Bitcoin Forum

My account yussuf89 has  stolen from someone
How can i get my account??

My account yussuf89 has  stolen from someone
How can i get my account??

My account yussuf89 has  stolen from someone
How can i get my account??

https://bitcointalk.org/index.php?topic=750507.msg10545717#msg10545717

Sending 0.32BTC repayment of 0.37BTC by February 27 to 12hYBWiPqfwdveGzpbRdGxeqnoMcNvGNSq

Sent! https://blockchain.info/tx/fd77955d3dd8ad2232adc1940ae8dc43b32aacbc918d72c3d3a3d4c38101ca88

Today at 16:53:52 - yussuf89 - password changed

Loan request was made before the password was changed.

My account yussuf89 has  stolen from someone
How can i get my account??

https://bitcointalk.org/index.php?topic=750507.msg10545717#msg10545717

Today at 16:53:52 - yussuf89 - password changed

Loan request was made before the password was changed.

-snip-
very suspicious, could be the hacker post that loan request first before changing the password

Today is February 22. My account yussuf89 was hacked.

-----BEGIN BITCOIN SIGNED MESSAGE-----
Today is February 22. My account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
insert address here
insert signature here
-----END BITCOIN SIGNED MESSAGE-----

Refler için teşekkürler :)
14xEPWuHC3ybPMfv8iTZZ29UCLTUSoJ8HL Water Project'in BTC adresi.
Sitede bu hayır kurumu adına hesap açtım zaten şifre denen olay yok, BTC adresi değiştirme de yok. Bağışlarınızı bu adresle hesaba giriş yaparak captcha girerek yapabilirsiniz :) Chrome'da ctrl+shift+n yaparak hem kendi hesabınıza hem de bu hesaba giriş yapabilirsiniz.

Aslında düşünüyorum 100-200 tane hesap açıp bu hayır kurumuna ref yapsak, fauceti sömürüp ponzi olmasını engellesek. Nasıl olur  ;D

Bana bu kadar ref yeter, referral linkini water projectin btc-flow.com hesabına değiştirdim

Marco or an escrow should be in control of the account now as it was collateral for the loan

The account password was changed :  || Today at 03:53:52 PM - yussuf89 - password changed  (forum time) ||

He requested the loan "Today at 12:39:59 PM" and modified his post at "Today at 02:48:41 PM"  ; marcotheminer sent the bitcoin "2015-02-22 15:58:06"  so the account wasn't hacked or am I wrong?

 Who is Zeki?

For reference : https://archive.today/peXFP

The account password was changed :  || Today at 03:53:52 PM - yussuf89 - password changed  (forum time) ||

He requested the loan "Today at 12:39:59 PM" and modified his post at "Today at 02:48:41 PM"  ; marcotheminer sent the bitcoin "2015-02-22 15:58:06"  so the account wasn't hacked or am I wrong?

 Who is Zeki?

Please sign the message below with 14xEPWuHC3ybPMfv8iTZZ29UCLTUSoJ8HL.

Well Zeki is yussuf89 Alternative account obviously , no ? :o

~ Madness

Please sign the message below with 14xEPWuHC3ybPMfv8iTZZ29UCLTUSoJ8HL.


Format:


You posted it :


   -MZ

I don't think it was used as collateral, there is no mention about it in the thread. Wait for marco...

   -MZ

=snip=

You posted it :


   -MZ

Thanks for the Refler

14xEPWuHC3ybPMfv8iTZZ29UCLTUSoJ8HL Water Project BTC address.

I opened this site on behalf of a charity account no password change event called already no the BTC. Any donations would be appreciated take into account with this address, you can do this by entering a captcha by logging in Chrome by doing ctrl + shift + n and your account you can log in to that account as well.


In fact, I think the 100-200 of them can we make this open accounts to the charity to be a ref then tossed the fau Hall ponzi interceded. How can it be


Referral link, so the ref water projectin btc-flow.com account changed

That address is not in yussuf89's control. It's a donation address for an organization.

We have a thread for account recovery. He didn't post an address there. There is nothing I can do right now. I'm not even convinced that account is stolen.

Account for collateral is stupid idea. This account is worthless now.

Today is February 22. My account yussuf89 was hacked.

-----BEGIN BITCOIN SIGNED MESSAGE-----
Today is February 22. My account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
insert address here
insert signature here
-----END BITCOIN SIGNED MESSAGE-----

I don't think it was used as collateral, there is no mention about it in the thread. Wait for marco...

Edit:


You are right in my view. Why mention about Zeki here?

   -MZ

I'm worried by the mention of collapsed btc-flow.com there. Bing translator render the following text (http://www.bing.com/translator/Default.aspx?to=fr&from=&ref=IE8Activity):

Anyone here is fluent with Turkish?

That address is not in yussuf89's control. It's a donation address for an organization.

We have a thread for account recovery. He didn't post an address there. There is nothing I can do right now. I'm not even convinced that account is stolen.

Account for collateral is stupid idea. This account is worthless now.

Hey its not my btc adress, its water projects address. http://thewaterproject.org/donate-bitcoin

Wait, i will sign a message from yussuf89 account.

So I think the account hasn't been hacked, can someone else check the various times and tell his opinion about?

The loan request says the collateral would be his account. The password was changed after the loan request was made, meaning that marcotheminer likely changed it to secure the account.

I would say that if marcotheminer can show a signed message that he received to confirm ownership of the account then the account is def not hacked, if not then the fact that the account is hacked or not is open to speculation

I'm worried by the mention of collapsed btc-flow.com there. Bing translator render the following text (http://www.bing.com/translator/Default.aspx?to=fr&from=&ref=IE8Activity):

Anyone here is fluent with Turkish?

I'm Turkish,  What do you need?

