Bitcoin Forum
August 22, 2019, 02:14:02 AM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Hacked account recovery. Cyrus, please help!  (Read 262 times)
financial_analyst21
Jr. Member
*
Offline Offline

Activity: 136
Merit: 2


View Profile
December 04, 2017, 08:51:30 PM
 #1

Hello,

My account financial_analyst was hacked on December 1st. I have sent a PM to Cyrus but he hasn't yet replied back. It would be great if this issue could be resolved urgently, since the scammer is probably hurting my reputation in the community, although he hasn't made any posts since he obtained control of the account. I also locked the account, according to the link I received via email from bitcointalk.

My Ethereum address is: 0x62A717b2B56b6ab3EC5E823EC357706cA6586774, as you can see in various old bounty spreadsheets:

https://docs.google.com/spreadsheets/d/1-1irp09IJRftR-ondhzLH7WXlKA9OEInWs0bLLRbMl4/edit?usp=sheets_home&ths=true (Umbrellacoin)
https://docs.google.com/spreadsheets/d/1ioInV6JlI7Gxdr1h7CpGHEJtz6vGWQlOJEo_btoqD3o/edit#gid=0 (Crystal Clear)
https://docs.google.com/spreadsheets/d/1klEzI5A-brCgNdR2TnjYn5F9_49wh_03vUkxT4v6gLA/edit#gid=181114783 (Confideal)
https://docs.google.com/spreadsheets/d/1k3BRK-DHgxSZzjYwB3E9qDPieGsYAlV6CNVLfFFfVpk/edit#gid=542033738 (SNOVIO)
https://docs.google.com/spreadsheets/d/1JlIEzm3iCiLBkjqPlDy5acoQ1z1VC8ag7CwSufGhVWo/edit#gid=305628688 (GOAL)
https://docs.google.com/spreadsheets/d/1WMJKgqajFrDNVauTah71ODbXiAzoCiPKv3eHeuhxWvE/edit#gid=758942846 (Sharpe)
https://docs.google.com/spreadsheets/d/1Utj25HAy2kRbAChhkQIFvzEoD5uFtUJ1XNrMs4AWc00/edit#gid=1048429264 (Tokenstars ACE)

You can also see a lot of old unedited posts in which I have posted my ETH address with the purpose of reserving the Greek translations:

https://bitcointalk.org/index.php?topic=2176452.msg23474880#msg23474880
https://bitcointalk.org/index.php?topic=2257529.msg23281744#msg23281744
https://bitcointalk.org/index.php?topic=2233707.msg23194025#msg23194025
https://bitcointalk.org/index.php?topic=2201288.msg22152003#msg22152003
https://bitcointalk.org/index.php?topic=2047795.msg20772429#msg20772429


Please find attached below the signed message from myetherwallet:

{
  "address": "0x62a717b2b56b6ab3ec5e823ec357706ca6586774",
  "msg": "My account financial_analyst (https://bitcointalk.org/index.php?action=profile;u=191069) has been hacked/lost. Please reset the email to xxx (my email before it was changed by the scammer). The current date is 04/12/2017.",
  "sig": "0x7ff4a832ca9d1c49e304ae3c34841f0499908b9b62ec188e4d8b1512708c0f0e3af482924957d 24dc2470651658e5a9d12f6e963de3e1b3a43569d68af8c87bd1c",
  "version": "2"
}

Always at your disposal, do you think I should provide anything else? I appreciate any prompt action to obtain again the control of my account!

Thank you very much!

