Bitcoin Forum

Economy => Scam Accusations => Topic started by: xtraelv on January 27, 2019, 11:42:17 PM



Title: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: xtraelv on January 27, 2019, 11:42:17 PM
What happened::

Legendary account erre was hacked and recovered.
https://bitcointalk.org/index.php?topic=3652698

Before recovery large amounts of merit was sent to three accounts.

One of those accounts has feedback from DT2

EDIT: Additional proof was found that Aleks09 , Mr Felt and zTheWolfz are alts of the same person who has been vouching for themselves as an exchanger.

All accounts show strong signs of being hacked or bought. (see proof in the thread)

Profile Link:

Aleks09 (https://bitcointalk.org/index.php?action=profile;u=1453139)
Mr Felt (https://bitcointalk.org/index.php?action=profile;u=388468)
zTheWolfz (https://bitcointalk.org/index.php?action=profile;u=198870)
shdvb-assistant (https://bitcointalk.org/index.php?action=profile;u=1895733)
shdvb (https://bitcointalk.org/index.php?action=profile;u=318030)

This DT2 prolfile gave positive feedback to one of the profiles. This user also has hack allegations against it.

https://i.imgur.com/TL6H9Z5.png

https://bitcointalk.org/index.php?topic=3061930.msg31532524#msg31532524  shdvb hacked account accusation.

https://i.imgur.com/vLaDIPg.png
Gave feedback to the "mr felt" account around the time of the hack.

shdvb (https://bitcointalk.org/index.php?action=profile;u=318030)
shdvb-assistant (https://bitcointalk.org/index.php?action=profile;u=1895733)

I'll change the negative feedback to neutral but something still doesn't seem 100% right about this. The fact that he deals in bitcoin for years yet can't provide a signed message from an address associated with the account is a bit suspicious.

Not I cannot I have explained many times before, those wallets I used are ALL from exchanges. I don't have any private keys to them. Also, change my assistant's negative to neutral, please. Nothing happened to us. No one scammed, nothing.

My Assistant's Account:
https://bitcointalk.org/index.php?action=trust;u=1895733
https://i.imgur.com/kgTW4n2.png

Additional Notes:

In May, my account was hacked (see here (https://bitcointalk.org/index.php?topic=3652698) for reference).

The process of recovering was extremely long and painful, but thanks to the new  system I was finally able to get my account back a couple of days ago :)

A few hours after the hack, i locked my account. The hacker was not able to post anything in my name, but according to this site (https://bpip.org/smerit.aspx?from=erre) he was able to send my sMerit to a couple of Russian users (zTheWolfz and Aleks09).

I think additional investigation are needed, because I probably spotted two of my hacker's accounts.

"MrFelts" appears to have received that "trusted feedback" from an account that has a suspected hacking allegation against it.

https://bitcointalk.org/index.php?action=trust;u=318030

I've sent a message to vod who appears to know / trust him.

https://i.imgur.com/3bevrfC.png

All three look extremely suspect.

https://i.imgur.com/AVv2IVp.png

https://i.imgur.com/pvuGR4v.png

https://i.imgur.com/dqACvNp.png

It would be nice to hear their response before deciding to paint them red.




Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: shasan on January 27, 2019, 11:46:49 PM
The hacker can sell those merits (or took merit to his accounts) or hacker can send merit randomly. If these accounts are connected then we would be able to tell undoubtedly that those are engaged with hacking or merit abusing.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: xtraelv on January 28, 2019, 12:05:49 AM
The hacker can sell those merits (or took merit to his accounts) or hacker can send merit randomly. If these accounts are connected then we would be able to tell undoubtedly that those are engaged with hacking or merit abusing.

It would be a huge co-incidence to have never received merits and then get 50 merits randomly from a hacked account.

Why would a hacker give away free merits (maximum allowable) to random accounts when they can sell them ?

I have strong suspicions that the accounts are either associated to the hacker or th merit was bought - either deserves red tagging.

Mr Felt got merits from a hacked account AND got trust from a different account with a hacking accusation against it.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: shasan on January 28, 2019, 12:13:45 AM
The hacker can sell those merits (or took merit to his accounts) or hacker can send merit randomly. If these accounts are connected then we would be able to tell undoubtedly that those are engaged with hacking or merit abusing.

It would be a huge co-incidence to have never received merits and then get 50 merits randomly from a hacked account.

Why would a hacker give away free merits (maximum allowable) to random accounts when they can sell them ?

I have strong suspicions that the accounts are either associated to the hacker or th merit was bought - either deserves red tagging.

