Bitcoin Forum

Other => Meta => Topic started by: goemonnuovo on March 09, 2019, 03:09:37 PM



Title: Recovering hacked accounts
Post by: goemonnuovo on March 09, 2019, 03:09:37 PM
Email I received but I did not see it in time:

[Bitcoin Forum <noreply@[Suspicious link removed]) email address was just changed from drslump78@gmail.com to bmaudi5@gmail.com by IP address 37.212.79.112. If you did not do this, then you can visit the following link within 14 days in order to lock the account:  https://bitcointalk.org/index.php?action=seclock;u=22672;t=1547836629;o=ZHJzbHVtcDc4QGdtYWlsLmNvbQ%3D%3D;n=Ym1hdWRpNUBnbWFpbC5jb20%3D;c=y%2BXVi%2FHXcBdF2QynuImEj6LUKj0yk5gL%2FgWKnt6DjJM%3D  Note that you will NOT be asked for your password at that URL.  Regards, The Bitcoin Forum Team]

I saw yersteday that my account was hacked, and saw this post where they talk about my account https://bitcointalk.org/index.php?topic=5099391.msg49390918#msg49390918

I sent email to recovery address, and used dogecoin core wallet to sign the address i used in 2013

-----BEGIN Dogecoin SIGNED MESSAGE-----
My account goemon888 has been hacked/lost. Please reset the email to drslump78@gmail.com. The current date is 09/03/1919 4:46
-----BEGIN SIGNATURE-----
D63S4WZtmBMxfbNqA8UTGwLsdL1hqPzsNZ
IKmOt3adXJ8YXwaLhg9I9VyF9qPvaRbYCz+id/exJNLBL4fndpe1Xtpwl43UvtKK8OLFyvy72cScYjkx7tqWPu8=
-----END dogecoin SIGNED MESSAGE-----

Here is the unedited post where I posted that address: https://bitcointalk.org/index.php?topic=365665.msg3904382#msg3904382

24 messages are not sent by me. I do not speak Russian.. all my messages are in Italian and some in (bad) English, I use only italian ip, from one isp https://bitcointalk.org/index.php?action=profile;u=22672;sa=showPosts;start=20

UserName goemon888
UserID    22672

they also changed my goemon gif

Do I have to do anything else?

Thank you


Title: Re: Recovering hacked accounts
Post by: coinlocket$ on March 09, 2019, 03:14:34 PM
Just follow this new guide, it will be a fast recovery with the new procedure

https://bitcointalk.org/index.php?topic=5089777.0


Title: Re: Recovering hacked accounts
Post by: Kavelj22 on March 09, 2019, 08:32:01 PM
Just follow this new guide, it will be a fast recovery with the new procedure

https://bitcointalk.org/index.php?topic=5089777.0
The new procedure may not allow users to complete the verification process without signing a message from a BTC address and a full control over the original email used for registration.
You will be asked to provide a brief description about how the hack occured, you can add the link to the post of iasanco or this thread, or you may ask a mod or a dt member to publicly verify the message signed from a dogecoin address then add this to the manual recovery request.

Good luck OP


Title: Re: Recovering hacked accounts
Post by: goemonnuovo on March 09, 2019, 11:22:05 PM
 -----BEGIN BITCOIN SIGNED MESSAGE-----
My account goemon888 has been hacked. Please reset the email to drslump78@gmail.com The current date is 10 mar 2019
-----BEGIN SIGNATURE-----
1Hxwh8zriyhXGZC5GXGMXm9ym5fgrJDqwz
HL9LBeHZk4lz6MCZCaRm7YSTyjTtSBhHcsyHDPOr2c/bEtSEP/EALRK3vXLNJni7Ti1UfzNmETNbrSNxBOKZeac=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: https://bitcointalk.org/index.php?topic=23449.msg294515#msg294515

I received email from bitcointalk, but I did not see it in time:

[Bitcoin Forum <noreply@[Suspicious link removed]) email address was just changed from drslump78@gmail.com to bmaudi5@gmail.com by IP address 37.212.79.112. If you did not do this, then you can visit the following link within 14 days in order to lock the account:  https://bitcointalk.org/index.php?action=seclock;u=22672;t=1547836629;o=ZHJzbHVtcDc4QGdtYWlsLmNvbQ%3D%3D;n=Ym1hdWRpNUBnbWFpbC5jb20%3D;c=y%2BXVi%2FHXcBdF2QynuImEj6LUKj0yk5gL%2FgWKnt6DjJM%3D  Note that you will NOT be asked for your password at that URL.  Regards, The Bitcoin Forum Team]

