Bitcoin Forum

How can my account have been hacked here and the email linked to that account changed without them having access to the email account in the first place?

Is that even possible? how is it done?

theylmos  is not replying to my message
Nothing to be done now?

My old account

cryptohunter is still posting away on the forum.

My guess is that they stole the saved login details or session data that was stored in your browser. That would mean they did have access to the email as well to accept the confirmation.

First of all his name is "theymos (https://bitcointalk.org/index.php?action=profile;u=35)", don't know if you were trying to be over smart there or really didn't know the name of the owner of this forum even after spending so much time here, considering you're who you say you are (https://bitcointalk.org/index.php?action=profile;u=92110). And if you believe your account was hacked then open a thread in Meta and/or move this one there and provide proofs that you're the original owner of the account.

You don't require access to the email address to hack your account as the forum doesn't need email verification. You can use a fake or non-existent one when you sign up so must have got your pass some other way.

Your account just staked a new address.


but i guess you get a notification for password change ?

Your first posted address is here: https://bitcointalk.org/index.php?topic=391507.msg4217946#msg4217946
The address is: If you can sign it and post it here or PM to theymos, you'll probably get your account back.

Neh, you/me/anyone don't.

they probably got your acc data from making a phishing site

Yes i can prove this i have access to that BTC account still.... But theymos is not replying. Is he on vacation or something perhaps?

Do any mods here have a btc address i will send a small btc from that right now and prove that i am the original cryptohunter???. I also have the beecoin communnity wallet with 8 billion coins in that was handed to me to look after. I still have the LTC  account too that i bought NXT off of from the day after the original investors got theirs and sold some for LTC.

If any mods here can get my account back i would be very grateful or please contact theymos and ask him to help me. Perhaps he gets so many messages he didn't see mine.

thanks

Hi, what does sign it mean?  

If theymos posts his btc account on here with random small amount for me to send ... i will send it from that address to prove i am the one with that btc address.

Then i get my account back.

Also to my knowledge i didn't post my account details on any phishing site. I think it maybe its because i forgot to change my details after this site got hacked.

please read this (https://bitcointalk.org/index.php?topic=497545.0) if you want to recover your account.
and read this (https://bitcointalk.org/index.php?topic=990345.0) if you don't know how to sign a message using a btc address.

can some more people please quote this post i made because for some reason i can not quote that post .... can some more people quote it before it gets changed thanks....

i am now signing message from that address.... meantime can as many as possible quote that message i made ...thanks


also see this post

https://bitcointalk.org/index.php?topic=345142.0

you can see i am sending 1 ltc  to the seller on that date. Surely we can use the block explorer to reveal my LTC address sending him 1LTC exactly at the time and date. So if i can demostrate i still have that LTC account too then i am 100% going to get my account back??

And the beecoin community wallet .... i still have that .

does the signed output look like this below.... this is not the correct one i changed a few bits because i dont want to post something that can get my few btc i do have in there taken out


Byjosdfasdfs9cW/CDkmckErnY6Baymqqc3Er0JNuoiaosfdasfdasfdlkPekj9GB6441zhdhdhddhd5Y0KGyWvQwanoLU=



does it look like that?? like a few mixed up letter and numbers then a / then tons more of them?? is that the kind of thing i need to post here?

that is all that is copying from the btc client when i click copy current signature.


Also if more of you could quote my post el kaka22 found that would be great i need that locked in on this forum as much as possible.


I'm going to check through all my previous cryptohunter posts and try to see if i posted any other addresses there for alt coins... .i still mostly have them all so i should be easily able to prove my id.  If any guys have a bit of spare time and you see i posted an alt address in any of my 1000's posts somewhere please immediately quote it because i really would like to get my old account back. This guy is maybe going to do a scam under my old account or i have no idea why else he would have taken it ... maybe because it is old and have 1000s posts he will use it to try a scam out. I hope not before i get this account back.

Here you go, as requested, a quote for this post :)

can't quote because it's locked but I can archive it -> https://archive.is/y8J4n (post #56)

update:
yes. the output looks like that. and there's no need to quote it, uneditable archive is more than enough.

You don't know how to sign a message with your address?  ::)

Here you go: https://bitcointalk.org/index.php?topic=990345.0 This is as detailed as it can be. Thx to shorena  :)

cheers --Encrypted-- that is very helpful.

thanks too to everyone else trying to help me out.

Yeah i don't really use bitcoin much i mostly only have alt coins and never really do anything but mine , trade coins. So don't even know the basics at all. I mostly just collect alt coins.


am i bests to password protect my btc wallet before posting this signed message on the board or does it not matter... i mean there is just a few btc in there but still would be nice to keep them.

