Bitcoin Forum

Other => Meta => Topic started by: ofirbeigel on July 23, 2014, 10:03:12 AM



Title: BitcoinTalk phishing scam!
Post by: ofirbeigel on July 23, 2014, 10:03:12 AM
I've just received an email trying to sell ads on BitcoinTalk. It can from the address BitcoinTalk.ads@gmail.com.
I know this is a phishing scam since the same thing happened to me with Coindesk a few weeks ago and this email uses the same methods.
http://99bitcoins.com/wp-content/uploads/2014/08/BitcoinTalk-phishing-email.jpg


I've marked the email as phishing and if you received this email you should do so to.

Update - I've just written a blog post (http://99bitcoins.com/almost-got-scammed-alleged-coindesk/) about the whole story.
Good luck.


Title: Re: BitcoinTalk phishing scam!
Post by: Bizmark13 on July 23, 2014, 10:08:09 AM
I'm guessing they will provide you with a BTC address to send coins to but your ad will never show up on the site since they're not the real admin right? Or are they trying to steal usernames and passwords somehow?


Title: Re: BitcoinTalk phishing scam!
Post by: Dogtanian on July 23, 2014, 10:08:49 AM
Its probably not a phishing scam but just trying to scam you out of money by thinking youre getting forum adds. Somebody was scammed a bit ago like this but via the forum.


Title: Re: BitcoinTalk phishing scam!
Post by: ofirbeigel on July 23, 2014, 10:09:49 AM
I'm guessing they will provide you with a BTC address to send coins to but your ad will never show up on the site since they're not the real admin right? Or are they trying to steal usernames and passwords somehow?

From my experience with the at "Coindesk" I almost sent out my BTC but realized it at the last moment. My guess is that they are not trying to steal usernames.


Title: Re: BitcoinTalk phishing scam!
Post by: ofirbeigel on July 23, 2014, 10:10:19 AM
Its probably not a phishing scam but just trying to scam you out of money by thinking youre getting forum adds. Somebody was scammed a bit ago like this but via the forum.
You're correct - it's not a "phishing scam" per se...but it's still a scam.


Title: Re: BitcoinTalk phishing scam!
Post by: whitefly on July 23, 2014, 11:12:17 AM
How come they got your e-mail?


Title: Re: BitcoinTalk phishing scam!
Post by: CrackedLogic on July 23, 2014, 11:14:31 AM
Its probably not a phishing scam but just trying to scam you out of money by thinking youre getting forum adds. Somebody was scammed a bit ago like this but via the forum.
You're correct - it's not a "phishing scam" per se...but it's still a scam.

I thought the same, there isn't any phishing link thus not making it a phish but it is a surefire scam.


Title: Re: BitcoinTalk phishing scam!
Post by: Justin00 on July 23, 2014, 11:20:25 AM
I only use this email addy on this site and I have been getting heaps of virus, spam, phishing emails.
The site has been hacked a few times but Theymos swears the hacker could not of gotten the email list, even though they had access to the backend for like 6 months........... Interesting ay.

How come they got your e-mail?


Title: Re: BitcoinTalk phishing scam!
Post by: whitefly on July 23, 2014, 11:29:03 AM
I only use this email addy on this site and I have been getting heaps of virus, spam, phishing emails.
The site has been hacked a few times but Theymos swears the hacker could not of gotten the email list, even though they had access to the backend for like 6 months........... Interesting ay.

How come they got your e-mail?
That was exactly my thought.
Does anyone know if email list got leaked?


Title: Re: BitcoinTalk phishing scam!
Post by: Baitty on July 23, 2014, 11:35:17 AM
I only use this email addy on this site and I have been getting heaps of virus, spam, phishing emails.
The site has been hacked a few times but Theymos swears the hacker could not of gotten the email list, even though they had access to the backend for like 6 months........... Interesting ay.

How come they got your e-mail?

The email addresses must of got leaked if this is the only place you use the email and are getting Bitcoin spam and virus emails.


