Pool Hacked, Or Dishonest Pool, or Rig Rental ? - Exchange(s) Log-in Attempts

[DoctorG]

Hey All,

BE AWARE AS ALWAYS

I am getting a few email notifications telling me that an attempt has been made to log in to :

C-CEX, and BTC-E (failed attempts)

I believe this to be a pool hack, username they are trying to log in with is the username I used for mining pools and mining pools only.
I have used it, about 4 years ago, when I first started mining, so its an old username.

Example Notification I have by email:

BTC-E - Unsucessful login
Login (My Username)
IP (I have hidden this, as it would tie my BTCTalk username to the pool login)
Date and Time 24.03.17 13:30

This came about 2 weeks after a number of attempts on C-CEX account.

I am 90% sure this is from Pool Data from some time ago, maybe up to 4 years ago.

The only other thing I can think its come from is online rig rental, which requires the pool config to mine.

All the best,

Doctor G

If its helped you stick a few sats in here : 12NFXPzdznYdBpQqG8FoVFLS7dC8LCLEiR

*Edit* - My concern is that I only used popular pools, I dont want to name to spread FUD, You guys should know how to manage your online security by now - Dont use your pool username for exchanges! or anything else.

[Herbert2020]

i have no idea what the word "pool" means in the context you keep using it here. but this is not a new thing and it is not even a "hack" that you keep saying.

there is at least a dozen topics about this on bitcointalk specially on services discussion board.

what happens is that some idiot(s) is(are) trying different combination of accounts to see if it can be entered just like that. and loging in is easy. it is like me trying to log into your bitcointalk account. i can go to log in page enter "DoctorG" as username and start trying common passwords "123", "password", "DoctorGPass",... and if bitcointalk was like those service it would have sent you an email informing you someone tried to log in and failed! that is all that's happening.

just remember to have a strong password and enable 2FA if they have it.