Bitcoin Forum

Other => Meta => Topic started by: Neonecrox13 on March 11, 2015, 03:24:33 PM



Title: Account Stolen Convicted2008
Post by: Neonecrox13 on March 11, 2015, 03:24:33 PM
Trying to recover my convicted2008 account that was stolen from me on February 11th, 2015.

Here is the reference thread I started when all this started:  https://bitcointalk.org/index.php?topic=952735.msg10488504#msg10488504

Chronicsky was kind enough to help me with signing a message and he's also been logged into my coinbase account through teamviewer with me to verify that the 1Fijjy account is indeed mine.

Thank you very much Chronicsky for your help. I greatly appreciate it.


Title: Re: Account Stolen Convicted2008
Post by: chronicsky on March 11, 2015, 03:31:07 PM
Trying to recover my convicted2008 account that was stolen from me on February 11th, 2015.

Here is the reference thread I started when all this started:  https://bitcointalk.org/index.php?topic=952735.msg10488504#msg10488504

Chronicsky was kind enough to help me with signing a message and he's also been logged into my coinbase account through teamviewer with me to verify that the 1Fijjy account is indeed mine.

Thank you very much Chronicsky for your help. I greatly appreciate it.

I confirm this! HE was signing the message wrong all along and thus i think Theymos never replied him.
I helped him on Teamviewetr , even signed the message myself from his Coinbase account and saw the Address to be correct.


Title: Re: Account Stolen Convicted2008
Post by: Equinoxx on March 11, 2015, 05:10:53 PM
So is it recovered ? So the address is yours and just hit Theymos up with a pm and it will be sorted out.


Title: Re: Account Stolen Convicted2008
Post by: Neonecrox13 on March 11, 2015, 08:05:33 PM
So is it recovered ? So the address is yours and just hit Theymos up with a pm and it will be sorted out.

I have emailed Theymos with the signed message about this. Haven't got the account back yet. *Fingers crossed*


Title: Re: Account Stolen Convicted2008
Post by: thebitcoinquiz.com on March 12, 2015, 01:43:14 AM
So is it recovered ? So the address is yours and just hit Theymos up with a pm and it will be sorted out.
Theymos puts the account recovery thing in low priority zone in his list, because before recovering someone's account you have to make sure that the account wasn't sold by the owner or wasn't confiscated for defaulting a loan or other reasons. He needs to do a lot of investigation for recovering accounts and so he hardly ever returns back the account.


Title: Re: Account Stolen Convicted2008
Post by: Neonecrox13 on March 12, 2015, 02:37:31 AM
So is it recovered ? So the address is yours and just hit Theymos up with a pm and it will be sorted out.
Theymos puts the account recovery thing in low priority zone in his list, because before recovering someone's account you have to make sure that the account wasn't sold by the owner or wasn't confiscated for defaulting a loan or other reasons. He needs to do a lot of investigation for recovering accounts and so he hardly ever returns back the account.


No the account wasn't sold. Someone hacked it then tried to get a loan with Quickseller. I'm fairly sure Quickseller knows that it was not me that was trying to get a loan with him by now. I sent the reference link to Theymos as well. I just hope he will get it back. I'll settle for having it permabanned if nothing else.


Title: Re: Account Stolen Convicted2008
Post by: redsn0w on March 12, 2015, 12:31:38 PM
Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .


Title: Re: Account Stolen Convicted2008
Post by: chronicsky on March 12, 2015, 01:40:18 PM
Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .

Very good find and share @redsnow
Posting links should not be allowed in chat window :-\


Title: Re: Account Stolen Convicted2008
Post by: thebitcoinquiz.com on March 12, 2015, 01:43:27 PM
So is it recovered ? So the address is yours and just hit Theymos up with a pm and it will be sorted out.
Theymos puts the account recovery thing in low priority zone in his list, because before recovering someone's account you have to make sure that the account wasn't sold by the owner or wasn't confiscated for defaulting a loan or other reasons. He needs to do a lot of investigation for recovering accounts and so he hardly ever returns back the account.


