Bitcointalk hacked and data for sale on dark web?

[Shinseiten]

Hi, I saw this article but found nothing with the search. It's fake or should we worry?

https://www.cryptocoinsnews.com/hacked-bitcointalk-org-user-data-goes-up-for-sale-on-dark-web/

I'm lucky because I wasn't here on 2015, but I think I should say something at least, just to be sure.

[ObscureBean]

Yeah it's real but you didn't have any data on the server at the time of the hack so there is nothing for you to worry about. I think it's unlikely they'll actually be able to do anything with that data anyway, people who created their accounts before the hack should just change their passwords and consider enabling 2FA on their email accounts.

[JesusHadAegis]

Well this alarming.

"You may have heard of the phrase ”It’s raining cats and dogs” but in the world of cyber security, it’s raining data! Yes, a couple of hours ago HackRead reported that a vendor going by the handle of “DoubleFlag” is selling 68 million emails and hashed passwords of Dropbox users on a dark web marketplace. Now, the same vendor is offering the database of BitcoinTalk.org, a known Bitcoin forum."

[NorrisK]

Well this alarming.

"You may have heard of the phrase ”It’s raining cats and dogs” but in the world of cyber security, it’s raining data! Yes, a couple of hours ago HackRead reported that a vendor going by the handle of “DoubleFlag” is selling 68 million emails and hashed passwords of Dropbox users on a dark web marketplace. Now, the same vendor is offering the database of BitcoinTalk.org, a known Bitcoin forum."

We are only going to see more and more of these kind of reports. Cyber threats are increasingly common as more and more criminals dive into it.

Make sure you always keep your stuff updated and never reuse passwords, use random passwords and enable 2fa whereever you can. Especially your e-mail account should be extremely secure, as when they get access to that, all your accounts are basically compromised due to password recovery.

The 2015 hack, was that the one after which everybody was forced to change passwords, or is it a different one?

[amacar2]

Those datas are from one year old hack, so if you haven't opened account before than nothing to worry about. And even possibility of anyone gonna know your real password out of that sha256 encrypted passwords is really low. However changing password if you are in list of those hack accounts is always advised.

[Coin-Keeper]

It also seems like a good idea to "sign" your account in the way Theymos mentioned, just in case your account ever did get hacked.  That way you could get your account back.  Some of you guys have worked really hard to build your reputation here.

[Foref1982]

No, I wouldn't trust such an offer. Most hacked BTC DB offers is no more than a scam attempt and most offers on the dark web is fake anyway. So, why would I trust a hacked DB offer on the dark web? Regular account security review is advised to everyone, though.

[Lionidas]

Those datas are from one year old hack, so if you haven't opened account before than nothing to worry about. And even possibility of anyone gonna know your real password out of that sha256 encrypted passwords is really low. However changing password if you are in list of those hack accounts is always advised.

So this is not a second one? I heard there was one last year and then there are ddos attack just two days ago and yesterday. So I thought this was a new set of mined data from this new hack job during those attacks.

[carlfebz2]

Those datas are from one year old hack, so if you haven't opened account before than nothing to worry about. And even possibility of anyone gonna know your real password out of that sha256 encrypted passwords is really low. However changing password if you are in list of those hack accounts is always advised.

So this is not a second one? I heard there was one last year and then there are ddos attack just two days ago and yesterday. So I thought this was a new set of mined data from this new hack job during those attacks.

Thats what im thinking too that Database  is new and  on the latest hacking  of bitcointalk website.  I do experience website down for how many hours which is  unusual since i didnt  experience in the past and  luckily i read this topic regarding of DDos  of bitcointalk and  database has been for sale  on dark web which is somehow  alarming for us users here in this forum.

[achow101]

Those datas are from one year old hack, so if you haven't opened account before than nothing to worry about. And even possibility of anyone gonna know your real password out of that sha256 encrypted passwords is really low. However changing password if you are in list of those hack accounts is always advised.