I going out now but back in 3 hours... i am going to post my signed message then. Hopefully someone can say if its better to password lock that btc wallet before doing a signed message.

it doesn't matter. just don't post your private keys.  :P only the message, address, and signature (the output).

ok thanks mate.


here is the message i wrote

-------------------------------------------------------------------------------------------------------
Hey theymos. please can you give me my cryptohunter account back as soon as possible.
-------------------------------------------------------------------------------------------------------
1DgagYPqnnrPz3kcHCYnB7YcBRZs5Uqw5m

this the out put from the signed message
========================================================================
H4x0fm4JTBycrrWznE5my88jIrgeyjWtb9CPu/m9h0KhAifOoDOaPSGZWNf+1Na2f7d58eDY6815Lc7ii2Z36MU=
=========================================================================


can anyone tell me if this worked okay?

how can i test it out?

anyone have theymos skype or other chat methods?  i was almost on legendary can't believe i have to start all over again whilst they get to turn legendary now so annoying.


another question is do you think something wrong with my hard drive? it seems the bitcoin chain from 18 weeks behind only moved to 16 weeks behind in hours and hours on my other machine?? is bitcoin slow right now or maybe it's growing in size at a very alarming rate. My hdd is only 128gb and is getting very full up now. This is getting a rather large job to start even using btc now for some new people. Days to get the chain ready to use it seems a bit off putting maybe if people dont have much patience. I know there are web wallets etc but really I lost a few alts using web wallets so I personally never trust them again after taking my coins a few times.

that's correct but use this template.

the email, timestamp and the link to your post (or the archive) is important. you can test it out by verifying it (read the "how to sign a message" thread I posted).



use electrum wallet if you don't want to download the whole blockchain.

---

link to cryptohunter's profile so people won't need to search for it -> https://bitcointalk.org/index.php?action=profile;u=92110

thanks for all your help  :) i am now sending to theymos the correct message proving my ownership of cryptohunter I hope he will return it soon.

Dear Theymos please reset my account I got hacked.

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <cryptohunter> has been hacked/lost. Please reset the email to <blahblah@gmail.com>. The current date is <04/02/2016>.
-----BEGIN SIGNATURE-----
<1DgagYPqnnrPz3kcHCYnB7YcBRZs5Uqw5m>
<H1AgL+PJJaxx7aHpPinf+1FfooHsOj4V4EGancOfGxfzNArhpr6tvlGyBjoVYeyzyuC7qEvBMBdQKzC8VE3aZgs=>
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: https://bitcointalk.org/index.php?topic=391507.msg4217946#msg4217946
OR
I sent that address to someone in a PM with PM ID#...

I have more proof too if we need it.

thanks

This was very helpful because I also did not know how to sign a message with a bitcoin address. At least you enlightened me.

I have flagged the account for now.

You must have clicked on a phishing site that stole your passwords. You have to consider changing all your passwords and install a good protection system.

thanks very much :)

I hope i can return to my old account soon... i keep checking if i am turning into a legend but not yet. I would hate it if this thief is the one posting when it turns legend.

For now i just have to stay on this one.

thanks for everyones help with this.


I'm not sure if i went on a phishing site or not. I think maybe what happened is when this site got hacked and it said some peoples accounts details maybe leaked i thought ..probably won't be mine and didnt change it. Or maybe i did get bent over on a phishing site. I've changed all my passwords for other things now just precaution and not being lazy this time.

So when we talk about security:

Can they use hash power to bruteforce account?
i mean there is a lot unused asic and avalons..

Can we all agree about this?
Majority of those hacks are made by uses of keyloggers, viruses,
phishing attacks..Dont give acces to others unknown users to your pc..
So for protection you first must use your head, then antivirus and others..

Keylogger. Most probably a keylogger. Someone could simple just get your account details, and if they have control of your username and password, they can change the email. Sadly there's no 2FA yet. I think  I remember reading a post about 2FA in the new forum script, though.

What to use for prevention of those keyloggers?
Not to click on newbies links in posts..
Firewall, Avast internet sec?Any other?

The onus to prove the ownership of your that account is on you.You must have signed message which you can provide to forum owner and he will help you get your account back.
Next time you must keep changing your password periodically to prevent hacking

Yes but I think it is proven now but I still have no message from theymos or no account back? does it take a long time ?

yup. expect 2 weeks or longer or much much longer. I think theymos give more priority to "useful" users, but don't quote me on that.

That's not good news :(
Never mind I can post with this account for now. I send him another message in 2 weeks.

Why does it take so long? Is there that many people that get hacked on here every day?

only theymos (and maybe badbear) can answer both questions for sure.
I doubt that there are that many password recovery requests everyday but I'm sure that theymos get a lot of PMs and Emails everyday and is busy.

OK thanks... just have to wait a little longer then i guess. I will message bad bear see if he can help.

another 9 days pass.

Sorry that the issue has not been resolved. Don't give up, keep on insisting until you get your account back.

