Bitcoin Forum

Hi All,

Yesterday my account was hacked @ 3:38 PM GMT.
Hacker managed to change my account's e-mail id & then the password.
I noticed it at 3:45 PM GMT & got my account locked using the link the forum sent me on my e-mail id along with e-mail change notification.
In that e-mail itself they've mentioned the IP address of the hacker & the new e-mail id he created to hack my forum account.
I have dropped e-mail to account recoveries e-mail id but have not heard anything back from them.

Can someone please tell me is there any other alternative to reach out to person responsible of unlocking my account?

Thanks,
sardasa

Just follow the instructions here: https://bitcointalk.org/index.php?topic=5089777.0

Much better if you have signed message from previously used btc address before the hack happens.

Make sure you send the account's recovery team a message from the account's original email address as you follow the procedure. Account recovery could even get completed after seven days once the process has started.

That gives the hacker a 7 minute window in which he could have used your account to PM users trying to scam them. I don't think it's very likely, but if you sign a message from an address posted anywhere, I'll tag the account just to be sure.

I checked it. My account was last active till 3:40 PM GMT. Don't think he did anything with the account.
That's the address which I had staked last time: https://bitcointalk.org/index.php?topic=996318.msg19862993#msg19862993
It belongs to my Lykke Exchange account. I have access to it. Can send screenshots and other proofs but won't be able to sign a message from it as it's exchange address.

How shall we go ahead now?

I won't tag an account without solid evidence, so just use bL4nkcode's link to reclaim access.

That's what I have already done. My question was can something more be done to speeden up the process?

You could PM someone from Cryptios (https://bitcointalk.org/index.php?topic=5138349.0), but I'm not sure if that's going to be appreciated.

It takes time mate, They can't unlock or recover the account so quickly without doing thorough investigations and review. Now that you have no staked bitcoin address, all you have to do is wait. AFAIK, It usually takes a week for the recovery process to be complete.

Back in the day, hacked accounts could even take 6-12 months to be recovered, so I think currently, the speed has massively improved

Sorry to see that your account got hacked. As per Theymos's instructions, you can use any address (even which is not staked) whose private key you own:


You have so many addresses mentioned in your earlier posts that are unedited like

https://bitcointalk.org/index.php?topic=1268827.msg13099505#msg13099505

And addresses from which you paid users for sign-ups and so on.

Choosing accounts from coinbase or any exchange won't be of any use as you don't own the private keys of those addresses.

Mostly I used coinbase during initial days & shifted to Lykke. Now, my Coinbase account is locked, so can't sign any message from it and Lykke address was again exchange one and can't sign from that address.

^Coinbase also allows you to sign a message which I just checked but they locked your account so... :(

You did not use blockchain.info addresses or any other wallets like electrum, hardware wallets, jaxx etc? If you have used ETH addresses (like myetherwallet, metamask etc. hoping it would be considered) also and sign a message, that could be fine.

You dealt with localbitcoins (https://bitcointalk.org/index.php?topic=2111182.msg21107467#msg21107467) so is it possible for them to allow you to sign a message? They don't give the private key is what I know though.

No never used any of these wallets.
Don't think lbc address would be of any help here

Its bit difficult to recover your account if you can't sing message from your used/staked address. However you can try your luck, just follow the proper procedure like describe on first reply. Contact with recovery team from original main that you had used during registration. Perhaps they will consider by your IP address also. So don't give up, it will take time and everything is manual.

The account is active now (https://bitcointalk.org/index.php?topic=5139505.msg51329168#msg51329168) but the OP has not posted if he managed to recover the account or not.

He recovered his account,you can see that logs on bpip.org under his profile.

https://bpip.org/profile.aspx?p=sardasa

My account has been hacked again 4 days ago.
I got it blocked within minutes of receiving the password change e-mail.

Now, I have dropped email to recovery team and still waiting for them to revert.

Did you change your email and password after the first hack to log out any existing access to the account? And did you sign a message to an address linked to the account? That would speed up the process of recovering the account.
I'll advise you avoid phishing links and clone websites of bitcointalk, also do not log in on many devices.
*Edit: just checked at bpip and it shows you did reset the password after the last recovery.

This is sad, i hope no one was scammed through your compromised account. I am also wondering how the hacker good his hands onto your account once again

You managed to recover it the last time, am I right? You just have to follow the instructions once again here (https://bitcointalk.org/index.php?topic=5089777.0) for your account recovery. You better change your email now binding that account and I guess that's the reason you're account is compromised lately by the hacker as he still knows it.