Refler için teşekkürler :)
14xEPWuHC3ybPMfv8iTZZ29UCLTUSoJ8HL Water Project'in BTC adresi.
Sitede bu hayır kurumu adına hesap açtım zaten şifre denen olay yok, BTC adresi değiştirme de yok. Bağışlarınızı bu adresle hesaba giriş yaparak captcha girerek yapabilirsiniz :) Chrome'da ctrl+shift+n yaparak hem kendi hesabınıza hem de bu hesaba giriş yapabilirsiniz.

Aslında düşünüyorum 100-200 tane hesap açıp bu hayır kurumuna ref yapsak, fauceti sömürüp ponzi olmasını engellesek. Nasıl olur  ;D

Bana bu kadar ref yeter, referral linkini water projectin btc-flow.com hesabına değiştirdim

https://bitcointalk.org/index.php?action=profile;u=151256
Here is the profile, please look at bitcoin address:
12959SVMEMDP91Df3GmNSrHbmWgBxuWxSC
https://i.imgur.com/CioDXVh.png


-----BEGIN BITCOIN SIGNED MESSAGE-----
Today is February 22. My account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
12959SVMEMDP91Df3GmNSrHbmWgBxuWxSC
HEjW5GMkverk273mmSJAJornUBnLYAThGYLsPgSGliz8U1NxroGhsieWhSFYDnlvehPDpoZwL0Bz6pW B2FIQ0Ec=
-----END BITCOIN SIGNED MESSAGE-----

I hope that is the correct format. Thanks.

https://bitcointalk.org/index.php?action=profile;u=151256
Here is the profile, please look at bitcoin address:
12959SVMEMDP91Df3GmNSrHbmWgBxuWxSC
https://i.imgur.com/CioDXVh.png


-----BEGIN BITCOIN SIGNED MESSAGE-----
Today is February 22. My account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
12959SVMEMDP91Df3GmNSrHbmWgBxuWxSC
HEjW5GMkverk273mmSJAJornUBnLYAThGYLsPgSGliz8U1NxroGhsieWhSFYDnlvehPDpoZwL0Bz6pW B2FIQ0Ec=
-----END BITCOIN SIGNED MESSAGE-----

I hope that is the correct format. Thanks.

Today is February 22. My account yussuf89 was hacked.

-----BEGIN BITCOIN SIGNED MESSAGE-----
Today is February 22. My account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
insert address here
insert signature here
-----END BITCOIN SIGNED MESSAGE-----

Can you sign the same message from this address : 1GiesDVsMFrBR7VYFx7FpHhCkvXz7Qp2qk  ?  As Muhammed Zakir told *https://bitcointalk.org/index.php?topic=530420.msg10055584#msg10055584

I think he wanted to translate:


   -MZ

Thanks for the refferals.
This address: 14xEPWuHC3ybPMfv8iTZZ29UCLTUSoJ8HL  is water project's.
I opened an account for charity; there's no password thing on the website (btc-flow), and there's no option to change BTC Address.
You can donate btc with using this url. On chrome browser using ctrl + shift + n you can open both your and charity's accounts.
Actually I'm thinking opening 100-200 accounts for this charity as refferals and exploit it's faucet before it becomes ponzi. How about that ;D

I get enough refferals, I changed my ref link to the water project's refferal.

https://bitcointalk.org/index.php?action=profile;u=151256
Here is the profile, please look at bitcoin address:
12959SVMEMDP91Df3GmNSrHbmWgBxuWxSC
https://i.imgur.com/CioDXVh.png


-----BEGIN BITCOIN SIGNED MESSAGE-----
Today is February 22. My account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
12959SVMEMDP91Df3GmNSrHbmWgBxuWxSC
HEjW5GMkverk273mmSJAJornUBnLYAThGYLsPgSGliz8U1NxroGhsieWhSFYDnlvehPDpoZwL0Bz6pW B2FIQ0Ec=
-----END BITCOIN SIGNED MESSAGE-----

I hope that is the correct format. Thanks.

OK.
-----BEGIN BITCOIN SIGNED MESSAGE-----
I'm Zeki from bitcointalk. my account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
1GiesDVsMFrBR7VYFx7FpHhCkvXz7Qp2qk 
H1VcNEA6enHM8f7P81OPeGqPBwKU6KCJy8OvKFTIF1LON90wu3I1HdA2I+appuga2ZzJIrMonrWyf2qbAz9lLwE=
-----END BITCOIN SIGNED MESSAGE-----

That address is currently in the profile of the account. A copy is here (https://archive.today/ueuwn#selection-501.0-501.34). Now the only question is if a signed message was secured prior to taking control of the account.

OK.
-----BEGIN BITCOIN SIGNED MESSAGE-----
I'm Zeki from bitcointalk. my account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
1GiesDVsMFrBR7VYFx7FpHhCkvXz7Qp2qk 
H1VcNEA6enHM8f7P81OPeGqPBwKU6KCJy8OvKFTIF1LON90wu3I1HdA2I+appuga2ZzJIrMonrWyf2qbAz9lLwE=
-----END BITCOIN SIGNED MESSAGE-----

That address is currently in the profile of the account. A copy is here (https://archive.today/ueuwn#selection-501.0-501.34). Now the only question is if a signed message was secured prior to taking control of the account.

edit: this message did not verify

That address is currently in the profile of the account. A copy is here (https://archive.today/ueuwn#selection-501.0-501.34). Now the only question is if a signed message was secured prior to taking control of the account.

edit: this message did not verify

OK.
-----BEGIN BITCOIN SIGNED MESSAGE-----
I'm Zeki from bitcointalk. my account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
1GiesDVsMFrBR7VYFx7FpHhCkvXz7Qp2qk 
H1VcNEA6enHM8f7P81OPeGqPBwKU6KCJy8OvKFTIF1LON90wu3I1HdA2I+appuga2ZzJIrMonrWyf2qbAz9lLwE=
-----END BITCOIN SIGNED MESSAGE-----

SORRY! I wrote wrong
It must be correct

-----BEGIN BITCOIN SIGNED MESSAGE-----
I'm Zeki from bitcointalk. my account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
12959SVMEMDP91Df3GmNSrHbmWgBxuWxSC
HEjW5GMkverk273mmSJAJornUBnLYAThGYLsPgSGliz8U1NxroGhsieWhSFYDnlvehPDpoZwL0Bz6pW B2FIQ0Ec=
-----END BITCOIN SIGNED MESSAGE-----

Jesus, what a mess. I have the account under my control for the 0.32BTC I loaned the scammer (if it was indeed hacked).

