My account seems to been hijacked.

[itsnotfairhere]

hello i need some help can a admin message me my account seemed to just been hijacked
how can one contact some one about this ?

[1713259432]

1713259432

[1713259432]

1713259432

[itsnotfairhere]

can a admin contact me i can no send messages tells me to wait 360 secs over and over

[Mr. Big]

Which account is it? PM Theymos or Cyrus following the instructions here: https://bitcointalk.org/index.php?topic=497545.0 ...

[itsnotfairhere]

Ok great I have all that info , the problem is every time i try and contact some one i get The last posting from your IP was less than 360 seconds ago. Please try again later. The thing you were trying to post was saved as a draft. This limit decreases substantially as your account becomes more established. so how can i contact them

[itsnotfairhere]

Ok great I have all that info , the problem is every time i try and contact some one i get The last posting from your IP was less than 360 seconds ago. Please try again later. The thing you were trying to post was saved as a draft. This limit decreases substantially as your account becomes more established. so how can i contact them

a great question is how they can some one change the email info on the account with out getting a email to the email account on file 1st ?

[mammix2a]

Ok great I have all that info , the problem is every time i try and contact some one i get The last posting from your IP was less than 360 seconds ago. Please try again later. The thing you were trying to post was saved as a draft. This limit decreases substantially as your account becomes more established. so how can i contact them

a great question is how they can some one change the email info on the account with out getting a email to the email account on file 1st ?

Yeah im thinking the same, some sort of 2 factor verification is needed to stop this account hijacking happening.

[Vod]

hello i need some help can a admin message me my account seemed to just been hijacked
how can one contact some one about this ?

What is your old account name?  We can mark it as a hijacked account until you get it back.

[itsnotfairhere]

hello i need some help can a admin message me my account seemed to just been hijacked
how can one contact some one about this ?

What is your old account name?  We can mark it as a hijacked account until you get it back.

winter

[Vod]

What is your old account name?  We can mark it as a hijacked account until you get it back.

winter

I see this on the trust page:

This user's email address was changed recently.

This user changed his/her password recently.

The password message is smaller.  Anyone - what does this mean exactly?

Did you ever post/stake a bitcoin address?  Can you point to the post, and then sign a message?

[itsnotfairhere]

Yes thats what i saw to
address i used with that account was : 1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH
but it was in my sig
you can see https://bitcointalk.org/index.php?topic=1118436.0
has both my btc and ltc address
1FREEUFC1XWd94X73C1X1KTT32nhZS9Gte
LWiNtErq3AKNndfSzicMcMABjbcQhc5BuC


I can sign messages from any one of those address

[Vod]

I can sign messages from any one of those address

Ok, sign it and we can tag the account as stolen until you get it back.

[itsnotfairhere]

Address : "1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH"
Message :
"ANYONE THAT READS THIS MESSAGE
MY ACCOUNT WINTER ON BITCOINTALK.ORG WAS HIJACKED ON 9/16/17 AT 7:XX AM EST
THIS MESSAGE IS TO PROVE "itsnotfairhere" IS THE TRUE ACCOUNT HOLDER OF "winter"
TO ALL ADMINS PLEASE MARK "winter" AS HIJACKED UNTILL I CAN RECOVER THE ACCOUNT
THANKS ALOT TO ALL THE ADMINS ON THIS SITE"

Signature : "HBC0KXsBwGZ4nrIAChIAg8UFQxBKrZYNBeJaNCfJpL1BPp+K92kVwc9PSzZDNQjryiYUdsE8FBmU+j4DUDNTIfo="


PLEASE REMOVE THE QUOTES FROM THE ADDRESS/MESSAGE/SIGNATURE

[Vod]

Address : "1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH"
Message :
"ANYONE THAT READS THIS MESSAGE
MY ACCOUNT WINTER ON BITCOINTALK.ORG WAS HIJACKED ON 9/16/17 AT 7:XX AM EST
THIS MESSAGE IS TO PROVE "itsnotfairhere" IS THE TRUE ACCOUNT HOLDER OF "winter"
TO ALL ADMINS PLEASE MARK "winter" AS HIJACKED UNTILL I CAN RECOVER THE ACCOUNT
THANKS ALOT TO ALL THE ADMINS ON THIS SITE"

Signature : "HBC0KXsBwGZ4nrIAChIAg8UFQxBKrZYNBeJaNCfJpL1BPp+K92kVwc9PSzZDNQjryiYUdsE8FBmU+j4DUDNTIfo="


PLEASE REMOVE THE QUOTES FROM THE ADDRESS/MESSAGE/SIGNATURE

Verified.  I have tagged the account as stolen.

