Accounts waking up

[ibminer]

There seem to be a huge amount of accounts waking up, I'm assuming this isn't normal?
https://bitcointalk.org/seclog.php

[1713521748]

1713521748

[1713521748]

1713521748

[1713521748]

1713521748

[Chevas Regal]

There seem to be a huge amount of accounts waking up, I'm assuming this isn't normal?
https://bitcointalk.org/seclog.php

No problem until they do some unsual scam attempt , i dont see why people here always suspect that account waking = hacked account. BTC has been all high during this week so people who might had left Bitcoin in 2015 or when price dropped are coming to party again.

[ibminer]

There seem to be a huge amount of accounts waking up, I'm assuming this isn't normal?
https://bitcointalk.org/seclog.php

No problem until they do some unsual scam attempt , i dont see why people here always suspect that account waking = hacked account. BTC has been all high during this week so people who might had left Bitcoin in 2015 or when price dropped are coming to party again.

You must be a very proactive person. Have you even looked at the accounts? Some of the accounts are woken up within the same second and don't do shit afterwards, ya they are coming to "party again" by logging in and then staring at their screen. Those that are woken up at the same time are usually in the same month of a registered date. I'm not buying your theory.

It is not a gradual increase, it is waves of accounts getting woken up on certain days and then activity calms down.

[Lauda]

This thread is everything that you need to read: Hundreds of thousand of bitcointalk accounts hacked.
I have this problem almost every week in Bitmixer now and I've started permanently banning and tagging them on sight.

[Avirunes]

There seem to be a huge amount of accounts waking up, I'm assuming this isn't normal?
https://bitcointalk.org/seclog.php

No problem until they do some unsual scam attempt , i dont see why people here always suspect that account waking = hacked account. BTC has been all high during this week so people who might had left Bitcoin in 2015 or when price dropped are coming to party again.

You must be a very proactive person. Have you even looked at the accounts? Some of the accounts are woken up within the same second and don't do shit afterwards, ya they are coming to "party again" by logging in and then staring at their screen. Those that are woken up at the same time are usually in the same month of a registered date. I'm not buying your theory.

It is not a gradual increase, it is waves of accounts getting woken up on certain days and then activity calms down.

Really nice catch. Seems like someone is getting something from database now.

Sorry but I also will not buy theory of Chevas here. There is a very hard possibility that they are being recovered by someone having database. That's massive no. of accounts and top of that recovered within seconds make it much more suspicious.

[theymos]

I was watching the attacker as he was doing this, so I'm nearly certain that he merely brute-forced accounts with extremely weak passwords which were unchanged since the 2015 leak. All of the accounts had passwords like "word12" or "195402" or similar, which can be brute-forced very quickly even despite the forum's pretty good password hashing/salting. (I know their passwords because I was watching the attacker enter the passwords.) The more valuable such accounts were already picked off -- this person was collecting the dregs.

I locked ~all of the accounts which woke up.

[ibminer]

I was watching the attacker as he was doing this, so I'm nearly certain that he merely brute-forced accounts with extremely weak passwords which were unchanged since the 2015 leak. All of the accounts had passwords like "word12" or "195402" or similar, which can be brute-forced very quickly even despite the forum's pretty good password hashing/salting. (I know their passwords because I was watching the attacker enter the passwords.) The more valuable such accounts were already picked off -- this person was collecting the dregs.

I locked ~all of the accounts which woke up.

Good stuff, thank you theymos.

[coolcoinz]

Read part of the list and you can find some interesting examples, like alts waking up at the exact same second:
Today at 12:17:20 AM - test016 - woke up
Today at 12:17:20 AM - test022 - woke up
Today at 12:17:15 AM - test021 - woke up
Today at 12:17:13 AM - test020 - woke up
Today at 12:17:09 AM - testfunny29 - woke up
Today at 12:17:04 AM - testfunny35 - woke up
Today at 12:16:52 AM - test023 - woke up
Today at 12:16:48 AM - testfunny20 - woke up
Today at 12:16:43 AM - test08 - woke up
I guess he used some kind of bot or script to load all of them so fast.

Or obvious bannable names like theyimos https://bitcointalk.org/index.php?action=profile;u=355834

[iluvpie60]

There seem to be a huge amount of accounts waking up, I'm assuming this isn't normal?
https://bitcointalk.org/seclog.php

No problem until they do some unsual scam attempt , i dont see why people here always suspect that account waking = hacked account. BTC has been all high during this week so people who might had left Bitcoin in 2015 or when price dropped are coming to party again.

You must be a very proactive person. Have you even looked at the accounts? Some of the accounts are woken up within the same second and don't do shit afterwards, ya they are coming to "party again" by logging in and then staring at their screen. Those that are woken up at the same time are usually in the same month of a registered date. I'm not buying your theory.

It is not a gradual increase, it is waves of accounts getting woken up on certain days and then activity calms down.

Hai:) i came back because i got back into btc and trading.

[Jet Cash]

Thanks for looking after us Theymos. I guess the password changes were another clue.

[ibminer]

Hai:) i came back because i got back into btc and trading.

Welcome back, are you able to sign any messages from prior addresses used on your account?

Hopefully you came back for a meaningful reason and not to shit post in order to fill a quota for your new signature campaign?   

The 30+ one line posts you've made today are very interesting. Wait, 32... 34... 36... ok I'll stop counting now. Your typing so fast you can't control the spelling mistakes. Just sad.

At this point, I'm locking this thread.