The link that was spammed by this account was spammed by others in the Altcoin ANN section. The thread which I saw was yesterday at about 2-3 PM here:
https://bitcointalk.org/index.php?topic=1082561.msg11550385#msg11550385 (since deleted).
Here is a backup of the thread:
![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FDAL6Rpv.png&t=665&c=H5QWidxIoVyo9w)
Link was clicked and visited showing a site which downloads a miner exe. Upon double clicking it, nothing appeared to have happened. A few hours later, our accounts started getting logged into such as here, twitter and other sites. Security emails were received, and we tracked it to this IP: 37.123.112.27. After this, posts were made throughout every section on the forum with a referral link + a locked thread. We promptly went through and edited all posts to request them to be deleted.
Not entirely sure how the passwords were leaked but it seems the trojan gained access to stored passwords in Google Chrome, as all passwords in use were 30+ chars long and not guessable or weak by any means.
Upon closer inspection of the referral links he is posting the domain of the referral link matches his handle
The link that was spammed contained an ID on the end of the URL specifically "?ref=271292" for a hashminer.net site, which does not in any way match our handle.
![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2FWEMOjep.png&t=665&c=xrCpJkqz64gDag)
Here is a backup of the thread which was posted by us into the Altcoin ANN section yesterday showing a totally different ref number, for cloudminer.biz domain:
![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.imgur.com%2F08Yuj5n.png&t=665&c=Dh9w-stRTDVpiw)
Please refrain from unnecessary accusations.
I would like to clarify that we do not own and are not associated with the site that was linked. You can check the history of our account, we are running a professional exchange. It would be greatly appreciated that anyone who has placed negative trust to edit their trust to restore our account to good standing.
Hopefully this helps clear up the situation.
#EmpoEX Team