[Update: Recovered!] My bitcointalk was hacked! PROOF INSIDE

[SwingSecond]

Update 2019-04-09: The account has been recovered!

My bitcointalk account "SwingFirst" was has been hacked.

Link to my HACKED account: https://bitcointalk.org/index.php?action=profile;u=147307

I staked my bitcoin address back in August 2015 on my (now hacked) SwingFirst account:
Bitcointalk link
WayBackMachine link
So the bitcoin address I control is: 1LQVvaqnbxTekscDbBboAARwEySorNksaW

The earliest bitcoin address mentioned in my post history can be found here:
Bitcointalk link
WayBackMachine link
So this means that I also control the following bitcoin address: 1DNwZfpCYkmPP82xty7HThv9ngadjQa2T2

I still hold the private keys to those two addresses, and below are two signed messages with both of the addresses.


Address:

Code:

1DNwZfpCYkmPP82xty7HThv9ngadjQa2T2

Message:

Code:

Today's date is September 27th 2017. I am SwingSecond from bitcointalk.org, and my main account SwingFirst has been compromised.

Signature:

Code:

HILbks4sKUlC7ZuIdS7dhSZb25qsM6SeDnz47dZ/jY86ZPz+z1sSntr58R/J8GQYHzw4atVyhtwd1y2AdZWxjPw=

QUICK LINK TO VERIFY THIS MESSAGE ON COINIG


Address:

Code:

1LQVvaqnbxTekscDbBboAARwEySorNksaW

Message:

Code:

Today's date is September 27th 2017. I am SwingSecond from bitcointalk.org, and my main account SwingFirst has been compromised.

Signature:

Code:

ICOzh+Q4nknr/FLNuZ9v5ZA1VQsDOjbinpK2IYDZgaP/NWTwfhUTwAt+39fWdOB8muf5n6E7pb/T+9WBBfRwOqo=

QUICK LINK TO VERIFY THIS MESSAGE ON COINIG


I would appreciate any help in getting my account back. I can sign a custom message with my bitcoin keys as well if needed for further validation.

I would appreciate if some of you leave negative trust on the hacked SwingFirst profile, to deter any eventual scam attempts by the person who has my account. Thank you so much!

[SwingSecond]

The hacker seems to have gotten control of my account on September 19th. I can still access my e-mail address swingfirst@airmail.cc.

The hacker didn't change the e-mail right away, because I can see the e-mails from the forum about private messages, and I can see that the hacker tried to make deals with other users, using my account "SwingFirst".

Below is all the e-mails with the PM's I received from bitcointalk. I censored the info about the senders. Sorry if it's a wall of text.


You have just been sent a personal message by censored on Bitcoin Forum.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!
Thanks for PM!
i checked your rating.
But i am newbie... Can I use escrow?( example, Monbux's escrow Link :https://bitcointalk.org/index.php?topic=631008.0 )
his escrow has big truth i think.
If agreed, i pm him.

Thank you for your PM
censored

Reply to this Personal Message here: censored

------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder


You have just been sent a personal message by censored on Bitcoin Forum.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!
Thank for your response, Im interested, but I offer you 0.05 BTC for the 2500.

thanks

Reply to this Personal Message here: censored

------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder


You have just been sent a personal message by censored on Bitcoin Forum.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!
I agree with the price, how can I be sure you will send the pure? thanks

Reply to this Personal Message here: censored

------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder


You have just been sent a personal message by censored on Bitcoin Forum.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!
Thank you, but I dont want to pay 0.1 for that shit. My bid is 0.01btc for 2500 Pure,and nothing more. And again than you.

Reply to this Personal Message here: censored

------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder


You have just been sent a personal message by censored on Bitcoin Forum.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!
oh, sorry, i didnt know you were expecting my reponse as your message said that if i was interested I should directly send the payment.

I appreciate the offer, but I previously had a bad experience sending the money first with no guarantees, it was not in this forum, but I lost quite bit in that transaction. So my condition is to receive the coins first.

