About the recent server compromise

[Vod]

Received my first spam email last night.   

[1714953094]

1714953094

[Blazed]

Waiting for all of the sig spammers to make up for lost time!

[Muhammed Zakir]

Thank you, theymos! Keep up the good work!

Anyone going after the hacker?

Would not 2fa protected this from occurring?

2FA will be in the new forum software but now, I think, implementing in current software will be good.

[TheTommyD]

He might not want 2fa because it lowers conversion rate. Less people would use the forum and the forum's only strength is its community. BUT the forum would be still big enough after 2fa. It's a classic in the scene, so ppl will continue to use it. I would use it with 2fa

Sorry, I meant 2fa for server access.

[dogie]

He might not want 2fa because it lowers conversion rate. Less people would use the forum and the forum's only strength is its community. BUT the forum would be still big enough after 2fa. It's a classic in the scene, so ppl will continue to use it. I would use it with 2fa

He doesn't need to make 2fa mandatory, just an option.

Received my first spam email last night.   

Welcome to hotmail, where spam emails are the only emails

[Xialla]

uhh already received spam also + many unsuccessful attempts to mail login:(

anyway, thanks for bring the forum up.

[saddampbuh]

dont think im important enough on here to want to hack but changed pass anyway

[FanEagle]

Thanks for always keeping us protected, I love this forum. 

[Amph]

theymos, thank you for you hard work. Let's hope we will not have to deal this in the future.

until the new forum is set(one can think that the forum will have some instrument against those kind of attack, maybe a better privacy, better ISP, that don't leak your root credentials...), i do think it will happen again, this isn't the first time after all

[LFC_Bitcoin]

Received my first spam email last night.  

Have you not changed the email you linked to this site mate?
I have & I've deleted the other account.
Never use an email that you have banking details, card details etc in.

[Xialla]

Have you not changed the email you linked to this site mate? I have & I've deleted the other account.

wtf you are talking about? mail addresses are already leaked, so even you will change the mail here, you will get spam..

[hilariousandco]

uhh already received spam also + many unsuccessful attempts to mail login:(

anyway, thanks for bring the forum up.

What spam did you get? Has anyone else had attempts to compromise their email?

[BadBear]

Thanks theymos for the hardwork. I changed my password but not my email ID as I'm not sure if I should do it as the pwd used on this forum wasn't used anywhere else fortunately. I've not received any phishing email except this one yesterday:


You are receiving this message because your email address is associated
with an account on bitcointalk.org.

-----BEGIN PGP SIGNATURE-----

iF4EAREIAAYFAlVhiGI..........................

I hope the above message is genuine.

It is.

Signed on 2015-05-24 04:14 by michael_m+pgp@mm.st (Key ID: 0xDAB591E7).
The signature is valid and the certificate's validity is fully trusted.

What is theymos's GPG key? Is it published somewhere official? I received the signed email but I can't find a verified source with the key.

All PGP keys are hosted on public keyservers. They're also hosted on the forum's servers, though you shouldn't rely on that solely. https://bitcointalk.org/theymos.asc, https://bitcointalk.org/BadBear.asc

https://pgp.mit.edu/pks/lookup?search=theymos&op=index

For the record.

Code:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Confirming Badbear is Badbear, and not Goodbear or other variations of bears. 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBAgAGBQJVY0O5AAoJEKAjO3S1eXxPH40H/jvkkJhKUVxKB6a1whLFE08p
jIJi3qw1WkZPFkM9QWwNXNq+8p8bZxiC+0mIskITUiZBwLqgHgyogFf5FjWNnhSy
lhhmLLh6L+LxXtXg+6kITn2nEPiP+wiZRXkRWwzqRd5mh8c3I1hMMfnYa9DarQG3
hC+TjJXwHKvdYXL5FjcGv4HXGX0QMhXUzwodF05SWXJmH6v8uG3vn6QFej4XRVPd
kWWHh61GlzUAZix0EOxd/cvElgJW6Y8sWl/gH5qBnqhnHDTVnS4/cnQVLjgScyGF
QXVoLZG71Mjkgq+PFX8GRqatKIt/vzMvhBYz7DKKDM8NNzbLRRVexlb2MnpeTx8=
=QK2I
-----END PGP SIGNATURE-----

 

[TheTommyD]

uhh already received spam also + many unsuccessful attempts to mail login:(

anyway, thanks for bring the forum up.

What spam did you get? Has anyone else had attempts to compromise their email?

NO I Have Not received any Spam from this. Fortunately, I signed up with a unique cloaked email address so If I got one it would show (Cloaked in my in-box)

[randy8777]

i have changed my password to make sure my account is safe. this shows that you must never use a password in more than 1 place.

[LFC_Bitcoin]

Have you not changed the email you linked to this site mate? I have & I've deleted the other account.

wtf you are talking about? mail addresses are already leaked, so even you will change the mail here, you will get spam..

I closed the email account I 'was' using here.
There wasn't much else on there any way but I'd rather be safe than sorry.
Can they do anything with our IP addresses?

[Leeroy Jenkins]

Interesting compromise. I am amazed this can still happen. Good luck to anyone looking for the attacker(s).

[Xialla]

uhh already received spam also + many unsuccessful attempts to mail login:(

anyway, thanks for bring the forum up.

What spam did you get? Has anyone else had attempts to compromise their email?

something like "buy iphone with btc" or "some viagra with btc" and similar..

I dunno, if it is related, but I had this acc for years and I never received similar mails until yesterday. coming from some non-sense yahoo addresses.

[Xialla]

Can they do anything with our IP addresses?

ahh depends if you had public one (unique, reachable from outside) or some NAT IP which is covering subnets of ISP..

[sgk]

uhh already received spam also + many unsuccessful attempts to mail login:(

anyway, thanks for bring the forum up.

What spam did you get? Has anyone else had attempts to compromise their email?

something like "buy iphone with btc" or "some viagra with btc" and similar..

I dunno, if it is related, but I had this acc for years and I never received similar mails until yesterday. coming from some non-sense yahoo addresses.

It is possible the attacker is selling the stolen email address database to spammers to make quick bucks.