Bitcoin Forum

My account Integ (https://bitcointalk.org/index.php?action=profile;u=48920) was hacked and stolen.
On March 21, I noticed that I can not log in automatically, requested a password reset, got no response to my email and signalled the breaking to the moderators.

As I found out, at least, 22 February the thief reset the password, changed the email, avatar and started activity on the forum. (https://webcache.googleusercontent.com/search?q=cache:aeeLXfkdQkkJ:https://bitcointalk.org/index.php%3Faction%3Dprofile%3Bu%3D48920+&cd=1&hl=ru&ct=clnk&gl=ru)

On March 5, he also posted his address (https://bitcointalk.org/index.php?topic=1685811.msg18075452#msg18075452), trying to secure the rights over a stolen account.

In my profile there was no my address, also as in my posts, but it was in my signature (https://webcache.googleusercontent.com/search?q=cache:_1bF71vlObYJ:https://bitcointalk.org/index.php%3Ftopic%3D143593.60+&cd=6&hl=ru&ct=clnk&gl=ru), which also erased the hijacker.

Despite the fact that this address is of the mobile wallet, I managed (with the help of one of the legends of the forum) to export keys from there and now I took advantage, sending a request for account recovery to Cyrus.

Please post the proof here as well. Members of Default Trust can tag the account, before Cyrus recovers it for you.
This way, the hacker will not able to sell/trade with your account.

He sent me a signed message. Link on coinig: http://coinig.com/?adr=1NiWhDiKGfyWj4EoJXDLm1J3SXsZSjUCjB&msg=My+account+Integ+has+been+hacked.+Please+reset+email+to+the+one+I+have+sent+to+you+in+PM.+The+current+date+is+Mon+Mar+27+19%3A40%3A58+MSK+2017.+Screenshot+of+hacking+report+can+be+found+here%3A+http%3A%2F%2Fi65.tinypic.com%2F1jb536.png&sig=H7ohwYwGq33l2FxZTrL4sd5DqAzS4xJA9aIB4sYlLGzZAUQsEOXvPOvXYKAhnZM2X5TRTLOLN4SVuOc+QJotvdwk%3D

Edit: coinig link replaced to new without personal information.

~$ btc signmessage 1NiWhDiKGfyWj4EoJXDLm1J3SXsZSjUCjB "My account Integ has been hacked. Please reset email to the one I have sent to you in PM. The current date is Mon Mar 27 19:40:58 MSK 2017. Screenshot of hacking report can be found here: http://i65.tinypic.com/1jb536.png"
H7ohwYwGq33l2FxZTrL4sd5DqAzS4xJA9aIB4sYlLGzZAUQsEOXvPOvXYKAhnZM2X5TRTLOLN4SVuOc QJotvdwk=
~$

Verified via coinig service. (http://coinig.com/?adr=1NiWhDiKGfyWj4EoJXDLm1J3SXsZSjUCjB&msg=My+account+Integ+has+been+hacked.+Please+reset+email+to+the+one+I+have+sent+to+you+in+PM.+The+current+date+is+Mon+Mar+27+19%3A40%3A58+MSK+2017.+Screenshot+of+hacking+report+can+be+found+here%3A+http%3A%2F%2Fi65.tinypic.com%2F1jb536.png&sig=H7ohwYwGq33l2FxZTrL4sd5DqAzS4xJA9aIB4sYlLGzZAUQsEOXvPOvXYKAhnZM2X5TRTLOLN4SVuOc+QJotvdwk%3D)

Also here is a screenshot of signed message,that integ12 send to me via PM(that message sending to Cyrus (https://bitcointalk.org/index.php?action=profile;u=78147) too in a part  of recovery request ),message includes personal information,thats why its cannot be posted here for verification.