Greek Accountant and Translator/Moderator Specialized in Banking/FinTech/Accounting/Investments ICOs
Previous Work  (https://goo.gl/Kx2Ysm)
1566440042
Hero Member
*
Offline Offline

Posts: 1566440042

View Profile Personal Message (Offline)

Ignore
1566440042
Reply with quote  #2

1566440042
Report to moderator
1566440042
Hero Member
*
Offline Offline

Posts: 1566440042

View Profile Personal Message (Offline)

Ignore
1566440042
Reply with quote  #2

1566440042
Report to moderator
1566440042
Hero Member
*
Offline Offline

Posts: 1566440042

View Profile Personal Message (Offline)

Ignore
1566440042
Reply with quote  #2

1566440042
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1566440042
Hero Member
*
Offline Offline

Posts: 1566440042

View Profile Personal Message (Offline)

Ignore
1566440042
Reply with quote  #2

1566440042
Report to moderator
1566440042
Hero Member
*
Offline Offline

Posts: 1566440042

View Profile Personal Message (Offline)

Ignore
1566440042
Reply with quote  #2

1566440042
Report to moderator
financial_analyst21
Jr. Member
*
Offline Offline

Activity: 136
Merit: 2


View Profile
December 04, 2017, 08:57:33 PM
 #2

In my original post there is one space in the sig when I copied the text from myetherwallet and pasted it to this thread:

"0x7ff4a832ca9d1c49e304ae3c34841f0499908b9b62ec188e4d8b1512708c0f0e3af482924957d 24dc2470651658e5a9d12f6e963de3e1b3a43569d68af8c87bd1c"

The correct signature is this one, without the space:

{
  "address": "0x62a717b2b56b6ab3ec5e823ec357706ca6586774",
  "msg": "My account financial_analyst (https://bitcointalk.org/index.php?action=profile;u=191069) has been hacked/lost. Please reset the email to xxx (my email before it was changed by the scammer). The current date is 04/12/2017.",
  "sig": "0x7ff4a832ca9d1c49e304ae3c34841f0499908b9b62ec188e4d8b1512708c0f0e3af482924957d 24dc2470651658e5a9d12f6e963de3e1b3a43569d68af8c87bd1c",
  "version": "2"
}

You may verify this message via this address: https://www.myetherwallet.com/signmsg.html.

Sorry for this inconvenience.

Edit: it seems that the space is something that is generated in bitcointalk. Please remove it manually when you copy this message and you paste it to https://www.myetherwallet.com/signmsg.html.

Greek Accountant and Translator/Moderator Specialized in Banking/FinTech/Accounting/Investments ICOs
Previous Work  (https://goo.gl/Kx2Ysm)
KWH
Legendary
*
Offline Offline

Activity: 1904
Merit: 1045

In Collateral I Trust.


View Profile
December 04, 2017, 09:15:01 PM
 #3

That account was made in 2013 yet you don't have an older address, one older than 3-4 months?
Is that message just a copy and paste? Did you buy that account along with that message? ("The current date is 04/12/2017")

When the subject of buying BTC with Paypal comes up, I often remember this: 

Insanity: doing the same thing over and over again and expecting different results.

Albert Einstein
financial_analyst21
Jr. Member
*
Offline Offline

Activity: 136
Merit: 2


View Profile
December 04, 2017, 09:53:37 PM
 #4

That account was made in 2013 yet you don't have an older address, one older than 3-4 months?

No, I started my activity as participant in bounties since the summer of 2017. My previous activity in the forum from 2013-2017 had to do mainly with GPU mining and I was not a very active member of the community.

Is that message just a copy and paste? Did you buy that account along with that message? ("The current date is 04/12/2017")

What do you mean? It is a signed message from MEW that I control the mentioned ETH address. I am also the original owner of this account from day 1 of its creation.

Greek Accountant and Translator/Moderator Specialized in Banking/FinTech/Accounting/Investments ICOs
Previous Work  (https://goo.gl/Kx2Ysm)
KWH
Legendary
*
Offline Offline

Activity: 1904
Merit: 1045

In Collateral I Trust.


View Profile
December 04, 2017, 09:57:20 PM
 #5

That account was made in 2013 yet you don't have an older address, one older than 3-4 months?

No, I started my activity as participant in bounties since the summer of 2017. My previous activity in the forum from 2013-2017 had to do mainly with GPU mining and I was not a very active member of the community.

