Bitcoin Forum
June 17, 2019, 10:05:14 AM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Spectrocoin hacker  (Read 669 times)
erk
Hero Member
*****
Offline Offline

Activity: 812
Merit: 500


View Profile
March 17, 2017, 02:14:04 AM
 #1

I think there is a security hole in the forum.

When I logged in this morning, my Avatar had been changed to A Spectrcoin logo, and my signature had some of their promotional material.

When I checked show posts, someone has been posting from my account since March 12th.

I deleted the avatar and signature and changed my password. However I don't think the password was the issue.

When I looked at some of the posts that had come from my account I noticed a whole lot of posts in the thread from other users that also seemed to have the same Spectrocoin logo etc.

I think the forum itself has been hacked.

1560765914
Hero Member
*
Offline Offline

Posts: 1560765914

View Profile Personal Message (Offline)

Ignore
1560765914
Reply with quote  #2

1560765914
Report to moderator
1560765914
Hero Member
*
Offline Offline

Posts: 1560765914

View Profile Personal Message (Offline)

Ignore
1560765914
Reply with quote  #2

1560765914
Report to moderator
1560765914
Hero Member
*
Offline Offline

Posts: 1560765914

View Profile Personal Message (Offline)

Ignore
1560765914
Reply with quote  #2

1560765914
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
nydiacaskey01
Legendary
*
Offline Offline

Activity: 1540
Merit: 1027


Bitsler.com


View Profile
March 17, 2017, 02:17:38 AM
 #2

I think there is a security hole in the forum.

When I logged in this morning, my Avatar had been changed to A Spectrcoin logo, and my signature had some of their promotional material.

When I checked show posts, someone has been posting from my account since March 12th.

I deleted the avatar and signature and changed my password. However I don't think the password was the issue.

When I looked at some of the posts that had come from my account I noticed a whole lot of posts in the thread from other users that also seemed to have the same Spectrocoin logo etc.

I think the forum itself has been hacked.


If the password were changed, how are you able to log in and make a post? You mean they change back to original password so that you will never notice? Sec logs only recorded password change with your account is just yesterday, other than that up to February 15 there's no changes made on your account.

erk
Hero Member
*****
Offline Offline

Activity: 812
Merit: 500


View Profile
March 17, 2017, 02:57:38 AM
 #3

I think there is a security hole in the forum.

When I logged in this morning, my Avatar had been changed to A Spectrcoin logo, and my signature had some of their promotional material.

When I checked show posts, someone has been posting from my account since March 12th.

I deleted the avatar and signature and changed my password. However I don't think the password was the issue.

When I looked at some of the posts that had come from my account I noticed a whole lot of posts in the thread from other users that also seemed to have the same Spectrocoin logo etc.

I think the forum itself has been hacked.


If the password were changed, how are you able to log in and make a post? You mean they change back to original password so that you will never notice? Sec logs only recorded password change with your account is just yesterday, other than that up to February 15 there's no changes made on your account.

I didn't word that very well. What I meant was I changed the password earlier today to try and stop the hacker, but I don't think the hack was by using my previous password, because many other people seem to be showing the same hacked avatar.

I think it might be a forum bug/exploit hence starting this thread to try and warn people. I have notified the moderators already.



Cast12
Sr. Member
****
Offline Offline

Activity: 266
Merit: 251


View Profile
March 17, 2017, 03:09:15 AM
 #4

This could still be related to the bitcointalk hack back in 2015. Some of the accounts could be dormant accounts that weren't on in awhile so they couldn't change their password.
BitcoinEXpress
Legendary
*
Offline Offline

Activity: 1280
Merit: 1001



View Profile
March 17, 2017, 03:16:27 AM
 #5

@OP


Pro tip:

Change your password to "Incorrect" so when you forget it, just enter anything and the site will tell you

"Your password is Incorrect"


Geez, the forum hasn't been hacked.

Like it or not, your PW was the issue.

Just be glad you got your account back.