Title: Re: BitcoinTalk phishing scam!
Post by: BowieMan on July 23, 2014, 12:00:26 PM
Wow interesting. Although it seems that people advertising on Bitcointalk are a rather niche-group and not an especially large target audience. I guess it'll be hard finding people interested in advertising here. Where did they get the email addresses from?


Title: Re: BitcoinTalk phishing scam!
Post by: whitefly on July 23, 2014, 12:09:36 PM
I only use this email addy on this site and I have been getting heaps of virus, spam, phishing emails.
The site has been hacked a few times but Theymos swears the hacker could not of gotten the email list, even though they had access to the backend for like 6 months........... Interesting ay.

How come they got your e-mail?

The email addresses must of got leaked if this is the only place you use the email and are getting Bitcoin spam and virus emails.
That's sad, I thought there weren't issues like this on this forum.


Title: Re: BitcoinTalk phishing scam!
Post by: BowieMan on July 23, 2014, 12:14:29 PM
I only use this email addy on this site and I have been getting heaps of virus, spam, phishing emails.
The site has been hacked a few times but Theymos swears the hacker could not of gotten the email list, even though they had access to the backend for like 6 months........... Interesting ay.

How come they got your e-mail?

The email addresses must of got leaked if this is the only place you use the email and are getting Bitcoin spam and virus emails.
That's sad, I thought there weren't issues like this on this forum.

There've been leaks before. Remember some 3/4 year ago or so, there was a major break-in and many addresses or data got stolen. Theymos had to shut the forum down for a couple of days. Spooky times!


Title: Re: BitcoinTalk phishing scam!
Post by: ofirbeigel on July 23, 2014, 12:15:31 PM
How come they got your e-mail?

I really don't think the email list got leaked. They are just sending this out to general addresses like admin@website.com and info@website.com.
Since I capture all emails sent to my site this got captured also.
Here's the latest update :) look at how clever these guys are...
http://99bitcoins.com/wp-content/uploads/2014/08/Bitcointalk-scam-email.jpg


Title: Re: BitcoinTalk phishing scam!
Post by: Bizmark13 on July 23, 2014, 12:17:08 PM
I only use this email addy on this site and I have been getting heaps of virus, spam, phishing emails.
The site has been hacked a few times but Theymos swears the hacker could not of gotten the email list, even though they had access to the backend for like 6 months........... Interesting ay.

How come they got your e-mail?

The email addresses must of got leaked if this is the only place you use the email and are getting Bitcoin spam and virus emails.
That's sad, I thought there weren't issues like this on this forum.

I believe the forums were hacked into sometime last year and a database of emails was leaked. It was around the same time the ability to change one's own avatar was disabled.


Title: Re: BitcoinTalk phishing scam!
Post by: ofirbeigel on July 23, 2014, 12:19:33 PM
I only use this email addy on this site and I have been getting heaps of virus, spam, phishing emails.
The site has been hacked a few times but Theymos swears the hacker could not of gotten the email list, even though they had access to the backend for like 6 months........... Interesting ay.

How come they got your e-mail?

The email addresses must of got leaked if this is the only place you use the email and are getting Bitcoin spam and virus emails.
That's sad, I thought there weren't issues like this on this forum.

I believe the forums were hacked into sometime last year and a database of emails was leaked. It was around the same time the ability to change one's own avatar was disabled.

Since these guys did the same thing with Coindesk (look here (http://www.coindesk.com/phishing-alert/)) I still can't believe they actually have my email. Like I said they sent it to an email address that doesn't even exist and I just captured it on the way.


Title: Re: BitcoinTalk phishing scam!
Post by: whitefly on July 23, 2014, 12:28:18 PM
I only use this email addy on this site and I have been getting heaps of virus, spam, phishing emails.
The site has been hacked a few times but Theymos swears the hacker could not of gotten the email list, even though they had access to the backend for like 6 months........... Interesting ay.

How come they got your e-mail?

The email addresses must of got leaked if this is the only place you use the email and are getting Bitcoin spam and virus emails.
That's sad, I thought there weren't issues like this on this forum.