So this is not a second one? I heard there was one last year and then there are ddos attack just two days ago and yesterday. So I thought this was a new set of mined data from this new hack job during those attacks.

Thats what im thinking too that Database  is new and  on the latest hacking  of bitcointalk website.  I do experience website down for how many hours which is  unusual since i didnt  experience in the past and  luckily i read this topic regarding of DDos  of bitcointalk and  database has been for sale  on dark web which is somehow  alarming for us users here in this forum.

A DDoS attack cannot recover any information from a website. It does exactly what the name of the attack implies, it Denies Service. No data is taken from the site. The database for sale is from the only major hack of bitcointalk which happened in May 2015.

[mundang]

Gonna change my password now to a stronger one.
But i think its only a joke.

[ivanst776]

Hi, I saw this article but found nothing with the search. It's fake or should we worry?

https://www.cryptocoinsnews.com/hacked-bitcointalk-org-user-data-goes-up-for-sale-on-dark-web/

I'm lucky because I wasn't here on 2015, but I think I should say something at least, just to be sure.

It's not fake but theymos has notified all users at that time to change the password.

Since you have been registered in 2016 that hasn't affected you but others should be aware if they haven't change the password since then.

[Das]

So this is not a second one? I heard there was one last year and then there are ddos attack just two days ago and yesterday. So I thought this was a new set of mined data from this new hack job during those attacks.

If there really was a new hack job, Theymos would have notified everyone on Meta and probably sent PMs as well.

[dunfida]

Those datas are from one year old hack, so if you haven't opened account before than nothing to worry about. And even possibility of anyone gonna know your real password out of that sha256 encrypted passwords is really low. However changing password if you are in list of those hack accounts is always advised.

So this is not a second one? I heard there was one last year and then there are ddos attack just two days ago and yesterday. So I thought this was a new set of mined data from this new hack job during those attacks.

Thats what im thinking too that Database  is new and  on the latest hacking  of bitcointalk website.  I do experience website down for how many hours which is  unusual since i didnt  experience in the past and  luckily i read this topic regarding of DDos  of bitcointalk and  database has been for sale  on dark web which is somehow  alarming for us users here in this forum.

A DDoS attack cannot recover any information from a website. It does exactly what the name of the attack implies, it Denies Service. No data is taken from the site. The database for sale is from the only major hack of bitcointalk which happened in May 2015.

This is correct DDos attacks cant get information on a website same as he said it Denies the service and doesnt  even get  informations. As i saw on the news the leaked database is from the  past hacking incident on bitcointalks website which  could really compromise  accounts on that time.

[startselect]

I was expecting to get an email from Bitcointalk telling us to change our passwords. I did. Also very important to change your password if you use the same email and passwords on other sites.

[DonMarco]

sad... btw where i can find info how to sing my acc? i saw a lot of ppl with signature auth etc i would like to do same but can not find any tuto

[irfan_pak10]

I was expecting to get an email from Bitcointalk telling us to change our passwords. I did. Also very important to change your password if you use the same email and passwords on other sites.

Btc talk send no email to its users to change passwords etc etc. It may be a fishy email attempting to collect the login info and hack your account. Because I didn't get an email like this, this is because my email is not public. And no one can get it.

[Naoko]

Gonna change my password now to a stronger one.
But i think its only a joke.

that info is true, however it happened in mid year 2015 and since your account is registered in 2016 you don't have to worry about your account getting hacked because of the leak but it is never bad to change your password once in a while

[Gleb Gamow]

I just received the following via Yahoo regarding an email address I used on this forum for one of my user accounts:

Someone attempted to sign in to your Yahoo account (<redacted>) from an app that doesn't meet Yahoo's security standards. We blocked this sign in attempt, which was made on:

Sat, Sep 17, 2016 9:15 PM GMT+8 from China.

Maybe it was Paul Vernon wanting to send me the keys to his home in Florida so that I could fuck his ex-wife. HAHAHA (iconic Leroy Fodor laugh)

[manav1112]

Regardless if it was hacked or not, it wont hurt to change your password to a stronger one!