Bitcoin Forum

Recently, people who have been inactive for a long time have been requesting loans out of the blue. These accounts have been compromised. At this time, we believe that the accounts used the same password as what was released back during the MtGox hack. We are marking these accounts as scammers as soon as we see them, but there are several that we've missed. If you see someone request a loan after being largely inactive, REPORT THE POST AND CONTACT A MODERATOR IMMEDIATELY.

epii (or at least the hacker who is now controlling his account) is also a scammer

This is the list we have:
bitbetter
Gluskab
brunoshady
killer2021
kuba_10
Sjalq
madload
darvil
epii
Clarithium
borito4
tachi641
pharno
Iyeman

If the account is no longer marked as a scammer, that means that we believe that the original owner has taken back the account. However, you should still ask for extra identification before transacting with any of these people.

Thanks for the heads up Maged

An admin should run the password list against logins and see if they match (probably many more have been cracked since the original publication of passwords, they might be circulating in underworld circles). Also, inactive accounts that have email addresses on that list should be locked, with email confirmation to reopen (supposing the pwnd person didn't use the same pw on here, mtgox, AND email...)

Another trigger for investigation should be a password reset after long inactivity. Inactive, reset pw, post for loan: lock.

Recently chris200x9 (https://bitcointalk.org/index.php?action=profile;u=3079) came onto IRC asking for a 2 day 5% loan.  He said he couldn't identify and he couldn't auth.  If you look at his lastest posts (https://bitcointalk.org/index.php?action=profile;u=3079;sa=showPosts), you will notice a large 5-6 month gap between June 2011 and December 2011.  If he can auth or identify, then I would retract this post.  However, as of now, his identity is shaky and I wanted to warn anyone considering loaning to him.

This one is pretty obvious:  https://bitcointalk.org/index.php?topic=61781.0

If you can identify on IRC and/or GPG Authenticate on #bitcoin-otc, I would be more confident in trusting you, as would everyone else.  You cannot provide any proof of identity except that you have access to this seemingly inactive forum account.

GPG identify here, or we'll reset your forum password and mark you as a scammer until you do.

GPG sign the following:


I verify that the following post was made by me:
https://bitcointalk.org/index.php?topic=61500.msg720921#msg720921

Edit: I looked into it, and I see that isn't possible. However, he looks clean. I'll get back to you guys on the IP check.

A thorough one. How many coins you looking for? I might be able to help.

A confidence man, mostly desperate and unoriginal, and more than likely a teenager unable to earn money on their own. Next question?

1BYwQ9bYxatmtL5GadfA5d5Jn6mMHJU3gZ I ordered 2 magazines you have my name and address, jesus.

also:


edit2: "desperate and unoriginal" no not desperate at all. I no longer want the loan, I'm not a drug addictict I'm not jonesing for a fix I don't need 1 btc, I would have liked the loan but I certainly don't need it. I am however frustrated I'll go down in history as a scammer despite overwhelming evidence I'm not simpley because I can't gpg authenticate. I guess gpg key > has access to forum account, has acess to gpg email account, has access to forum email account, has the exact same geo location....

LOL.....

Chris, I was just answering the question, I wasn't talking about you ^_^

Sorry, :(

I get defensive alot...bad habit...

It's alright, it takes a while to get used to the hive-mind attitude around here. The sooner you get used to it, the sooner they stop being able to pick up your scent. You'd think becoming more known would make you a bigger target, but this community's one and only enemy seems to be anonymity, something they claim to embrace.

It's a double edged sword.

Why not just deactivate the account and force a password reset through email confirmation..

very interesting

Necro hmm'er

Surely, if person has not logged in for a long time, then logs in from say an IP in a complete different country, cant we force them to confirm account or somthing? Cant remember if when I signed up if there was email conf., but surely, could just set flag to "requires email conf" to 1 or whatnot?

I don't think SMF is that smart without customization. But I think    Maged is right. Recently there have been a ton of gift card sellers that are either brand new users or old users who have since been dormant. But they all want to sell easily carded gift cards.

Still valid today.  Check any post history for a long dormant time followed immediatly by a lot of selling and/or loan activity.  These accounts are often hacked accounts.

*bump*

These guys are back. I don't know if they are targeting lending, but we've verified that they're targeting the free ripple giveaway, so keep an eye out for them.

Thanks for the heads up. +1

Is there a way to verify oneself against this? I was inactive for a while after a gpu blowout, I'd hate to think of being tarred with this brush though.

You only have 16 posts anyway so this really does not apply to you.

Is there any dormant account policy?  I suggest those dormant accounts receive email notification like a warning that failure to respond or atleast login will cause their accounts locked or create a tag for those account  So when they're login again they can easily be identified.

I was wondering what ever happened to all those sockpuppet castoffs.

Nice catch!

But was access gained? Were the accounts actually compromised, or are the accounts simple extra accounts from established members?

No, there isn't.

We're looking to see what we can do to stop this, but it isn't easy. Especially since we allow logins from tor.

Yes, access was gained to these accounts and was used to get ripples. Some of them appear to have been made by bots, but others used to be someone's main account.

Don't worry Maged!

The unofficial lending forum guardians are here.   ;D

^ is one thing I love this community...we all work together and watch each over each other.. +1

I just saw CanaryInTheMine request .1 BTC over in Currency Exchange. Not sure if that one was legit or not, but we'll find out later today I guess.

Edit: Nvm, he already paid back.