Mr Felt got merits from a hacked account AND got trust from a different account with a hacking accusation against it.
Usually, it engaged with merit trading and/or sending merit to his/her own account. But sometime it may happen sothat we can concentrate on the merited person so that hacker can stay away. But as merited accounts are not high ranked that possibility is too low. There might have 5-10% chance to be random. If they trade those merit then it will be difficult to catch though we imagine they are engaged merit trading but if those are altered then we could tell 100% confidently. I will try to visit those profiles and try to get if there is any matching info.
Edit:
All merit has been sent within 6 minutes so there is more chance to alter account of the hacker.
All accounts received merit only from the hacked account.
They have not used any smerit. So, if they bought they could sell too. It is more chance to be altered of the hacker account.
Your mentioned 3 positive feedback was long ago in the meantime anyone's mind can be changed.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: erre on January 28, 2019, 11:15:52 PM
Thank you for opening this scam accusation.

I think there are enough proof that these account are my hacker and his socketpuppets, and no one answered in public or private despite my PMs, so I left them red trust. Waiting for DT members to do the same, also some additional investigation (like ip checking) would be great.

I'm pretty passed off and I could consider the option of a formal crime accusation too, but I'm also very curious about how I was hacked, so I will state here that a detailed explanation about how I was hacked will stop my intention to sue the hacker (I will not use any info against him if he tells me honestly what happened).


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: xtraelv on January 29, 2019, 02:23:27 AM
Thank you for opening this scam accusation.

I think there are enough proof that these account are my hacker and his socketpuppets, and no one answered in public or private despite my PMs, so I left them red trust. Waiting for DT members to do the same, also some additional investigation (like ip checking) would be great.

I'm pretty passed off and I could consider the option of a formal crime accusation too, but I'm also very curious about how I was hacked, so I will state here that a detailed explanation about how I was hacked will stop my intention to sue the hacker (I will not use any info against him if he tells me honestly what happened).

I've left negative feedback to the accounts that got 50 merits and a neutral to the one that got 12 (The post that got 12 is not a bad post) but still suspect due to the hacking accusation against the person that left positive feedback to that hero account.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: Rambotnic on January 30, 2019, 01:26:55 AM
Firstly, i would like to note that i do not defend shdvb.
From what i know for the years i trade with shdvb he is chinese.
His english skills are worst than mine also...
I don't believe he actually have more than one account more as assistant because that's how he used to work back in the Runescape gold sales.
This user is also known as "shine20078" in the runescape community with positive feedbacks since 2011.
I personally don't like shine/shdvb because of his politics for sales, prices and arrogant language.
But also i never seen him scamming, hacking or any malicious activity for those 8+ years so far.
Shine can be easy googled, he have 20-30,000+ positive feedback in few different websites/forums for online trading most for runescape gold.
Also, that doesn't mean people don't change and he didn't bought merit.

A deeper research should be done before any claims.
Based on my experience trading with this person for last years, i can clearly say he is not hacker or scammer for sure, but there is still possibility for merit abuse/purchase.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: erre on January 30, 2019, 05:17:07 PM
Firstly, i would like to note that i do not defend shdvb.
From what i know for the years i trade with shdvb he is chinese.
His english skills are worst than mine also...
I don't believe he actually have more than one account more as assistant because that's how he used to work back in the Runescape gold sales.
This user is also known as "shine20078" in the runescape community with positive feedbacks since 2011.
I personally don't like shine/shdvb because of his politics for sales, prices and arrogant language.
But also i never seen him scamming, hacking or any malicious activity for those 8+ years so far.
Shine can be easy googled, he have 20-30,000+ positive feedback in few different websites/forums for online trading most for runescape gold.
Also, that doesn't mean people don't change and he didn't bought merit.

A deeper research should be done before any claims.
Based on my experience trading with this person for last years, i can clearly say he is not hacker or scammer for sure, but there is still possibility for merit abuse/purchase.


Nobody is questioning shdbv's honour.
What probably happened here is that shdbv account had been hacked (additional proofs: https://bitcointalk.org/index.php?topic=3061930.0) by the same hacker who hacked me, and the other accounts are either the hacker's account or his socketpuppets.



Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: Quickseller on January 30, 2019, 06:34:57 PM
This really doesn’t work prove anything.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: erre on January 30, 2019, 07:02:34 PM
This really doesn’t work prove anything.

Of course not. My hacker dropped my merits to some users during a timespan of 6 minutes, and one of this users was green painted by a trusted user who was recently tagged as an hacked account, and act and behave strangely. This doesn't exactly prove anything. But there are lot of clues.