Did you got any signed message?

   -MZ

Nothing as of now from Zeki.

Zeki, please message me with evidence that the account was yours and it was hacked.

Just a thought: there is nothing that could stop a user from taking a loan, then claiming that their account was 'hacked' (the owner would be able to verify an address as they were the original owner).

Nothing as of now from Zeki.

Zeki, please message me with evidence that the account was yours and it was hacked.

Just a thought: there is nothing that could stop a user from taking a loan, then claiming that their account was 'hacked' (the owner would be able to verify an address as they were the original owner).

@OP : Was that you who asked for the loan?

@OP : Was that you who asked for the loan?

   -MZ

I'm not asked for the loan. Someone hacked my account and asked for the loan.

Yes.

   -MZ

@Zeki - did you happen to download something from a link from a chat room in a bitcoin gambling site recently?

It is very strange  || He requested the loan "Today at 12:39:59 PM" and modified his post at "Today at 02:48:41 PM"  ; marcotheminer sent the bitcoin "2015-02-22 15:58:06"  so the account wasn't hacked or am I wrong? ||

The presumed "hacker" didn't change the password.

What the hell  ;D? Why are you replying to yourself? This is insane  :D.

Yes I clicked, and I closed the tab immediately.

It is indeed strange. Another Slaxt. :-\ More Slaxt are appearing.
   -MZ

However, it could be possible the OP has download a "virus" as quickseller has told but the hacker didn't change the password and this is very, very strange ...

It is too soon to tell for sure at this point, however my theory is that it was from TheGambler, aka Moreia, et. al., I am fairly certain that they hacked convicted2008 this way based on my conversation with the 'real' owner of convicted2008

Do you happen to have the link saved in your browsing history? If so can you please post it (be sure to clearly label it as malware)?

What site did you get it from? What was the username of the person who sent the link?

-snip-
Nothing as of now from Zeki.

Zeki, please message me with evidence that the account was yours and it was hacked.

Just a thought: there is nothing that could stop a user from taking a loan, then claiming that their account was 'hacked' (the owner would be able to verify an address as they were the original owner).

Did you do anything to verify that the person you granted the loan was indeed the person who used to control the account?

I can proof the account is mine, with user "onewiseguy" if he comes to the topic,
I was chatting to him via private message. I'm waiting for amazon gift card from this guy.

Hey onewiseguy, please take a screenshot from your last message. You said 400$ in your last message. I remember that. Please help me.

Do you happen to have the link saved in your browsing history? If so can you please post it (be sure to clearly label it as malware)?

What site did you get it from? What was the username of the person who sent the link?

I can proof the account is mine, with user "onewiseguy" if he comes to the topic,
I was chatting to him via private message. I'm waiting for amazon gift card from this guy.

Hey onewiseguy, please take a screenshot from your last message. You said 400$ in your last message. I remember that. Please help me.

Do you happen to have the link saved in your browsing history? If so can you please post it (be sure to clearly label it as malware)?

What site did you get it from? What was the username of the person who sent the link?

I don't see how clicking on a link could make your account getting hacked to be honest . I don't even think that it's possible otherwise we would've all hacked right now .

~ Madness

-----BEGIN BITCOIN SIGNED MESSAGE-----
I'm Zeki from bitcointalk. my account yussuf89 was hacked.
-----BEGIN SIGNATURE-----
1GiesDVsMFrBR7VYFx7FpHhCkvXz7Qp2qk  
H1VcNEA6enHM8f7P81OPeGqPBwKU6KCJy8OvKFTIF1LON90wu3I1HdA2I+appuga2ZzJIrMonrWyf2qbAz9lLwE=
-----END BITCOIN SIGNED MESSAGE-----

1GiesDVsMFrBR7VYFx7FpHhCkvXz7Qp2qk   -> https://bitcointalk.org/index.php?topic=530420.msg5998737#msg5998737

I think that the proof is enough.

It's primedice. I dont remember what was the username. I mistakenly clicked on it
I cant send link of the site because I cleared the browser history.

If the signature verifies, it proves that you once owned the account. It does not prove that the account was hacked.

It isn't possible by merely clicking on a link (AFAIK).

If the signature verifies, it proves that you once owned the account. It does not prove that the account was hacked.

"This user changed his/her password recently."

-snip-

Unfortunately I did not. I placed my trust in the ability for others' to create strong passwords and not click on phishing links. Nonetheless, I won't be doing that again.

I don't see how clicking on a link could make your account getting hacked to be honest . I don't even think that it's possible otherwise we would've all hacked right now .

~ Madness

:(

Whoever got the money is having a gambling blast with it on luckybit[1]

=snip=

[1] https://blockchain.info/de/address/1HQATDRExXexyCc2hHJ8F272evTgm21JZ4

So, I proved that yussuf89 is my account.
How can I proof that the account is hacked? Please help.

Marcotheminer owns the account now since you putted it as collateral when you took the Loan .
I'am pretty sure he will more then happy to give it to you back once you repay him on the 27th Feb or whatever the date you guys made a agreement about .

~ Madness

Marcotheminer owns the account now since you putted it as collateral when you took the Loan .
I'am pretty sure he will more then happy to give it to you back once you repay him on the 27th Feb or whatever the date you guys made a agreement about .

~ Madness

I have changed the account's address to collect the bitmixer payment. I was unsure if the address was recently changed so it would be better for me to collect then return it when/if needed.