How it has been locked when you are to received to change the password? Or have you forgotten the password again and mods locked it because they thought that's an unwanted activity that your trying to log in with the incorrect password?

Too late for hoping that.

https://bitcointalk.org/index.php?topic=5202194.0

Although Sardasa is now a part of the Indian TG group and he is actively trying to recover his account.

What is surprising is, how easily he is managing to get hacked. I wonder if someone is bruteforcing his account and if that is even possible (something that could have forum-wide repurcursions), or if he's being too careless with his login credentials.

Account recovered now.

Thanks,
sardasa

How come your account gets hacked everyone now and then, check your system for any loggers or any viruses  as this is the second time your account is hacked this year if i am not wrong and you have a trading history here and something is fishy.

Since your situation is sorted close this thread.

Even after changing my e-mail address, my account got hacked again today at 8:15 AM GMT.
I got it locked within 5 minutes.

This time hacker has bombarded my e-mail account with spam mails. In last 1.5 hour I have received 3K+ mails. Please suggest a way to stop this bombardment.

Someone with e-mail id oliverfichtner@icloud.com has hacked my account this time. Their IP address is 179.43.157.33 (somewhere in Zurich). If someone lives nearby then please visit this person.

If this keeps happening, you should really improve your computer security. Maybe even consider changing OS?

Other than using a spam filter or changing your email address, there's not much you can do. If your current spamfilter can't handle it, you can consider forwarding all email to another email provider with a better spam filter (Gmail for instance often marks my legit emails as spam, so they just filter a lot).

You can email abuse at icloud to report this.

Was this new changed email address known to anyone? Spamming emails means the hacker also knows the new email as well as has access to your PC. It's better to create a brand new account for the time being till you don't find a solution to this problem. You can instead access your BCT account only via mobile if your PC is corrupted.

Edited...

You shouldn't post that here, DOXing should be moved to Investigations:
 (https://bitcointalk.org/index.php?board=227.0)

Edited the post.

sardasaAccountHacked, option one is that someone who has access to your computer does it, whether it's a person with physical access or someone who has remote access via some RAT (remote access trojan virus). The only right thing to do is to format the disk, and install a new OS, and some antivirus/antimalware software.

Maybe these tips can help :    
Protect your personal computer/smartphone (https://bitcointalk.org/index.php?topic=5201796.msg53085178#msg53085178)

I don't think he has access to my computer as I do not use Bitcointalk forum on my computer at all.
Somehow he got to know my new e-mail address on Bitcointalk forum and changed it to his own.

Now, when I am requesting recoveries team to unlock my account then they're treating me as if I am letting my account hacked on purpose and they're saying that it will not be unlocked.

there are certainly ways and means to prove that you are the rightful owner of the account. i hope the team can help you quickly and smoothly.
and for the future please take some precautions. there are some links here :)

If it's no secret, where exactly are you accessing the forum from, I mean are you using a computer at work or maybe an internet cafe, something like this? This is definitely not a good security practice, you are actually at great risk of using the forum that way.

That computer you are using obviously has a keylogger installed, for a hacker is very easy to get your password for the forum (and probably e-mail), and from there are no obstacles to take over your account.

If you have a signed address, it's proof of ownership of the account - but before that, you have to completely change the way you approach the forum, because otherwise, you will find yourself in a similar situation again. The recovery team somewhat has the right, from their perspective, you don't seem to care enough about the security of your account.

What all precautions do you guys take to keep your account safe?
It's just that hacker is targeting me again and again and forum is not implementing 2FA which I asked last time as well.

there are several threads that you can read through to be well informed :)

How to protect your account from hackers (https://bitcointalk.org/index.php?topic=3092359.0)
How to Protect your BITCOINTALK Profile from Hacking (https://bitcointalk.org/index.php?topic=3198062.0)
How to protect BCT account from hacking? (https://bitcointalk.org/index.php?topic=1338509.0)
How to protect an account from being hacked? (https://bitcointalk.org/index.php?topic=1420706.0)
Protecting the account bitcointalk (https://bitcointalk.org/index.php?topic=3025128.0)
+
Stake your Bitcoin address here (https://bitcointalk.org/index.php?topic=996318.0)

That hacker (or more of them) is targeting you for one simple reason, you are an easy target. In the little less than 5 years, I've been a member of this forum, I've never had the problems you have, but I never log in from other computers or even my smartphone - and I am using strong password with e-mail that is also very well secured and it is used for very sensitive things.

