My account got hacked and I am wondering how

[Derfcoin]

Hi

A little while ago someone changed the password of my account  (this one).

When I tried to login, it kept saying password incorrect.

I ran antivirus and my system is clean. No Keyloggers.

Luckily they didn't change the email address so I was able to use the forgot password option.

How did I get hacked???

Or is there a known glitch where it says password incorrect even when the password is right?

[owlcatz]

Lots of people are getting hacked lately. was your password strong or did it have dictionary words in it etc etc?

Scan your local system with malwarebytes maybe?


Looks like you got really lucky, and caught it just in time...

Today at 06:21:17 PM - Derfcoin - password reset via email

[seven2smoke1]

Hopefully, he didn't change your bitcointalk email address, because I see a lot of topics about member got hacked and the hacker is eligible to change the email and password without any confirmation to your email, so you can't do anything about that. I think this point is the weakness in the security of the forum. I already suggest a few solutions about improving security you can see it here.

[Derfcoin]

Lots of people are getting hacked lately. was your password strong or did it have dictionary words in it etc etc?

Scan your local system with malwarebytes maybe?


Looks like you got really lucky, and caught it just in time...

Today at 06:21:17 PM - Derfcoin - password reset via email

Are you able to see my account history?

Canyou tell me if it shows that someone changed my password?

I never changed my password ever since I created my account.

My password was something exactly like this: doesun20

It's not super weak, but it's not super strong. I just didn't think people would want to hack a forum account!

I never was phished, didn't have malware. I'm really nervous because I don't know if they hacked my end or bitcointalk's

[KWH]

Lots of people are getting hacked lately. was your password strong or did it have dictionary words in it etc etc?

Scan your local system with malwarebytes maybe?


Looks like you got really lucky, and caught it just in time...

Today at 06:21:17 PM - Derfcoin - password reset via email

Are you able to see my account history?

Canyou tell me if it shows that someone changed my password?

I never changed my password ever since I created my account.

My password was something exactly like this: doesun20

It's not super weak, but it's not super strong. I just didn't think people would want to hack a forum account!

I never was phished, didn't have malware. I'm really nervous because I don't know if they hacked my end or bitcointalk's

This is probably the culprit. If you use the same PW on other accounts, it really lowers any security.

[Derfcoin]

Lots of people are getting hacked lately. was your password strong or did it have dictionary words in it etc etc?

Scan your local system with malwarebytes maybe?


Looks like you got really lucky, and caught it just in time...

Today at 06:21:17 PM - Derfcoin - password reset via email

Are you able to see my account history?

Canyou tell me if it shows that someone changed my password?

I never changed my password ever since I created my account.

My password was something exactly like this: doesun20

It's not super weak, but it's not super strong. I just didn't think people would want to hack a forum account!

I never was phished, didn't have malware. I'm really nervous because I don't know if they hacked my end or bitcointalk's

This is probably the culprit. If you use the same PW on other accounts, it really lowers any security.

I don't use the pw for anything else.

And why would I change my password so soon? I only joined three or 2 days ago

[owlcatz]

Lots of people are getting hacked lately. was your password strong or did it have dictionary words in it etc etc?

Scan your local system with malwarebytes maybe?


Looks like you got really lucky, and caught it just in time...

Today at 06:21:17 PM - Derfcoin - password reset via email

Are you able to see my account history?

Canyou tell me if it shows that someone changed my password?

I never changed my password ever since I created my account.

My password was something exactly like this: doesun20

It's not super weak, but it's not super strong. I just didn't think people would want to hack a forum account!

I never was phished, didn't have malware. I'm really nervous because I don't know if they hacked my end or bitcointalk's

Right - So yeah, that password was really weak "doesun20" and yes, many people are trying to hack this site now that btc price is so high.

I see in the https://bitcointalk.org/seclog.php where you changed it - that's what I meant above. You should be fine. Use a very strong password, and consider password manager like LastPass etc. Cheers.

[Derfcoin]

Lots of people are getting hacked lately. was your password strong or did it have dictionary words in it etc etc?

Scan your local system with malwarebytes maybe?


Looks like you got really lucky, and caught it just in time...

Today at 06:21:17 PM - Derfcoin - password reset via email

Are you able to see my account history?

Canyou tell me if it shows that someone changed my password?

I never changed my password ever since I created my account.

My password was something exactly like this: doesun20

It's not super weak, but it's not super strong. I just didn't think people would want to hack a forum account!

