Bitcoin Forum

Other => Meta => Topic started by: crypto mania on August 24, 2024, 10:55:50 PM



Title: Attempt to recover hacked WWZSOCKI account
Post by: crypto mania on August 24, 2024, 10:55:50 PM
WWZSOCKI account was hacked yesterday and I want to recover it if possible

i am the owner and thanks to cryptomania, I can use this account to deal with it

I was able to lock WWZSOCKI account using link in email i received when the hack occurred


Proof of ownership
signed PGP signature from my wallet: 1B2Afp9GBjTqrR3fb9M8vV8N2qdzVG4DN8

G5lAbenTIPTrArzHEJo3BXK7Ab++Y7mM1VpLWpxA+KoWHHxjTIlU3L1FeX640ga4FP2QiUl8RW16W4/Gp06Dj74=

I have also sent email to: recoveries...@bitcointalk.org from my original: emoneyabc1@protonmail.com

here screens from email and signature

https://www.talkimg.com/images/2024/08/24/70nTd.png
email i received

https://www.talkimg.com/images/2024/08/24/70Qez.png
https://www.talkimg.com/images/2024/08/24/70MG2.png
PGP signature verification

Theymos, Cyrrus please help to recover my account, thank you in advance
 
PS
hacker already posted scam thread from my account, would be great if moderators could remove it so nobody will get scammed

https://bitcointalk.org/index.php?topic=5507114.new#new
this is scam attempt don't use that!


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: crypto mania on August 29, 2024, 04:11:49 PM
@Cyrrus @Theymos please help to recover my account, thank you in advance

I have sent email to: recoveries...@bitcointalk.org from my original registered in WWzsocki account email: emoneyabc1@protonmail.com 

waiting for some reply from few days, I know it can take 2 weeks but please confirm that recovery process started if possible, so i can wait calmly, right now there is no reply to email or in both threads from Bitcointalk admins


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: Lafu on August 29, 2024, 04:21:29 PM
I know this is all nerve wracking and you get impatient because you dont know whats going on in the background.
But from the past what i know please stay calm , it is being checked 100% and the Account Recovery Team maybe is already on it.
And I guess at some stage you will be hear from them whats going on and what to do.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: crypto mania on August 29, 2024, 06:43:54 PM
I know this is all nerve wracking and you get impatient because you dont know whats going on in the background.
But from the past what i know please stay calm , it is being checked 100% and the Account Recovery Team maybe is already on it.
And I guess at some stage you will be hear from them whats going on and what to do.

thank you Lafu

yes I am completely impatient and nervous, days seem like weeks now  :-[


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: skarais on August 29, 2024, 07:12:12 PM
The recovery team will basically review your account recovery request as quickly as possible, this also work to all other users. They need time to solve your problem until your account is recovered. But I wonder, what did you do wrong that your account was hacked?

Second question, has someone reported this thread as an attempted scam?

Quote
https://bitcointalk.org/index.php?topic=5507114.new#new
this is scam attempt don't use that!

Hope your account is successfully recovered, wwzsocki.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: logfiles on August 29, 2024, 10:53:10 PM
@Cyrrus @Theymos please help to recover my account, thank you in advance
Cyrus and team are the ones responsible for account recoveries and not Theymos.

Quote
I have sent email to: recoveries...@bitcointalk.org from my original registered in WWzsocki account email:
I don't think it's necessary to expose your email address to the public. You are only exposing it to more spam and probably phishing attacks. Team knows your  old email address already.