Reply to this Personal Message here: censored

------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder


You have just been sent a personal message by censored on Bitcoin Forum.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!
so? that is your conclusion? because I didnt want to go on with the deal because i dont trust you and dont want to send bitcoins first, that makes me a scammer? that is ridiculous, please notify the admin, and anyother one you want

Reply to this Personal Message here: censored

------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder


You have just been sent a personal message by censored on Bitcoin Forum.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!
I didnt agree with your terms because i didnt trust you (I dont care what rank you are), you were the one insisting for me to send the bitcoins after I didnt respond anymore.

Please, send a message to admin and he will deal with this. Im a "newbie" because I registered the other day, that does not make me a scammer

Reply to this Personal Message here: censored

------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder


You have just been sent a personal message by censored on Bitcoin Forum.

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!
Budgeting atm lol. Will reply soon! Thank you!

Reply to this Personal Message here: censored

------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder

[SwingSecond]

I have a Twitter account: SwingFirstBTCT

Back in March I tweeted that the twitter account belongs to SwingFirst on bitcointalk, along with a signed message from the previously known bitcoin address in post #1 of this thread.
https://twitter.com/SwingFirstBTCT/status/847980695444217857

Here's my tweet sent just now:
https://twitter.com/SwingFirstBTCT/status/913074534017880064

[Zepher]

Signed messages are valid.


@OP - I have tagged your account with a temporary negative rating until such time as you regain access to it.

Once you do, shoot me a PM from both this account, the hacked account, along with a link to this thread, and I will happily remove the rating.

Cheers

[SwingSecond]

Signed messages are valid.


@OP - I have tagged your account with a temporary negative rating until such time as you regain access to it.

Once you do, shoot me a PM from both this account, the hacked account, along with a link to this thread, and I will happily remove the rating.

Cheers

Thank you for the help, I appreciate it. I will verify once the account is back under my control!

[SwingSecond]

The person who has my account sent me a PM, and now he's trying to make me pay for my own account.

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!

!!! WARNING: This user is a newbie. If you are expecting a message from a more veteran member, then this is an imposter !!!

Hi . İ didnt hack the account. İ bought 0.1 Btc.

It doesn't matter, it belongs to me and I'm having it back.

If you give me the money, I will give your account.

That's not happening. I can prove that the account is mine by signing a message. I have contacted admin, and I'll have it back for free.

[SwingSecond]

And now someone (perhaps the hacker) tried to phish my blockchain.info details by sending an e-mail. Stupid stuff.

[SwingSecond]

I've made a new attempt in getting my account back. I hope Cyrus helps me out.

[shahzadafzal]

It's been 7 months hope you will get your account back.

I think you should sing the message in a format requested by Theymos here

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <account> has been hacked/lost. Please reset the email to <email>. The current date is <date>.
-----BEGIN SIGNATURE-----
<insert address here>
<insert signature here>
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: ...
OR
I sent that address to someone in a PM with PM ID#...

Edit: From the title at first I thought bitcointalk.org was hacked, "My bitcointalk account was hacked!" would be much better.

[SwingSecond]

It's been 7 months hope you will get your account back.

I think you should sing the message in a format requested by Theymos here

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <account> has been hacked/lost. Please reset the email to <email>. The current date is <date>.
-----BEGIN SIGNATURE-----
<insert address here>
<insert signature here>
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: ...
OR
I sent that address to someone in a PM with PM ID#...

Edit: From the title at first I thought bitcointalk.org was hacked, "My bitcointalk account was hacked!" would be much better.

I did send a PM in that format, I hope I get assistance soon. I mistyped the title, I know it looks bad.

[SwingFirst]

Big update!

Address:

Code:

1DNwZfpCYkmPP82xty7HThv9ngadjQa2T2

Message:

Code:

I'm SwingFirst from bitcointalk.org, and the account is back in the control of its rightful owner. Today's date is 2019-04-09.

