Hacked account recovery

[vagnavs2]

I started this process October 27th. Losing hope on recovering my account. I would pay a small sum to recover it.

[1713265540]

1713265540

[1713265540]

1713265540

[1713265540]

1713265540

[dissident]

How does this happen? Do people simply guess easy passwords? My password for this one includes symbols, numbers and shit.

[theta1]

Yes, brute force very likely, aided by very bad forum design, in that they allow a user to change the account's registered email address without requiring approval by the old email or at least giving the option to reject the change! If it weren't for that the hack would be fruitless, as the rightful owner could easily change the password back (whereas right now the only defence is to lock the account).

[hilariousetc]

How does this happen? Do people simply guess easy passwords? My password for this one includes symbols, numbers and shit.

Yeah, the very weak ones can be broken in seconds. There are websites where you can check how strong your password is such as: https://howsecureismypassword.net/

Try something similar to your password and see what it says, but merely using a dictionary word with a couple of symbols and numbers doesn't make it unbreakable but the longer it is with numerous symbols and numbers will make it much stronger. Ideally it should be some random gibberish with a lot of symbols and numbers and upper and lower case.

[yogisp1]

the same problem ..
icant sig in my older acount

[theta1]

Bump

[singlebit]

Earlier today I received an email saying that the email address of my bitcointalk account (theta) was changed, and then another one saying that my password was changed.
The only option available was to lock the account and then try to recover it.
I did lock it and then checked the instructions for recovery (https://bitcointalk.org/index.php?topic=497545.0). They require signing a bitcoin address or a PGP key that was previously mentioned and therefore is known to belong to the account holder.
The problem is I haven't publicly disclosed either so according to these instructions I can't recover my account.
I find this hard to believe.
First of all, how come an email address change is allowed without confirmation or at the very least time-locking from the previous email address? And how come I can't recover it now, again by returning ownership to the original email address?
There must be another way to recover it. What shall I do?

The way that you only to recover your account is using your blockchain wallet staking in your account.

[theta1]

Yes, indeed. I have however already signed the required message with an address that was shown in my profile, as you can see from the discussion in this thread. I have sent the signed message to Theymos and Cyrus, and have received no response yet. I will wait for longer, while hoping that another mod /admin will help with action being taken to restore my account.

[hoticotk]

Yes, indeed. I have however already signed the required message with an address that was shown in my profile, as you can see from the discussion in this thread. I have sent the signed message to Theymos and Cyrus, and have received no response yet. I will wait for longer, while hoping that another mod /admin will help with action being taken to restore my account.

me too, i have been waiting for long without any response

[Shazam!!!]

theta1's signed message is good. I verified it before, but I do not see the other thread it was in.
Probably removed because of this thread. Hopefully someone can look into this soon, and the many other accounts like
this. It would be nice if the forum would allow a "team" of volunteers to work on this issue. I'd sign up for it, and try
to clear some space on this board.

[theta1]

theta1's signed message is good. I verified it before, but I do not see the other thread it was in.
Probably removed because of this thread. Hopefully someone can look into this soon, and the many other accounts like
this. It would be nice if the forum would allow a "team" of volunteers to work on this issue. I'd sign up for it, and try
to clear some space on this board.

Thank you. Is any mod watching please?

[theta1]

bump

[vagnavs2]

Anyone here have any success? Been waiting since October 27

[theta1]

bump
can someone please take a look?

[Got Hacked]

Hello,
I created this account as my account got hacked. So I PMed theymos with a bitcoin signed message, hoping to get back my access. This message is to make sure that It's me who PMed thymos. My hacked and locked account User name is: arghabd; Hope it helps.
Thanks a lot.

[theta1]

bump

[mapuche33]

I wonder why your compromised Full Member account theta with only -2 red trust reports to be Last Active on: November 23, 2017, 05:37:28 PM . What made the spammer abbandon it ?
 
Either way, I just ignored your hacked account (however not sure if my current rank makes any difference) once you manage to recover your account you'll have to sign another message to confirm it, so I can remove my red trust.
I believe starting a red trust campaign on those hacked accounts who has been reported + verified successfully will cause a significantly harm on those scammers who bought your hacked account for spamming / shady purposes.

[theta1]

I wonder why your compromised Full Member account theta with only -2 red trust reports to be Last Active on: November 23, 2017, 05:37:28 PM . What made the spammer abbandon it ?

Hi,
I'm not sure I understand the question, but the last activity is in Nov 23, 2017 because that's when I locked the account. I did it immediately as soon as I received the notification that my password was changed, as I mentioned that in the very beginning of this thread. So it's not that the hacker abandoned it, it's that it's locked and can't access it themselves.

Either way, I just ignored your hacked account (however not sure if my current rank makes any difference) once you manage to recover your account you'll have to sign another message to confirm it, so I can remove my red trust.
I believe starting a red trust campaign on those hacked accounts who has been reported + verified successfully will cause a significantly harm on those scammers who bought your hacked account for spamming / shady purposes.

I guess you are referring to a case where a hacker uses a hacked account successfully for a long period, in which case reducing their trust would compromise their strategy. In my case the hacker didn't even manage to post a single message because I locked the account immediately.
I would love to have my account back and remove the red trust and go back to where we were. Perhaps as we approach the 1 year anniversary, a moderator will help me recover it! 

[mapuche33]

Time flees.. no updates so far, very disappointed about staff management and their false promises. 

I see you was lucky enough to lock your account within the 15 days window.. many others (including myself) were hijacked, used their profiles for spam / deceiving others, sold the accounts multiple times and even ignored all recovery & ban attempts from their legitimate owners.
Recovery of hacked accounts should be #1 priority, it is not rocket science and even a single volunteer could revert most of the damage that hackers has been making consistently over the years because of a second market that allows account buying/selling. Admins are well aware of this but they don't care nor enforce the rules or security measures.

[theta1]

One more nudge. More than a year has passed now.