I'm waiting for explanations from the involved users (I even sent PMs), but as now I would bet we spotted the hacker and his friends (or alts).

Why you felt the urge to post here to state we didn't still "work proved" anything?


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: sapta on January 31, 2019, 12:18:07 PM
IIRC, shdvb wasn't even on DT2 back when his account allegedly compromised.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: erre on February 01, 2019, 11:11:36 PM
Mr felt contacted me by pm, and told me he own all the 3 accounts and buyed merit from deliveryman (https://bitcointalk.org/index.php?action=profile;u=307899), a user that is indeed selling accounts and merit.

I changed my feedback to neutral and I will now investigate deliveryman's activity deeper...


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: suchmoon on February 01, 2019, 11:19:25 PM
Mr felt contacted me by pm, and told me he own all the 3 accounts and buyed merit from deliveryman (https://bitcointalk.org/index.php?action=profile;u=307899), a user that is indeed selling accounts and merit.

I changed my feedback to neutral and I will now investigate deliveryman's activity deeper...

You changed feedback to neutral for a merit-buying puppeteer, am I reading this right? Please ask Mr Felt to come over here to comment on this. Sounds like a very interesting story.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: erre on February 01, 2019, 11:38:57 PM
Mr felt contacted me by pm, and told me he own all the 3 accounts and buyed merit from deliveryman (https://bitcointalk.org/index.php?action=profile;u=307899), a user that is indeed selling accounts and merit.

I changed my feedback to neutral and I will now investigate deliveryman's activity deeper...

You changed feedback to neutral for a merit-buying puppeteer, am I reading this right? Please ask Mr Felt to come over here to comment on this. Sounds like a very interesting story.

Yep, I already asked everyone to come here to give their version, but nobody did...

Deliveryman is obviously an account made for selling hacked accounts, and he is related to some accounts who made more elaborate scams (https://bitcointalk.org/index.php?topic=930649.0). Probably he have many alts. But he seems not to be a Russian speaker, so I think Mr felt's accounts are not controlled by deliveryman. But I will try to make some checks using timestamps, If I still can retrieve the mail I got when the hacker changed the password.



Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: shasan on February 02, 2019, 12:58:27 AM
Mr felt contacted me by pm, and told me he own all the 3 accounts and buyed merit from deliveryman (https://bitcointalk.org/index.php?action=profile;u=307899), a user that is indeed selling accounts and merit.

I changed my feedback to neutral and I will now investigate deliveryman's activity deeper...
Do you support merit abusing (merit buying), and multi accounts which have been used as merit abusing. As far as I know, merit trading is not allowed, so how merit buying can be trusted. They may not be engaged with account hacked but according to their words which you told they are merit abuser (merit trader) in this case, they can't be trusted. In this situation, I could not understand the reason to change your mind from negative to neutral.

Yep, I already asked everyone to come here to give their version, but nobody did...
They have not kept their words but you have kept. Though there is still a chance they may create post on here.
You changed feedback to neutral for a merit-buying puppeteer, am I reading this right? Please ask Mr Felt to come over here to comment on this. Sounds like a very interesting story.
You see the right thing which you wrote. I do not think merit buyer will tell publicly, As it will happen same for merit buying.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: xtraelv on February 02, 2019, 07:10:57 AM
https://i.imgur.com/tCHuRM4.png

You put a negative feedback about the merits from hacked account, I want to clarify this situation, i am owner of this three accounts (Mr.felt) (zTheWolfz) and Aleks09 I keep these accounts for promotion of my trading topic for buying and selling cryptocurrency and i am not a hacker! and i bought this merits from user of this forum, I have already shared all the information about this user with (erre).
And honestly I thought that having several accounts and buying merit is not prohibited here , maybe there is some way to return these merits and that you would remove your negative feedback?

Is this where you are vouching for your own exchange service using an alt account ?

https://i.imgur.com/GhWxg6J.png

https://i.imgur.com/vcj76Mm.png

Excellent exchanger, exchanged some BTC for qiwi, after the first confirmation the money was already in my account.
Thank you for your feedback! Waiting for you again)

https://bitcointalk.org/index.php?topic=2752732.0

https://bitcointalk.org/index.php?topic=2752732.120

Archived:
https://archive.fo/AHqTa

https://archive.fo/r3pJg


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: erre on February 02, 2019, 10:37:09 AM
I turned my feedback to neutral because he was collaborating, i now asked to post here the tx were he paid the seller for further investigation. Anyway, I still clearly state in my feedback what happened.