That would be a good idea! Could you put a P. MSG saying this account is used as collateral?

I suggest all to change your negative feedback to neutral feedback till Marco gets the payment.

   -MZ

My account yussuf89 has  stolen from someone
How can i get my account??

I am sorry but i need to say this, you have more than one account here? i think all of your accounts need to be banned, hacked or not.
there's no reason anyone should have more than one account, having more accounts for signature campaigns is also cheating IMO.
think about it

cheers

18. Having multiple accounts and account sales are allowed, but account sales are discouraged.

Having alternate accounts are specifically allowed as per forum rules.

There is also no rule against having more then one account in the majority of the signature campaigns

Zeki (yussuf89) needs to repay the loan!
It was his fault, that his computer was not secure.

No. That loan has a collateral and lender already got it.

I think that the account was hacked, though this can never be known for certain.

The IP that posted the loan request from yussuf89's account also posted this:
https://bitcointalk.org/index.php?topic=960603.0
Someone with the same IP was trying to sell another account here, presumably hacked:
https://bitcointalk.org/index.php?topic=925024.0

yussuf89's password wasn't changed/reset recently except for when marcotheminer did it, so the attacker must have somehow gotten his password. Keylogger or phishing, maybe.

Zeki's IP matches yussuf89.

Since ownership of the account is contested, I'm thinking that I should not restore the account and let people give trust ratings depending on what happens. For example, if marcotheminer needs to eat the entire cost of this when he's mostly not at fault, some people might want to give yussuf89 negative feedback.

No. That loan has a collateral and lender already got it.

yussuf89 should have secured the account while marco should have secured the deal (requesting a signature etc.) an even split (of the loaned amount) might be fair.

The terms of the loan were that a certain amount was owed to marcotheminer after a certain amount of time, and if that amount was not repaid then the collateral (the account) would be the property of marcotheminer. Therefore barring any kind of settlement, marcotheminer would keep the account to do as he wishes with it.

This is however not the first time (https://bitcointalk.org/index.php?topic=750507.msg9283585#msg9283585) that something like this has happened to marcotheminer. If he wishes to be reputable in taking accounts as collateral and selling them (via ValueAccounts) then he should secure a signed message prior to taking possession of the account, and refusing to take possession without one.

If taking what turns out to be a potentially hacked account as collateral is something that is considered to be a scam.....well I guess that is up to the community.

Let's say I buy a fancy watch from a guy on the street, hot but I didn't know it. The long arm of the law somehow leads to me and the watch. It would be taken from me and I wouldn't get my money back. I have no recourse to go after the guy who sold it to me. He was a complete stranger.

In lieu of editing the above post, I'll expand...

We can all agree that if the account was hacked, the hacker had/has no intention of repaying the loan. Since the account was collateral, marcotheminer unknowingly purchased stolen goods.

Let's say I buy a fancy watch from a guy on the street, hot but I didn't know it. The long arm of the law somehow leads to me and the watch. It would be taken from me and I wouldn't get my money back. I have no recourse to go after the guy who sold it to me. He was a complete stranger.

That also doesn't strike me as entirely fair. If nothing can be gotten from the person who actually did the stealing, then the person who lost the stolen item and the person who bought it should somehow split the cost IMO.

That also doesn't strike me as entirely fair. If nothing can be gotten from the person who actually did the stealing, then the person who lost the stolen item and the person who bought it should somehow split the cost IMO.

One thing that is very interesting is that the OP was trying to sell a senior (https://bitcointalk.org/index.php?topic=935241.0;all) account for .25 BTC. If marcotheminer is interested in keeping the account then he could potentially send the OP some amount of additional funds to "buy" the account so that it is "no longer hacked".

I am not sure what a fair price would be though, the market is not good and both parties are at least partially at fault (assuming it is in fact hacked), I would say that the .32 BTC that he essentially bought it for is a lot less then what it would sell for.

Another option would be (if both parties agree) to auction off the account and each party would receive a portion of the proceeds depending on the sales price. This would result in likely both parties taking some kind of loss and letting the free market determine just how much each party gets. It is also likely very similar to what marcotheminer would have done if the loan was not repaid

In regards to your last suggestion, you have to remember that most people have some sort of attachment to their own account and don't just view them as commodities. I doubt yussuf would agree to this, although he could in theory bid on his own account and pay half of the bidding price.

My account yussuf89 has  stolen from someone
How can i get my account??

Better you prevent not get hacked rather than recover it.

How to prevent it ?
Don't click any suspicious link on any website,
Don't trust anyone

I think this is a risk of loaning bussiness.
Feel sorry for your loss Marco
The Scammer method is getting scary and modified...so everyone should be carefull

Since the account is fully under my control, please remove the negative feedback you may have left whilst the situation is dealt with.

I think I proved that the actual owner of the account is me.
Theymos thinks that the account was hacked. But nobody can prove it.
I want to get my account. Please help.

Marcotheminer says he have the full control of it it now , nah ?
then all you need to do is repaying the loan to get the account back (unless it wasen't you who took the loan and it was the hacker then it's more complicated)

~ madness

I think he made it pretty clear someone hacked his account and took out the loan. Is that the whole point of this thread?

So at the end the solutions are two , zeki should repay the loan or marcotheminer "could" give back the account to zeki but he will lose the loan (0.32 btc if I'm not wrong). This is a very bad situation.

I think he made it pretty clear someone hacked his account and took out the loan. Is that the whole point of this thread?

So at the end the solutions are two , zeki should repay the loan or marcotheminer "could" give back the account to zeki but he will lose the loan (0.32 btc if I'm not wrong). This is a very bad situation.

Atleast half of the amount should be paid by marcotheminer.

   -MZ

Both are screwed assuming this is a hacked account. Zeki will most likely have to pay to get it back. Marco could have avoided this by verifying ownership, one reason I doubt the neg feedback will be removed... Now he is out of BTC because that account is no good and won't sell because of the neg rep.