waiting for some reply from few days, I know it can take 2 weeks but please confirm that recovery process started if possible, so i can wait calmly, right now there is no reply to email or in both threads from Bitcointalk admins
Give it at least two weeks.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: Mr.right85 on August 29, 2024, 11:15:22 PM
Quote
I have sent email to: recoveries...@bitcointalk.org from my original registered in WWzsocki account email:
I don't think it's necessary to expose your email address to the public. You are only exposing it to more spam and probably phishing attacks. Team knows your  old email address already.
My thoughts exactly!
There is no good reason to expose your mail which is originally hidden by default. It doesn’t help your case, furthermore more, it exposes you to more and more danger. Others whom might be looking out there have now got a direction to direct there brute forcing and hacks.
State your case but, hide sensitive details. You could as well pm them to the recovery group and be good.
In trying to save yourself, don’t destroy your privacy.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: Cyrus on August 30, 2024, 12:27:45 AM
The account is locked, probably shortly after posting that thread, so nobody currently has access to it. You will be contacted about the account recovery procedure.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: crypto mania on August 30, 2024, 01:02:20 AM
The account is locked, probably shortly after posting that thread, so nobody currently has access to it. You will be contacted about the account recovery procedure.

I was able to lock that account using link in email I received after password was changed

I still have access to my email account and can sign message from registered BTC address (already did) so recovery should be possible

now I am waiting for contact about the account recovery procedure as requested

Thank you for reply Cyrus, really appreciate


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: BitcoinGirl.Club on August 31, 2024, 08:15:33 AM
It was hard to find your profile url @wwzsocki (https://bitcointalk.org/index.php?action=profile;u=131333) and it seems the last login is over a week ago. I was there and the recovery team did a great job, I am sure you are very close to get it recovered. It will require a few emails to exchange with the recovery team.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: Adbitco on August 31, 2024, 09:18:09 PM
Op what is the cause of the hack? Is it because you didn't use a solid password or what could be the issues over here. Most time people hacking your account are those closer to you that is why you must learn to have a complicated and mix password where it would be too for someone to memorize it except you.. you are really lucky to had have this immediate attention sometimes most of the hack account ends up taking loan on the forum without the real owner's knowledge when it's restored back you start paying loans you didn't know about.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: nakamura12 on August 31, 2024, 09:27:29 PM
Since the account is now locked as we can read on cyrus's post then all you have to do is wait for contacting you by the team for recovery process. Hope you'll get your account back.

I don't think it's necessary to expose your email address to the public. You are only exposing it to more spam and probably phishing attacks. Team knows your  old email address already.
Since OP exposed his email address then he better use different email now just to be safe. If It were me then I would do the same to use new email rather than using the same email that many people already have seen as scammers may also sent some links or something like that to scam op.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: skarais on August 31, 2024, 09:49:11 PM
It was hard to find your profile url @wwzsocki (https://bitcointalk.org/index.php?action=profile;u=131333) and it seems the last login is over a week ago. I was there and the recovery team did a great job, I am sure you are very close to get it recovered. It will require a few emails to exchange with the recovery team.
The @wwzsocki account was last active 8 days ago, now I find that the account is not only locked, but the status is Autobanned based on the information on bpip.  However cyrus has responded that it will likely be handle with recovery procedures, but I don't know what's next especially about the Autobanned status this account got.

Source: https://bpip.org/Profile?id=131333

Code:
8/23/2024 5:29:23 PM	password changed
Profile has been Autobanned


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: logfiles on August 31, 2024, 10:30:26 PM
Op what is the cause of the hack? Is it because you didn't use a solid password or what could be the issues over here. Most time people hacking your account are those closer to you that is why you must learn to have a complicated and mix password where it would be too for someone to memorize it except you.. you are really lucky to had have this immediate attention sometimes most of the hack account ends up taking loan on the forum without the real owner's knowledge when it's restored back you start paying loans you didn't know about.
He answered a similar question in another thread through he is not sure how his login details got exposed or leaked, but here is what he said;

sorry that I am not replying please try to understand

looks like only my Bitcointalk account was hacked, nothing more

my only guess they brute-forced my Bitcointalk password or it leaked somehow and when it comes to that on my end only thing that comes to my mind is:

I downloaded some malicious file exactly 1 day before it happened on laptop that I use when traveling, so nothing important on it, at least I thought so, I missed that there was brave browser synced to my other devices and I haven't unsynced it (big mistake)