I saw yersteday that my account was hacked, and saw this post where they talk about my account https://bitcointalk.org/index.php?topic=5099391.msg49390918#msg49390918

24 messages are not sent by me. I do not speak Russian.. all my messages are in Italian and some in (bad) English, I use only italian ip, (now my ip is 151.74.110.127);  from one isp Wind.

https://bitcointalk.org/index.php?action=profile;u=22672;sa=showPosts;start=20

UserName goemon888
UserID    22672

I was hacked on 1/19/2019

https://bpip.org/profile.aspx?p=goemon888

1/19/2019 6:58:04 AM    password changed
1/20/2019 6:58:04 AM    password changed

Thanks


Title: Re: Recovering hacked accounts
Post by: coinlocket$ on March 09, 2019, 11:27:59 PM
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account goemon888 has been hacked. Please reset the email to drslump78@gmail.com The current date is 10 mar 2019
-----BEGIN SIGNATURE-----
1Hxwh8zriyhXGZC5GXGMXm9ym5fgrJDqwz
HL9LBeHZk4lz6MCZCaRm7YSTyjTtSBhHcsyHDPOr2c/bEtSEP/EALRK3vXLNJni7Ti1UfzNmETNbrSNxBOKZeac=
-----END BITCOIN SIGNED MESSAGE-----

Verified (http://brainwalletx.github.io/#verify?vrAddr=1Hxwh8zriyhXGZC5GXGMXm9ym5fgrJDqwz&vrMsg=My%20account%20goemon888%20has%20been%20hacked.%20Please%20reset%20the%20email%20to%20drslump78%40gmail.com%20The%20current%20date%20is%2010%20mar%202019&vrSig=HL9LBeHZk4lz6MCZCaRm7YSTyjTtSBhHcsyHDPOr2c%2FbEtSEP%2FEALRK3vXLNJni7Ti1UfzNmETNbrSNxBOKZeac%3D) with brainwallet and archived (http://archive.fo/C4FUX).

Here you can see if an account is recovered: https://bitcointalk.org/seclog.php

I think we also have a link to see the queue, to see if your account is on the queue for restoration but I don't remember which one is it.


Title: Re: Recovering hacked accounts
Post by: Kavelj22 on March 10, 2019, 01:26:22 AM
Visit this thread to check and comment data entries in seclog about manual recoveries of lost/hacked accounts.

All the restored accounts (https://bitcointalk.org/index.php?topic=5099645.msg49317801#msg49317801).


Title: Re: Recovering hacked accounts
Post by: DireWolfM14 on March 10, 2019, 05:29:31 PM
@OP
Iasenko suspected something wrong (https://bitcointalk.org/index.php?topic=5099391.msg49378960#msg49378960) with the account shortly after it woke up.  It's been tagged with a bunch of red, but I added my own review with your proof of ownership (https://bitcointalk.org/index.php?topic=5118712.msg50093511#msg50093511) as the reference link.  I'll remove my review once you've recovered the account.


Title: Re: Recovering hacked accounts
Post by: TheBeardedBaby on March 10, 2019, 06:49:06 PM
Let me know when you get your account back l'll remove the negative tag.
I'm very happy that I could stop those fu*ckers from abusing your account.



Title: Re: Recovering hacked accounts
Post by: goemonnuovo on March 10, 2019, 07:05:26 PM
Let me know when you get your account back l'll remove the negative tag.
I'm very happy that I could stop those fu*ckers from abusing your account.



thank you all!


Title: Re: Recovering hacked accounts
Post by: goemonnuovo on March 13, 2019, 07:34:36 PM
Today at 12:41:32 PM - goemon888 - manual recovery, ownership change queued

email
[Account has been queued for recovery using this email address <> and it will be done automatically in 7 days.

After these 7 days, you will be able to proceed in using the forgotten password feature and reset the password. Please do not reset it using the secret question as that will get the account locked again.

If you have any questions, please don't hesitate to get back to us.]

Thanks, I will update after receiving the email..


Title: Re: Recovering hacked accounts
Post by: goemon888 on March 20, 2019, 02:46:24 PM
Hi! I recovered the account. Thank you all!
Can you remove negative trusts?

Thanks!


Title: Re: Recovering hacked accounts
Post by: goemon888 on March 20, 2019, 10:47:17 PM
Today at 02:29:57 PM - goemon888 - password reset via email
Today at 02:25:02 PM - Simakki - manual recovery, previously-queued ownership change completed
Today at 02:12:13 PM - Kickico Bounty Hunter - password reset via email
Today at 02:12:04 PM - Dayan1 - password changed
Today at 01:30:04 PM - gameofthronne - woke up
Today at 01:25:01 PM - goemon888 - manual recovery, previously-queued ownership change completed


Title: Re: Recovering hacked accounts
Post by: xtraelv on March 26, 2019, 10:57:24 AM
Hi! I recovered the account. Thank you all!
Can you remove negative trusts?