I never was phished, didn't have malware. I'm really nervous because I don't know if they hacked my end or bitcointalk's

Right - So yeah, that password was really weak "doesun20" and yes, many people are trying to hack this site now that btc price is so high.

I see in the https://bitcointalk.org/seclog.php where you changed it - that's what I meant above. You should be fine. Use a very strong password, and consider password manager like LastPass etc. Cheers.

The log doesn't show my password changing within the last 4 hours....

Either they can modify that log, or my account was never hacked... and the system just wouldn't accept my password for some reason,

Now I just feel like a crazy person :/

[maeusi]

You can see on the link of preposter, that password wasn't changed. So your account wasn't hacked. I searched the whole page. Nothing Only showing your password reset.You simply forgot your password, I guess.
BTW: If someone changes your password, you get a notification via email and a link, that you can lock your account.

[owlcatz]

The log doesn't show my password changing within the last 4 hours....

Either they can modify that log, or my account was never hacked... and the system just wouldn't accept my password for some reason,

Now I just feel like a crazy person :/

I don't know what you mean. It's right here on the first page of seclog.php :

Today at 06:21:17 PM - Derfcoin - password reset via email

You are not crazy. You changed your own password, that is all....

[Derfcoin]

You can see on the link of preposter, that password wasn't changed. So your account wasn't hacked. You simply forgot your password, I guess.

No, because I also wrote down the pw.

I put in the pw many times, still said incorrect. The last time I tried it went so slow, one finger...

I think maybe most people are not being hacked currently. There is just a weird bug where you cant login with the correct password.

Thanks everyone for the feedback though.

It looks like the only way to secure your account is with a bitcoin address so I'm going to make one especially for bitcointalk

[owlcatz]

You can see on the link of preposter, that password wasn't changed. So your account wasn't hacked. You simply forgot your password, I guess.

No, because I also wrote down the pw.

I put in the pw many times, still said incorrect. The last time I tried it went so slow, one finger...

I think maybe most people are not being hacked currently. There is just a weird bug where you cant login with the correct password.

Thanks everyone for the feedback though.

It looks like the only way to secure your account is with a bitcoin address so I'm going to make one especially for bitcointalk

There is no bug, you probably just mistyped it. Great idea - post and sign a message here for posterity/future use. Have someone quote it. Cheers.  https://bitcointalk.org/index.php?topic=996318.7800

[maeusi]

You can see on the link of preposter, that password wasn't changed. So your account wasn't hacked. You simply forgot your password, I guess.

No, because I also wrote down the pw.

I put in the pw many times, still said incorrect. The last time I tried it went so slow, one finger...

I think maybe most people are not being hacked currently. There is just a weird bug where you cant login with the correct password.

Thanks everyone for the feedback though.

It looks like the only way to secure your account is with a bitcoin address so I'm going to make one especially for bitcointalk

I had this issue on some mobile browsers like opera mini, because the current typed password was changed by the wrong typed and also the numbers of the time field went into password field. That was an issue by missinterpreting browser. .So, if you will have your issue again, then change browser or clean cache. Maybe you had the same issue.

[Derfcoin]

You can see on the link of preposter, that password wasn't changed. So your account wasn't hacked. You simply forgot your password, I guess.

No, because I also wrote down the pw.

I put in the pw many times, still said incorrect. The last time I tried it went so slow, one finger...

I think maybe most people are not being hacked currently. There is just a weird bug where you cant login with the correct password.

Thanks everyone for the feedback though.

It looks like the only way to secure your account is with a bitcoin address so I'm going to make one especially for bitcointalk

I had this issue on some mobile browsers like opera mini, because the current typed password was changed by the wrong typed and also the numbers of the time field went into password field. That was an issue by missinterpreting browser. .So, if you will have your issue again, then change browser or clean cache. Maybe you had the same issue.

! I only use my tablet to log into bitcointalk. Maybe this is what was happening. Maybe it's a browser bug

[yohan09]

To validate  if there's someone who changed your PW. You have to check your email if there are notifications about changing password in your bitcoin profile, if not maybe you just misspell your PW.

[eXOBeX2]

The database was hacked a few years back, it seems the hackers are now decrypting the passwords used. Mine was hacked a few weeks back, this is a new account.

[Derfcoin]

OK maybe I was phished. I could've tried logging on to https://bitcointalk.org/index.php?topic=2270352.0

The site looks identical. Url too.... but if the seclog doesn't show me changing my password twice... then idk.

Also it really looks like people are getting hacked now: https://www.reddit.com/r/Bitcoin/comments/7th9vp/my_bitcointalkorg_account_got_hacked/