Is that message just a copy and paste? Did you buy that account along with that message? ("The current date is 04/12/2017")

What do you mean? It is a signed message from MEW that I control the mentioned ETH address. I am also the original owner of this account from day 1 of its creation.

I asked because of the date the message was signed. I guess you are using a different time/date format than I do.

When the subject of buying BTC with Paypal comes up, I often remember this: 

Insanity: doing the same thing over and over again and expecting different results.

Albert Einstein
financial_analyst21
Jr. Member
*
Offline Offline

Activity: 136
Merit: 2


View Profile
December 04, 2017, 10:02:21 PM
 #6

That account was made in 2013 yet you don't have an older address, one older than 3-4 months?

No, I started my activity as participant in bounties since the summer of 2017. My previous activity in the forum from 2013-2017 had to do mainly with GPU mining and I was not a very active member of the community.

Is that message just a copy and paste? Did you buy that account along with that message? ("The current date is 04/12/2017")

What do you mean? It is a signed message from MEW that I control the mentioned ETH address. I am also the original owner of this account from day 1 of its creation.

I asked because of the date the message was signed. I guess you are using a different time/date format than I do.

Yes, I am sorry, I am using the European date format. I mean December 4th 2017.

Greek Accountant and Translator/Moderator Specialized in Banking/FinTech/Accounting/Investments ICOs
Previous Work  (https://goo.gl/Kx2Ysm)
financial_analyst21
Jr. Member
*
Offline Offline

Activity: 136
Merit: 2


View Profile
December 05, 2017, 09:40:49 PM
 #7

I found the Earthcoin wallet I installed in 2013 and can sign the address I provided in this unedited post from 2013 (eebzvCMa5ho3BraUXzKRpSE7wHh4BNDUwB):

https://bitcointalk.org/index.php?topic=381412.msg4107669#msg4107669

Please find below the signed message:

My account financial_analyst (https://bitcointalk.org/index.php?action=profile;u=191069) has been hacked/lost. Please reset the email to xxx (my email before it was changed by the scammer). The current date is 05 December 2017.

Signature: IPg/jYX9Vf86ucwySnzFb4+Dw0I1l3lP/aoitn1aQQOK0MMtm1cC2VwNj+mVI2mVEaqDK6BiAXwCBU9KTf35aM8=

Greek Accountant and Translator/Moderator Specialized in Banking/FinTech/Accounting/Investments ICOs
Previous Work  (https://goo.gl/Kx2Ysm)
Valak
Full Member
***
Offline Offline

Activity: 419
Merit: 110


Stake & Vote or Become a IoTeX Delegate!


View Profile
December 10, 2017, 04:16:40 PM
 #8

I found the Earthcoin wallet I installed in 2013 and can sign the address I provided in this unedited post from 2013 (eebzvCMa5ho3BraUXzKRpSE7wHh4BNDUwB):

https://bitcointalk.org/index.php?topic=381412.msg4107669#msg4107669

Please find below the signed message:

My account financial_analyst (https://bitcointalk.org/index.php?action=profile;u=191069) has been hacked/lost. Please reset the email to xxx (my email before it was changed by the scammer). The current date is 05 December 2017.

Signature: IPg/jYX9Vf86ucwySnzFb4+Dw0I1l3lP/aoitn1aQQOK0MMtm1cC2VwNj+mVI2mVEaqDK6BiAXwCBU9KTf35aM8=

read sticky , you should pm cyrus/theymos

BackBachvsUp
Copper Member
Newbie
*
Offline Offline

Activity: 252
Merit: 0


View Profile
December 16, 2017, 11:36:41 AM
 #9

why are there so many hacked accounts lately :/

financial_analyst21
Jr. Member
*
Offline Offline

Activity: 136
Merit: 2


View Profile
December 18, 2017, 09:34:06 PM
 #10

Up

Greek Accountant and Translator/Moderator Specialized in Banking/FinTech/Accounting/Investments ICOs
Previous Work  (https://goo.gl/Kx2Ysm)
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!