Bitcoin Forum

Other => Meta => Topic started by: kenzawak_alt on July 17, 2019, 02:29:55 AM



Title: Account "kenzawak" compromised again
Post by: kenzawak_alt on July 17, 2019, 02:29:55 AM
https://bitcointalk.org/index.php?topic=3243635.msg51849680#msg51849680

I'm not the one who posted this message, that is not the real kenzawak.
My account seems to have been compromised again, email too.
Please tag the kenzawak account until I solve this issue. It seems like my email address was hacked too so I'm gonna have to deal with this first.

Code:
{
  "address": "0xbdc1e8a238572e8e282b791e993f571bf8640d83",
  "msg": "I'm posting under the handle kenzawak_alt to prove I'm the owner of the following eth address. Account kenzawak has been compromised on july 17",
  "sig": "0xfaa2ccb96f4e05706fd4093dc9a23b3205c500aac4645e3578fa34746606c7dd27bf1e9359e0f94f11e9292367407e6a447c7d84626097a9b66073f5585780a11c",
  "version": "3",
  "signer": "MEW"
}

EDIT : email hacked, binance hacked, kraken hacked...


Title: Re: Account "kenzawak" compromised again
Post by: hacker1001101001 on July 17, 2019, 02:58:41 AM
Code:
{
  "address": "0xbdc1e8a238572e8e282b791e993f571bf8640d83",
  "msg": "I'm posting under the handle kenzawak_alt to prove I'm the owner of the following eth address. Account kenzawak has been compromised on july 17",
  "sig": "0xfaa2ccb96f4e05706fd4093dc9a23b3205c500aac4645e3578fa34746606c7dd27bf1e9359e0f94f11e9292367407e6a447c7d84626097a9b66073f5585780a11c",
  "version": "3",
  "signer": "MEW"
}

Verified (https://etherscan.io/verifySig/1768) bro !

Bad to see this happen twice, just keep calm.

EDIT : email hacked, binance hacked, kraken hacked...

BTW, did you had a common password used on all this platform ?


Title: Re: Account "kenzawak" compromised again
Post by: hacker1001101001 on July 17, 2019, 03:10:45 AM
I contacted kraken via chat, they locked the account but I guess there's nothing left on it.
As for binance, I don't see any chat option, I sent them an email.
These accounts are my main worries, not the one here.
Actually, I don't know if it can be locked but if that's possible, it would be safer.


Did you lost any funds?

Also, according to me binance has some good recovery options, if you have set up a 2-factor or SMS verification, I don't think the hacker would be able to move your funds from there.


Title: Re: Account "kenzawak" compromised again
Post by: JSRAW on July 17, 2019, 03:47:41 AM
@Kenzawak tagging your account. but just to confirm, if you are real owner then please drop a text outside of this forum too ( Just like last time) real @Kenzy knows this.


Title: Re: Account "kenzawak" compromised again
Post by: Vod on July 17, 2019, 03:50:06 AM
BTW, did you had a common password used on all this platform ?

That was my first thought, but then I realized they wouldn't need to know the password on the exchange sites if they controlled his email.

Now that he knows hackers view him as an easy score, he should probably up his security.  Maybe go as far as making a new email just for the exchanges, and only access everything through a virtual machine he does nothing else with.  


Title: Re: Account "kenzawak" compromised again
Post by: kenzawak_alt on July 17, 2019, 03:56:30 AM
@Kenzawak tagging your account. but just to confirm, if you are real owner then please drop a text outside of this forum too ( Just like last time) real @Kenzy knows this.
Done.

Any way to lock the "kenzawak" account here ?


Title: Re: Account "kenzawak" compromised again
Post by: Kavelj22 on July 17, 2019, 04:26:14 AM
@Kenzawak tagging your account. but just to confirm, if you are real owner then please drop a text outside of this forum too ( Just like last time) real @Kenzy knows this.
Done.

Any way to lock the "kenzawak" account here ?

Ask a moderator to lock the account, or cryptios team. You can point one of them to this thread.
Am sorry to say that it will be so difficult to get your account back after loosing access to the used for registration; account's can only be restored to original emails.

Good luck


Title: Re: Account "kenzawak" compromised again
Post by: elda34b on July 17, 2019, 04:39:31 AM
Did you use any external/shared/public computer lately? If not, maybe you also need to clean up your computer/devices.

Sad to see you got hacked again, hopefully, it could be solved soon.


Title: Re: Account "kenzawak" compromised again
Post by: hacker1001101001 on July 17, 2019, 04:54:36 AM
BTW, did you had a common password used on all this platform ?
That was my first thought, but then I realized they wouldn't need to know the password on the exchange sites if they controlled his email.

Yes, his email could get access to most of his linked accounts very easily even without knowing the password. Hacker has done the same with his bitcointalk account.

But, I am inclined to think, he should have linked some mobile number with his email from which I think the email could be recovered and than recover the rest. Just like reversing what the hacker did ! >:(

@kenzawak, did you had any phone number linked with your email ?


