Bitcoin Forum

Other => Meta => Topic started by: NutMasterTardd2 on September 21, 2017, 03:55:15 PM



Title: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd2 on September 21, 2017, 03:55:15 PM
SOLVED 22/09/17: Back in control of my account, thank you to those that helped - No forum mods needed now, will keep this post as a reference if it ever happens again.


Hello, I have read the usual instructions for hacked accounts and unfortunately I never registered a BTC address for my Bitcointalk account, I am in no hurry to get the account back (although it is a bummer) but I am more annoyed at the fact someone else is using the nickname.  I see the account still being used and it isn't their account, it is mine. I have tried to recover through the original email I created it with but I guess it has been changed.

I first noticed that I could not log into my account on my Mobile, it said wrong password and I didn't really think anything of it at the time. A few days later I tried again on my PC and that is when I knew something was wrong, I then i clicked on restore password and used my username which I then waited an hour or so but nothing came through so I tried again but using my email and it said An Error Has Occurred! That username does not exist. This is when I started to freak out a bit and searched for my profile and saw that it was advertising an ICO I had never heard of.. then understood I had been hacked.


Link: https://bitcointalk.org/index.php?action=profile;u=245299


I was using it a few days ago and everything had been fine for the past three and a half years, I can give details of all the messages inbox and outgoing and whom they were with (My email used to create the account even included in some of the messages) One of the message threads is between this account and that one. I can give the original password before the email was changed and I still use the email account I created it with on a daily basis, I even would still have the same IP address, and can give details of what devices it has been logged onto with since Feb 2014 locations too if it helps. I have accounts on other websites created around the same time with the exact same Username, I know it isn't exactly proof but I hope it means something (Same email used too).

It has had the email changed recently and started posting on different parts of the forum and joined signature campaigns, I just don't want someone else using that nickname as I use it on LocalBitcoins.com and a few other Bitcoin websites.

https://localbitcoins.com/accounts/profile/NutMasterTardd/ I can prove this is mine by sending BTC to any address or messages and the account was created roughly the same time my Bitcointalk account was created. Created in 2014.
Dash forum account  - https://www.dash.org/forum/members/nutmastertardd.250/ - Created in 2014.
WAVES forum account  - https://wavestalk.org/index.php?action=profile - Created in 2016.
Elastic talk forum account - https://talk.elasticexplorer.org/u/nutmastertardd/summary - Created in June 2017
Reddit! https://www.reddit.com/user/NutMasterTardd/ - Created in February 2014

I still have access to all of these accounts if proof needed. All of the usernames are NutMasterTardd and they are registered to the same email I created the original Bitcointalk account. Surely I would not have these if the account was not mine..

This is a post from another member about hacks, which is probably spot on: https://bitcointalk.org/index.php?topic=2196053.msg22078768#msg22078768
After finding this post and seeing my username on this list: https://bitcointalk.org/seclog.php  
September 20, 2017, 11:29:42 PM - NutMasterTardd - password changed

Trust summary for NutMasterTardd

This user's email address was changed recently.

The password wasn't reset via email, it was just changed. I suspect the hacker had my password, logged in and then changed the email and password. The current account user will have zero proof the account belongs to them.


I hadn't used this account (NutMasterTardd2) since about a year ago, and I only logged into this one to create this post. I am sure I can give more proof I just don't know what else to say.. I don't have any cryptographic evidence (That I can think of) but I am hoping someone will understand.

Slightly desperate and sorry for whoever has to read my nickname hundreds of time in this long post but thanks in advance to anyone that can help.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: Pearls Before Swine on September 21, 2017, 03:59:26 PM
I don't blame you; that'd piss me off to no end.

You're going to have to sign a message from a staked address,  hopefully
you staked one.  And then you'll probably have to wait a month or longer.

That's an amusing user name, btw.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd2 on September 21, 2017, 04:08:01 PM
I created the username when I was 12 and I have been stuck with it ever since on many different sites! :)

Livid and gutted.. I don't have much to offer but I am willing to offer BTC to anyone that can prevent someone accessing the account, I just don't want someone else using that nickname.