And sure all of us can easy check all posts that was made by Integ (https://bitcointalk.org/index.php?action=profile;u=48920) since registration date to 22 February. If we do that ,we are see that main part(95%) of all posts writen on Russian language and in Russian local topics(like a first posts and PM's of integ12 (https://bitcointalk.org/index.php?action=profile;u=972329)). But since 22 February 2017 we are not see any post writen on native,for real owner of Integ (https://bitcointalk.org/index.php?action=profile;u=48920) account,Russian language. May be Integ (https://bitcointalk.org/index.php?action=profile;u=48920) imigrate from Russia and try to forget his motherland,thats why he is not post any on Russian language here? Not think so. :) Im leave a negative feedback to Integ (https://bitcointalk.org/index.php?action=profile;u=48920) account now and want to ask anyone from DT member leave same feedback to Integ (https://bitcointalk.org/index.php?action=profile;u=48920) too. Real owner of Integ (https://bitcointalk.org/index.php?action=profile;u=48920) account(integ12 (https://bitcointalk.org/index.php?action=profile;u=972329) now),veteran of mining,one of not many ppl here who are come to bitcointalk forum in 2012 year and active until now. He is always ready to help anyone in Russian local and ready to disscussion about Bitcoin and mining.

P/S: Sincerely I hope that your problem will be solved in the near future,my friend.

Here are few another posts,with associated bitcoin address in signature,made by real owner of Integ account. Im attached screenshots to every link,because not sure how long links would be active and same information would be available in webcache.googleusercontent.com service.

• 1. Posted on June 15,2013 by real Integ (https://webcache.googleusercontent.com/search?q=cache:CoFYDL4pAwUJ:https://bitcointalk.org/index.php%3Ftopic%3D25127.8485+&cd=10&hl=ru&ct=clnk&gl=ru)
  
  http://i65.tinypic.com/2yowrrt.png
  
  
• 2. Posted on July 13,2013 by real Integ (https://webcache.googleusercontent.com/search?q=cache:yfXUDSBgRVIJ:https://bitcointalk.org/index.php%3Ftopic%3D25127.9155+&cd=9&hl=ru&ct=clnk&gl=ru)
  
  http://i64.tinypic.com/1zbulv6.png
  
  
• 3. Posted on February 21,2013 by real Integ (https://webcache.googleusercontent.com/search?q=cache:_1bF71vlObYJ:https://bitcointalk.org/index.php%3Ftopic%3D143593.60+&cd=7&hl=ru&ct=clnk&gl=ru)
  
  http://i65.tinypic.com/6gm06f.png
  
  
• 4. Posted on June 16,2016 by real Integ (https://webcache.googleusercontent.com/search?q=cache:BVm6sEo1AxsJ:https://bitcointalk.org/index.php%3Ftopic%3D1423100.0+&cd=80&hl=ru&ct=clnk&gl=ru)
  
  http://i65.tinypic.com/2q3198o.png
  
  

When was the last time you had changed the account details ? The password ?

I'm trying to connect this with the recent Gleb's account hack.Since the hacker is trying out leaked hashes from the 2015 ,your account name starts with 'i' which comes after 'G' gleb's account.And as theymos said,he might be trying to guess things in order.

Your last password change should provide enough information to connect your account hack with the same dude who hacked gleb's account.

Joel_Jantsen

There is a guess that it's somehow connected to the cloudflare parser bug. I'd say it's unlikely that our hacker follows the alphabet order. I doubt that because there is another veteran member, needbmw, whose account has been hacked as well. Integ recently told me that needbmw is also unable to login.

integ12
Hi there, my friend, hope your account will be recovered soon. :)

integ12, the real owner of account, contacted me via PM at the BTC-e exchange. I have no doubts that he's not an imposter since he knows a lot about our conversation from the past.

The real owner of the Integ account has contacted me in an alternative way, through the exchange, I confirm him as the owner of this account.
Stolen account from him please return it to the true owner.

I can provide in the PM communication through the exchange with the true owner of this account

Any changes of the account details did not at least 2 years. In 2015, I made a change to the signature - added the words "received, thank you!"
The password was supposed to change in 2015, but not the fact, I can't remember.
But of course, my account is not the first attacked on February 22.

Thank you, friends, for your support!

Were you able to stake a BTC address? Everyone should stake an address nowadays.

Put it this somehow easier, English is not my native language ???

Because of this https://bitcointalk.org/index.php?topic=497545.0 members have participated in this thread https://bitcointalk.org/index.php?topic=996318.0

So I did what says theymos. This is stated in my first message. I have sent Cyrus the signed message.
But my address was not specified in the profile, it was in the signature, so I did not participate in the publication of addresses because I did not attach any importance to this. However, also like you. You staked your address only on 29 March  ;)

Yeah, seeing a rise in hacked accounts, might as well protect it pro-actively.

