Someone is selling bitcointalk database?

[lighpulsar07]

Hello I was looking for a registration link for an online game in my spam box until i notice this email saying that he's selling bitcoin database and it was sent to me 4 hours ago is this true? if in that case i should change my password now since my account can be comprimised if that darabase gets leaked online by the way, here is the link if the image didin't worked https://imgur.com/a/AVVJV
 

[1713450839]

1713450839

[1713450839]

1713450839

[1713450839]

1713450839

[1713450839]

1713450839

[Str1x]

Seems like a phishing attempt, WHOIS of that email server gives me nothing: https://www.whois.com/whois/e-room.ru

Maybe if you are brave just mail that guy and check what he is suggesting, which btc adress etc. But be cautious, don't provide any information/private keys etc.

[AdolfinWolf]

Hello I was looking for a registration link for an online game in my spam box until i notice this email saying that he's selling bitcoin database and it was sent to me 4 hours ago is this true? if in that case i should change my password now here is the link if the image didin't worked https://imgur.com/a/AVVJV
 

Yes, this could be true, the bitcoin database got hacked back in 2013 and its content were being sold on the deep web, https://www.cryptocoinsnews.com/hacked-bitcointalk-org-user-data-goes-up-for-sale-on-dark-web/

If you had an account back in 2013 with a weak password, it would be wise to change it as they could easily be cracked.

[Warfare]

There was also another breach in 2015: https://bitcointalk.org/index.php?topic=1067985.0

[k3rnel31]

yeah , i have the bitcointalk.org database very long time ago , but the passwords most of them are salted wich takes very long time to unhash them , unlike md5 & sha1 and contains only the first 700k

userid,username,password,email,ip, ....

but they can be compared by commun email:pass of other database powned , here is the site that been collecting all powned and leaked database  , and bitcointalk is there , but has only 500k , the one that i have is 700k

https://haveibeenpwned.com/PwnedWebsites#BitcoinTalk

you can also check ur mail,username there if you are ..

yet there is a vuln right now on the bitcointalk wich is very very sensitive , extract username from email , if i know bitcointalk will give me good $ i will report it  , but i already did that before and got scammed

[Delicieuxz 2]

Hello I was looking for a registration link for an online game in my spam box until i notice this email saying that he's selling bitcoin database and it was sent to me 4 hours ago is this true? if in that case i should change my password now here is the link if the image didin't worked https://imgur.com/a/AVVJV
 https://imgur.com/a/AVVJV

Yes, this could be true, the bitcoin database got hacked back in 2013 and its content were being sold on the deep web, https://www.cryptocoinsnews.com/hacked-bitcointalk-org-user-data-goes-up-for-sale-on-dark-web/

If you had an account back in 2013 with a weak password, it would be wise to change it as they could easily be cracked.

Ah. So that could be why there are so many hacked account here, and why my own account has been hacked and is currently in control of somebody attempting to scam people out of money with a phony ICO thread filled with bot post.

I've posted the details of my hacked account, and the ICO likely-scam that the hacker is trying to pull off using my hacked "Delicieuxz" account, in this thread: https://bitcointalk.org/index.php?topic=2645474.0

[quest2]

This could also explain how my account got hacked recently.

[bitgamerz]

This could also explain how my account got hacked recently.

no it does not.

[jambola2]

This could also explain how my account got hacked recently.

Far more likely that someone is pretending to have the database and you just lost your account, rather than actually having the database and also using it to hack your account specifically.

Also, IIRC, the passwords are hashed with 7500 rounds of sha256crypt, and salted uniquely for each user. So even having the database does not make it much easier for someone to get a password.

[eXOBeX2]

Same here, account was hacked last weekend and taken over by sergun1646@yandex.ru. If the forum had a built-in delay between password changes and email address changes (say 7 days) I could've reclaimed my account. As it was both were changed within seconds of each other so all I could do was click the link in the address-change email notification and lock the account so nobody else could use it. I've had to set this up as a replacement now.

Far more likely that someone is pretending to have the database and you just lost your account, rather than actually having the database and also using it to hack your account specifically.

There have been several recently-posted cases in the forums of accounts being hacked. I guess it's all a coincidence and we're all just "losing" them, eh?

[lucky7GamingWannaRecover]

I got my real account just hacked (Lucky7Gaming) that I had for years.  Really bummed about it too....same it was the yandex email (ohavaldi@yandex) and I couldn't do anything since the password and email were changed so quickly.  Is there any way to recover the original account?

[eXOBeX2]

Did you follow the link in the notification email? That will have let you lock the account at least.

[belyaevi]

I got my real account just hacked (Lucky7Gaming) that I had for years.  Really bummed about it too....same it was the yandex email (ohavaldi@yandex) and I couldn't do anything since the password and email were changed so quickly.  Is there any way to recover the original account?

You need to follow this https://bitcointalk.org/index.php?topic=497545.0. If this does not help, create a new thread for this.

[lucky7GamingWannaRecover]

Yeah, I locked it but I don't have many ways to really prove it was mine since I never really did transactions through here......not sure if there's any other way to prove it ither than it's getting hacked by this one ring of hackings.