Bitcoin Forum
October 28, 2020, 08:41:20 AM *
News: Latest Bitcoin Core release: 0.20.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: ■■■My 2014 Full Member account was hacked, help me to find how and to recover it  (Read 345 times)
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
June 21, 2018, 07:53:25 AM
Last edit: July 27, 2018, 03:35:08 PM by WeAreSoSory
 #1

My account has been hacked at May 17. I did what I have to do to get back. I have singed a message with my Bitcoin adress which I posted to account recovery topic. Huh
I don't know how, my account was hacked Sad
I already blocked the account and sent to Cyrus a signed message, I hope it will be resolved soon.
The account should be locked now and I hope the hacker will do no harm, I opened this thread mainly to try to understand how I was hacked.


Here the signed message:
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account Quite has been hacked/lost. Please reset the email to sonses10@gmail.com. The current date is 21.06.2018.
-----BEGIN SIGNATURE-----
18rHTUS5VfsBupSqXqxoj5nPwsWweRoE2f
ILLelKV90R40Ul0sP/f2MMYhbP7z6osqfm0Z5v6A3wx1M9uB7wQ2dCCStqoEhQ5ciipaOaAPT4bCCCIvqzQpwcI=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: https://bitcointalk.org/index.php?action=profile;u=239265   (Bitcoin address: 18rHTUS5VfsBupSqXqxoj5nPwsWweRoE2f)

Evidence:
My BTC address; On the Bitcointalk.org profile, you can see the "Bitcoin address" section of the Google WebCache resource below. April 17, 2018, 12:57:15 AM
https://webcache.googleusercontent.com/search?q=cache:BgnTzLCuLUIJ:https://bitcointalk.org/index.php%3Faction%3Dprofile%3Bu%3D239265+&cd=1&hl=tr&ct=clnk&gl=tr

Again, to verify the BTC address in my profile; If I check my profile at https://web.archive.org, we can see that my BTC address appears on Bitcoin address on November 26, 2017, 01:26:19 PM.
Here: https://web.archive.org/web/20171126132619/https://bitcointalk.org/index.php?action=profile;u=239265


EDiT: http://archive.fo/ZAQjk
I recorded the archive. Because the Google cache record has been refreshed.

Google cache entries are also here.
02/november 2017





incoming mail when my account rings.

incoming mail when my account rings.

1603874480
Hero Member
*
Offline Offline

Posts: 1603874480

View Profile Personal Message (Offline)

Ignore
1603874480
Reply with quote  #2

1603874480
Report to moderator
1603874480
Hero Member
*
Offline Offline

Posts: 1603874480

View Profile Personal Message (Offline)

Ignore
1603874480
Reply with quote  #2

1603874480
Report to moderator
1603874480
Hero Member
*
Offline Offline

Posts: 1603874480

View Profile Personal Message (Offline)

Ignore
1603874480
Reply with quote  #2

1603874480
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1603874480
Hero Member
*
Offline Offline

Posts: 1603874480

View Profile Personal Message (Offline)

Ignore
1603874480
Reply with quote  #2

1603874480
Report to moderator
1603874480
Hero Member
*
Offline Offline

Posts: 1603874480

View Profile Personal Message (Offline)

Ignore
1603874480
Reply with quote  #2

1603874480
Report to moderator
1603874480
Hero Member
*
Offline Offline

Posts: 1603874480

View Profile Personal Message (Offline)

Ignore
1603874480
Reply with quote  #2

1603874480
Report to moderator
Steamtyme
Legendary
*
Offline Offline

Activity: 1176
Merit: 1830


www.btcgosu.com


View Profile WWW
June 21, 2018, 10:03:51 AM
 #2

Pretty sure you will receive the same answers as this person did

https://bitcointalk.org/index.php?topic=3652698.0

Really comes down to getting sucked in by a phishing link or having not changed your password after one of the database hacks.

Good luck in recovering your account

WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
June 25, 2018, 07:12:25 AM
 #3

My account has been hacked at May 17. I did what I have to do to get back. I have singed a message with my Bitcoin adress which I posted to account recovery topic. Huh
I don't know how, my account was hacked Sad
I already blocked the account and sent to Cyrus a signed message, I hope it will be resolved soon.
The account should be locked now and I hope the hacker will do no harm, I opened this thread mainly to try to understand how I was hacked.