2FA it would certainly be a welcome feature, but in your case, I don't think it would be helpful - your hacker would probably find a way around, 2FA is not something that provides absolute protection.

As with the previous occasion in December 2019, I have placed a negative on your main account trust feedback stating that I do not trust the hacker.   I will gladly remove this negative when the account has been restored to its rightful owner.

Regards,

Account is currently locked. So, no need to add -ve trust.
If ever it will be unlocked then I will access it and no one else.

As with the last time, send me a PM and I 'll remove the negative warning.

Regards,

Recoveries team is not ready to unlock my account even after proving the ownership of my account. Can someone please help me to get access to my original account. During covid-19 situation I am struggling financially and need my original account to liquidate some of my crypto holdings. I would really appreciate if someone can help me out here.

The account has been hacked so many times that, at this moment, we're unable to guarantee if we're actually talking to the owner or the hacker. Since the account was hacked 3 times, we don't know if the email/private keys are in the owner's hands or not as the hacking extent seems to be pretty serious. Our stance is "no hands at all" is indefinitely better for the account than to end up in the wrong hands and we've made that clear enough by email as well.

You can't trade with this "mobile" account and contact previous clients in the thread to re-establish trades?


Agreed.  You may have to literally start a new user profile and start trading from scratch and use this UID ( sardasaAccountHacked ) as the "mobile" password recovery account.

There have been many posts with links to tutorials on how to choose secure passwords - ensure your email address is secure, or even start a new email just for password recovery.

These are the only user profiles with the name "sardasa" in them:


You could start a new profile such as


I'd suggest if you do go down that path, register the profile first then announce the name via this UID ( sardasaAccountHacked ) and also stake a new secure bitcoin wallet address:

How to sign a message?! (https://bitcointalk.org/index.php?topic=990345.0)

You tell me what can I do to prove myself? I have access to both the email id. 1st one and then changed one. I have access to my private keys. There is stakes address available on the forum which has not been edited after 3rd hack. You can pretty much have a video call with me. Check my id and I can explain you how I derive upon my username. You have blocked me from accessing my own account when there is no fault of mine. That's very wrong. You have made hacker look good and me look bad whereas I am the victim here.

The forum did not block you out arbitrarily, it was done to secure users who may be dealing with your account which was compromised. And the series of time it has been compromised has made it difficult to determine who's behind the keyboard at this point.
I'll suggest you message the cryptios member and suggest another means of recovering your account, as it seems they do not trust you still control the email or private keys linked to it at this point and they will not want to give the account over to a hacker. Although, I don't see how successful that will be.

Can you ask anyone with whom I dealt in initial days for PayPal & take my PayPal e-mail id & drop me an e-mail on the same? I will revert with whatever you want to prove that I still own my e-mail accounts & I am the real sardasa?
https://bitcointalk.org/index.php?topic=1268477.0

I think Avirunes (https://bitcointalk.org/index.php?action=profile;u=175302) and legendster (https://bitcointalk.org/index.php?action=profile;u=93844) can vouch for you as you have done deals with them through this forum and i saw the conversation when your account was hacked last time and they vouched you were the real person behind the account, not sure why your account gets hacked again and again.

PS: your bad experience as well as escrow.ms from selling BTCitcoin through LBC and from unknown users made me think twice and stopped taking fiat in my bank account as you never know the origin of funds reaching your bank account and it might have helped many in this space getting into unwanted legal headaches and you were part of the BTCitcoin evolution and i hope Cryptios will consider once the people who traded with you can vouch.

Are these users still active on the forum? Would their vouches be considered good enough to unblock my account?

Only the accounts recovery team can provide you with the answer on whether the can consider unblocking your account after seeing a couple of vouches. But the said users are still very active here, all you have to do is send them PMs

I think you have been in this forum long enough to know that in the early day recovering hacked accounts even after proo of ownership was almost an impossible task until the cryptios team came in to ease the process but now your account has been compromised so many times in a short period of time to an extent that they have started doubting if the original owner is still in control of the account.

IF i were you, as I am waiting, i would create another account and use it to build my trading reputation

If you can sign a message from this address (https://bitcointalk.org/index.php?topic=996318.msg53275686#msg53275686), you will be good to go with the recovery.