Title: Re: Account "kenzawak" compromised again
Post by: JSRAW on July 17, 2019, 05:24:41 AM
@Kenzawak tagging your account. but just to confirm, if you are real owner then please drop a text outside of this forum too ( Just like last time) real @Kenzy knows this.
Done.

Any way to lock the "kenzawak" account here ?


Msz received and confirmed offline.


Title: Re: Account "kenzawak" compromised again
Post by: Halab on July 17, 2019, 06:19:40 AM
Any way to lock the "kenzawak" account here ?

I relayed your request on the Staff forum, it shouldn't take too long. It's all that I can do.

Edit : Account Kenzawak is now banned.



Title: Re: Account "kenzawak" compromised again
Post by: AB de Royse777 on July 17, 2019, 09:24:56 AM
https://bitcointalk.org/index.php?topic=3243635.msg51849680#msg51849680


WOW! That was a quick activity to steal some BTC. Good thing that DarkStar_ has sharp eyes.


Quote
EDIT : email hacked, binance hacked, kraken hacked...
Anyway, sorry to hear you have this situation. This is the reason I always use 2FA for my gmail account. I hope you get your account back soon along with all those accounts in the other platform.


Title: Re: Account "kenzawak" compromised again
Post by: LTU_btc on July 17, 2019, 11:29:31 AM
It's worrying thing to read, especially because your account got compromised not for the first time. You should pay more attention to security. I hope that hacker didn't stolen your money from exchanges. You should enable 2FA on all exchanges and email - it's must do thing. Also, you should set strong and unique passwords on every website thst you're using. And also it would be good to use separate emails for financial things like exchanges and another one just for Bitcointalk.


Title: Re: Account "kenzawak" compromised again
Post by: malevolent on July 17, 2019, 11:38:17 AM
Your computer/phone might be compromised if you keep getting hacked all the time. Get a new computer/phone or SSD/HDD at least and exercise more caution/pay more attention to what you click on.


Title: Re: Account "kenzawak" compromised again
Post by: eternalgloom on July 17, 2019, 12:46:45 PM
Your computer/phone might be compromised if you keep getting hacked all the time. Get a new computer/phone or SSD/HDD at least and exercise more caution/pay more attention to what you click on.

Could probably be a keylogger if he's always typing in his password and even if he's not, they'd still get is password with him typing it in the first time.

OP, I'd do a clean install of your OS and really check all browser plugins you have installed.
Check whether you have any malicious ones installed.

Shouldn't need a whole new PC or phone. Very unlikely that it's a rootkit, normal format or factory reset should solve it.


Title: Re: Account "kenzawak" compromised again
Post by: Cyrus on July 17, 2019, 01:13:01 PM
As Halab mentionef, the account is already locked.
Follow the instructions here please: https://bitcointalk.org/index.php?topic=5089777


Title: Re: Account "kenzawak" compromised again
Post by: hacker1001101001 on July 17, 2019, 04:36:32 PM
As Halab mentionef, the account is already locked.
Follow the instructions here please: https://bitcointalk.org/index.php?topic=5089777

Please can you clear my doubt @Cyrus

kenzawak's email is also hacked and he doesn't have the access to his original email connected to his account anymore.

But in recovery instruction I read this.

Quote
If your account was hacked

Email recoveries...@bitcointalk.org, ideally from the account's email address. Include your username and a brief description of the details of how/when the account was hacked. A signature will likely be required (see below).

Can he recover his account just with the signed message or email address is mandatory ?



Title: Re: Account "kenzawak" compromised again
Post by: TryNinja on July 17, 2019, 09:47:49 PM
But in recovery instruction I read this.

Quote
If your account was hacked

Email recoveries...@bitcointalk.org, ideally from the account's email address. Include your username and a brief description of the details of how/when the account was hacked. A signature will likely be required (see below).

Can he recover his account just with the signed message or email address is mandatory ?



Quote
If your account was hacked

Email recoveries...@bitcointalk.org, ideally from the account's email address. Include your username and a brief description of the details of how/when the account was hacked. A signature will likely be required (see below).
Ideally =/= necessarily.

AFAIK they check a lot of things like IP addresses and activity. Not only a signed message and if the email matches.


Title: Re: Account "kenzawak" compromised again
Post by: mindrust on July 17, 2019, 10:01:47 PM
Since he got hacked twice and considering that he (hopefully) took the necessary precautions after the first one, it looks like his situation is very serious.

Somebody collected all the necessary information before making the final blow.

Might be a trojan horse which the latest AV's cant detect or there is somebody around you who have access to your PC. Whatever it is, if you haven't till now, this is the time to clean all of your USB's, format your PC, reset your passwords and pay attention to the people around you.


Title: Re: Account "kenzawak" compromised again
Post by: logfiles on July 17, 2019, 10:09:36 PM
Can he recover his account just with the signed message or email address is mandatory ?
I think the recoveries team would "prefer" him to mail them using the original Email address but he still stands a chance of recovering his account using a signed message from a staked bitcoin address. They will probably do further investigations like look into the IP address logs before and after the change of email address.