No the account wasn't sold. Someone hacked it then tried to get a loan with Quickseller. I'm fairly sure Quickseller knows that it was not me that was trying to get a loan with him by now. I sent the reference link to Theymos as well. I just hope he will get it back. I'll settle for having it permabanned if nothing else.
All I wanted to say was that theymos still has to check everything so that he doesn't make any mistake.

Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .
You found out something interesting but its useless till you attract theymos's attention(or I guess as now badbear is also a mod, he can also recover accounts).


Title: Re: Account Stolen Convicted2008
Post by: chronicsky on March 12, 2015, 01:47:25 PM

You found out something interesting but its useless till you attract theymos's attention(or I guess as now badbear is also a mod, he can also recover accounts).

Firstly , you mean as now badbear is also an admin ?
No , he has stated before , only Theymos can recover accounts.


Title: Re: Account Stolen Convicted2008
Post by: Neonecrox13 on March 12, 2015, 03:20:00 PM
Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .


I would like to personally thank you Redsnow for this. I feel that you have went above and beyond what anybody would have done. I do feel that you are also entitled to the bounty I offered to show that I had no involvement in this act against Quickseller. I do apologize to Quickseller because of this even though I had no action involved. Redsnow I will message you as well about the btc I'm gonna send you. Thank you very much for this post.


Title: Re: Account Stolen Convicted2008
Post by: chronicsky on March 12, 2015, 03:48:56 PM
Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .


I would like to personally thank you Redsnow for this. I feel that you have went above and beyond what anybody would have done. I do feel that you are also entitled to the bounty I offered to show that I had no involvement in this act against Quickseller. I do apologize to Quickseller because of this even though I had no action involved. Redsnow I will message you as well about the btc I'm gonna send you. Thank you very much for this post.

What there was a bounty ? Damn!
Anyways good thing that you are proven innocent :)
Congrats on bounty win @redsnow
~Regards Sky


Title: Re: Account Stolen Convicted2008
Post by: Neonecrox13 on March 12, 2015, 03:56:51 PM
https://bitcointalk.org/index.php?topic=952735.msg10488504#msg10488504


Title: Re: Account Stolen Convicted2008
Post by: redsn0w on March 12, 2015, 04:52:10 PM
Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .


I would like to personally thank you Redsnow for this. I feel that you have went above and beyond what anybody would have done. I do feel that you are also entitled to the bounty I offered to show that I had no involvement in this act against Quickseller. I do apologize to Quickseller because of this even though I had no action involved. Redsnow I will message you as well about the btc I'm gonna send you. Thank you very much for this post.

No problem you are welcome, If I can help someone, why shouldn't I do ? Now I suggest you to wait a reply from the admin, and I hope that you can get back the account.

Thanks for the attention and have a great day. Good luck.


Title: Re: Account Stolen Convicted2008
Post by: Neonecrox13 on March 13, 2015, 09:56:34 AM
Trying to recover my convicted2008 account that was stolen from me on February 11th, 2015.

Here is the reference thread I started when all this started:  https://bitcointalk.org/index.php?topic=952735.msg10488504#msg10488504

Chronicsky was kind enough to help me with signing a message and he's also been logged into my coinbase account through teamviewer with me to verify that the 1Fijjy account is indeed mine.

Thank you very much Chronicsky for your help. I greatly appreciate it.

I confirm this! HE was signing the message wrong all along and thus i think Theymos never replied him.
I helped him on Teamviewetr , even signed the message myself from his Coinbase account and saw the Address to be correct.


So disguised.

http://imgur.com/0Sgs7cQ

http://imgur.com/wubAbnP

http://imgur.com/5P1cdD5


I can't even verify my own identity from my wallet on my computer. WTF


Title: Re: Account Stolen Convicted2008
Post by: Neonecrox13 on March 14, 2015, 09:04:28 PM
I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.


Title: Re: Account Stolen Convicted2008
Post by: bensam123 on March 15, 2015, 09:08:10 AM
I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.

It looks like you emailed theymos instead of pm him?