I'll check your post history to see if there is any other staked address in there

I don't think the accounts recovery team will accept a signature from the stated address because it was posted right before the account was hacked again.

A staked address earlier on, way before the hacks would have been very suitable, but he says he doesn't have any that he can use to sign a message except those that are directly linked to his exchange wallets

Actually, checking the time stamps, it was staked right after the account was recovered

Password reset: 12/6/2019 3:14:28 PM   password reset via email
First "account recovered post": December 06, 2019, 17:17:44
Address staked: December 06, 2019, 17:34:05

So unless the hacker was able to access the account in those 2 hours (which I must admit, seems feasible judging by the record), the address should be good. The next hack claim was made almost 2 months later.

I sent them signed message from the staked address you quoted but they're not ready to accept it.
They think that my account is still compromised and they are not sure whether it would be accessed by me or someone else once they unblock it?

What other options can you guys think of to convince them that it's actually me only who will access the account once it's unblocked?

Anyone please help me get my account back.

Unfortunately signing the message is the closest you can get to recover your account. So far I have not seen any other options such as providing login hour and time and device model unless someone could prove otherwise.

Please let me get my account back. I will follow all the security measures highlighted on the thread from now onwards.

Dude.... Again? Lol....  ::)

Yeah, someone targeted me. Even after chaging email id my account got hacked

If the staked address would be funded with a substantial amount of Bitcoin (say at least worth $500, so it's for sure more than the account is worth) for a week, would that make it plausible only one person has access to the address? If a hacker is trying the regain access by funding the address, chances are the real owner would notice a deposit and take the money.
Drawback of this method: If the real owner doesn't know the hacker knows his private key, he's screwed!

I don't want to sound harsh.. but your account already got "hacked" multiple times.

You might consider changing your habits when using a computer or maybe completely refrain from them ?
Obviously you are not able to have somewhat reliable security measurements (which really only means: don't be a retard and don't download every software).

Serious question:
How did this happen.. again ?!
What are you doing ?

That can be done if the OP is still using the same device that might have been infiltrated by a virus or malware. Someone will fall into the same hole if he makes the same mistakes and continues to do his habits.

Leaving old habits and not using the same device again is what the OP must do if one day the account returns.

You can't tell me that there actually exist people dumb enough to continue using the same device without removing the malware. I refuse to believe that.




This is (at least) the 3rd time his account got hacked.
I hope he will now start thinking about what he does and how he does it. But i don't expect much from him.

In the crypto sphere, i don't think there will be an individual which will do that.

I guess the user in the subject is using public computers and if not i will advise him to change the password of his email cause the account seems to be hacked through his email according to what i saw on bpip.
https://i.imgur.com/SPoiY0I.jpg

I have never accessed my account on any public computer.
Infact, after it was hacked 2nd time, I even changed my e-mail address. Not sure how did hacker get to know about my new e-mail id to hack it for the 3rd time.

Your assessment seems to be wrong as these are the mails I have received when my account was hacked:
https://imgur.com/a/v6pVo9p

You don't have any clue about what you are doing online. That's how he got access to your new email address.
Obviously, you didn't learn anything about getting compromised 2 times already.




If you would have done everything (somewhat) correctly, this wouldn't happen.
But you lost your account 3 times already .. so who knows..

Why the hell are you blaming me man?
You are putting all the blame on me as if I am asking my account to get hacked?

PS: Do you know why moderator delete this reply of mine?

It's been 7 months now since my original account is locked.
Can it be unlocked now?

My account was hacked & locked on January 30th. I have given all the proofs to verify that I still have access to my account but still the team is not sure that I have access to my account. Can someone please help me get my unlock my account?
I am ready to provide whatever proofs are needed to prove that only I can access my account.

If the accounts recovery team hasn't responded to you for that long then i think you are out of luck. The only way to continue now is use a new account as i advised you some months back

Until his account gets hacked again because his device is compromised  :P
A new account won't save OP from getting compromised. How often did it happen yet? 3 times? 4? I doubt this was the last time.

I have bought a new device now & will use the forum on that device only.

Unlock my account!!!

Its been a few months that your account was compromised. I am afraid you have to now live with this and there is very little chance that you will get your account back.



I never login my account on a public computer. However passwords are encrypted and are not transmitted in clear text.
But still avoid login on public open wifi's with no password. You never know if anyone sniffing the network.