Bitcoin Forum

Other => Meta => Topic started by: ziggyII on September 16, 2014, 12:21:59 PM



Title: [HELP]My account may be hacked
Post by: ziggyII on September 16, 2014, 12:21:59 PM
Hi,I am the owner of the account Ziggy,which is registered at 2011
today I find I can not log in with my password,I feel strange and try to reset the password
but I can not receive the password reset email,I used gmail,
just yesterday I have received the forum notification email about the NEM alpha release things
so I register this new account for asking help
I checked the account Ziggy just now,there should be something on the signature but they are gone now
does it means someone hacked my account ,changed the its password and email box,deleted the signature within 24 hours?
help me please!

ziggy


Title: Re: [HELP]My account may be hacked
Post by: hilariousandco on September 16, 2014, 12:35:30 PM
If your signature is gone and you didn't change it then it's safe to say you are hacked. Read the following on how to recover your account: https://bitcointalk.org/index.php?topic=497545.0


Title: Re: [HELP]My account may be hacked
Post by: ziggyII on September 16, 2014, 12:48:30 PM
If your signature is gone and you didn't change it then it's safe to say you are hacked. Read the following on how to recover your account: https://bitcointalk.org/index.php?topic=497545.0
thanks,I will try


Title: Re: [HELP]My account may be hacked
Post by: OnkelPaul on September 16, 2014, 12:56:11 PM
Looks like you fell for this scam:
https://bitcointalk.org/index.php?topic=784587

Look at the URL in that mail you got. It leads to "bilcointalk", not "bitcointalk".
Never ever click on links in such unsolicited mails!

Onkel Paul


Title: Re: [HELP]My account may be hacked
Post by: ziggyII on September 16, 2014, 03:15:54 PM
Looks like you fell for this scam:
https://bitcointalk.org/index.php?topic=784587

Look at the URL in that mail you got. It leads to "[Suspicious link removed]", not "bitcointalk".
Never ever click on links in such unsolicited mails!

Onkel Paul

I just check the email and you are right,thank you Onkel Paul!


Title: Re: [HELP]My account may be hacked
Post by: ziggyII on September 17, 2014, 08:10:27 PM
If your signature is gone and you didn't change it then it's safe to say you are hacked. Read the following on how to recover your account: https://bitcointalk.org/index.php?topic=497545.0
I Pmed theymos my account recover request yesterday,but got no response in the past 24 hours
I guess maybe I misunderstood something and signed wrong message because I am a Chinese who are not good at English
so I think it is better to make it clear here before I sign again
I sew this on the recover template"The current date is <date>."
I have no idea about what is the "current data"
in my situation,Ziggy is the account that I want to recover,
the bitcoin address I signed is 13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk
and you will find it has been posted here: https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242
the new mail address is slxok77@gmail.com which is not the same to my temporary account
but what is "The current date"?
can anyone help me,thanks!



Title: Re: [HELP]My account may be hacked
Post by: abacus on September 17, 2014, 10:58:55 PM
I sew this on the recover template"The current date is <date>."
I have no idea about what is the "current data"

It isn't data, but date. It's the current calendar date. :)
For example, today you can fill that field with something like "17 September 2014" or "09-17-2014".


Title: Re: [HELP]My account may be hacked
Post by: ziggyII on September 18, 2014, 03:18:32 AM
I sew this on the recover template"The current date is <date>."
I have no idea about what is the "current data"

It isn't data, but date. It's the current calendar date. :)
For example, today you can fill that field with something like "17 September 2014" or "09-17-2014".
What a stupid mistake I have made!
Thank you!
So in my situation I should sign this"My account <ziggy> has been hacked/lost. Please reset the email to <slxok77@gmail.com>. The current date is <09-17-2014>."
Then I get the signature, let's say XXXXXXXXX
So the whole PM should looked like this:

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <ziggy> has been hacked/lost. Please reset the email to <slxok77@gmail.com>. The current date is <09-17-2014>.
-----BEGIN SIGNATURE-----
<13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk>
<XXXXXXXXX>
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address:
https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242

is it OK?





