Lethn could potentially be compromised

[Welsh]

Okay, so I've just come across a few highly suspicious posts from Lethn which I've never seen him make before. I checked his trust page and it seems his email has been changed recently but, not his password. Although, maybe I've caught it too late and they've changed the email since. Well looking at his post history he's now breaking rules continuously by posting these types of messages:

Looks like nice project here

Watching....

This is after a very long post gap. I've almost certain that this account has been hacked as they never posted these types of messages before and I think I remember Lethn being a somewhat productive member.

Profile link: https://bitcointalk.org/index.php?action=profile;u=71158
Here's a archive of his posts: https://archive.is/1tWZp

A signed message would likely be the solution here as I do believe it's been compromised. I just don't think the old Lethn that I remember posting would not post these types of messages.  I've reported to the messages which are breaking the rules and the ones that made me highly suspicious and have asked the staff members to take a look. But, I've included a archive of his posts before reporting these messages.

Looking at his post history seems to show that he was heavily involved in the Off topic and politics sections, and rarely if ever posted in the altcoin sections. Although, peoples desires change and it does seem that these posts are very similar to the ones that are made daily by hundreds of accounts.

Would appreciate anyones input on this.

[1714614683]

1714614683

[1714614683]

1714614683

[1714614683]

1714614683

[SFR10]

I checked his trust page and it seems his email has been changed recently but, not his password.

You missed it, recently there was a password change (Security log).

Code:

March 06, 2018, 10:06:09 PM - Lethn - password changed

Would appreciate anyones input on this.

Based on the obvious different posting styles, someone else is using it now (IMO).

[hilariousandco]

Yeah, I remember him and his style is very different. It would probably be very easy for the real Lethn to prove that it was his account as he uses that name elsewhere on the net. This is probably his reddit: https://www.reddit.com/user/Lethn

He also used to try sell various things here (and elsewhere) including jewellery: https://bitcointalk.org/index.php?topic=121471.msg9560168#msg9560168

[Welsh]

Good job on tagging the account.

You missed it, recently there was a password change (Security log).

Code:

March 06, 2018, 10:06:09 PM - Lethn - password changed

Would appreciate anyones input on this.

Based on the obvious different posting styles, someone else is using it now (IMO).

Thanks for finding that at the time I didn't check the seclog because I went offline shortly after spotting this.

Yeah, I remember him and his style is very different. It would probably be very easy for the real Lethn to prove that it was his account as he uses that name elsewhere on the net. This is probably his reddit: https://www.reddit.com/user/Lethn

He also used to try sell various things here (and elsewhere) including jewellery: https://bitcointalk.org/index.php?topic=121471.msg9560168#msg9560168

Anyone who has an account on Reddit might want to contact him. I only browse Reddit and don't actually have an account. I think it would probably be better coming from an established member at Reddit than a newly created account with no posts.

[warningsigns]

I love it when forum members band together to render hacked accounts useless. This was a nice catch. Left undetected, whoever took over that account would have had a window of opportunity to wreak havoc on the community by scamming unsuspecting members. Given the account's age and rank, it puts the hacker in full control of negotiations and terms while trading with lower tiered users here or any member for that matter. Yes, this was definitely a good catch. Thank you Welsh. And thanks to those who quickly tagged the account too.

That's a subtle way of reviving the account. A couple of single-sentence lines. Probably testing the waters to see if the long hibernation and change of access credentials will pass undetected. Good thing they weren't overlooked.

Well done.

[Welsh]

If I remember tomorrow I'll try to get into contact with Lethn and notify him that his account appears to be compromised. Looking at that Reddit account he posts very similar posts to what he posted of old on this account linked here. He'll likely want to get the account sorted out if he's aware it's been compromised.

I love it when forum members band together to render hacked accounts useless.

It's nice to see that forum members are still working towards a common goal when it comes to forum security and cleanliness. Far too much of members attacking each other these days.

[1Lethn1]

Hey guys, it's been a long time and I know this is a major necro. I gave up on this forum awhile back just because of the amount of DDOS attacks and general technical problems that were going on but it's nice to see that the community is still alive and the site is actually working again. The person posting under my account was definitely not me, it's been hacked, is there any chance I could PM a mod or something and have the password reset and have it attached to an email I choose? The hacker has probably gone and changed that too and I don't remember which one I was registered to.

If you want to know what's going on, you're right with your investigating, I have an account I'm very active with on Reddit and I also have a Steemit blog too, like all of you I suspect I use junk passwords for websites like this so the hacker isn't going to be getting anything valuable.

[cissrawk]

is there any chance I could PM a mod or something and have the password reset and have it attached to an email I choose? The hacker has probably gone and changed that too and I don't remember which one I was registered to.

You need to sign address from your old bitcoin address to proof if thats account is yours. See this for more information Recovering hacked accounts or accounts with lost passwords

[1Lethn1]

Ah crap, that's not happening then, I'll just use this fresh account.

[hilariousandco]

You can't sign a message? You must have posted a few addresses over your time. The email was changed but it begins with 'gara' now.

[1Lethn1]

I have but they're all out of date and I don't use them anymore since they weren't that important, ah well, I can just hop onto my old thread and use that with this account instead.