~BCX~

erk
Hero Member
*****
Offline Offline

Activity: 812
Merit: 500


View Profile
March 17, 2017, 03:18:27 AM
 #6

This could still be related to the bitcointalk hack back in 2015. Some of the accounts could be dormant accounts that weren't on in awhile so they couldn't change their password.

I see, I don't think I have changed my password for a couple of years, so what you say makes sense.

Perhaps the other users whose avatars were changed might also have old passwords?
In which case a hacker is on the forums today using the passwords gathered from the 2015 hack you mentioned.


Lutpin
Copper Member
Legendary
*
Offline Offline

Activity: 1358
Merit: 1778


Goodbye, Z.


View Profile WWW
March 17, 2017, 03:20:22 AM
 #7

Don't blame spectrocoin for whoever got your account enrolling it in their signature campaign.

I would like to be a part of this campaign.

Username : erk
Number of posts: 2590
Rank : Sr. Member
Bitcoin Address : 1EtUPGLEqsx7rEM4oc8i5AsyV8EHkvaMgN

Thanks in advance



Perhaps the other users whose avatars were changed might also have old passwords?
In which case a hacker is on the forums today using the passwords gathered from the 2015 hack you mentioned.
The hashes of all passwords leaked, which is why everyone was adviced to update their password.


▄▄▄████████▄▄▄
▄██████████████████▄
▄██████████████████████▄
██████████████████████████
████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
██████████████████████████████
████████████████████████████
██████████████████████████
▀██████████████████████▀
▀██████████████████▀
▀▀▀████████▀▀▀
   ███████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
███████



             ▄████████████████████████████████████████████████████████████▄
            ██                          ▄▄▄▄▄▄                           ██
           ██  ██████                ▄██████████▄     ████████████████████▀
          ██  ████████             ▄████▀   ▀████▄    ████▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
         ██  ████  ████           ████▀       ▀██▀    ████
        ██  ████    ████        ▄███▀                 ████

       ██  ████      ████       ███▀                  ████▄▄▄▄▄▄▄▄▄▄
      ██  ████        ████      ███                   ██████████████
     ██  ████          ████     ███▄                  ████▀▀▀▀▀▀▀▀▀▀

    ██  ████████████████████    ▀████                 ████
   ██  ██████████████████████    ▀████▄        ▄██▄   ████

  ██  ████                ████     ▀████▄   ▄████▀    ████▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
 ██  ████                  ████      ▀██████████▀     ████████████████████▄
  ██                                    ▀▀▀▀▀▀                           ██
   ▀█████████████████████████████████████████████████████████████████████▀
erk
Hero Member
*****
Offline Offline

Activity: 812
Merit: 500


View Profile
March 17, 2017, 03:52:34 AM
 #8

I am in the process of deleting all the bogus posts from my account.
It was mainly some sort of scam to get people to put money into a bitcoin account supposedly on coinbase for some sort of signature promotion.


goomezd
Newbie
*
Offline Offline

Activity: 46
Merit: 0


View Profile
March 17, 2017, 10:57:27 AM
 #9

May be your accound had  remain signed in somewhere else than your browser Or someone knows your password. You can simply change your email and password if this is the issue.
achow101
Staff
Legendary
*
Offline Offline

Activity: 1792
Merit: 2459


bc1qshxkrpe4arppq89fpzm6c0tpdvx5cfkve2c8kl


View Profile WWW
March 17, 2017, 02:22:02 PM
 #10

I see, I don't think I have changed my password for a couple of years, so what you say makes sense.
Then you must have also had a fairly weak password too. Anyways, that your account was compromised has nothing to do with spectrocoin.

Perhaps the other users whose avatars were changed might also have old passwords?
It was mainly some sort of scam to get people to put money into a bitcoin account supposedly on coinbase for some sort of signature promotion.
No. Your account being compromised has nothing to do with spectrocoin, and what spectrocoin is doing is not scamming. Spectrocoin is operating a signature and avatar campaign where they pay people to wear their avatar and their signature and make posts. Whoever got control of your account decided to enroll the account in spectrocoin's campaign and then make posts so that they could make money.

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!