Title: My acc has been hacked and used to post scam thread! Post by: zenhu on January 17, 2020, 06:38:48 AM Hi, I'm the original owner of this account. However, my account has been breached and the hacker uses it to post their scam wallet, this the archive of that post https://archive.is/kCWvJ so no one will have to click on the scam link. this is the post after I edit it https://bitcointalk.org/index.php?topic=5218174.0
How do I prove my innocence? and I already change the password for this account now, the previous password was "lkjhgfdsa" my bad that was a terrible password, just some brute force will crack that in 1 sec. edit 1: I never make a thread in 2 years and all of sudden I make an announcement topic, how ridiculous that be. I'm not even that good in bounty campaign. Title: Re: My acc has been hacked and used to post scam thread! Post by: LoyceV on January 17, 2020, 06:52:02 AM You should move (bottom-left) this topic to the Reputation board.
Can you sign a message from an address you posted a long time ago, to prove you're the real owner? Title: Re: My acc has been hacked and used to post scam thread! Post by: JeromeTash on January 17, 2020, 07:08:42 AM I have seen this kind of thing before, where a hacker gets into your account, doesn't change anything but then goes on to post malware or scam threads without your knowledge. You only get a wake up call when you are tagged.
It's so hard to prove that you were not the one who posted that stuff. However, the members who tagged you are understanding individuals and if you explain to them calmly and very well, they can remove the tags. Another option, if you are really desperate about clearing your name and don't mind much about privacy is PM them your IP logs from https://bitcointalk.org/myips.php. If you are concerned about your privacy, You can blur IP address and City and then provide them with only time and the country the IP address that made the post was from in comparison with your previous or current IP addresses(This helps if you haven't been using different VPN locations) Title: Re: My acc has been hacked and used to post scam thread! Post by: zenhu on January 17, 2020, 07:14:24 AM Sure LoyceV, is this will do?
Code: { I use this address on a lot of bounty and airdrop here, I don't have any bitcoin address posted here which I have access to the private key. I hope ethereum address will do. Please verify the msg here https://etherscan.io/verifySig This is the verified msg will look like https://etherscan.io/verifySig/1945 Telegram Username: @zenhu Ethereum Address: 0x4AfAF049ca22DC654D55BE5541Ee41BD55CAB3BC Ref Code: 9587MU and I have another question if I changed my password all the devices using this account automatically log-out, right? ~ Thanks, I just check that and sure enough. the IP is not mine. I'm from Indonesia and almost never used a VPN or some sort of that thing to change IP. and this the IP of the hacker Another option, if you are really desperate about clearing your name and don't mind much about privacy is PM them your IP logs from https://bitcointalk.org/myips.php. If you are concerned about your privacy, You can blur IP address and City and then provide them with only time and the country the IP address that made the post was from in comparison with your previous or current IP addresses(This helps if you haven't been using different VPN locations) 2020-01-16 08:15:47 2020-01-16 08:15:47 5.61.43.220 (Unspecified city), Germany If the person who tag me want to respond my PM I will give them the screenshot of the log Title: Re: My acc has been hacked and used to post scam thread! Post by: JeromeTash on January 17, 2020, 07:41:52 AM Code: { I use this address on a lot of bounty and airdrop here, I don't have any bitcoin address posted here which I have access to the private key. I hope ethereum address will do. Please verify the msg here https://etherscan.io/verifySig This is the verified msg will look like https://etherscan.io/verifySig/1945 Telegram Username: @zenhu Ethereum Address: 0x4AfAF049ca22DC654D55BE5541Ee41BD55CAB3BC Ref Code: 9587MU Message verified: https://i.imgur.com/jeq5FIq.png and I have another question if I changed my password all the devices using this account automatically log-out, right? Yes, all devices get logged out.Thanks, I just check that and sure enough. the IP is not mine. I'm from Indonesia and almost never used a VPN or some sort of that thing to change IP. and this the IP of the hacker Good Luck, i hope you get helped ;)2020-01-16 08:15:47 2020-01-16 08:15:47 5.61.43.220 (Unspecified city), Germany If the person who tag me want to respond my PM I will give them the screenshot of the log Title: Re: My acc has been hacked and used to post scam thread! Post by: isaac_clarke22 on January 17, 2020, 10:36:45 AM I had the same issue as you before, and mine was from Turkey instead.