Use of Original email address comes in handy when one does not have a staked bitcoin address. Once one loses control of their email address too, then there is completely no way to prove ownership of the account.


Title: Re: Account "kenzawak" compromised again
Post by: Little Mouse on July 18, 2019, 06:20:42 PM
I know it will sound weird.
kenzawak was hacked twice, his signed message proved that this is the real owner but what if kenzawak himself trying to pretend as his account was hacked while it's not. It's possible as well. Sorry kenzawak, no personal issue but trying to highlight the fact that anyone can do that and pretend his account was compromised.
Benefits-
He may get the loan and later tried to prove that his account was compromised. Just shared a fact for everyone to think about.


Title: Re: Account "kenzawak" compromised again
Post by: GrosWesh on July 18, 2019, 07:45:09 PM
kenzawak does not deserve what is happening. He may get upset quickly (but rarely for nothing) but he is also a very active member of this forum, in English section but also in the French part. Kenza, I send you my best thoughts and all my sympathy :) See you soon!


Title: Re: Account "kenzawak" compromised again
Post by: logfiles on July 18, 2019, 08:33:54 PM
He may get the loan and later tried to prove that his account was compromised. Just shared a fact for everyone to think about.
Wow, risk a 2 year old Hero Member green trusted account with 847 Merits over a simple loan of 0.05BTC, does it seem really genius?
I don't personally know kenzawak but am very sure he wouldn't do such a things
Also he emphasized on his profile that
"I only talk here, nowhere else
I do not trade !!!
"


Title: Re: Account "kenzawak" compromised again
Post by: LTU_btc on July 18, 2019, 10:06:47 PM
I know it will sound weird.
kenzawak was hacked twice, his signed message proved that this is the real owner but what if kenzawak himself trying to pretend as his account was hacked while it's not. It's possible as well. Sorry kenzawak, no personal issue but trying to highlight the fact that anyone can do that and pretend his account was compromised.
Benefits-
He may get the loan and later tried to prove that his account was compromised. Just shared a fact for everyone to think about.
I think it would be stupid and not worth to risk his hero account just for 0.05. He can earn these money just by being in decent paying signature campaign without any risks. Offcourse, your written scenario is also possible, but I don't want to believe that he could do that. I got impression that kenzawak is a good member of community.


Title: Re: Account "kenzawak" compromised again
Post by: o_e_l_e_o on July 18, 2019, 10:09:09 PM
-snip-
I don't think anyone is denying he is an active and contributing member. However, dealing with this account is now high risk. It seems his security practices were lax prior to the first hack, and since then he doesn't seem to have taken appropriate steps to secure his account from further hacks. If you were to trade with this account, there is now a significant risk you would be trading not with the original owner of the kenzawak account but instead with a scammer, and you would never see your coins again. For that reason, it is appropriate to flag the account as a warning to others who may not have read this thread.


Title: Re: Account "kenzawak" compromised again
Post by: Timelord2067 on July 19, 2019, 01:48:22 AM
Have tagged the alt account and main account with neutral and negative respectively.

See you back in the Known Alts thread when it is sorted.


Title: Re: Account "kenzawak" compromised again
Post by: GrosWesh on July 19, 2019, 06:47:18 AM
-snip-
I don't think anyone is denying he is an active and contributing member. However, dealing with this account is now high risk. It seems his security practices were lax prior to the first hack, and since then he doesn't seem to have taken appropriate steps to secure his account from further hacks. If you were to trade with this account, there is now a significant risk you would be trading not with the original owner of the kenzawak account but instead with a scammer, and you would never see your coins again. For that reason, it is appropriate to flag the account as a warning to others who may not have read this thread.

I'm not trading anything with Kenzawak since (and he claimed it) he does not perform any trading activity on bitcointalk. I already removed my favorable opinion and red tagged this account instead. Hope this shit will get solved and he gets back his original account.



Title: Re: Account "kenzawak" compromised again
Post by: Little Mouse on July 19, 2019, 07:43:51 AM
Also he emphasized on his profile that
"I only talk here, nowhere else
I do not trade !!!
"
When did he update it with this text? This proves nothing though.
Anyway, I was talking a probable case, not indicated that kenzawak did this. kenzawak is hacked twice within a short time, possible but a little bit weird.


Title: Re: Account "kenzawak" compromised again
Post by: GrosWesh on July 19, 2019, 08:09:47 AM
Also he emphasized on his profile that
"I only talk here, nowhere else
I do not trade !!!
"
When did he update it with this text? This proves nothing though.
Anyway, I was talking a probable case, not indicated that kenzawak did this. kenzawak is hacked twice within a short time, possible but a little bit weird.


He updated immediately after 1st hack.

'little weird', right but as kenzawak often go straight to the point during conflicts on the forum, he may have 'offended' someone who would have targeted him in response. Or maybe he had unfortunately not done all the necessary after the first hack and he is still under the influence of a malicious person ? (keylogger, trojan ...)