If this is true then like this they could bruteforce my password manager password and get aces to Bitcointalk password and account

but if this is true why haven't they also removed email on my Protonmail from Bitcointalk, I was able to suspend that account

only explanation that they where not able to hack brave password manager so logged to my account using synced Brave browser and then changed the password as there was no 2FA (another big mistake i don't know how I missed that)

also I have seen attempts to login to few of my accounts that I haven't initiated lately, still it wasn't successful and i was able to change passwords and add 2FA to them

so is hard to tell what happened exactly



Source: https://bpip.org/Profile?id=131333

Code:
8/23/2024 5:29:23 PM	password changed
Profile has been Autobanned
Perhaps it's one of the reasons why are taking long to recover the account but I am positive he will be helped.There is another account that has been queued for ownership change.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: crypto mania on August 31, 2024, 11:00:15 PM
I need help with the email that I just received from recovery Team

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <account> has been hacked/lost. Please reset the email to <email>. The current date is <date>.
-----BEGIN SIGNATURE-----
<insert address here>
<insert signature here>
-----END BITCOIN SIGNED MESSAGE-----

I don't understand this part:

<insert address here> - ok this is my BTC address (I assume the one i have registered here on forum and need to sign this message with it:

1B2Afp9GBjTqrR3fb9M8vV8N2qdzVG4DN8

but what shall I put here?

<insert signature here> - what for signature?

signature I will get after I click send?

https://www.talkimg.com/images/2024/08/31/9yEom.png

if yes then how to do it? shall I send the message twice and then use the signature by second attempt  ???



Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: logfiles on August 31, 2024, 11:41:45 PM
<...>

PLEASE BEFORE YOU DO ANYTHING ELSE, CAN YOU CONFIRM TO US THE EMAIL ADDRESS THAT SENT YOU THE MESSAGE?

I warned you not to expose your email in public, you may end up being a victim of multiple phishing attacks. I want to sort of help, but I need to be sure if you actually received the reply from the account recoveries team.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: Rizzrack on August 31, 2024, 11:47:05 PM
PLEASE BEFORE YOU DO ANYTHING ELSE, CAN YOU CONFIRM TO US THE EMAIL ADDRESS THAT SENT YOU THE MESSAGE?

I warned you not to expose your email in public, you may end up being a victim of multiple phishing attacks. I want to sort of help, but I need to be sure if you actually received the reply from the account recoveries team.


I sent him the reply...

Does this message verify on your end ?

-----BEGIN BITCOIN SIGNED MESSAGE-----
wwzsocki 8/24/2024
-----BEGIN SIGNATURE-----
1B2Afp9GBjTqrR3fb9M8vV8N2qdzVG4DN8
G5lAbenTIPTrArzHEJo3BXK7Ab++Y7mM1VpLWpxA+KoWHHxjTIlU3L1FeX640ga4FP2QiUl8RW16W4/Gp06Dj74=
-----END BITCOIN SIGNED MESSAGE-----

...or is it too late and my 2 brain cells are shutting down ?


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: logfiles on August 31, 2024, 11:52:51 PM
PLEASE BEFORE YOU DO ANYTHING ELSE, CAN YOU CONFIRM TO US THE EMAIL ADDRESS THAT SENT YOU THE MESSAGE?

I warned you not to expose your email in public, you may end up being a victim of multiple phishing attacks. I want to sort of help, but I need to be sure if you actually received the reply from the account recoveries team.


I sent him the reply...

Does this message verify on your end ?

-----BEGIN BITCOIN SIGNED MESSAGE-----
wwzsocki 8/24/2024
-----BEGIN SIGNATURE-----
1B2Afp9GBjTqrR3fb9M8vV8N2qdzVG4DN8
G5lAbenTIPTrArzHEJo3BXK7Ab++Y7mM1VpLWpxA+KoWHHxjTIlU3L1FeX640ga4FP2QiUl8RW16W4/Gp06Dj74=
-----END BITCOIN SIGNED MESSAGE-----
No, it doesn't

I was only trying to caution OP, given that he had exposed his email to the public earlier on and didn't even bother removing it after i advised. Any malicious actor would trick him to sign a message and later, copy and send it to you claiming he is the owner of the account. I hope you understand my angle of thought.



Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: Rizzrack on August 31, 2024, 11:57:15 PM
I was only trying to caution OP, given that he had exposed his email to the public earlier on and didn't even bother removing it after i advised. Any malicious actor would trick him to sign a message and later, copy and send it to you claiming he is the owner of the account. I hope you understand my angle of thought.

I definitely do !

And seems there's a long way from warning users about phishing attempts with punycode (https://bitcointalk.org/index.php?topic=5184169) to flashing his email address around ... hope you understand my angle  :P


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: Upgrade00 on September 01, 2024, 05:02:11 AM
Does this message verify on your end ?
It verified from my end. The mistake the op made is to write the signed message in a single line here, while when they were signing the message they wrote in with a line space between them;
Code:
wwzsocki

8/24/2024
Try removing the space between both words then adding a line gap as above and you should be able to verify it. Or the op can sign another without any line gap


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: JollyGood on September 01, 2024, 12:18:34 PM
I hope this does not happen to other members in the forum but in the end it is essential to ensure that attention has to be given at all times to devices that are being used to connect online. It has now been just over a week since you created this thread therefore hopefully you will not have to wait too long before you are informed by admin that your accounts has been returned to you.

WWZSOCKI account was hacked yesterday and I want to recover it if possible

i am the owner and thanks to cryptomania, I can use this account to deal with it

I was able to lock WWZSOCKI account using link in email i received when the hack occurred


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: crypto mania on September 01, 2024, 08:24:26 PM
PLEASE BEFORE YOU DO ANYTHING ELSE, CAN YOU CONFIRM TO US THE EMAIL ADDRESS THAT SENT YOU THE MESSAGE?

I warned you not to expose your email in public, you may end up being a victim of multiple phishing attacks. I want to sort of help, but I need to be sure if you actually received the reply from the account recoveries team.


I sent him the reply...

Does this message verify on your end ?

-----BEGIN BITCOIN SIGNED MESSAGE-----
wwzsocki 8/24/2024
-----BEGIN SIGNATURE-----
1B2Afp9GBjTqrR3fb9M8vV8N2qdzVG4DN8
G5lAbenTIPTrArzHEJo3BXK7Ab++Y7mM1VpLWpxA+KoWHHxjTIlU3L1FeX640ga4FP2QiUl8RW16W4/Gp06Dj74=
-----END BITCOIN SIGNED MESSAGE-----
No, it doesn't

I was only trying to caution OP, given that he had exposed his email to the public earlier on and didn't even bother removing it after i advised. Any malicious actor would trick him to sign a message and later, copy and send it to you claiming he is the owner of the account. I hope you understand my angle of thought.



I will reply just now, waited for help to reply correctly

edit (2 min later)
done


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: skarais on September 01, 2024, 09:26:15 PM
@crypto mania, as an experienced user on a forum you should not post or respond to other users' posts three in a row. Now you have 3 consecutive posts within 24 hours, that's against the rules and you should combine all three into one. Delete your last 2 posts and merge them into one.

Don't be angry, this is just a friendly reminder in case you forget the rules.

Quote
32. Posting multiple posts in a row (excluding bumps and reserved posts by the thread starter) is not allowed.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: logfiles on September 01, 2024, 09:46:32 PM
<...>
@crypto mania, Rizzrack is part of the team that helps with account recoveries. You might want to calm down a bit and collaborate with him. He is probably trying to confirm if you are the one who signed the message. To be honest, I tried to verify it too, and it didn't work.

first I didn't know if you are from the recovery Team, second I wanted to answer correctly to the email to not hear later on
I am not part of the team. Just trying to help you. Try the format they suggested to you and then send another email

I need help with the email that I just received from recovery Team

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <account> has been hacked/lost. Please reset the email to <email>. The current date is <date>.
-----BEGIN SIGNATURE-----
<insert address here>
<insert signature here>
-----END BITCOIN SIGNED MESSAGE-----

I don't understand this part:

<insert address here> - ok this is my BTC address (I assume the one i have registered here on forum and need to sign this message with it:

1B2Afp9GBjTqrR3fb9M8vV8N2qdzVG4DN8

but what shall I put here?