Thanks for the encouragement  :) it will hopefully be sorted out one day. I notice so many accounts hacked recently.
I can only imagine that when the board was hacked and they though some data may have been lost .....they really did lose a lot of peoples user and pass. Perhaps now only have the crackers be able to decipher the data they grabbed.


Should have email verification really for extra security measures.

What... no. It was your fault either way as there has been no announcement that the forum has been hacked, neither have many users lost their credentials for unknown reasons. Coincidental though, most of the hacked accounts seem to have been posting only in Altcoin section

Anyway, account recovery is pretty low on theymos' priority list because it is usually the user's fault somehow. Think of account recovery as a favor instead

P.S: theymos is online atm

Also, tagging the account after verifying the signature

The signed message - as is - is not valid btw. I was just ask to verify it

https://i.imgur.com/ZzBxCQM.png

@shorena
this one (https://bitcointalk.org/index.php?topic=1349419.msg13766266#msg13766266) verifies.
also that email looks like a fake.

edit:
I'll just PM OP telling him to explain.

I put the fake information on the thread because I didn't know if this information should be seen by the public?

OMG I'm back, thanks so much for your help everyone. I didn't realise I was back to my old account until just now.

I went to login as cryptohunter2 and it said wrong password.

So i reset with the email reset thinking what happened here. Pressed reply and now I'm back at last to my old account.

Awesome. Thanks everyones help on this matter. Was starting to think my account was gone to that hacker forever.

How often can you change your password?

yeah that's what I think. but what are you doing here? aren't you supposed to be hacked?  :P
or did the real owner get his account back?

fast.

Ha yeah I thought I'd been double hacked and cryptohunter2 was gone now because it kept saying wrong password when i try to reply.

Then i press reset with email and logged in and i turned back to the real cryptohunter :)

Sadly I must say goodbye to cryptohunter2 it was a short lived but stressful existence on bct but better than not being here at all.

Excellent. I can go celebrate my legendary upgrade at last.

Thanks for your help with this to you and lauda especially but also to anyone that tried to help me out. Thanks guys :):)

I also feel sorry for any grumpy words moaning to mods and owner of the board Theymos . It's just frustration can get the best of us all at some time. Thanks for giving me my account back.

care to prove it by signing a message from the address on the first post page? it'll get your neg off.


you can change your pass as many time as you like. just don't abuse it.

do you mean make one more signed message from my original btc account like before?


ok i do it now and sync up my BTC  account and post it on here. I'm just going change my pass again to something better also


will take some time 29 weeks reindexing :(

As you can see when i was cryptohunter2  I was asking if there any solution to my issues with btc wallet. Everytime a power cut then BTC wallet seems to get very upset and needs to reindex entire thing all over again.

I think this is soon going to destroy my ssd drive again.

Usually a guessed pasword is a result of this. CAn you offer a signed message for an address posted and quoted in the old account?

Admins won't respond unless you sign an address.

you should be able to sign a message even while you're out of sync. if you can't then safe the private key so that you can import them to some other wallet.
or just post here using cryptohunter2 account. that should clear things up.

cryptohunter2 is sadly dead... never mind I don't need two accounts anyway.

My original account cryptohunter was reset to the email of cryptohunter2 so i guess that killed poor old cryptohunter2.

I don't mind though and although it would be very kind to add my activity from from cryptohunter2 to cryptohunter - - i guess I must not be greedy :) haha and since legendary is all I wanted it's great to have finally made it.

Ok sure I try sign one even though still trying to index btc chain.

ok here we go


1DgagYPqnnrPz3kcHCYnB7YcBRZs5Uqw5m


will the real cryptohunter please stand up!

IDj5GuE+DyXYRvGntYk5EuKCmgEfo7hZzN8yoGTiknwHA4xtnuxKqoWxf544fd9Wbpdw21nS/QgGG+2nmVyxHf4=


hope this is correct or if not I try when all the index is completed.

signature verified. but change that message to something more clear like "this is cryptohunter. today is xx-xx-xxxx and I have control of this account.".

that part about cryptohunter2 being inaccessible is odd though. but I'm not an admin so what do I know?

EDIT:
btw. you need to PM Vod with the link to your signed message.

ah okay

1DgagYPqnnrPz3kcHCYnB7YcBRZs5Uqw5m

this is cryptohunter today is march 2nd 2016

ILhpu4I9cb75oKvMUez/55D8Bsw7O4421rqiA/GkxroMZNwAC1klLBExFDISLRff1iolsdtBgZBn1NSE6SZQafo=


that one look okay now?

yeah. signature verified. now just PM Vod and ask him to remove his feedback.

oh. congratz on getting your account back.  :)

1 more counter-negative feedback and his rating should return to 0 until Vod removes his neg

cheers for help will send a pm to VOD right now.
thanks :)