Yeah but what if it turns out to not be a hacked account? Nobody knows for sure. Looks like both are gonna lose unless someone finds something solid to suggest it was hacked or not hacked.

There are 2 possible situations here (currently I am thinking this is the 1. situation):

1. Zeki is the original account owner. Zeki took out a loan (using a proxy) and shortly after claimed the account was hacked in the aim of getting the account back. By getting the account back Zeki would profit from the loan which he would not repay, claiming the 'hacker' took out the loan. Zeki will (might?) realise that his scheme failed and will have to repay the loan to get the account back.

2. Zeki is the original account owner. The account has indeed hacked and a loan was taken out. The loan won't be paid back. Zeki will have to pay the loan back on the hacker's behalf to get the account back.

In both situations I am left holding the account until the loan is paid back or collateral is sold.

Since the account is fully under my control, please remove the negative feedback you may have left whilst the situation is dealt with.

There are 2 possible situations here (currently I am thinking this is the 1. situation):
-snip-
In both situations I am left holding the account until the loan is paid back or collateral is sold.

I haven't got the time currently to go through the posts here as I am on mobile but I will as soon as I am on my computer.

I do know for a fact that yussuf89's (Zeki) other account is https://bitcointalk.org/index.php?action=profile;u=239151. Not sure if that can be of any help.

I think that marcotheminer should return the account now since it was probably hacked, but everyone should give yussuf89 negative feedback for being unable to stand behind his account's actions unless he pays 50-75% of the loan principle. (This is just my opinion -- I'm not going to try to enforce it.)

Hacker/scammer took out the loan to this address: https://blockchain.info/address/1HQATDRExXexyCc2hHJ8F272evTgm21JZ4

A week ago that address made this transaction where the guy identifies his skype address: https://blockchain.info/tx/c998155f548d0a4ce3c1b311c76c89b4ce13a4489dcf6b5550cea74f73cd23a9

Skype: Nizamhekker

He uses it a lot, just google it and a bunch of hackforums results come up.

Here is one of his btctalk accounts: https://bitcointalk.org/index.php?topic=742872.msg8397265#msg8397265
https://bitcointalk.org/index.php?action=profile;u=164938

Here is another one: https://bitcointalk.org/index.php?topic=857347.msg10001956#msg10001956
https://bitcointalk.org/index.php?action=profile;u=380653

Take the BTC address (1DwQxpZGC5e7ZkR1xbagAmJcaHmU88v5aj) from nizamcc's post and you also find this account: https://bitcointalk.org/index.php?topic=764034.msg8610073#msg8610073
https://bitcointalk.org/index.php?action=profile;u=372665

Both nizamcc and YOLOMAN have fake positive trust from the same sock account: https://bitcointalk.org/index.php?action=trust;u=348988

Confident they are the same person. Anyway, let me know if you can find anymore of his accounts/info about him before I post a scam accusation.  

I also find it interesting as to just how much whoever got the loan was gambling, there was ~19 pages worth of transactions to/from luckyb.it addresses when looking at blockchain.info. However only ~1.5 pages of those were from after the transaction of the loan. While scrolling through all the transactions, I noticed that he made a few very large bets, one for .25BTC (https://blockchain.info/tx/c49c8ffcaccd1765cb661fcb6c65658ae00acbc0113de4a32d8a59284286dbda), one for ~.31BTC (https://blockchain.info/tx/33e7d235b78dfdd0235f59d4eff63ed401f46fba20d41a4150a116bfd8c1a4e1), among others. Additionally it looks like his bankroll started with 11 BTC (https://blockchain.info/tx/86e57b559405f75f52e7a7ca0647a6871a6137e1c911d2a37a8df924ea51c450). Actually no, he spent that here (https://blockchain.info/tx/73a1a6f191abcc271e6e5c841b5e65bfa5beaf5b2e191621d2e55900bff493f2), which was later spent here (https://blockchain.info/tx/8bd1d0c0d785acefe7e727c13582071c27d93ea9320629752faf12afb1ea2325) which was likely depositing it into either a casino or some other service/site that holds funds on behalf of others. It looks like his initial bankroll was 1.8 BTC (here (https://blockchain.info/tx/ffbf913a6cb46f29610442e3cfe52926869fcc33f6398e6875fcd4bf640805df), here (https://blockchain.info/tx/32d31779d8576ed69cb8a115837c0df5a5e32ab13810ff1272eef1f0dad6c440), and here (https://blockchain.info/tx/8b830a8858b4aee0833a3d0bcb958df7bbb72011352e2e5aba6f5e145d133ed8)), he then gets a series of <.01 BTC transactions into that address, until he starts playing luckyb.it. He later send ~1.1 BTC to the address (here (https://blockchain.info/tx/61c542afe2630383bffbc18777705692c875ea8c859e430ff631bb45bb72491f) and here (https://blockchain.info/tx/0d0676974edc7d1aa810043efdac2636b347002f638155e1b7a5edcbc8bbb02b)). He sent another ~3 BTC (here (https://blockchain.info/tx/2a30284e717e5d881ff571dc85752036b2c88d82c47304b300747ff747348e95), and here (https://blockchain.info/tx/64289d9a9194e8083e547ac285aa576eb1d4210b07e4af706b1c29744da10d21)).

I lost track of how much he sent to other addresses then luckyb.it address, however one of note is this (https://blockchain.info/tx/8a08a0e69690e9867edb02d9adf0d7be7851dfcd5926ceb9e003de47068b8f65)which sent ~3.1 BTC to some other address. I would say that he likely sent around between 1.5 and 2.5 BTC to other addresses in addition to the above transaction. This is strange because it implies that he was roughly 'even' with his gambling with that specific address.