Signature:

Code:

HAu9r2c1BiSargEC2hf9C708ZhIrRYsla+WI/bHrSM7VOPfl241NjpaXGbXxDDrcOKBh1wY62iRbKcm1/Wi8ndo=

[SwingSecond]

I'm using this account as well, to confirm that I do indeed have my account back. It took a while but I succeeded!

Signed messages are valid.


@OP - I have tagged your account with a temporary negative rating until such time as you regain access to it.

Once you do, shoot me a PM from both this account, the hacked account, along with a link to this thread, and I will happily remove the rating.

Cheers

Thank you sir, I will send you a PM right away.

[bones261]

Big update!

Address:

Code:

1DNwZfpCYkmPP82xty7HThv9ngadjQa2T2

Message:

Code:

I'm SwingFirst from bitcointalk.org, and the account is back in the control of its rightful owner. Today's date is 2019-04-09.

Signature:

Code:

HAu9r2c1BiSargEC2hf9C708ZhIrRYsla+WI/bHrSM7VOPfl241NjpaXGbXxDDrcOKBh1wY62iRbKcm1/Wi8ndo=

verified and archived.

Unfortunately, Zepher is dead. I will put in a counter-positive trust. You will need to contact suchmoon and lauda to have their negative trust removed.

[SwingFirst]

Big update!

Address:

Code:

1DNwZfpCYkmPP82xty7HThv9ngadjQa2T2

Message:

Code:

I'm SwingFirst from bitcointalk.org, and the account is back in the control of its rightful owner. Today's date is 2019-04-09.

Signature:

Code:

HAu9r2c1BiSargEC2hf9C708ZhIrRYsla+WI/bHrSM7VOPfl241NjpaXGbXxDDrcOKBh1wY62iRbKcm1/Wi8ndo=

verified and archived.

Unfortunately, Zepher is dead. I will put in a counter-positive trust. You will need to contact suchmoon and lauda to have their negative trust removed.

Thank you so much! I appreciate your help. I have contacted the other users to let them know as well.

What happened to Zepher..?

[hacker1001101001]

What happened to Zepher..?

He passed away. You can know more about it here.

Zepher Memorial Thread

[bones261]

@SwingFirst. You may want to take steps to delete the messages the hacker left. Otherwise, if he plagiarized any posts, it could cause trouble for you in the future. Also, it appears that the hacker joined a bounty campaign along with other alt accounts, which is why Lauda tagged your account.  You may want to hold off on the delete posts project until Lauda can review her negative trust comment to see if it is still valid. From what I can tell, so far, the person who hacked your account was posting in a local board about the ICO that he was also collecting a bounty on, staring in September 2017.

Edit:Lauda removed her comment. You may want to start your delete post project. Also, you may want to ask theymos if he can just remove the Zepher comment. Otherwise, your trust score will still be negatively impacted even with my counter positive. (The score won't be negative but will be less positive than it should be.)

[suchmoon]

I have removed my rating.

[SwingFirst]

@SwingFirst. You may want to take steps to delete the messages the hacker left. Otherwise, if he plagiarized any posts, it could cause trouble for you in the future. Also, it appears that the hacker joined a bounty campaign along with other alt accounts, which is why Lauda tagged your account.  You may want to hold off on the delete posts project until Lauda can review her negative trust comment to see if it is still valid. From what I can tell, so far, the person who hacked your account was posting in a local board about the ICO that he was also collecting a bounty on, staring in September 2017.

Edit:Lauda removed her comment. You may want to start your delete post project. Also, you may want to ask theymos if he can just remove the Zepher comment. Otherwise, your trust score will still be negatively impacted even with my counter positive. (The score won't be negative but will be less positive than it should be.)

Thank you for your post, yes I saw that Lauda removed the neg trust. I will formulate something for theymos when I have the time to, hopefully it will be possible to remove Zepher's negative trust from my profile. However I'm not sure that the forum administrators do such things. Worth a shot though, for sure.

I have removed my rating.

Thank you so much, suchmoon!