I believe the forums were hacked into sometime last year and a database of emails was leaked. It was around the same time the ability to change one's own avatar was disabled.

Since these guys did the same thing with Coindesk (look here (http://www.coindesk.com/phishing-alert/)) I still can't believe they actually have my email. Like I said they sent it to an email address that doesn't even exist and I just captured it on the way.
Good to know anyway. Luckily I only use my mail for this forum.


Title: Re: BitcoinTalk phishing scam!
Post by: Justin00 on July 23, 2014, 01:07:22 PM
Apparently the email list was not leaked and everyone gave me shit and said it was just me... but that is clearly not the case.
I made a thread.. inquiring about this. it was probably 3-4 months old... possibly a bit longer.

Anyways we have no evidence it was leaked.. other than my email addy getting these weird emails.


Title: Re: BitcoinTalk phishing scam!
Post by: theymos on July 23, 2014, 06:22:03 PM
I very rarely conduct forum business outside of forum PMs. If "I" do, you should ask me to PGP-sign my messages.

I only use this email addy on this site and I have been getting heaps of virus, spam, phishing emails.
The site has been hacked a few times but Theymos swears the hacker could not of gotten the email list, even though they had access to the backend for like 6 months........... Interesting ay.

Go reread the emails I sent out after those incidents and you'll see that I told people to assume that their email addresses were compromised.

However, since no one has ever published any accurate data from the forum's database, I tend to think that the attackers did not download large chunks of the forum's database, or at least they didn't share this data. For example, as far as I know, no one has ever published a list of Satoshi's IP addresses as used on the forum or his password hash. There have been very few cases of people complaining of increased spam on their forum email addresses, so I believe that these cases are actually unrelated to the forum (even if you think that your email address was unused anywhere else).


Title: Re: BitcoinTalk phishing scam!
Post by: ofirbeigel on July 24, 2014, 06:52:08 AM
I've just put up a detailed blog post (http://99bitcoins.com/almost-got-scammed-alleged-coindesk/) about the whole story including all the email correspondence I had.


Title: Re: BitcoinTalk phishing scam!
Post by: DMeeks on July 24, 2014, 08:13:43 AM
I wonder if people actually fall for this kind of e-mails since it makes no sense "at least ask them to contact you through btctalk from theymos" lol . Anyway I wonder where did they get there bitcoin-related e-mail list though.


Title: Re: BitcoinTalk phishing scam!
Post by: money420weed on July 24, 2014, 10:56:14 PM
I only use this email addy on this site and I have been getting heaps of virus, spam, phishing emails.
The site has been hacked a few times but Theymos swears the hacker could not of gotten the email list, even though they had access to the backend for like 6 months........... Interesting ay.

How come they got your e-mail?

The email addresses must of got leaked if this is the only place you use the email and are getting Bitcoin spam and virus emails.
It is also possible that someone has tried to register with your email address and got an error message saying that your email address is already associated with an account. The attacker would then know that you have an account on bitcointalk.org and that your email is associated with that attack.


Title: Re: BitcoinTalk phishing scam!
Post by: gmx95 on July 25, 2014, 05:48:15 AM
I've just received an email trying to sell ads on BitcoinTalk. It can from the address BitcoinTalk.ads@gmail.com.
I know this is a phishing scam since the same thing happened to me with Coindesk a few weeks ago and this email uses the same methods.
http://99bitcoins.com/wp-content/uploads/2014/08/BitcoinTalk-phishing-email.jpg


I've marked the email as phishing and if you received this email you should do so to.

Update - I've just written a blog post (http://99bitcoins.com/almost-got-scammed-alleged-coindesk/) about the whole story.
Good luck.

Yep. I've got one today. I wonder if the link contained a trojan also. Looks suspicious.



Title: Re: BitcoinTalk phishing scam!
Post by: CanaryInTheMine on August 13, 2014, 10:50:32 PM
I got one of these emails today...

I played along, but after they saw which business I wanted the add for, they told me they weren't interested in selling me an add
Bwhahahahahaha