Title: Re: [HELP]My account may be hacked
Post by: Shogen on September 18, 2014, 04:23:53 AM
I believe you don't need to include those < and > signs.

After you sign the message, you could copy and paste it to https://brainwallet.github.io/#verify to double check its validity.


Title: Re: [HELP]My account may be hacked
Post by: ziggyII on September 18, 2014, 04:52:11 AM
I believe you don't need to include those < and > signs.

After you sign the message, you could copy and paste it to https://brainwallet.github.io/#verify to double check its validity.
Hi Shogen
I deleted all the < and > signs and tried to verify it on the page as you told
it passed
thank you very much!
you saved me!
I just PMed theymos again
hope I can have my account recovered




Title: Re: [HELP]My account may be hacked
Post by: Shogen on September 18, 2014, 04:57:02 AM
I believe you don't need to include those < and > signs.

After you sign the message, you could copy and paste it to https://brainwallet.github.io/#verify to double check its validity.
Hi Shogen
I deleted all the < and > signs and tried to verify it on the page as you told
it passed
thank you very much!
you saved me!
I just PMed theymos again
hope I can have my account recovered

You are welcome. Good luck to your recovery process. :)


Title: Re: [HELP]My account may be hacked
Post by: ziggyII on September 19, 2014, 03:28:29 AM
another day has passed but I got no response from theymos
how long will it take?
or does it mean my pm be ignored by him?
or something is still wrong with my last signed message?
can I post my signed message here so maybe somebody can give me some advices?
I feel confused...
 


Title: Re: [HELP]My account may be hacked
Post by: steven.G999 on September 19, 2014, 07:49:30 AM
another day has passed but I got no response from theymos
how long will it take?
or does it mean my pm be ignored by him?
or something is still wrong with my last signed message?
can I post my signed message here so maybe somebody can give me some advices?
I feel confused...
 

case you are just like me. I have one more week to submit evidence theymos and no response at all, even I've sent a little bitcoin to convince bawaha it really addresses that I use on my id is missing. and I am confused what should I do to restore my account


Title: Re: [HELP]My account may be hacked
Post by: steven.G999 on September 19, 2014, 07:59:16 AM
if my format is correct?


-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <gelar24> has been hacked/lost. Please reset the email to <nasyaaulia18gmail.com>. The current date is <09-19-2014>
-----BEGIN SIGNATURE-----
<1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE>
< https://bitcointalk.org/index.php?topic=762934.msg8618507#msg8618507 >
-----END BITCOIN SIGNED MESSAGE-----

I forgot my last message. but it's really my ID, and I use email as above, and the ID using the email above as well.
a little late to send me proof of 0.001 BTC bitcoin from my address to your address and this evidence https://blockchain.info/id/tx/62315f86c15b42fec2f8546cf9a5afd6eccc85774c1bfe9632eb45a040ae669d

Thank you so much I wish I had long ID that can wake back


Title: Re: [HELP]My account may be hacked
Post by: ziggyII on September 19, 2014, 12:35:23 PM
if my format is correct?


-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <gelar24> has been hacked/lost. Please reset the email to <nasyaaulia18gmail.com>. The current date is <09-19-2014>
-----BEGIN SIGNATURE-----
<1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE>
< https://bitcointalk.org/index.php?topic=762934.msg8618507#msg8618507 >
-----END BITCOIN SIGNED MESSAGE-----

I forgot my last message. but it's really my ID, and I use email as above, and the ID using the email above as well.
a little late to send me proof of 0.001 BTC bitcoin from my address to your address and this evidence https://blockchain.info/id/tx/62315f86c15b42fec2f8546cf9a5afd6eccc85774c1bfe9632eb45a040ae669d