I was so close to Legendary too :| I have added bad trust to the account to warn people that it is a hacked account.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd2 on September 21, 2017, 08:12:18 PM
UPDATE:

I have had a message from the account asking for money

Message 1:
Re: (No subject)
« Sent to: NutMasterTardd2 on: Today at 07:49:08 PM »
« You have forwarded or responded to this message. »
Reply with quoteQuote  ReplyReply  Remove this messageDelete  
Hi. I've bought this account yesterday from the owner, as I supposed to((( I don't need hacked account. I spent 210$ to buy it Sad((( Fuck me. Sorry man, I definitely want to give it back to you, but I'll be in loss( Could you please return my money, at least partically?

Message 2:

Re: (No subject)
« Sent to: NutMasterTardd2 on: Today at 07:58:47 PM »
« You have forwarded or responded to this message. »
Reply with quoteQuote  ReplyReply  Remove this messageDelete  
Sorry dude, it's my fault((( I didn't even see this account before buying... but even if I would the seller could say anything from your account((((((
I glad that you believe me. I'm not a scammer.
But how can I be sure that you really return the money? Could we use an escrow in this case?

His posts on NutMasterTardd from 8 hours ago:

Wrong board, dude.
I have the first one. 12 pieces. They all have huynix memory which is very overclockable)) Very chill, there is no loud at all and temperature no more than 55 degrees. I recommend.

Interesting project. Truly speaking I suppose you don't need blockchain for this. But you need money and that is why you are interested in crowdfunding like an ICO. I think it could be real if you have good team, you have an experience at survivalance. And you must have money (ops) to make even weak ICO... I'm not a blockchain expert but I wish you luck. I hope you'll get responces from persons you need)


Typing differently, seems very scammy. Not that I believe a word, but I feel bad for him if he is a genuinely innocent party. I think I'll wait for any dev to respond before I do anything..


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: stevegee58a on September 21, 2017, 08:17:31 PM
Don't worry.  Justice will be served and the poor guy that "bought" your account will lose his money and you get your account back.
He's not innocent; he bought stolen goods.  People that buy stolen goods frequently lose their money when the original gets his Rolex watch or whatever back.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd2 on September 21, 2017, 08:20:56 PM
Don't worry.  Justice will be served and the poor guy that "bought" your account will lose his money and you get your account back.
He's not innocent; he bought stolen goods.  People that buy stolen goods frequently lose their money when the original gets his Rolex watch or whatever back.

Thank you, I hope so.

I saw your post and I hope you get your account back too.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: stevegee58a on September 21, 2017, 08:24:20 PM
Also, don't pay him.  He probably won't give your account back anyway.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd on September 21, 2017, 08:52:26 PM
Also, don't pay him.  He probably won't give your account back anyway.

Hi. I'm not a scammer. And I hope I prove it to NutMasterTardd2 via PM. I've just bought this account to participate at bounty. Sorry me for this situation.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: KWH on September 21, 2017, 08:56:49 PM
Also, don't pay him.  He probably won't give your account back anyway.

Hi. I'm not a scammer. And I hope I prove it to NutMasterTardd2 via PM. I've just bought this account to participate at bounty. Sorry me for this situation.

Quoted for the record.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: stevegee58a on September 21, 2017, 08:57:41 PM
Also, don't pay him.  He probably won't give your account back anyway.

Hi. I'm not a scammer. And I hope I prove it to NutMasterTardd2 via PM. I've just bought this account to participate at bounty. Sorry me for this situation.
You bought stolen goods.  You need to do the right thing and return the stolen goods to their rightful owner and accept that you'll lose money.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd2 on September 21, 2017, 09:24:28 PM
Also, don't pay him.  He probably won't give your account back anyway.

Hi. I'm not a scammer. And I hope I prove it to NutMasterTardd2 via PM. I've just bought this account to participate at bounty. Sorry me for this situation.

I really don't know if you are or not, but I am not willing to send you any BTC for my own account back.. Especially if you are the scammer. If you are innocent in all of this I may pay you back what you paid for it as I feel bad the bastard got the both of us.. I'm not going to do anything until I know you are genuine.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: Zeatorius on September 21, 2017, 09:26:15 PM
Also, don't pay him.  He probably won't give your account back anyway.

Hi. I'm not a scammer. And I hope I prove it to NutMasterTardd2 via PM. I've just bought this account to participate at bounty. Sorry me for this situation.

Unbelievable, As soon as BitcoinTalk checks your IP addresses they will know that you are not the original account owner, how did you even come to owning this account?


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd on September 21, 2017, 09:29:43 PM
Also, don't pay him.  He probably won't give your account back anyway.

Hi. I'm not a scammer. And I hope I prove it to NutMasterTardd2 via PM. I've just bought this account to participate at bounty. Sorry me for this situation.