Here the signed message:
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account Quite has been hacked/lost. Please reset the email to sonses10@gmail.com. The current date is 21.06.2018.
-----BEGIN SIGNATURE-----
18rHTUS5VfsBupSqXqxoj5nPwsWweRoE2f
ILLelKV90R40Ul0sP/f2MMYhbP7z6osqfm0Z5v6A3wx1M9uB7wQ2dCCStqoEhQ5ciipaOaAPT4bCCCIvqzQpwcI=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: https://bitcointalk.org/index.php?action=profile;u=239265   (Bitcoin address: 18rHTUS5VfsBupSqXqxoj5nPwsWweRoE2f)

Evidence:
My BTC address; On the Bitcointalk.org profile, you can see the "Bitcoin address" section of the Google WebCache resource below. April 17, 2018, 12:57:15 AM
https://webcache.googleusercontent.com/search?q=cache:BgnTzLCuLUIJ:https://bitcointalk.org/index.php%3Faction%3Dprofile%3Bu%3D239265+&cd=1&hl=tr&ct=clnk&gl=tr

Again, to verify the BTC address in my profile; If I check my profile at https://web.archive.org, we can see that my BTC address appears on Bitcoin address on November 26, 2017, 01:26:19 PM.
Here: https://web.archive.org/web/20171126132619/https://bitcointalk.org/index.php?action=profile;u=239265



I'm waiting for support
nngella
Member
**
Offline Offline

Activity: 252
Merit: 41


View Profile
June 25, 2018, 07:17:29 AM
 #4

You can refer to this thread:
Recovering hacked accounts or accounts with lost passwords

Moreover, I highly recommend also this another thread: Legendary account got hacked - 5 months gone - Signed message included.  There are ongoing discussions on how to recover a hacked account on this thread.  This will help you to find steps moving forward to recover your account.

I hope this helps.
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
July 02, 2018, 02:58:47 PM
 #5

I'm waiting for support
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
July 05, 2018, 01:29:18 PM
 #6

I'm waiting for support!
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
July 14, 2018, 07:26:01 AM
 #7

please help me.
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
July 23, 2018, 04:46:47 PM
 #8

pls help me
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
July 27, 2018, 02:55:47 PM
Last edit: July 27, 2018, 03:24:15 PM by WeAreSoSory
 #9

bump

http://archive.fo/ZAQjk
LoyceV
Legendary
*
Offline Offline

Activity: 2016
Merit: 7084


Thick-Skinned Gang Leader


View Profile WWW
July 27, 2018, 10:58:50 PM
 #10

I've received a PM from OP, asking if I can help get his account back. I'll respond here: I'm not an Admin, so I can't do anything.

I can however check my own records: The account Quite was registered on Feb 5, 2014, and I can confirm it only had 15 posts on Oct 18, 2016. The profile didn't show an addy at that time.
Looking into the post history, there are no posts between Feb 25, 2014 and May 5, 2017. The posts, however, changed from long posts in a language that I can't read, to spammy oneliners that look like its only meant to rank up the account. The 3 year posting gap makes me wonder if you are the original account owner. A staked address should be old, and I doubt Admins will accept a quite recent archived address as proof of ownership.

Really comes down to getting sucked in by a phishing link or having not changed your password after one of the database hacks.
With a decent password, the database hack isn't a problem. Only the easy passwords can be brute forced.

WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
July 28, 2018, 04:40:49 AM
Last edit: July 28, 2018, 04:54:21 AM by WeAreSoSory
 #11

I've received a PM from OP, asking if I can help get his account back. I'll respond here: I'm not an Admin, so I can't do anything.

I can however check my own records: The account Quite was registered on Feb 5, 2014, and I can confirm it only had 15 posts on Oct 18, 2016. The profile didn't show an addy at that time.
Looking into the post history, there are no posts between Feb 25, 2014 and May 5, 2017. The posts, however, changed from long posts in a language that I can't read, to spammy oneliners that look like its only meant to rank up the account. The 3 year posting gap makes me wonder if you are the original account owner. A staked address should be old, and I doubt Admins will accept a quite recent archived address as proof of ownership.

Really comes down to getting sucked in by a phishing link or having not changed your password after one of the database hacks.
With a decent password, the database hack isn't a problem. Only the easy passwords can be brute forced.

Firstly, thank you.

I understand your doubts. But I am the first and only owner of the account. Look, it's just a screenshot of what I have when I have 46 messages. My name is as a user. In addition, the BTC address is the same as the 46th message. I've been keeping the same BTC address since the first day.



I also posted my first 15 posts in 2014, the domain name is Bus Ticket, which is on the website. I still own the property.
http://archive.fo/cwkNP
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
July 30, 2018, 05:42:12 AM
 #12

bump
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
July 31, 2018, 09:19:10 AM
 #13

Bumper
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
August 04, 2018, 04:09:29 AM
 #14

Pump Smiley Go
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
August 06, 2018, 04:39:12 PM
 #15

pump  Huh
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
August 07, 2018, 04:40:05 AM
 #16

Help me.
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
August 20, 2018, 06:52:30 AM
 #17

Bumper
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
September 04, 2018, 02:52:22 PM
 #18

pump
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
September 07, 2018, 10:44:13 AM
 #19

pump

pumping
WeAreSoSory
Member
**
Offline Offline

Activity: 238
Merit: 14


View Profile
September 15, 2018, 02:19:16 PM
 #20


Hey, help me please.
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!