Bitcoin Forum

In May, my account was hacked (see here (https://bitcointalk.org/index.php?topic=3652698) for reference).

The process of recovering was extremely long and painful, but thanks to the new  system I was finally able to get my account back a couple of days ago :)

A few hours after the hack, i locked my account. The hacker was not able to post anything in my name, but according to this site (https://bpip.org/smerit.aspx?from=erre) he was able to send my sMerit to a couple of Russian users (zTheWolfz and Aleks09).

I think additional investigation are needed, because I probably spotted two of my hacker's accounts.

It's not certain that merit receivers are the hacker. They may have bought merits too. Theymos may reversed the transaction since he has done it once previously.

Well, that's immoral either way?

zTheWolfz (https://bitcointalk.org/index.php?action=profile;u=198870) and Aleks09 (https://bitcointalk.org/index.php?action=profile;u=1453139) both of them could be an alt of the hacker or just some merit buyers and in both way they are worth of getting tagged.

I could see Aleks09 (https://bitcointalk.org/index.php?action=profile;u=1453139) is still active and posting in his crypto buy and sell thread here (https://bitcointalk.org/index.php?topic=2752732.0).You could investigate there if you want more info about the hacker.

zTheWolfz (https://bitcointalk.org/index.php?action=profile;u=198870) is a inactive account from July 28, 2018.

zTheWolfs is very likely to have been banned as there is no record of the profile in BPIP (https://bpip.org)

Here is the account in bpip- https://bpip.org/profile.aspx?p=zTheWolfz
bpip keeps the record of banned users too. For some reasons, you may not find users with username, in that case, use userid.

Theymos can manually remove the sMerit but I don't know if he wants or he has time to do so.

He had transferred 50 merit on this post.

Archived: http://archive.is/xCTRW
This is obvious proof that he had bought merit. No doubts this is a spam post and never deserve any merit.
His post history is totally spam. He is active on his buy sell post.

I sent a PM to aleks09 asking to take a look at this discussion and to tell us what happened, even if he is not the hacker he must have some useful info about how he buyed merit.

Otherwise, he is the hacker

Good initiative. I think this thread should be moved to reputation section. Anyway, aleks09 has definitely has connection with the hacker. It can barely happen that the hacker intentionally give merit to an unknown user. It can only be happened if he had any previous issue, lol.

The hacker also sent 18 merits to mr felt, an hero member with green trust. I will send a PM to him too...

Who sent 18 merits? I can't find any smerit data related the above 2 accounts. I have checked their bpip profile and it shows they didn't send any merits to anyone. Am I missing anything?

He probably meant that the hacker sent 18 merits from erre's account to Mr Felt for this post:


Edit: It is also visible now in bpip after I refreshed the profile.

https://talkimg.com/images/2023/11/12/zAI1C.png

"MrFelts" appears to have received that "trusted feedback" from an account that has a suspected hacking allegation against it.

https://bitcointalk.org/index.php?action=trust;u=318030

I've sent a message to vod who appears to know / trust him.

https://i.imgur.com/3bevrfC.png

All three look extremely suspect.

https://i.imgur.com/AVv2IVp.png

https://i.imgur.com/pvuGR4v.png

https://i.imgur.com/dqACvNp.png

It would be nice to hear their response before deciding to paint them red.

I opened a scam accusation here: https://bitcointalk.org/index.php?topic=5103001.msg49459272#msg49459272

(I think hacking falls under scam rather than reputation)

Thank you for the other thread.
I left red trust to all the three users involved, but gathering enough info for a criminal accusation would be great.

After many months without my account I'm pretty pissed off, but I'm also really really curious about how he managed to hack my account.

TO THE HACKER: a detailed explanation about how you hacked me will stop my intention to sue you

I don't think hackers are noble enough to give merit to other users genuinely through there hacked account.
And even if the merit receivers had bought it that is still against the rule.

So, this is the issue, if you are not sure about how you get hacked, it could happen again.

I would like to recommend you to change all your passwords and run a couple of scans with your AV. Another option is that you get hacked when the forum gets hacked, not sure if you remember a couple of years ago when the forum gets vulned and someone gets access to the DB.

So, just be careful my friend, and hope it doesn't happen again.

Yes. One option is that the hacker took the salted password from bitcointalk hack, I didn't change it but my password was unique and 14 characters long (no special characters but also no en dictionary words and I never declared its lenght before now), I thought it had enough entropy.

The other option is a phishing attack, but I weren't able to find any phishing site in my browser history. Also, i used many times my devices for btc-related stuff after the hack, so it seems I'm not infected.

You gave him negative feedback, I don't think he'd cooperate to tell you something whom he bought merits after that. Its possible that its him that actually hacked your account and giveaway the merits to his alts. You reported your account so its worthless when it has red tag, the only that can be sold/useful from it are the merits and he the hacker used it.

You can remove feedbacks. If somebody comes out with a good story about how he buyed merit and some additional info to identify the hacker, I will fore sure remove the negative feedback :)