Bitcoin Forum

today when I tried to login to my account funkymunky it show me error
I checked someone changed password of my account and using it

https://bitcointalk.org/index.php?action=profile;u=35788

someone staked a new bitcoin address
https://bitcointalk.org/index.php?topic=996318.msg13862659#msg13862659

and deleted my post with previous staked bitcoin address
https://bitcointalk.org/index.php?topic=996318.msg13752884#msg13752884

13r7ERE9v7PMu5gFvmMNYwesGQZykef28j
https://archive.is/Byuge (post #3110)

you can sign with that.

edit:
wait a minute. that's less than 2 weeks old.

Please sign the following message from 13r7ERE9v7PMu5gFvmMNYwesGQZykef28j and I will tag the account with negative trust until you're able to get it back:


Any idea how the account was hacked? Seems like there have been a ton of hackings lately.

... and remember to follow these few steps that  you'll find in this thread:

 - https://bitcointalk.org/index.php?topic=497545.0


to recover your forum account.

Message: This is funkymunky, today is February 13, 2016 and my account (funkymunky, account ID 35788) was hacked.
Bitcoin address: 13r7ERE9v7PMu5gFvmMNYwesGQZykef28j
Signature: INdB0Y28mB24/WoSR5DUrQ8evUpxW9sWLdgPbUSbKM6pFP1DAenyh6WvxN0h6nlwGIM2Qs1kf0/no3Lv5uC8mD0=

Account tagged, let me know when you get your account back and I'll remove that negative trust.

This all seems a little odd though, with the address you signed from being posted only a week and a half ago. Any chance you'd be able to sign a message from the following address?

1J2xys9Pqtzc6jqgzGDWFuNDambCAKXBJ5 - TXID posted in this thread (https://bitcointalk.org/index.php?topic=263871.msg2877550#msg2877550) was sent from this address, address was posted here  (https://bitcointalk.org/index.php?topic=278062.msg2970099#msg2970099), here (https://bitcointalk.org/index.php?topic=276931.msg2956194#msg2956194), here (https://bitcointalk.org/index.php?topic=286928.msg3070864#msg3070864) and here (https://bitcointalk.org/index.php?topic=739269.msg8367488#msg8367488).

The password was not changed through the email link but directly from his profile , so the hacker was able to know his password.

@funkymunky hacked, have you download something of suspicious recently ?



February 12, 2016, 04:54:02 PM - funkymunky - password changed

Hey guys just saw this, I purchased this account yesterday along with a full member account.

The passwords on the two accounts had NOT been changed prior to me purchasing yesterday, so I didn't think anything was fishy with the accounts.

Purchased from the listing here https://bitcointalk.org/index.php?topic=1362097.msg13861853#msg13861853

I'll gladly give the account back to the rightful owner if they can prove it was indeed hacked, just want to make sure I was not scammed by the user.

Please let me know how to proceed.

Several user stated there is something fishy and still you bought the accs... omg

Yeah because the password had not been changed, my bad on that one, live and learn. Can this user prove he is the owner from an address olded then last week?

Can a moderator look into the recent logins of this account before I purchased it yesterday, to VERIFY that this account belongs to this person and it was indeed hacked?

Listen if a trusted member of the site can verify this person claiming to be the "rightful" owner is indeed the rightful owner?

I'll be glad to hand it over without issue. Just let me know!

The account is safe and in good hands, and IF the account was hacked? It will be given back to its rightful owner without hesitation.

Wait till he signs a message

Did you receive a signed message transferring over ownership of the account to you when you purchased it? I'm afraid if you don't have any signed message proof, "funkymunky hacked" will probably be able to get the account back from because he has proof of ownership from last week.

No I didn't, the seller sent the accounts (there were two) first and said he didn't have any signed message available in his selling thread, that he hadn't staked any addresses or something to that effect. I have purchased accounts before without issue, I did the normal checks and looked through recent posts to look for loans, staked addresses etc... but could not find an address staked anyway. I also check the sec log to see if passwords had been recently changed also, and again nothing. So I then took control of the accounts and sent the bitcoin to finalize the deal. I DOUBT the account was hacked honestly, but I have no problem returning it either if it can be confirmed by a moderator that the person who logged into the account before me was NOT the same person who staked the address from last week. If a moderator confirms the account looks "hacked", I'll take the bitcoin hit for the account.

Correct me if I'm wrong, but the mods (I think the regular mods can't access IP info?) and admins won't make any statements about whether or not an account looks "hacked" or not. The only information we're going to use is the staked address/signed message; honestly, it could either be the account being hacked or the original owner of funkymunky pulling off a quick couple bits. It won't make a difference.