It looks like this transaction (https://blockchain.info/tx/598e0d42e2400f1afda3fc1ef370062834d4f41343a2fd11d68ada405407dca7) sent .005 to an address tagged as 'lucky bit promo', I am not sure what it is, however a forum search comes up with nothing, and I am having trouble accessing my VPN via foreign country gateways so I can't access luckyb.it appearing to be outside of the US. It is probably a dead end, but it could lead somewhere. I know luckyb.it was running a contest where people could guess the time of the millionth bet if they sent funds to a luckyb.it address, however it is not that one.

The 11 BTC amount is interesting because it is very close to what moreia stole in his ponzi with williamj (https://bitcointalk.org/index.php?topic=930008.0;all). There are a small number of people that have that much bitcoin. This was my gut feeling from the start and was somewhat confirmed by him saying (https://bitcointalk.org/index.php?topic=964525.msg10547888#msg10547888) that he clicked on a link from the PD chat that likely contained some kind of malware. Moreia has a history of spreading malware, and either him or someone else did a very similar thing on Coinichiwa to Neonecrox13 (convicted2008).

I do agree that the person who got the loan is the same person as nizamcc and IceTurk, although the later doesn't really matter as he has negative trust already. The newbie account is probably also the same but that is less concrete. Assuming the newbie is an alt of them then YOLOMAN is also an alt of them, which is interesting because he gave marcotheminer positive trust for escrowing an account trade (he does not 'publicly' sell accounts, does not have an escrow thread, and I have long suspected that a good amount of his lending thread is him lending to his alts). It is even more interesting because YOLOMAN did not give any feedback to the person who actually sold the account. Even more interesting is that YOLOMAN had a debt to marcotheminer and "defaulted" here (https://bitcointalk.org/index.php?topic=750507.msg8954108#msg8954108), his first post (https://bitcointalk.org/index.php?topic=750507.0) of his lending thread however lists the loan as being "repaid" with no mention of being late, the reuse of his address makes it very difficult to know for sure if the loan was actually repaid or not. Looking from the beginning of November back to the beginning of septemer, I didn't see any transactions sending .007 (the repayment amount) to 12hYBWiPqfwdveGzpbRdGxeqnoMcNvGNSq (marcotheminer's repayment address for all his loans). although there was one for .005 during that time.

Edit: my response

Could you link me to the place of this quote? Nizamcc is under my control and YOLOMAN used to be (both were acquired from a defaulted loan).

https://bitcointalk.org/index.php?topic=764034.msg8610073#msg8610073

The MadZ quote isn't there?

it was received via PM

This might belong in a whole new thread but nizamcc is fully under my control since it defaulted from a loan back in 2014.

so you came into possession of the account in August 2014?

Nizamcc is also used on reddit[1] and localbitcoin[2]. On localbtc a single trade in Amsterdam, NL[3] was not finsihed with user Greeney[4]. Not sure if you also saw this transaction[5] it has a comment attached "Withdraw to nizamcc from Cryptcominer.com"


[1] http://www.reddit.com/user/Nizamcc
[2] user profile: https://localbitcoins.com/accounts/profile/nizamcc/
[3] https://localbitcoins.com/ad/136655/purchase-bitcoin-ukash-netherlands
[4] user profile: https://localbitcoins.com/accounts/profile/Geeney/
[5] https://blockchain.info/tx/d146bae2c66c88e794842c625f86a39a4b41e1046897d8c8e26368da5f30a9c3

I think that marcotheminer should return the account now since it was probably hacked, but everyone should give yussuf89 negative feedback for being unable to stand behind his account's actions unless he pays 50-75% of the loan principle. (This is just my opinion -- I'm not going to try to enforce it.)

-----BEGIN BITCOIN SIGNED MESSAGE-----
marcotheminer now fully controls the account and unless the loan is repaid by the agreed date, it will be sold and 0.37btc will be kept by marcotheminer, the rest given to Zeki. Please remove negative trust.
-----BEGIN SIGNATURE-----
H013LOmmaiOnwpTVi8cRr1VcFpf02hZpxvci4DaBykBqOEElS2bf/RgxiS9aE6mtH3KTQ04g4fhFdIVZj4CGQ/E=
-----END BITCOIN SIGNED MESSAGE-----

-----BEGIN BITCOIN SIGNED MESSAGE-----
marcotheminer now fully controls the account and unless the loan is repaid by the agreed date, it will be sold and 0.37btc will be kept by marcotheminer, the rest given to Zeki. Please remove negative trust.
-----BEGIN SIGNATURE-----
1GiesDVsMFrBR7VYFx7FpHhCkvXz7Qp2qk
H013LOmmaiOnwpTVi8cRr1VcFpf02hZpxvci4DaBykBqOEElS2bf/RgxiS9aE6mtH3KTQ04g4fhFdIVZj4CGQ/E=
-----END BITCOIN SIGNED MESSAGE-----

are you sure that is fair to all parties? This results in Marco actually profiting from all this while you would take the entire loss. Additionally accounts controlled Marco were also potentially involved with whoever received funds from your accounts loan.

Just for clarification "1GiesDVsMFrBR7VYFx7FpHhCkvXz7Qp2qk" is the address; it isn't part of the signature.

FYI address needs to be there inorder for the verification become successful or it will become partial success but yes, success is all that we need.

   -MZ

I think it is. Could you rephrase that last sentence?

Edit: also how is it fair that you take no losses when you are both at fault?

I think the account could be sold at a minimum of ~0.6+BTC. They should split evenly, if they got more, 0.32BTC to marcotheminer and remaining 0.32+BTC to Zeki.

   -MZ

IMHO marcotheminer should get 0.32BTC as that is what he loaned and the remaining to Zeki.

FYI at the end after you decide, PM me. A person has messaged me asking if I have any accounts for sale, he/she is ready to give a good amount and he wants a HM account.

   -MZ

you had admitted to be in control of accounts whose owners were the receipants of the loan. Although it is unclear if Marco purchased/took the accounts as collateral before the evidence connecting the accounts to the hack was posted or not. At least this is the case as of now.