Follow these instructions to recover it, and then PM me so I can remove the trust.

https://bitcointalk.org/index.php?topic=497545.0

[Aventhe]

Good thing Vod!
 This user just contacted me about managing a campaign for Opporty. Lucky I checked the account out before considering any of his offers.

[itsnotfairhere]

Good thing Vod!
 This user just contacted me about managing a campaign for Opporty. Lucky I checked the account out before considering any of his offers.

good that u did this

[Vod]

Good thing Vod!
 This user just contacted me about managing a campaign for Opporty. Lucky I checked the account out before considering any of his offers.

If everyone was as diligent as you, there would be no scams. 

[Aventhe]

This is the PM he sent me:



I have not replied back as it is said to do so in the message. Things got very fishy after he wrote: 'very active' forum member. I decided to check the last posts and they had gaps of up to 2 weeks with not too many posts after them. Then I went to have a look at the 'Trust' on the profile and both Seclog and that says that both password and email were changed today.



This was just an hour after he had hacked the account.
To be honest, I think it is just another user who is as hungry as Windpower, wizardee and possibly Hashforce101 to offer their scam Campaign management services for quick money through possible escrow scams. All ICOs should be careful when hiring anyone for their management services.

[itsnotfairhere]

the hijacker also posted this message on my account a few days before fully jacking my account

https://bitcointalk.org/index.php?topic=2030529.msg21760627#msg21760627

[itsnotfairhere]

still waiting for a reply and a email to reset takes a bit i guess

[itsnotfairhere]

does anyone know how long it takes to get the account back.

[winter]

-----BEGIN SIGNATURE-----
Today is : 9-25-17 , This is the real : winter , My account was hijacked on saturday of last week. I just regain it today. Thanks for locking my account.
-----END SIGNATURE-----
address : <1FREEUFC1XWd94X73C1X1KTT32nhZS9Gte>
signature : <G5lVcQYtHu4ts1v1HWej89nj1HlF2299WJZD1lTOVEpyBUZ4Mg9Ug3T+KkyIftMbpoudz1eRV8pAiyhEmO5IsDY=>

[Vod]

Please sign a message from

1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH

[winter]

Please sign a message from
1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH

-----BEGIN SIGNATURE-----
Today is : 9-28-17 , This is the real : (winter) , My account was hijacked on 9-16-17 in the early morning
-----END SIGNATURE-----
address : <1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH>
signature : <G6ML5XdZVLkI4/f+aw+GfxLqdOUN5QAkTfwbFCvwwMq4Gc+WYcKXsyyw0a5rG0PCYgTmxlQJ//gcVH4ZxwgJ8B4=>

[doyayipaku]

This problem I encountered many other posts on the general forum a problem is hack account. I think the admin of the forum created a private topic to post all the hacking issues on a topic. I feel this problem as a way to spam 

[Vod]

Please sign a message from
1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH

-----BEGIN SIGNATURE-----
Today is : 9-28-17 , This is the real : (winter) , My account was hijacked on 9-16-17 in the early morning
-----END SIGNATURE-----
address : <1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH>
signature : <G6ML5XdZVLkI4/f+aw+GfxLqdOUN5QAkTfwbFCvwwMq4Gc+WYcKXsyyw0a5rG0PCYgTmxlQJ//gcVH4ZxwgJ8B4=>

Trust removed.   

[winter]

Please sign a message from
1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH

-----BEGIN SIGNATURE-----
Today is : 9-28-17 , This is the real : (winter) , My account was hijacked on 9-16-17 in the early morning
-----END SIGNATURE-----
address : <1WinTerzQmMQQHY5ZyYZJyapGJGfwFCxH>
signature : <G6ML5XdZVLkI4/f+aw+GfxLqdOUN5QAkTfwbFCvwwMq4Gc+WYcKXsyyw0a5rG0PCYgTmxlQJ//gcVH4ZxwgJ8B4=>

Trust removed.   

Thanks VOD for locking it down until i regained it. Again thanks