Thank you so much I wish I had long ID that can wake back

seems I am not the only one
but I think you do made something wrong in your signed message
the field <signature> should be the result which come from the calculating of the content you sign
in your case ,the content you sign is:
Quote
My account <gelar24> has been hacked/lost. Please reset the email to <nasyaaulia18gmail.com>. The current date is <09-19-2014>

sign this with your bitcoin address 1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE
you will get the signature,it should be something like this:

Quote
HAZP+0g0T4GlmIzORYoN+2e4E8nfrP9EJpLnZJNoja/EOzikTtk2+/dgV6yJI81qG+4MM5AXvBcqqECTyz4u6bQ=


and remember the bitcoin address you signed,in you case is 1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE,should be proved belongs to the account you want to recover,for example,this address has been posted in this forum by the account,or has been included in a PM which sent by the account,find these kind of link and attach them

so,in your case the whole pm should looks like this:

Quote
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <gelar24> has been hacked/lost. Please reset the email to <nasyaaulia18gmail.com>. The current date is <09-19-2014>
-----BEGIN SIGNATURE-----
1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE
HAZP+0g0T4GlmIzORYoN+2e4E8nfrP9EJpLnZJNoja/EOzikTtk2+/dgV6yJI81qG+4MM5AXvBcqqECTyz4u6bQ= (it's not true,just for example)

-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: ...
OR
I sent that address to someone in a PM with PM ID#...(you need find them yourself)
when you finished the sign,you can check it here https://brainwallet.github.io/#verify

sorry for my English I hope I make it clear

I post mine here,I have verified it,no problem,I don't know why I got no response so far
any advice will be appreciated

Quote
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account ziggy has been hacked/lost. Please reset the email to slxok77@gmail.com. The current date is 09-18-2014.
-----BEGIN SIGNATURE-----
13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk
HKdGXVZZ4mI6/dmmcRgBpLP5njImMOV6ZoPf23AkzdN9nRYa637bxgwHNP2ilDlaKIbqWT67JcCHcjd2tgHloYY=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address:
https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242


Title: Re: [HELP]My account may be hacked
Post by: Farmer17 on September 19, 2014, 12:49:29 PM
I post mine here,I have verified it,no problem,I don't know why I got no response so far
any advice will be appreciated

Quote
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account ziggy has been hacked/lost. Please reset the email to slxok77@gmail.com. The current date is 09-18-2014.
-----BEGIN SIGNATURE-----
13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk
HKdGXVZZ4mI6/dmmcRgBpLP5njImMOV6ZoPf23AkzdN9nRYa637bxgwHNP2ilDlaKIbqWT67JcCHcjd2tgHloYY=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address:
https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242

I haven't tried contacting theymos before, but from what I heard, it usually takes a few days to get a response.
If you still haven't received anything back after a few days, you may try to send another PM just in case he has missed the first one.


Title: Re: [HELP]My account may be hacked
Post by: ziggyII on September 19, 2014, 07:37:24 PM
I post mine here,I have verified it,no problem,I don't know why I got no response so far
any advice will be appreciated

Quote
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account ziggy has been hacked/lost. Please reset the email to slxok77@gmail.com. The current date is 09-18-2014.
-----BEGIN SIGNATURE-----
13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk
HKdGXVZZ4mI6/dmmcRgBpLP5njImMOV6ZoPf23AkzdN9nRYa637bxgwHNP2ilDlaKIbqWT67JcCHcjd2tgHloYY=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address:
https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242

I haven't tried contacting theymos before, but from what I heard, it usually takes a few days to get a response.
If you still haven't received anything back after a few days, you may try to send another PM just in case he has missed the first one.
Hi Farmer17,thanks for your advice
actually I have sent 3 PM so far
maybe I am a little overreacting
It seems the only thing I can do now is just waiting



Title: Re: [HELP]My account may be hacked
Post by: steven.G999 on September 20, 2014, 04:20:20 AM
this already right?