Title: Re: Account Stolen Convicted2008
Post by: thebitcoinquiz.com on March 15, 2015, 09:24:00 AM
I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.
As said earlier. Theymos gives low priority to these kind of jobs. Only a few lucky ones get their account deleted.
Also if you want to get it banned then you might try talking to BadBear about this, if he cant recover the account then at least he can permanent ban your account(if you show him the proof that the account is yours).


Title: Re: Account Stolen Convicted2008
Post by: bensam1231 on March 15, 2015, 09:27:00 AM
I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.

It looks like you emailed theymos instead of pm him?

This is funny, when the guy operating my account is also using a stolen account. Theymos and Badbear don't seem to respond to PMs. I have plenty of proof as to me being the owner and it would take next to no time for them to do it. But as you can see there is still someone masquerading on the forums as me.

My trader accounts were also attempted, but I have 2FA on so I still own them.


Title: Re: Account Stolen Convicted2008
Post by: bensam123 on March 15, 2015, 09:34:38 AM
I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.

It looks like you emailed theymos instead of pm him?

This is funny, when the guy operating my account is also using a stolen account. Theymos and Badbear don't seem to respond to PMs. I have plenty of proof as to me being the owner and it would take next to no time for them to do. But as you can see there is still someone masquerading on the forums as me.

My trader accounts were also attempted, but I have 2FA on so I still own them.

It's funny how you realise just now, and you were chatting normally for 4 weeks on the altcoin section.

I bought this account legitimately, and it is not stolen. You're just trying to regain access to this account.

If you want to challenge me, go ahead. Open a new thread here in meta. Stop hijacking other people's threads.


Title: Re: Account Stolen Convicted2008
Post by: bensam1231 on March 15, 2015, 09:48:04 AM
I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.

It looks like you emailed theymos instead of pm him?

This is funny, when the guy operating my account is also using a stolen account. Theymos and Badbear don't seem to respond to PMs. I have plenty of proof as to me being the owner and it would take next to no time for them to do. But as you can see there is still someone masquerading on the forums as me.

My trader accounts were also attempted, but I have 2FA on so I still own them.

It's funny how you realise just now, and you were chatting normally for 4 weeks on the altcoin section.

I bought this account legitimately, and it is not stolen. You're just trying to regain access to this account.

If you want to challenge me, go ahead. Open a new thread here in meta. Stop hijacking other people's threads.

You just pretty much admitted you are using a stolen account and apparently you've been stalking me? Why would you care where I post... It doesn't matter if you bought it. You know the risks of buying accounts from shady people.

I was talking with admins bro, there is no point in having a pissing contest with someone who stole your account.


Title: Re: Account Stolen Convicted2008
Post by: redsn0w on March 15, 2015, 09:51:00 AM
I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.

It looks like you emailed theymos instead of pm him?

This is funny, when the guy operating my account is also using a stolen account. Theymos and Badbear don't seem to respond to PMs. I have plenty of proof as to me being the owner and it would take next to no time for them to do. But as you can see there is still someone masquerading on the forums as me.

My trader accounts were also attempted, but I have 2FA on so I still own them.

It's funny how you realise just now, and you were chatting normally for 4 weeks on the altcoin section.

I bought this account legitimately, and it is not stolen. You're just trying to regain access to this account.

If you want to challenge me, go ahead. Open a new thread here in meta. Stop hijacking other people's threads.

You just pretty much admitted you are using a stolen account and apparently you've been stalking me? Why would you care where I post... It doesn't matter if you bought it. You know the risks of buying accounts from shady people.

I was talking with admins bro, there is no point in having a pissing contest with someone who stole your account.

I think it could be better to open your own thread (here in the meta section) and post all the proofs, don't waste your time in this topic. Good luck.


ps: however in these days I have seen a lot of "WTF, my account was hacked". Why do not you build your security?


Title: Re: Account Stolen Convicted2008
Post by: bensam1231 on March 15, 2015, 09:54:34 AM
I think it could be better to open your own thread (here in the meta section) and post all the proofs, don't waste your time in this topic. Good luck.


ps: however in these days I have seen a lot of "WTF, my account was hacked". Why do not you build your security?