Sounds about right. Now the account is almost useless with the neg rep that probably won't go away until someone signs a older address. Guess that's the risk of buying accounts.

why after long time of inactivity you decided to check your account and notice it got hacked? isn't you who sold it and only trying to get it back? somethings fishy here :/

9 days (or even 3 months) isn't a "long time". what is fishy is that OP never came back to sign a message with the other address. also theymos won't recover the account if there's any indication that it was hacked or if it is clear that the account was sold by the original owner, so the account shouldn't fall to the wrong hands.
as for the current owner getting ripped off... that's just the risk of account trading.

edited to add the bolded part.

for me, i wouldn't still consider the account being hacked when it is sold coz of just a day after the account stake a new address the original owner came back saying his account is hacked (after almost 6months of being inactive).

eh... read the OP again. he staked an address less that 2 weeks ago and it got deleted by someone. (btw I edited my post that you quoted above to add something.).

sorry if i missed it. hmm. since he just staked a new address 2 weeks ago, isn't it possible that he deleted it just before he sold the account so when the time comes the account is bought then he can claim that the "hacker" deleted the staked address and posted a new one?

possible, of course. also possible that OP is actually the "hacker" and the current owner is just a victim (just an assumption). that's why I brought up the fact that theymos will not recover the account to an illegitimate owner.
so all we can do is wait for OP to clear any doubts by signing from the other address or wait until theymos recovered the account (which means he's sure that OP is the legitimate owner of the acc.).

Thanks for the feedback guys, yeah in the end the fault is my own for not getting a signed message and believing the Seller.

Whatever the admins decide is fine by me, but I honestly don't believe the account was "hacked".

The account will not be used outside of posting on this thread anyway until the admins have decided on the accounts fate OR I can give control of the account to one of the admins until it's all sorted out, their choice. Just received a "password reset" email 1 Hour ago that included the following IP: 195.62.223.146 which is definitely not my IP.

TO ADMINS: You have my permission to take control of the account at anytime and do with it as you see fit!

TO "THE ACCOUNT SELLER": You got me, enjoy the Bitcoin scumbag!

I don't know what to think about this story and to whom to believe!
First this is very good new owner come here and admitted he bought..
But what if this account was not hacked at all?
What if old user is actually took advantages over this buyer?
i'm just thinking.

This is my account!!

I messaged Theymos on other means yesterday to state this.

I will sign from:

1J2xys9Pqtzc6jqgzGDWFuNDambCAKXBJ5

I weirdly googled - https://www.google.co.uk/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=bitcointalk%20funkymunky

And came across this thread, let me read up on what they've done with my account....

Please do not trust any posts from this account from the past month...

Is this okay?

yes it is. verified using electrum. looks like OP isn't the original owner after all.

Thank you :)

Excuse my ignorance, what can I do?

if you want your account back you should do what theymos posted here (https://bitcointalk.org/index.php?topic=497545.0).

Could anyone confirm the origin of the address? The link just leads to a google query.

thanks --Encrypted--, I guess I should have gone back in the thread instead

from various tx posts funkymunky posted. guitarplinker posted it here (https://bitcointalk.org/index.php?topic=1363108.msg13872070#msg13872070).

This is the user who sold me the account the other day was: @ethornet https://bitcointalk.org/index.php?action=profile;u=674801

Please look into the IP's of @ethornet and compare it to the IP's of the current owner, whoever it winds up being.

I will turn over the account to whoever the admins suggest, if it makes it easier on everyone, just let me know!

At least the scumbag hacker didn't severely scam anyone else with the account.

I'm ASSuming the other account the user sold me is hacked also, so if the admins want that one just post a message here and I'll send you the info on that account, although it looks like no one has YET to come forward and claim it.

Thanks!

As was said previously in the thread, IP logs are generally not used or even released to the public (this includes saying if the IPs match).

Wasn't asking for PUBLIC reveal, but if the IP's match the account of the person who sold it to me? The account should NOT be handed over to them PERIOD, signed message or not, as that would mean THEY INDEED sold it to me. I DOUBT the hacker/seller/whatever used their own IP, they probably used TOR or a VPN most likely anyway. I was just asking IF they COULD look into it before handing the account over is all. If they can't it's fine also as I said previously.

Have a good night everyone!

 

Whats the txid for the sale?

https://blockchain.info/tx/456abbf02888ca4fab9d14c4cf9f709734fbeaa148a61ac9f0ab214fca6d1fa5

I've messaged Theymos with a signed PM but nothings progressed.....

it may take a few weeks before your account get recovered. you're not alone, just be patient. some users are also waiting for their account to get recovered.

https://bitcointalk.org/index.php?topic=1349419.0
https://bitcointalk.org/index.php?topic=1341799.0
https://bitcointalk.org/index.php?topic=1339269.0

who knows how many more that wasn't posted in public.

I'm pretty sure there are a few more than three... It might be a month or two before you actually get a response, Theymos is working on the new forum, his day job, other requests and pretty much all things bitcoin.

I've followed the procedures multiple times to get my account back.

However; they've all met with negative results - no response...

How can I escalate further?

Thank you

YOu most likely wont. I am still waiting for my account which was hacked back in January...