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account gelar24 has been hacked/lost. Please reset the email to nasyaaulia18gmail.com. The current date is 09-20-2014
-----BEGIN SIGNATURE-----

1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE
GwpztbzX3RSD3Y5brSx9jaxxKRInOzPXsIHFQ6+xZgu5JY4wbgKPbepTJVNv6jFjTvTA2aav7xguJLAav64bANs=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address :
https://bitcointalk.org/index.php?topic=752738.msg8539412#msg8539412

but subject to any verification via https://brainwallet.github.io/#verify me. Message says there is always verified to be from 1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE (but the address was not found in the signature!)

if there is one?


Title: Re: [HELP]My account may be hacked
Post by: steven.G999 on September 20, 2014, 07:11:00 AM
hello can you help me? What words should I fill in the sign message on blockchain?
whether examples like this: My account has been hacked gelar24 / lost. Please reset the email to nasyaaulia18@gmail.com. The current date is 09-20-2014.


Title: Re: [HELP]My account may be hacked
Post by: DiamondCardz on September 20, 2014, 09:17:06 AM
No need to send 3 PMs to theymos, he'll get around to your PMs. He probably has a lot of work to do and I doubt that recovering hacked accounts is his top priority. If he doesn't respond within a week or so, then re-send the PM.


Title: Re: [HELP]My account may be hacked
Post by: Farmer17 on September 20, 2014, 10:32:27 AM
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account gelar24 has been hacked/lost. Please reset the email to nasyaaulia18gmail.com. The current date is 09-20-2014
-----BEGIN SIGNATURE-----
1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE
GwpztbzX3RSD3Y5brSx9jaxxKRInOzPXsIHFQ6+xZgu5JY4wbgKPbepTJVNv6jFjTvTA2aav7xguJLAav64bANs=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address :
https://bitcointalk.org/index.php?topic=752738.msg8539412#msg8539412

You should remove the line after the "Begin signature" line (like what I put as the above quote).
You now just need to send this to theymos and wait patiently for a few days.




Title: Re: [HELP]My account may be hacked
Post by: ziggyII on September 20, 2014, 12:29:46 PM
No need to send 3 PMs to theymos, he'll get around to your PMs. He probably has a lot of work to do and I doubt that recovering hacked accounts is his top priority. If he doesn't respond within a week or so, then re-send the PM.
thank you DiamondCardz,I will


Title: Re: [HELP]My account may be hacked
Post by: steven.G999 on September 26, 2014, 02:56:03 PM
is almost 1 weeks no response from theymos. how is this? what should I do?
what have you have recoveredzuggu?


Title: Re: [HELP]My account may be hacked
Post by: Farisr9k on September 27, 2014, 02:47:32 AM
I have also faced same kind of problem. Have you set up any security question? If you set up any security question, you may get back your account.


Title: Re: [HELP]My account may be hacked
Post by: greatwolf_ on September 27, 2014, 04:59:21 AM
I have also faced same kind of problem. Have you set up any security question? If you set up any security question, you may get back your account.

All of that is completely pointless. You know why? because all the information on your account can be changed by the perpetrator, including your security question, all without ever having to confirm these changes through your registered email!


Title: Re: [HELP]My account may be hacked
Post by: ziggyII on September 27, 2014, 10:09:08 PM
is almost 1 weeks no response from theymos. how is this? what should I do?
what have you have recoveredzuggu?
not yet
I don't know what to do now,a new PM will helpful?


Title: Re: [HELP]My account may be hacked
Post by: ziggyII on October 12, 2014, 11:04:45 PM
is almost 1 weeks no response from theymos. how is this? what should I do?
what have you have recoveredzuggu?
not yet
I don't know what to do now,a new PM will helpful?
ok,after 3 weeks waiting
I tried to sent the 4th PM to theymos
and I signed all 4 addresses that I have posted here and can be find now

https://bitcointalk.org/index.php?topic=528023.msg6411284#msg6411284
TxID a3d8e083b7de0bc32b0dfc6e4ba2ebe4642387046cde4fa455179f4398450d9e
12dMHU1W24zfZ6c3pxF6ZhV54EFF1rYJss

