Bitcoin Forum
September 16, 2019, 07:41:45 AM *
News: Latest Bitcoin Core release: 0.18.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: stevegee58 account hacked  (Read 580 times)
stevegee58a
Newbie
*
Offline Offline

Activity: 19
Merit: 0


View Profile
September 19, 2017, 04:25:39 PM
 #1

My account "stevegee58" was hacked this morning.

I've read the rules on how to get it back but I have no way to sign a message with a BTC address since I never associated my account with one.

At the very least I would like the account banned to prevent this bastard from posting under my name.
The forum was founded in 2009 by Satoshi and Sirius. It replaced a SourceForge forum.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
actmyname
Copper Member
Legendary
*
Offline Offline

Activity: 1512
Merit: 1731


hubris of vanity


View Profile WWW
September 19, 2017, 06:05:12 PM
 #2

Unfortunately, a signed message is the best way to verify account ownership. If there is any other way you can think of that can show that you were the original owner of the account then you could post that proof and then a negative trust would be justified. Otherwise, simply anyone could open up an 'alt' account and claim their account was hacked.
(I do understand that specific account had their email and password changed which is very suspicious)

stevegee58a
Newbie
*
Offline Offline

Activity: 19
Merit: 0


View Profile
September 19, 2017, 06:09:48 PM
 #3

The only proof I have is the email for this new account is the same as the hacked one.  Other than that I'll just have to follow my old account around and post replies to it notifying everyone that "stevegee58" is not legit.
actmyname
Copper Member
Legendary
*
Offline Offline

Activity: 1512
Merit: 1731


hubris of vanity


View Profile WWW
September 19, 2017, 06:19:24 PM
 #4

The only proof I have is the email for this new account is the same as the hacked one.  Other than that I'll just have to follow my old account around and post replies to it notifying everyone that "stevegee58" is not legit.
The email wasn't changed this month. You should be able to reset the password to your email, right? (Otherwise, it's strange because only the password was changed rather than both email and password.)

stevegee58a
Newbie
*
Offline Offline

Activity: 19
Merit: 0


View Profile
September 19, 2017, 06:24:42 PM
 #5

The only proof I have is the email for this new account is the same as the hacked one.  Other than that I'll just have to follow my old account around and post replies to it notifying everyone that "stevegee58" is not legit.
The email wasn't changed this month. You should be able to reset the password to your email, right? (Otherwise, it's strange because only the password was changed rather than both email and password.)
Yup, when I try to reset the password I don't get the email.  And yes, I did check the spam folder.  It's just not there.
stevegee58a
Newbie
*
Offline Offline

Activity: 19
Merit: 0


View Profile
September 19, 2017, 06:47:41 PM
 #6

The email wasn't changed this month. You should be able to reset the password to your email, right? (Otherwise, it's strange because only the password was changed rather than both email and password.)
How can you tell the email wasn't changed?  I looked at the security log at https://bitcointalk.org/seclog.php and all it shows is how the password was changed (by email reset or manually after logging in).

I suspect the perpetrator had my password, logged in, then changed the password and email.
actmyname
Copper Member
Legendary
*
Offline Offline

Activity: 1512
Merit: 1731


hubris of vanity


View Profile WWW
September 20, 2017, 01:08:06 AM
 #7

How can you tell the email wasn't changed?  I looked at the security log at https://bitcointalk.org/seclog.php and all it shows is how the password was changed (by email reset or manually after logging in).

I suspect the perpetrator had my password, logged in, then changed the password and email.
Right: I made a mistake. I was sure that the seclog showed email changes (It may have before, but perhaps not anymore. Or, I've simply thought we were given more information than what reality dictates). It is very much likely what you stated was the series of events revolving around your account.
If the posting quality changes greatly then most likely the account can be tagged without much doubt. Additionally, if you manage to find any other means of verification please do post it here to accelerate the process.

stevegee58a
Newbie
*
Offline Offline

Activity: 19
Merit: 0


View Profile
September 20, 2017, 11:44:13 AM
 #8

I can prove stevegee58 is actually my account:

On August 06, 2013, 10:03:26 PM I started the thread "Whoever just sent me 0.001 BTC out of the blue...thanks":
https://bitcointalk.org/index.php?topic=269231.0

Later in the thread I stated that the address that received the 0.001 BTC was my mining address:
No it's my main mining address actually.  But I haven't mined in months.

Later in the thread I posted a link to the actual transaction where I was sent 0.001 BTC:
I spent more time looking at the chain of transactions involving this 0.001 BTC transaction.  It's really interesting.  In a very short period of time a bunch of addresses received this amount.  These "donations" occurred dozens (possibly hundreds) of times before and after mine.

If anyone is interested, here's the transaction from blockchain.info:

http://blockchain.info/tx/d0753917b1391384f9013c943fcf5d0a498021d5b147a05b9cdc26c626e4d0a4

The link above shows 0.001 BTC going to my mining address 13pxMeP6LhtNAe3RPUw2EdJZyNHf4ooLs2

Later again in the thread I stated I was sent another 0.001 BTC:
The plot thickens.  I just received another 0.001 BTC this morning at the same address.

