of the database hacks.

Good luck in recovering your account


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on June 25, 2018, 07:12:25 AM
My account has been hacked at May 17. I did what I have to do to get back. I have singed a message with my Bitcoin adress which I posted to account recovery topic. ???
I don't know how, my account was hacked :(
I already blocked the account and sent to Cyrus a signed message, I hope it will be resolved soon.
The account should be locked now and I hope the hacker will do no harm, I opened this thread mainly to try to understand how I was hacked.


Here the signed message:
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account Quite has been hacked/lost. Please reset the email to sonses10@gmail.com. The current date is 21.06.2018.
-----BEGIN SIGNATURE-----
18rHTUS5VfsBupSqXqxoj5nPwsWweRoE2f
ILLelKV90R40Ul0sP/f2MMYhbP7z6osqfm0Z5v6A3wx1M9uB7wQ2dCCStqoEhQ5ciipaOaAPT4bCCCIvqzQpwcI=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: https://bitcointalk.org/index.php?action=profile;u=239265   (Bitcoin address: 18rHTUS5VfsBupSqXqxoj5nPwsWweRoE2f)

Evidence:
My BTC address; On the Bitcointalk.org profile, you can see the "Bitcoin address" section of the Google WebCache resource below. April 17, 2018, 12:57:15 AM
https://webcache.googleusercontent.com/search?q=cache:BgnTzLCuLUIJ:https://bitcointalk.org/index.php%3Faction%3Dprofile%3Bu%3D239265+&cd=1&hl=tr&ct=clnk&gl=tr

Again, to verify the BTC address in my profile; If I check my profile at https://web.archive.org, we can see that my BTC address appears on Bitcoin address on November 26, 2017, 01:26:19 PM.
Here: https://web.archive.org/web/20171126132619/https://bitcointalk.org/index.php?action=profile;u=239265



I'm waiting for support


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: nngella on June 25, 2018, 07:17:29 AM
You can refer to this thread:
Recovering hacked accounts or accounts with lost passwords (https://bitcointalk.org/index.php?topic=497545.0)

Moreover, I highly recommend also this another thread: Legendary account got hacked - 5 months gone - Signed message included (https://bitcointalk.org/index.php?topic=2721567.0).  There are ongoing discussions on how to recover a hacked account on this thread.  This will help you to find steps moving forward to recover your account.

I hope this helps.


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on July 02, 2018, 02:58:47 PM
I'm waiting for support


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on July 05, 2018, 01:29:18 PM
I'm waiting for support!


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on July 14, 2018, 07:26:01 AM
please help me.


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on July 23, 2018, 04:46:47 PM
pls help me


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on July 27, 2018, 02:55:47 PM
bump

http://archive.fo/ZAQjk


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: LoyceV on July 27, 2018, 10:58:50 PM
I've received a PM from OP, asking if I can help get his account back. I'll respond here: I'm not an Admin, so I can't do anything.

I can however check my own records: The account Quite (https://bitcointalk.org/index.php?action=profile;u=239265) was registered on Feb 5, 2014, and I can confirm it only had 15 posts on Oct 18, 2016. The profile didn't show an addy at that time.
Looking into the post history (https://bitcointalk.org/index.php?action=profile;u=239265;sa=showPosts;start=480), there are no posts between Feb 25, 2014 and May 5, 2017. The posts, however, changed from long posts in a language that I can't read, to spammy oneliners that look like its only meant to rank up the account. The 3 year posting gap makes me wonder if you are the original account owner. A staked address should be old, and I doubt Admins will accept a quite recent archived address as proof of ownership.

Really comes down to getting sucked in by a phishing link or having not changed your password after one of the database hacks.
With a decent password, the database hack isn't a problem. Only the easy passwords can be brute forced.


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on July 28, 2018, 04:40:49 AM
I've received a PM from OP, asking if I can help get his account back. I'll respond here: I'm not an Admin, so I can't do anything.

I can however check my own records: The account Quite (https://bitcointalk.org/index.php?action=profile;u=239265) was registered on Feb 5, 2014, and I can confirm it only had 15 posts on Oct 18, 2016. The profile didn't show an addy at that time.
Looking into the post history (https://bitcointalk.org/index.php?action=profile;u=239265;sa=showPosts;start=480), there are no posts between Feb 25, 2014 and May 5, 2017. The posts, however, changed from long posts in a language that I can't read, to spammy oneliners that look like its only meant to rank up the account. The 3 year posting gap makes me wonder if you are the original account owner. A staked address should be old, and I doubt Admins will accept a quite recent archived address as proof of ownership.

Really comes down to getting sucked in by a phishing link or having not changed your password after one of the database hacks.
With a decent password, the database hack isn't a problem. Only the easy passwords can be brute forced.

Firstly, thank you.

I understand your doubts. But I am the first and only owner of the account. Look, it's just a screenshot of what I have when I have 46 messages. My name is as a user. In addition, the BTC address is the same as the 46th message. I've been keeping the same BTC address since the first day.

https://cdn.steemitimages.com/DQmSExvEKoBCZVSYBkKAbVHH8u82Hd6Fpeng3Gkoiu22HZn/Location%20ETH.PNG

I also posted my first 15 posts in 2014, the domain name is Bus Ticket, which is on the website. I still own the property.
http://archive.fo/cwkNP


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on July 30, 2018, 05:42:12 AM
bump


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on July 31, 2018, 09:19:10 AM
Bumper


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on August 04, 2018, 04:09:29 AM
Pump :) Go


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on August 06, 2018, 04:39:12 PM
pump  ???


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on August 07, 2018, 04:40:05 AM
Help me.


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on August 20, 2018, 06:52:30 AM
Bumper


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on September 04, 2018, 02:52:22 PM
pump


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on September 07, 2018, 10:44:13 AM
pump

pumping


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on September 15, 2018, 02:19:16 PM

Hey, help me please.


Title: Re: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it
Post by: WeAreSoSory on September 26, 2018, 02:34:59 PM
pumpo