Logging out will also end your session as what Theymos told me in PM, just in case that changing password didn't do. Just make sure you scanned and cleaned your PC before you make these changes. Here's my thread resolving my issue before : https://bitcointalk.org/index.php?topic=5217251.msg53594867#msg53594867 Read everyone's reply to my thread. I'd like to thank them again for helping me with the case. Title: Re: My acc has been hacked and used to post scam thread! Post by: zenhu on January 17, 2020, 11:07:05 AM I had the same issue as you before, and mine was from Turkey instead. Thanks for referring me to your thread, yeah I've been busy for this past few hours checking whether my pc has been compromised or they just brute force the password. Also, I never install any suspicious software or wallet. snip~ Title: Re: My acc has been hacked and used to post scam thread! Post by: Lafu on January 17, 2020, 02:49:38 PM As i am German i found something for the IP you posted !
Quote Details for IP-Adresse 5.61.43.220 % Information related to '5.61.32.0 - 5.61.47.255' % Abuse contact for '5.61.32.0 - 5.61.47.255' is 'abuse@ispiria.net' inetnum: 5.61.32.0 - 5.61.47.255 netname: CLOUD-NETWORK-DE descr: ******************************************************** descr: * As ISP we provide IP transit and bandwidth services. descr: * descr: * Those services are self managed by our customers descr: * therefore, we are not using this IP space ourselves descr: * and it could be assigned to various end customers. descr: * descr: * In case of issues related with SPAM, Fraud, Phishing descr: * DDoS, port scans or others, feel free to contact us descr: * with relevant info. Abuse email: abuse@ispiria.net Quote org: ORG-ISPR1-RIPE country: DE admin-c: ISPR1-RIPE tech-c: ISPR1-RIPE status: ASSIGNED PA mnt-by: ISPIRIA-MNT mnt-routes: LEASEWEB-MNT remarks: ISPIRIA Networks Ltd. remarks: Technical issues..............: support@ispiria.net remarks: Services request..............: sales@ispiria.net remarks: Abuse departament.............: abuse@ispiria.net remarks: Corporate web site............: https://ispiria.net created: 2012-08-06T12:36:24Z last-modified: 2019-09-26T09:26:35Z source: RIPE The IP Adress is located and related to the German City Kassel https://i.ibb.co/R02xq4N/IPKassel.png Source : http://www.utrace.de/?query=5.61.43.220 (http://www.utrace.de/?query=5.61.43.220) The main Company is based in Frankfurt and is a Hosting Provider! Leaseweb Deutschland Gmbh https://www.leaseweb.com/de (https://www.leaseweb.com/de) You can submit on there Webpage an abuse for the IP here https://www.leaseweb.com/abuse-prevention (https://www.leaseweb.com/abuse-prevention) Hope it helps you a bit Thanks for PM me . Edit : Feedback is also removed ! Title: Re: My acc has been hacked and used to post scam thread! Post by: morvillz7z on January 17, 2020, 02:51:41 PM Hi zenhu,
I believe what you say is true that's why i've removed my negative tag. As noted above, we've had these incidences with compromised accounts, posting malware wallets multiple times last year. I also see that you've changed your password a few times already, i hope you scanned your system first and then did a clean install of your OS, otherwise you might end up being hacked again. Title: Re: My acc has been hacked and used to post scam thread! Post by: zenhu on January 18, 2020, 08:14:40 AM Thanks all for the understanding and help. I will be locking this thread cause all the problem is sorted out.
I will be cautious in the future, and im done with securing the password and full system scan overnight. |