My address was published in the signature (even though it was a joke), and published a very long time. Someone has doubts about the content of the Google cache?
View the contents of the signature, open the address in the blockchain and compare these things. And you realize that this signature was many years.
I thought and still think that this is enough.

Its not a part of any rules here,staking our own addresses,its a one more way how ppl can make recovery processmuch more easier and faster,if they are getting any issues with login and would be need to proof thier ownership to their own hacked/lost accounts,not more. Topics about stake adresses was started by simple members ,not by stuff and theymos instruction about recovery hacked/lost accounts not have any points about leaving your address in stake address topics,but theymos insruction have main point about signed message from associated with havked account Bitcoin address. Integ12 include in his requests all needed information in same with instruction form ,including signed message from associated with his hacked account address. All needed points was confirmed by him ,now here can help only Cyrus or theymos .

With confirmation of your ownership and you identification by minimum 4 Legendary members of Russian community. (include stuff and 2 Legendary members with much more than 4 years of registration and having a good reputation all around here.) Its too must have any sense for administrators i think.

Yeah, that too, and that's not the whole list, many of the legends rarely come to the forum.
But here is a strange game...

How its going now?

I see that hacker is still able to use stolen account for his own purposes. There are signed messages as well as a lot of confirmations from another members, so how come that it's not banned?

I've tagged the account because it certainly isn't a trustworthy account but I can't say for sure if it was hacked, stolen, or sold.

Administrators  can ban it.But also they are can recovery access to hacked account for real owner.I think thats why here usually use a warning flag via leaving negative feedback in trust section of hacked account by another trusted members(ussually DT members) including reference link  to thread about hacking and warning information for another members (like that feedback in Integ trust   (https://bitcointalk.org/index.php?action=trust;u=48920)). With same feedbacks in trsut section hacker cannot sold it and very low chances for him to make any dirty tradings with another members of forum . Administrators or recovery account to real owner or not ,but if it would be not recovery .account not would be blocked ,only if it make any actions(like all another members) against rules he would be ban.

They can.However why would admins want to waste time dealing with banning/unbanning accounts case by case ? I'm certain they have less time on their hands when it comes to handling accounts.Hence,they left it for the community to handle.

 May be you before answer read to the end my post? Or you are not understand what im post in it? And how much time ago here actions that needs administrators rights and can help any members of community starts to mean 'waste of time' ? If you are quoted any post ,not needs to quote a part of it,because its can given wrong explanation to quoted post. Where in my post you see any negative sense about administrators and their work here? Or may be im asking about why they are not ban or ban anyone here ? However if you are want to give your point of view about why they are not banned hacked account ,why you are quote not quote Baltazar question ?  

Does not going.
Cyrus not responded to any letter, except the first. Don't know, maybe it makes sense to write theymos.
Hijacker occasionally comes to the forum, but no more activity does not lead. In spite of his broken trust, he makes no attempts to justify himself, perhaps because that excuses him, just nothing. But as long as it does not help to restore my rights to my account.

And now, more than a month of silence of moderators (mainly talking about Cyrus) is enough.
My issue has been resolved, but it decided under pressure from the public forum.
April 14 the buyer of the account was contacted to me and explained the situation.
The account he bought (https://bitcointalk.org/index.php?topic=1778083) from well-known rogue Pelk (https://bitcointalk.org/index.php?action=profile;u=206503) for 0,03 BTC, of course, not making sure the rights of the latter on account.
April 15, the buyer gave me back access to my account, but unfortunately, he managed to destroy all my personal correspondence (at least in the restoration of this property administration may help?).
Thanks to everyone who took part in the defense of my rights and ask those who have left negative trust on my account, delete it.

I repeat last request - those who have left negative trust on my account, delete it.
Signature and avatar restored. The posts that I not wrote removed.
But unfortunately, personal messages was removed, they contained very valuable information for me...

I've removed my feedback. Glad you got your account back!  And feedback has been added for Pelk.

My hero account was hacked too and the hacker erased my address in my profile and the one I had written in a post. Here is my post where I quoted my address that the hacker just deleted!



https://bitcointalk.org/index.php?topic=1898654.0

Wellcome back mate. Im delete negative feedback now and give some trust to you. (sorry was offline last days). Thanks administrators of forum and all members who are help here. So mate you can lock that thread now.

P/S: Not forget for sign message now ;)