Edit: also how is it fair that you take no losses when you are both at fault?

[5] was when the account was already in my control hence why the address withdrawn to is: 16WztVJTanbz2PMBLKckL3a3KLrotBaLok

indeed i agree in some parts marco should only get 0.32 which is the amount he loaned, and also by selling the accounts could mean zeki is in loss, but the fact that the account could get to a high price then i think its fair for zeki too

why shouldn't marcotheminer take any loss from this? He failed to secure a signed message and as a result took possession of a hacked account. There is no reason why the OP should have to bear the entire loss

So you had the account on 03.09.2014[1] after declining a loan on 31.08.2014[2]. Also Whoever had the account is certainly speaking dutch[3]

[1] https://bitcointalk.org/index.php?topic=767639.msg8655343#msg8655343
[2] https://bitcointalk.org/index.php?topic=750507.msg8608350#msg8608350
[3] https://bitcointalk.org/index.php?topic=615784.msg7485249#msg7485249

You are right, both had faults and that's why I said, like theymos told, to split this amount equally. I think when selling, marcotheminer will get atleast 0.32BTC, for that ta happen, it should be traded at 0.64+BTC.

   -MZ

marcotheminer getting .32 would be him not taking any losses. The current "agreement" means that he actually profits from this.

IMO Marco should take at least a 25% loss but a 50% loss would be the most fair. He has been in this business a long time and should know better then to accept an account without securing some kind of signed message, plus this is not the first time this has happened.

Rephrasing : marcotheminer and Zeki split the amount after the trade equally. That seems fair.

marcotheminer or I will be contacting the person who send me PM asking for account soon.

   -MZ

splitting the amount of the sales price means that marcotheminer will profit from the OPs account getting hacked. The account should be sold with between 50 to 75% of the principle of the loan sent to marcotheminer and the balance to the OP.

I've removed the negative feedback and I hope all the situation will be resolved in a "fair way". Good luck guys.

No need to be jealous of me profiting anymore quickseller ;)! Zeki and I are still discussing and have decided that I'll take the loan principal out of the account's sale price. The rest, as was said before, will go to Zeki.

it is not jealousy it is advocating for a compromize that is fair to all parties involved.

What is to be deemed fair is to be decided between the affected parties. So let us do just that. Anyways, a final agreement has been met.

-snip-
True but as he said, he(we) is(are) advocating not declaring. :)

   -MZ

Yes, but Zeki is an adult and its not our place to patronize them. We have given our judgement and our opinion and they decided not to follow it.

maybe the community should have more time to debate/discuss the fairness of this proposed trade.

Yes the op is an adult and can make his own decisions however I also think he is being taken advantage of and being strong armed into accepting an agreement on less then favorable terms

I won't remove my negative feedback until I see old yussuf89's style messages in Turkish board. If account is really hacked, yussuf89 should get back his account without paying anything. Who controls the account other than Yusuf deserve that negative feedback. I hope nobody buy it.

I won't remove my negative feedback until I see old yussuf89's style messages in Turkish board. If account is really hacked, yussuf89 should get back his account without paying anything. Who controls the account other than Yusuf deserve that negative feedback. I hope nobody buy it.

Before the hacker attack, my hero account worth about 1 BTC. And now, I will receive about 0.30 BTC.
This is not 100% fair, but I think this is the most fair method. I think this method is 100% fair for marco, but its 33%~ fair for me. Marco wants his money, so he send 0.32BTC, and he will receive 0.32BTC from this method.
Second method is if marco give my account and receive nothing from hacker or from me. This is OK for me but he will lose money. Second method is 100% fair for me but, its 0% fair for marco. Hackers goal was finding my account.
I will not send money to marco for hackers loan.

There are 2 possible situations here (currently I am thinking this is the 1. situation):

1. Zeki is the original account owner. Zeki took out a loan (using a proxy) and shortly after claimed the account was hacked in the aim of getting the account back. By getting the account back Zeki would profit from the loan which he would not repay, claiming the 'hacker' took out the loan. Zeki will (might?) realise that his scheme failed and will have to repay the loan to get the account back.

2. Zeki is the original account owner. The account has indeed hacked and a loan was taken out. The loan won't be paid back. Zeki will have to pay the loan back on the hacker's behalf to get the account back.

In both situations I am left holding the account until the loan is paid back or collateral is sold.

There's another possible scenario, you are the one who stole the account or you're in league with him/them. The saying "Fool me once, shame on you. Fool me twice, shame on me" comes to mind.

I don't see it as likely, but the more this pattern continues with you one has to wonder.

I've removed my negative feedback for yussuf since they've come to an agreement so they can resolve it, and replaced it with appropriate feedback for marcotheminer.

I've removed my negative feedback for yussuf since they've come to an agreement so they can resolve it, and replaced it with appropriate feedback for marcotheminer.

How do I 'traffic in stolen accounts'?

buy and sell accounts that you know or have reason to believe is hacked/stolen. This is not the first time something like this has happened, if you were really not in on it last time then you would have learned that it is necessary to secure a signed message prior to taking their account otherwise their account could be stolen/hacked. From the looks of it the last account was eventually sold but even without this being the case you would still receive benefits from the account (signature payments, giveaways ect); just because the owner essentially went away doesn't mean that the account was any less stolen, it just means the account was not worth pursuing to the prior owner.

im not sure the former is the right thing to do. Yes they do appear to have reached an agreement and yes it is a free market however the agreement is clearly not something that treats all parties appropriatly based on how much they are at fault. I do think all parties would likely fare best if the account is sold and I don't think Marco should have a total loss......how much of a loss there should be is something I am not sure.

As far as the later, this is at least the third time something like this has happened (he both purchased pierre11 when he knew the ownership of the account was under dispute and unresolved, and he sold the account back to Candystripes). So I guess the later can be left up to the community.