https://bitcointalk.org/index.php?topic=606837.msg6710913#msg6710913
TxID a475ad2462c09c7d0315ab968ef2ec2f63ee9f2e443ef809e0869d245bca3948
1FXqvvHScomNmrXZGnh2g4HXGb1g9tMVJR

https://bitcointalk.org/index.php?topic=523187.msg5877530#msg5877530
TxID 502ab8b61fc612c9e7b4857768f834f6665ab6757c9ac3b4505eea32dd682317
1Lam6fyUVEzBqmAcFaajtkLABaLFdUbywT

https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242
TxID 996d9dc5dc120601ec887b48b69de0ee89d8f682fe11d75e05e4cd95d99a623e
13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk

I feel so sad about the endless waiting


Title: Re: [HELP]My account may be hacked
Post by: muchoman on October 13, 2014, 08:04:46 PM
is almost 1 weeks no response from theymos. how is this? what should I do?
what have you have recoveredzuggu?
not yet
I don't know what to do now,a new PM will helpful?
ok,after 3 weeks waiting
I tried to sent the 4th PM to theymos
and I signed all 4 addresses that I have posted here and can be find now

https://bitcointalk.org/index.php?topic=528023.msg6411284#msg6411284
TxID a3d8e083b7de0bc32b0dfc6e4ba2ebe4642387046cde4fa455179f4398450d9e
12dMHU1W24zfZ6c3pxF6ZhV54EFF1rYJss

https://bitcointalk.org/index.php?topic=606837.msg6710913#msg6710913
TxID a475ad2462c09c7d0315ab968ef2ec2f63ee9f2e443ef809e0869d245bca3948
1FXqvvHScomNmrXZGnh2g4HXGb1g9tMVJR

https://bitcointalk.org/index.php?topic=523187.msg5877530#msg5877530
TxID 502ab8b61fc612c9e7b4857768f834f6665ab6757c9ac3b4505eea32dd682317
1Lam6fyUVEzBqmAcFaajtkLABaLFdUbywT

https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242
TxID 996d9dc5dc120601ec887b48b69de0ee89d8f682fe11d75e05e4cd95d99a623e
13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk

I feel so sad about the endless waiting


Do not waste your time with admin theymos , you will not get the account back.
I have this kind of bad experience.


Title: Re: [HELP]My account may be hacked
Post by: Neonecrox13 on March 14, 2015, 08:50:21 PM
is almost 1 weeks no response from theymos. how is this? what should I do?
what have you have recoveredzuggu?
not yet
I don't know what to do now,a new PM will helpful?
ok,after 3 weeks waiting
I tried to sent the 4th PM to theymos
and I signed all 4 addresses that I have posted here and can be find now

https://bitcointalk.org/index.php?topic=528023.msg6411284#msg6411284
TxID a3d8e083b7de0bc32b0dfc6e4ba2ebe4642387046cde4fa455179f4398450d9e
12dMHU1W24zfZ6c3pxF6ZhV54EFF1rYJss

https://bitcointalk.org/index.php?topic=606837.msg6710913#msg6710913
TxID a475ad2462c09c7d0315ab968ef2ec2f63ee9f2e443ef809e0869d245bca3948
1FXqvvHScomNmrXZGnh2g4HXGb1g9tMVJR

https://bitcointalk.org/index.php?topic=523187.msg5877530#msg5877530
TxID 502ab8b61fc612c9e7b4857768f834f6665ab6757c9ac3b4505eea32dd682317
1Lam6fyUVEzBqmAcFaajtkLABaLFdUbywT

https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242
TxID 996d9dc5dc120601ec887b48b69de0ee89d8f682fe11d75e05e4cd95d99a623e
13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk

I feel so sad about the endless waiting


Do not waste your time with admin theymos , you will not get the account back.
I have this kind of bad experience.


I'm having this same issue. Nothing is ever gonna be done about it unless you pay Theymos or something. You could probably buy a account cheaper than what it will cost you to get Theymos to get it back.