But there's something even more fishy about mr felt:

Mail I received on 8th May 12.02 am:

Dear erre,

Your Bitcoin Forum (bitcointalk.org) email address was just changed from ---@gmail.com to olegrozman6966@gmail.com by IP address 108.59.2.227. If you did not do this, then you can visit the following link within 14 days in order to lock the account:


On the same day, from 10.16 to 10.22 am, the hacker dropped my merit on mr felt and his account.

That could be a matter of server time (I'm gmt+1), but the two events are really close, so I asked for additional explanations about were and how he buyed the merit so fast.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: xtraelv on February 02, 2019, 10:54:02 AM
https://i.imgur.com/GuBx0rR.png

"Once again I used the services, everything was clear, without delay. Keep it up!"


Aleks09 - likely a juvenile who writes with errors.

https://bitcointalk.org/index.php?topic=2725216.msg28041595#msg28041595

https://archive.fo/1J3Br (archived)

Quote
"I do not work yet. I go to school"

But after January 14 is a very clear text with services.

bitcointalk.org/index.php?topic=2752732.0

Account likely hacked or bought.


zTheWolfz - Old account, writes about mining in excellent technical English.
Till December 07, 2017, 02:20:05

Starting with January 19, 2018, 11:07:45
He only writes about the Russian exchange.
In Russian.

Account likely hacked or bought.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: erre on February 02, 2019, 11:18:47 AM
Yes, a basic linguistic and style analysis makes clear that the account are hacked.
Combining this with the timestamps, I am red trusting again mr felt, this time for hacking/possession of stolen goods, which in my view is a far worst crime than merit buying.



Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: xtraelv on February 02, 2019, 11:36:33 AM
Mr Felt

https://i.imgur.com/O9xf31m.png

Prior to October 2016 only posts in high level English

One year of no posts.

After October 2017 posts in Russian and broken English.

Account likely hacked or bought.




Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: Quickseller on February 03, 2019, 01:16:30 AM
This really doesn’t work prove anything.

Of course not. My hacker dropped my merits to some users during a timespan of 6 minutes, and one of this users was green painted by a trusted user who was recently tagged as an hacked account, and act and behave strangely. This doesn't exactly prove anything. But there are lot of clues.

I'm waiting for explanations from the involved users (I even sent PMs), but as now I would bet we spotted the hacker and his friends (or alts).

Why you felt the urge to post here to state we didn't still "work proved" anything?

I wouldn’t give the time to respond to this and wouldn’t blame anyone involved if they didn’t either.

It doesn’t take anything to receive a merit and merit isn’t generally worth anything to a high ranking account that isn’t trying to help a specific person to rank up.

I can see this turning into another witch-hunt, which is not something I want to see.


Title: Re: Hacking accusation: zTheWolfz, Aleks09, Mr Felt, shdvb - discussion needed.
Post by: xtraelv on February 03, 2019, 02:01:58 AM
This really doesn’t work prove anything.

Of course not. My hacker dropped my merits to some users during a timespan of 6 minutes, and one of this users was green painted by a trusted user who was recently tagged as an hacked account, and act and behave strangely. This doesn't exactly prove anything. But there are lot of clues.

I'm waiting for explanations from the involved users (I even sent PMs), but as now I would bet we spotted the hacker and his friends (or alts).

Why you felt the urge to post here to state we didn't still "work proved" anything?

I wouldn’t give the time to respond to this and wouldn’t blame anyone involved if they didn’t either.

It doesn’t take anything to receive a merit and merit isn’t generally worth anything to a high ranking account that isn’t trying to help a specific person to rank up.

I can see this turning into another witch-hunt, which is not something I want to see.

You put a negative feedback about the merits from hacked account, I want to clarify this situation, i am owner of this three accounts (Mr.felt) (zTheWolfz) and Aleks09 I keep these accounts for promotion of my trading topic for buying and selling cryptocurrency and i am not a hacker! and i bought this merits from user of this forum, I have already shared all the information about this user with (erre).
And honestly I thought that having several accounts and buying merit is not prohibited here , maybe there is some way to return these merits and that you would remove your negative feedback?

The member has already admitted to having bought the merit from the hacker. They are all his alts. All the accounts have changed ownership so have been hacked or bought.
All the accounts are being used to provide false reviews of the exchange service.