Thanks!

Just send a pm from that account with a link to here.

You could also include a separate signed message with your personal message to prove you have full control of the account.


Title: Re: Recovering hacked accounts
Post by: TheBeardedBaby on March 26, 2019, 11:54:23 AM
Hi! I recovered the account. Thank you all!
Can you remove negative trusts?

Thanks!

Great, send me a singed message or link to it as xtraelv suggested above and I'll be very happy to remove it.
And PM the others who left you Negative Feedback. I found this thread only by chance.


Title: Re: Recovering hacked accounts
Post by: goemon888 on March 28, 2019, 02:21:27 PM
I imagined that the only way was to send PM
I signed a new message

-----BEGIN BITCOIN SIGNED MESSAGE-----
I recovered my bitcointalk account goemon888. temporary account goemonnuovo. The current date is 28 mar 2019
-----BEGIN SIGNATURE-----
1Hxwh8zriyhXGZC5GXGMXm9ym5fgrJDqwz
HBqTr/9RzTaHhMVL4UWZrmzbfKaBDhEBJKQx6U3YgsF/M3WjWTe1LgAvcV52jJy/NZ8sQ19NLRFDb815A812o/o=
-----END BITCOIN SIGNED MESSAGE-----


Title: Re: Recovering hacked accounts
Post by: TheBeardedBaby on March 28, 2019, 03:18:41 PM
I imagined that the only way was to send PM
I signed a new message

-----BEGIN BITCOIN SIGNED MESSAGE-----
I recovered my bitcointalk account goemon888. temporary account goemonnuovo. The current date is 28 mar 2019
-----BEGIN SIGNATURE-----
1Hxwh8zriyhXGZC5GXGMXm9ym5fgrJDqwz
HBqTr/9RzTaHhMVL4UWZrmzbfKaBDhEBJKQx6U3YgsF/M3WjWTe1LgAvcV52jJy/NZ8sQ19NLRFDb815A812o/o=
-----END BITCOIN SIGNED MESSAGE-----

Above message verifed (http://) > The address was used back in 2011 > https://bitcointalk.org/index.php?topic=23449.msg294515#msg294515
I'm chaining my negative feedback to neutral.

Achived. (http://archive.fo/3H4Eo)


Title: Re: Recovering hacked accounts
Post by: asche on March 28, 2019, 03:22:32 PM
Removed red trust after account was returned to it's rightful owner.


Title: Re: Recovering hacked accounts
Post by: TheNewAnon135246 on March 28, 2019, 06:18:41 PM
Glad to see that you've recovered your account. I've removed my negative feedback.


Title: Re: Recovering hacked accounts
Post by: DireWolfM14 on March 29, 2019, 12:49:53 AM
I imagined that the only way was to send PM
I signed a new message

-----BEGIN BITCOIN SIGNED MESSAGE-----
I recovered my bitcointalk account goemon888. temporary account goemonnuovo. The current date is 28 mar 2019
-----BEGIN SIGNATURE-----
1Hxwh8zriyhXGZC5GXGMXm9ym5fgrJDqwz
HBqTr/9RzTaHhMVL4UWZrmzbfKaBDhEBJKQx6U3YgsF/M3WjWTe1LgAvcV52jJy/NZ8sQ19NLRFDb815A812o/o=
-----END BITCOIN SIGNED MESSAGE-----

Glad to see you've recovered your account.  It's also good to see that the new forum policy is working and folks are getting their accounts back quickly. 

I've removed my red-tag.  I hope you have better luck securing the account in the future. 


Title: Re: Recovering hacked accounts
Post by: goemon888 on April 01, 2019, 12:00:29 PM
Thank you all! I recoveder all Trust but one, Lauda https://bitcointalk.org/index.php?action=profile;u=101872
I sent a PM, but I don't want to disturb..  who knows him can signal this discussion?
Thanks!


Title: Re: Recovering hacked accounts
Post by: TheBeardedBaby on April 01, 2019, 12:43:07 PM
Thank you all! I recoveder all Trust but one, Lauda https://bitcointalk.org/index.php?action=profile;u=101872
I sent a PM, but I don't want to disturb..  who knows him can signal this discussion?
Thanks!
As a Verified Snitch, I'll snitch about your problem, let's see what happens ;)

Edit: got a confirmation, your feedback is clean now ;)


Title: Re: Recovering hacked accounts
Post by: goemon888 on April 01, 2019, 07:22:41 PM
Thank you! all trust recovered!