It could be that Yussuf89 is not hacked however the abcense of getting a signed message implies that you are going to accept hacked accounts as collateral. Zeki has proven that he at one point ownes the account and theymos/BadBear have concluded that the account was in fact hacked, likely because the IP address of the person who posted their loan request has similar IP address range as other accounts that were hacked in the past.

Once again, Zeki and I have agreed on what is fair (read his post) and this is what will happen.

I actually purchase Pierre11 when it was under the full control fo CandyStripes (the account had defaulted so it was CandyStripe's account).

The absence of me getting a signed message means I put too much trust in others' ability to safeguard their account.

something like this happened before. You have created threads saying that it is easy to hack accounts without email verification/2fa and there have been a large number of account hacks in recent weeks/months

-----BEGIN BITCOIN SIGNED MESSAGE-----
marcotheminer now fully controls the account and unless the loan is repaid by the agreed date, it will be sold and 0.37btc will be kept by marcotheminer, the rest given to Zeki. Please remove negative trust.
-----BEGIN SIGNATURE-----
1GiesDVsMFrBR7VYFx7FpHhCkvXz7Qp2qk
H013LOmmaiOnwpTVi8cRr1VcFpf02hZpxvci4DaBykBqOEElS2bf/RgxiS9aE6mtH3KTQ04g4fhFdIVZj4CGQ/E=
-----END BITCOIN SIGNED MESSAGE-----

https://bitcointalk.org/index.php?topic=964525.msg10559017#msg10559017

I know its probably just a gargantuan idea, but I think that the forum needs a small team to investigate shit like this. Before day before yesterday I had never been in the "Meta" section of the forum. I didn't know what it was so I never went in there. Now all I see is hack account, stole account, help account hacked. I know that a small team to research this stuff is far fetched but anything to detour this sort of behavior would be splendious. I'd give anything to have someone look at my account and see that it was hacked. Hell its been 2 weeks now and not even a sniff on my account. Just a idea though. I know it won't go nowhere, but oh well.

Would be interesting but probably won't happen. What would be better is the implement email or 2FA..

What was your account that got hacked?

This is a very interesting test case, but I am not sure what conclusions I can draw from it.

- Is accepting accounts as collateral not encouraged, because there always is a doubt that they could be hacked?

- What if I purchase an account and decide to sell it after a week because I need the money? I would obviously not be able to produce a signed message from an address used ages ago.

- In this case, what if Marcotheminer had already sold the account prior to it being disputed? Would the buyer have been forced to take a loss?

- If I am using an escrow to buy an account and then there is a claim of the account being hacked, what happens?

There was a similar case here (https://bitcointalk.org/index.php?topic=947801.msg10620884#msg10620884).
Luckily, the original owner consented to selling of the account and the lenders didn't have to take a hit.
He let go of ~$250..... not many people would.  :)

Has the *real* owner of this account received payment that is due to them from the sale of the account?

Has the *real* owner of this account received payment that is due to them from the sale of the account?

Im the real owner of this account. I have received the payment from sale.
New posts* from yussuf89 are not written by me.

* https://bitcointalk.org/index.php?topic=962616.msg10536105#msg10536105
This is my last post from yussuf89

1- Yanlış anlamadıysam dediğiniz https://www.ipominer.com bunun gibi bir şey olabilir mi?
2- Olumsuz etkilemeyebilir, ama olumlu etkilemez. bazılarının huyu öyle, bir scam veya scame yönlendirme sezsin hemen negatif trust veriyor.

So, actually yussuf89 (uid: 151256) (https://bitcointalk.org/index.php?action=profile;u=151256) is a bought, formerly hacked, account. Given is actual activity here (https://bitcointalk.org/index.php?topic=1052006.0), I'll leave him a neutral comment into his trust feedback page to remind others that the person actually controlling the account is not the same who received trust feedbacks in the past months.

I think yes, who bought the account has created the dice site and now he is managing it. Maybe it is also better to write something in that thread (only to be intended as warning). An user from the defaultTrust list (depth 2) should also give a neutral trust, because your trust is in the untrusted feedback section.

Im the real owner of this account. I have received the payment from sale.
New posts* from yussuf89 are not written by me.

* https://bitcointalk.org/index.php?topic=962616.msg10536105#msg10536105
This is my last post from yussuf89

Hey.

I want to do the right thing and give this account back to it's owner. I bought this account few weeks ago for 0.7 BTC without knowing about previous owner or any of this. I found this thread few days ago, when I bought this acount from marcotheminer, I didn't know about this thread or that account which I will buy is compromised.

I already contacted previous owner and waiting from him reply.

I am not asking any BTC by returning this account, will take all loss on me ( sadly 0.7 BTC ).

Cheers.

Marcoheminer sell stolen account?

Marcoheminer sell stolen account?

No it was not stolen.

Hey.

I want to do the right thing and give this account back to it's owner. I bought this account few weeks ago for 0.7 BTC without knowing about previous owner or any of this. I found this thread few days ago, when I bought this acount from marcotheminer, I didn't know about this thread or that account which I will buy is compromised.

I already contacted previous owner and waiting from him reply.

I am not asking any BTC by returning this account, will take all loss on me ( sadly 0.7 BTC ).

Cheers.

Yes he did. If you check marcotheminer's trade page https://bitcointalk.org/index.php?action=trust;u=147773
you'll see a negative trust from Badbear.
"BadBear 12: -0 / +5(5)   2015-02-24   0.00000000   Reference   Traffics in stolen accounts "
And click the reference link, where'll it lead you?

@marco please don't lie here. Everything is obvious.


Update: 20.05.2015 - 19:10 (Turkey's hour).

According to @Zeki a.k.a yussuf89 confirmed that he take his account back from the buyer here: https://bitcointalk.org/index.php?topic=1066619
But that doesn't change marcotheminer's situation. He sold a stollen acount to someone else and the buyer gave it back.