Placing false feedback
https://i.imgur.com/RZCTd0B.png

alex123e
https://bitcointalk.org/index.php?action=profile;u=154347

1 year no posts. Suddenly starts posting reviews on Aleks09 as an exchanger.

https://i.imgur.com/YRLpGH2.png

Oбнaличивaю cвoи биткoины y Aлeкceя yжe мoжнo cкaзaть нa пocтoяннoй ocнoвe, cepвиc paбoтaeт нa ypoвнe и нe кoгдa нe пoдвoдили. Peкoмeндyю!

Quote
I can already cash out my bitcoins from Alexey on a permanent basis, the service works at the level and not when it failed. Recommend!

TrianglePythagoras

https://bitcointalk.org/index.php?action=profile;u=358200

2 Years silent

Prior to this only posts in English. Then suddenly starts posting in Russian after a 2 year sleep. Posting reviews on Aleks09 as an exchanger.

https://i.imgur.com/EdwsXuF.png

Oдин из лyчшиx и нaдёжныx oбмeнникoв кoтopыми я пoльзoвaлcя . Cпacибo зa coтpyдничecтвo.

Quote
One of the best and reliable exchangers that I used. Thank you for your cooperation.

bablovagon

https://bitcointalk.org/index.php?action=profile;u=80160

4 year sleep. Then starts posting reviews on Aleks09 as an exchanger and offering bitcoin exchange.

https://i.imgur.com/SIqh2CD.png

Oтличный oбмeнник! Meняюcь yжe кoтopый paз и вce нa выcoтe.Peкoмeндyю!

Quote
Great exchanger! I have changed many times already and everything is on top. I recommend!


https://web.archive.org/web/20190203063926/https://bitcointalk.org/index.php?topic=2752732.0
https://web.archive.org/web/20190203064009/https://bitcointalk.org/index.php?topic=2752732.20
https://web.archive.org/web/20190203064050/https://bitcointalk.org/index.php?topic=2752732.40
https://web.archive.org/web/20190203064124/https://bitcointalk.org/index.php?topic=2752732.60
https://web.archive.org/web/20190203064121/https://bitcointalk.org/index.php?topic=2752732.80
https://web.archive.org/web/20190203064306/https://bitcointalk.org/index.php?topic=2752732.100
https://web.archive.org/web/20190203064303/https://bitcointalk.org/index.php?topic=2752732.120
https://web.archive.org/web/20190203064324/https://bitcointalk.org/index.php?topic=2752732.140

Plagiarism:

~
Cpeдcтвa зaщищeны oт кpaжи, бoт paбoтaeт пo API тopгoвли.
Бoт paбoтaeт пo API ключaм и нe имeeт дocтyпa к вывoдy cpeдcтв.
Taк жe бoт нe имeeт вoзмoжнocти зaкyпить инyю дpyгyю вaлютy кpoмe yкaзaнныx в cпиcкe из TOП 10 a знaчит oн зaщищeн oт взлoмa и нeoжидaннoй пoкyпки гoвнoкoинoв из TOП 100.


Topгoвля тoлькo aвтopитeтными мoнeтaми в пapax c USDT:BTC, ETH, XRP, LTC, XMR, BCH, ETC, DASH, ZEC

http://archive.li/QEt9q

Quote
CPEДCTBA ЗAЩИЩEHЫ OT КPAЖИ БOT PAБOTAET ПO API TOPГOBЛИ
Бoт paбoтaeт пo API ключaм и нe имeeт дocтyпa к вывoдy cpeдcтв. Taк жe бoт нe имeeт вoзмoжнocти зaкyпить инyю дpyгyю вaлютy кpoмe yкaзaнныx в cпиcкe из TOП 10 a знaчит oн зaщищeн oт взлoмa и нeoжидaннoй пoкyпки шиткoинoв из TOП 100.

ПOДPOБHAЯ CTATИCTИКA И ГPAФИКИ BCEX CДEЛOК
Bнyтpи бoтa вeдeтcя гpaфик pынкa и cдeлoк c пoлнoй cтaтиcтикoй для yдoбcтвa aнaлизa paбoты.

Beдeтcя пoдcчeт мeжбиpжeвыx paзниц кypca вaлют для мгнoвeннoгo пpинятия peшeния.

Topгoвля тoлькo aвтopитeтными мoнeтaми в пapax c USDT:

BTC  ETH  XRP  LTC  XMR  BCH  ETC  DASH  ZEC


https://sirius-crypto.com/zashhita-vashih-sredstv-do-100-pri-padenii-ryinka/
http://web.archive.org/web/20190202145324/https://sirius-crypto.com/zashhita-vashih-sredstv-do-100-pri-padenii-ryinka/