<insert signature here> - what for signature?

Create your message using the format for example

Code:
My account WWZSOCKI has been hacked/lost. Please reset the email to Yourusername@protonmail.com
.The current date is 2 Sept 2024.

And then sign the message using whatever tool you have. The resulting signature is what you fill in the signature field that has been requested.

I am actually surpised you didn't know what they meant by signature after all those years in the forum.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: crypto mania on September 02, 2024, 11:47:04 AM
...

I answered already as requested in the first email that was sent to me, hope now is good

before i asked for help here I have talked with 2 high ranked members and nobody was sure how I should respond

to be honest it looked like you are from recovery team and the other comment is just a random one, this is why i replied that way

Thank you for all help i really appreciate it

...I am actually surpised you didn't know what they meant by signature after all those years in the forum.

Despite I am member for so long and use cryptocurrencies multiple times a day from years, if i remember correctly I have signed BTC message only 2 times in my life, both here on forum, first to confirm my BTC address and second is now

I hope this explains my confusion in this topic

...hopefully you will not have to wait too long before you are informed by admin that your accounts has been returned to you...

Thank you JollyGood, I am very happy to see few high ranked members here in my recovery attempt thread, gives me nice filling that indeed I am a part of community, really appreciate all comments

I wanted to answer earlier but also didn't wanted to put too much in one comment to not make rec team confused

...

please check email

I have sent exactly as requested in first email signed message with new email address


EDITED


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: crypto mania on September 03, 2024, 08:55:21 PM
Just got reply from recovery Team that my account will be released in 7 days

THANK YOU SOOOOOOOOOO MUCH!!!


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: PX-Z on September 03, 2024, 11:40:34 PM
Just got reply from recovery Team that my account will be released in 7 days

THANK YOU SOOOOOOOOOO MUCH!!!

Congrats, that's a least 2 weeks of waiting to recover an account. Is this also mean that there's at least few to be recovered accounts in queue, or only few of them have all the proofs to be recovered this fast.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: logfiles on September 04, 2024, 01:33:50 PM
Just got reply from recovery Team that my account will be released in 7 days

THANK YOU SOOOOOOOOOO MUCH!!!

I can see it has been queued for ownership change
https://talkimg.com/images/2024/09/04/98WvT.png
Just wondering, is it going to be reverted to the old email address that it was registered with, or you need it changed to a new one?

Anyway, that's a bit of relief for you. Let's keep our fingers crossed till the whole recovery procedure is complete.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: JollyGood on September 04, 2024, 05:37:56 PM
Despite I am member for so long and use cryptocurrencies multiple times a day from years, if i remember correctly I have signed BTC message only 2 times in my life, both here on forum, first to confirm my BTC address and second is now

I hope this explains my confusion in this topic
With you it is twice and for me I think have only signed a message a few times past, I cannot recall the last time I did it therefore always have to check how to do it before I sign. It is something that is not an everyday event therefore many people have to open an instruction page to read how to sign a message.

...hopefully you will not have to wait too long before you are informed by admin that your accounts has been returned to you...
Thank you JollyGood, I am very happy to see few high ranked members here in my recovery attempt thread, gives me nice filling that indeed I am a part of community, really appreciate all comments

I wanted to answer earlier but also didn't wanted to put too much in one comment to not make rec team confused
You are as much part of the community as any other member. It is good to read the that the posts here have given you a nice feeling. I am very pleased with the level of support so many members have given here, it is one of the things that happens when a member finds themselves in a situation such as yours. Now that you have received an email from the recovery team, you will have access to your account within days. Congratulations.


Title: Re: Attempt to recover hacked WWZSOCKI account
Post by: NotATether on September 06, 2024, 02:13:24 PM
Just got reply from recovery Team that my account will be released in 7 days

THANK YOU SOOOOOOOOOO MUCH!!!

Congratulations. You should be back up to speed with your old account in no time.