Unbelievable, As soon as BitcoinTalk checks your IP addresses they will know that you are not the original account owner, how did you even come to owning this account?

I've just bought it, unfortunately(((


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: Zeatorius on September 21, 2017, 09:31:10 PM
Also, don't pay him.  He probably won't give your account back anyway.

Hi. I'm not a scammer. And I hope I prove it to NutMasterTardd2 via PM. I've just bought this account to participate at bounty. Sorry me for this situation.

Unbelievable, As soon as BitcoinTalk checks your IP addresses they will know that you are not the original account owner, how did you even come to owning this account?

I've just bought it, unfortunately(((

where from?


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd on September 21, 2017, 09:31:19 PM
Also, don't pay him.  He probably won't give your account back anyway.

Hi. I'm not a scammer. And I hope I prove it to NutMasterTardd2 via PM. I've just bought this account to participate at bounty. Sorry me for this situation.

I really don't know if you are or not, but I am not willing to send you any BTC for my own account back.. Especially if you are the scammer. If you are innocent in all of this I may pay you back what you paid for it as I feel bad the bastard got the both of us.. I'm not going to do anything until I know you are genuine.

Ok. I will give your account back first. See details at PM. I'm really regret about this all.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd on September 21, 2017, 09:32:05 PM
Also, don't pay him.  He probably won't give your account back anyway.

Hi. I'm not a scammer. And I hope I prove it to NutMasterTardd2 via PM. I've just bought this account to participate at bounty. Sorry me for this situation.

Unbelievable, As soon as BitcoinTalk checks your IP addresses they will know that you are not the original account owner, how did you even come to owning this account?

I've just bought it, unfortunately(((

where from?


The nick of seller is Accounts48h


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd on September 21, 2017, 10:17:27 PM
Okay I am back in control of my account, this has been quite a bizarre day..

He has returned my account, does anyone think he is telling the truth? If he is innocent I will send him what he paid for it as he is an innocent guy and I don't mind giving him the money, I just don't want to give the scammer money..


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: Lauda on September 22, 2017, 06:29:39 AM
He has returned my account, does anyone think he is telling the truth?
Maybe.

If he is innocent I will send him what he paid for it as he is an innocent guy and I don't mind giving him the money, I just don't want to give the scammer money..
He is, in no way, innocent. He is almost as guilty as the person who is selling stolen accounts. Read the law.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: hilariousetc on September 22, 2017, 07:06:55 AM
It seems this problem isn't going to go away any time soon and is only going to get worse as higher ranked accounts become more in demand. Removing signatures from ranks will stop this behaviour instantly and is the only way to stop farming and account sales. Scammers must be making a fortune hacking accounts just to instantly sell them to sig spammers. There's always going to be a market for accounts as long as signature campaigns are here so instead of giving their money to scammers it should go to the forum. It win win and the only people that lose out here are shitposting account farmers and hackers.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: Accounts48h on September 22, 2017, 10:29:39 PM
I haven't sold any kind of accounts to this shit. be careful.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: CosimoDeMedici on September 29, 2017, 11:15:21 AM
there are ton's of accounts whome got hacked, mine aswell, I have richlist addresses to my hacked name yet not btc addy posted, trying your route

https://bitcointalk.org/index.php?topic=2206593.new#new ,, if anyone can give advice


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: Kurokyy on September 29, 2017, 11:25:58 AM
Its very alarming that so many account in bitcointalk got hacked by anybody. How can we avoid that? by changing pass everyweek?


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: b0y2k on September 29, 2017, 11:49:28 AM
my account also has been updated with some deeponion shit. Posting random pokemon and football rubbish...

my original account is boy2k - https://bitcointalk.org/index.php?action=profile;u=190148

Tried reaching out to mods... no reply.

Can't update my password or reset to my email as they have been changed. Also they put a deeponion address in the BTC field to stop any recovery.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: NutMasterTardd on September 30, 2017, 11:06:51 AM
there are ton's of accounts whome got hacked, mine aswell, I have richlist addresses to my hacked name yet not btc addy posted, trying your route

https://bitcointalk.org/index.php?topic=2206593.new#new ,, if anyone can give advice

Good luck man, I know it is a seriously shit feeling.

Its very alarming that so many account in bitcointalk got hacked by anybody. How can we avoid that? by changing pass everyweek?