The last transaction for address 13pxMeP6LhtNAe3RPUw2EdJZyNHf4ooLs2 on 2014-02-06 shows all the BTC being transferred to address 1GpTTD5EupwzmNYWLb2WDUrqYFPcHGVC4V which is an address I own.  This was me consolidating my BTC into a new Electrum wallet.

Here is a signed message proving I own 1GpTTD5EupwzmNYWLb2WDUrqYFPcHGVC4V:

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account stevegee58 has been hacked/lost. Please reset the email to xxxxxxx. The current date is 2017-09-20.
-----BEGIN SIGNATURE-----
1GpTTD5EupwzmNYWLb2WDUrqYFPcHGVC4V
HC5jrVNU4eZSNki+qpsXd4n7Dvo0GZvXFx+BEo1EbA4uReUm/mrBPeY+FaSuJp4lC0UoQrsM/WR7OEgSMtpjix4=
-----END BITCOIN SIGNED MESSAGE-----

I have verified this using coinig.com
stevegee58a
Newbie
*
Offline Offline

Activity: 19
Merit: 0


View Profile
September 20, 2017, 01:53:32 PM
 #9

The previous long post lays out all the gory details.  Here's the short version:

  • I, stevegee58, posted a transaction using my BTC mining address 13pxMeP6LhtNAe3RPUw2EdJZyNHf4ooLs2
  • I no longer have the keys to 13pxMeP6LhtNAe3RPUw2EdJZyNHf4ooLs2 but I moved all the BTC out of that address to
    1GpTTD5EupwzmNYWLb2WDUrqYFPcHGVC4V which I do have the keys for.
  • I created a signed message using 1GpTTD5EupwzmNYWLb2WDUrqYFPcHGVC4V with my private key, proving provenance to 13pxMeP6LhtNAe3RPUw2EdJZyNHf4ooLs2
stevegee58a
Newbie
*
Offline Offline

Activity: 19
Merit: 0


View Profile
September 21, 2017, 01:32:44 PM
 #10

Isn't it funny how the day my stevegee58 identity got hacked there was 1 nonsensical post here:
https://bitcointalk.org/index.php?topic=2181617.msg21990657#msg21990657

If you read the 799 posts by me (stevegee58) you'll see that I write complete sentences and tend to go on and on sometimes.
This last post by my imposter is strong evidence that my account has been taken over.
Cyrus
Ninja
Administrator
Legendary
*
Offline Offline

Activity: 2366
Merit: 1124



View Profile
September 21, 2017, 03:24:01 PM
 #11

The account indeed looks hacked. I've locked it for now and will look into the evidence presented.

stevegee58a
Newbie
*
Offline Offline

Activity: 19
Merit: 0


View Profile
September 21, 2017, 03:27:22 PM
 #12

The account indeed looks hacked. I've locked it for now and will look into the evidence presented.

Thank you sir, I appreciate it.
stevegee58a
Newbie
*
Offline Offline

Activity: 19
Merit: 0


View Profile
October 09, 2017, 10:17:23 PM
 #13

The account indeed looks hacked. I've locked it for now and will look into the evidence presented.

Yay!  It's nice to see some accounts have been recovered from these nefarious hackers!

Welcome back aizzaku and dragonmike!
Cyrus
Ninja
Administrator
Legendary
*
Offline Offline

Activity: 2366
Merit: 1124



View Profile
October 10, 2017, 02:40:38 AM
 #14

Account recovered. You can add stevegee58 to the list. Smiley

stevegee58
Legendary
*
Offline Offline

Activity: 921
Merit: 1003



View Profile
October 10, 2017, 10:47:41 AM
 #15

Account recovered. You can add stevegee58 to the list. Smiley
Hooray! I'm back! Thanks!

You are in a maze of twisty little passages, all alike.
FuckThemHackers
Newbie
*
Offline Offline

Activity: 49
Merit: 0


View Profile
October 10, 2017, 04:04:25 PM
 #16

Account recovered. You can add stevegee58 to the list. Smiley
Hooray! I'm back! Thanks!

The Baron of Hell itself is a bitcoiner too? Smiley
I hope to be back soon too. Those damn hackers are all over the place lately. So many accounts getting hacked.
CoinLov3r
Member
**
Offline Offline

Activity: 97
Merit: 10

Truth wins inevitably.


View Profile
October 10, 2017, 05:09:02 PM
 #17

Account recovered. You can add stevegee58 to the list. Smiley
Hooray! I'm back! Thanks!
So nice buddy.Congrats.I hope I'll get back my account too soon.
alfaboy23
Hero Member
*****
Offline Offline

Activity: 546
Merit: 500



View Profile
October 10, 2017, 05:55:52 PM
 #18

Account recovered. You can add stevegee58 to the list. Smiley
Hooray! I'm back! Thanks!

The Baron of Hell itself is a bitcoiner too? Smiley
I hope to be back soon too. Those damn hackers are all over the place lately. So many accounts getting hacked.

Yes, one of the probability that they were hacked was because some of them were using a miner applications rigged with Trojans and key loggers. I know because I've seen one and was victim of that but luckily I was able to eliminate it.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!