I'm not posting proof openly, I've been sending it to the admins. There shouldn't have been any reason someone would go after my forum account except to use it to scam people, which apparently is what happened.

Also interesting how the majority of participants in this thread have a Bit-X banner...


Title: Re: Account Stolen Convicted2008
Post by: bensam123 on March 15, 2015, 09:56:28 AM
Do what redsn0w said. Stop hijacking this thread.


Title: Re: Account Stolen Convicted2008
Post by: bensam1231 on March 15, 2015, 09:57:20 AM
Do what redsn0w said. Stop hijacking this thread.

Or what brah? I think it's completely relevant as hijacked accounts are offering advice to people with hijacked accounts.


Title: Re: Account Stolen Convicted2008
Post by: bensam123 on March 15, 2015, 09:59:32 AM
I think it could be better to open your own thread (here in the meta section) and post all the proofs, don't waste your time in this topic. Good luck.


ps: however in these days I have seen a lot of "WTF, my account was hacked". Why do not you build your security?

I'm not posting proof openly, I've been sending it to the admins. There shouldn't have been any reason someone would go after my forum account except to use it to scam people, which apparently is what happened.

Also interesting how the majority of participants in this thread have a Bit-X banner...

Hmm... When did I scam one single person on this forum using this account again?

I think I did but I forgot who, and when and where. Could you remind me again?


Title: Re: Account Stolen Convicted2008
Post by: redsn0w on March 15, 2015, 10:00:19 AM
Do what redsn0w said. Stop hijacking this thread.

 ::) What are you saying? I don't obbligate him to do that thing, I only suggest to open his own thread. If he doesn't want, then it is his personal choice.

Back on topic:

Convicted2008 aka Neonecrox13 , news about your situation? Or nothing?


Title: Re: Account Stolen Convicted2008
Post by: bensam1231 on March 15, 2015, 10:00:55 AM
I think it could be better to open your own thread (here in the meta section) and post all the proofs, don't waste your time in this topic. Good luck.


ps: however in these days I have seen a lot of "WTF, my account was hacked". Why do not you build your security?

I'm not posting proof openly, I've been sending it to the admins. There shouldn't have been any reason someone would go after my forum account except to use it to scam people, which apparently is what happened.

Also interesting how the majority of participants in this thread have a Bit-X banner...

Hmm... When did I scam one single person on this forum using this account again?

I think I did but I forgot who, and when and where. Could you remind me again?

Stop posting off topic content. Don't hijack threads.


Title: Re: Account Stolen Convicted2008
Post by: chronicsky on March 15, 2015, 10:11:03 AM
Hello! the account bensam123 was sold by me to the buyer(secret unless he wants to show his name) , bensam1231 , i message you a day ago to enquire about it, but you never responded to by PM even when you have been online all along , so i assumed it's not yours.
I had some incidents while buying this account and i ended up with it! without sign so i was keeping it in case the original owner emerges and i could return it to him! But sold itrecently.
If it's your's , provide me a proper proof like signing message or something like that to PM and the account will be returned to you Plus the person who bought it from me will be refunded.
But if it turns out the account was stolen from you due to improper security , i would want to give me some amt (initial buying price).

Also , before someone gives me negative feedback , PM me and i will show you proper proof.

Please make another thread Regarding this , not hijacking other person's thread

~Regards Sky


Title: Re: Account Stolen Convicted2008
Post by: bensam1231 on March 15, 2015, 10:15:43 AM
I have a thread now https://bitcointalk.org/index.php?topic=991008. Please post there instead.


Title: Re: Account Stolen Convicted2008
Post by: Neonecrox13 on March 15, 2015, 12:03:12 PM
Do what redsn0w said. Stop hijacking this thread.

 ::) What are you saying? I don't obbligate him to do that thing, I only suggest to open his own thread. If he doesn't want, then it is his personal choice.

Back on topic:

Convicted2008 aka Neonecrox13 , news about your situation? Or nothing?

Damn my thread got jacked didn't it. And no Redsn0w, I've heard nothing. I've got nothing but time. I'll keep waiting.