I don't know, but it is better than being hacked and losing your account.


my account also has been updated with some deeponion shit. Posting random pokemon and football rubbish...

my original account is boy2k - https://bitcointalk.org/index.php?action=profile;u=190148

Tried reaching out to mods... no reply.

Can't update my password or reset to my email as they have been changed. Also they put a deeponion address in the BTC field to stop any recovery.


That is tough man, I know it might sound strange but have you tried contacting the person in control of your account? If the hacker has sold the account to another person they might be a decent person and return your account to you (That's what happened to me) either way they won't have access to it forever as it doesn't belong to them. if you can prove it is yours and my guess eventually when the mods have time it will be frozen, but they must be really busy because this forum is huge.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: KWH on September 30, 2017, 11:54:26 AM
If this is resolved, please lock the thread.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: uaimperial-test on February 22, 2018, 11:51:04 AM
I received 2 emails at the email address:
Your Bitcoin Forum ([Suspicious link removed] to severina.zhazhlevskaya.77@mail.ru by IP address 248.58.153.19. If you did not do this, then you can visit the following link within 14 days in order to lock the account

- I lock the account!

Your Bitcoin Forum (bitcointalk.org) password was just changed by IP address 248.58.153.19. If you did not do this, then you should use the forgotten password feature to change your password.

my original account - uaimperial - https://bitcointalk.org/index.php?action=profile;u=1637767

I tried to get to the mods ... no answer.

It is not possible to update my password or reset to my email address, because they have been changed.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: 0b1van4eg on March 19, 2018, 01:45:13 PM
Hi! Please help me restore my account!
Dear Zammo,
Your Bitcoin Forum 0b1van4eg@gmail.com to hamed_behdad94@yahoo.com by IP address 88.99.19.94. If you did not do this, then you can visit the following link within 14 days in order to lock the account:

https://bitcointalk.org/index.php?action=seclock;u=141082;t=1521317471;o=MGIxdmFuNGVnQGdtYWlsLmNvbQ==;n=aGFtZWRfYmVoZGFkOTRAeWFob28uY29t;c=9q4J1jg6YNpRdXThjzOgHXDpIFYhyux+iT+PSdHElf4=

Note that you will NOT be asked for your password at that URL.
Regards,
The Bitcoin Forum Team

clicked on the link, the account got blocked


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: athanz88 on March 19, 2018, 03:01:21 PM
Hi! Please help me restore my account!
Dear Zammo,
Your Bitcoin Forum 0b1van4eg@gmail.com to hamed_behdad94@yahoo.com by IP address 88.99.19.94. If you did not do this, then you can visit the following link within 14 days in order to lock the account:

https://bitcointalk.org/index.php?action=seclock;u=141082;t=1521317471;o=MGIxdmFuNGVnQGdtYWlsLmNvbQ==;n=aGFtZWRfYmVoZGFkOTRAeWFob28uY29t;c=9q4J1jg6YNpRdXThjzOgHXDpIFYhyux+iT+PSdHElf4=

Note that you will NOT be asked for your password at that URL.
Regards,
The Bitcoin Forum Team

clicked on the link, the account got blocked


Where do you get the link? email? PM? and who is the sender? By looking into the english language they used, i guess it is a phising email and you got phised. There is no way admin would use such an incomplete english and missing some words.


Title: Re: Original account hacked, being used for Signature campaigns.
Post by: 0b1van4eg on March 19, 2018, 05:11:46 PM
Hi! Please help me restore my account!
Dear Zammo,
Your Bitcoin Forum 0b1van4eg@gmail.com to hamed_behdad94@yahoo.com by IP address 88.99.19.94. If you did not do this, then you can visit the following link within 14 days in order to lock the account:

https://bitcointalk.org/index.php?action=seclock;u=141082;t=1521317471;o=MGIxdmFuNGVnQGdtYWlsLmNvbQ==;n=aGFtZWRfYmVoZGFkOTRAeWFob28uY29t;c=9q4J1jg6YNpRdXThjzOgHXDpIFYhyux+iT+PSdHElf4=

Note that you will NOT be asked for your password at that URL.
Regards,
The Bitcoin Forum Team

clicked on the link, the account got blocked


Where do you get the link? email? PM? and who is the sender? By looking into the english language they used, i guess it is a phising email and you got phised. There is no way admin would use such an incomplete english and missing some words.

received a letter from Bitcoin Forum <noreply@bitcointalk.org>