UPDATE: BTC-e suspended accounts and hacked accounts [Gathering]

[Thran]

UPDATE:

After browsing the trollbox archive (the chat archive for the btc-e chat trollboxarchive.com)
and checking the spaming accounts and user i found more very clear signs whats happens RIGHT NOW on btc-e.
BTC-e is through the chat under a malware attack and they can't fix it.
Please read this update i also posted on page 2 so you get whats going on.

This is the malware domain, posted over and over in the thread since weeks, using hacked accounts which then
got suspended: http://trollboxarchive.com/search.php?search_type=all&search=predictcoin

########
to check it by yourself, click on the different usernames in the link above to follow their chat history. You can see how many old accounts are there.

You can also see how their behaviour changed. Thats is clearly the same user accessing different accounts or the same bot.

- EVERY HACKED ACCOUNT even when half a year old and more and with a clean history vanished forever after he droppped the malware link
- that means this accounts never recovered
- we speak for patterns & accounts since 4-6 weeks ago and more - that means suspended accounts in the limbo since mid/end december,
at last that is the impression what the archive gives

The seized/holded amount of dollar must be somewhat high. There is no sign they was able to access their asset so far.

########


---------------------------

Another example from the trollbox archive.

Here is a user claiming what happens as he signed up for the predict coin page.
Its of course not to verify he is honest, but there are some signs:

- a normal character starts to spread automated spam lines out of nowhere (why should he? At last he should use a different sentence).
- he is explaning it with a twink and see how confused he is
- there is no one helping as you can see
- the bad domain get posted over and over by more and more accounts
- mods KNOW that domain is malware and even warn & ban it !
- different user with different and clean chat history are spaming out of nowhere the malware link

The twink: http://trollboxarchive.com/search.php?search_type=username&search=Thomassmulders
The original account: http://trollboxarchive.com/search.php?search_type=username&search=thomas89

**************************

and again the phishing domain (is a bunch of "predict" domains all using the same layout and all), still active TODAY posted and spread by the btc-e chat:
http://trollboxarchive.com/search.php?search_type=all&search=predictcoin

**************************

Please look at the insane amount of used chars - some of that have history never doing anything wrong.
Then, boom, they spread the malware domain - all with the same sentence.

These are, with a good chance, hacked people. Hacked by links who are spread even now by btc-e because
they can't deal in a sane way with domains in the chat.

Example: i just clicked on the users in the link above. http://trollboxarchive.com/search.php?search_type=username&search=wimmah1985

You see how he is starting to spam that link. then something happend.
When i should guess he logged in (the original owner). Then he starts to wonder what happens. Then he is gone - no post anymore
close after he posted the link. That means with a chance he is also suspended.


As far i know there are alot more cases like that. Just check the users!

It can't be that out of nowhere such many users without any negative history started to pop out as long hidden hackers.
I assume many make it not public for some reason, at last they fear a permanent ban and the lose of all asset.

--------------------------

ORIGINAL POST:

BTC-e suspended alot accounts in the past weeks as their chat was overrun by hackers posting malware links on their (unprotectd aka no whitelist/pre moderation) ajax chat called the trollbox.

To deal with that, they started to use in the last month some pretty basic grep & ban protocol here and there to suspend the accounts of the hackers.

What was a good move in general had some bad side effects: People who tried to warn to access a bad domain and who named that domain
in the chat was suspended too. Suspended means that the whole account access is dropped and all fund are for that time seized.

In my case btc-e seized some bigger amount of $ which i am not able to access for over a week now.
Now, that would be no problem if there that was a way to communicate with btc-e or to withdraw the fund and stop trading.

There are other cases people had no access to their account for a much longer time:
https://bitcointalk.org/index.php?topic=417094.20

But the fact is, that there is no way to communicate:
- you are blocked from all direct site access so you are not able to PM moderators, admins or support
- your have to open a support ticket on a different domain (hdbtce.kayako.com) where your ticket is marked as assigned
but no one is talking to you, answering your question or whatever (after one week)
- if you are in coins you better hope the market did not crash or you are doomed to lose

Let me point out that the problem with the malware is a problem which escalated mainly because BTC-e never added any working spam protection
to their chat. A site is responsible for what is posted on it and it can't be that i add a chat on a trading site where millions are traded and i
simply miss to add a modern spam protection like whitelist and JIT moderation (just in time moderation, which is analysing posts for patterns like unknown
domains and put them on a moderation queue instead make them public).

ATM everyone is blaming gox for using an outdated and/or amateurish working wallet but how is that more worse as a site allowing criminals to
post trojaner links and password stealers over weeks and month on their frontpage just because they are not able to add a whitelist or link excluder to
a simple ajax chat? I and every common web programmer can add such a thing in less a day including testing. There are not many technologies on the web
that are common and already tested like a domain or email grep, whitelisting and chat moderation.

Who else is in the same situation? Who can't access their account and their fund?
Who had money or coins on btc-e seized and how long now?

[DubFX]

You are a Mt. Gox sock puppet:

Name:    Thran
Posts:    3
Activity:    2
Position:    Newbie
Date Registered:    Today at 01:04:24 PM
Last Active:    Today at 04:21:54 PM

Let's see other reply 1st, but yeah this may actually be true thought.

[Thran]

You are a Mt. Gox sock puppet:

Name:    Thran
Posts:    3
Activity:    2
Position:    Newbie
Date Registered:    Today at 01:04:24 PM
Last Active:    Today at 04:21:54 PM

Sigh... so, the first answer i get is a conspiracy theory... Yes, that gives me a good feeling when i think about my money.

What the heck will gox or the illuminati gain from this thread in any way?
Stay away from gox, it sucks and it sucked 8 month ago already, thats the reason i traded on btc-e and not on gox.

EDITED

I don't want that they are shot because that and there is no need to avoid btc-e or anything.
If you want join an exchange now, btc-e should be high on the list.
Except you should perhaps avoid the trollbox because its not only more healthy for your computer but for your brain at all.

BTC-e is a fine trading platform when it comes to trading, there is nothing bad to say and i did not.
That does not changes anything i said - they HAVE the trollbox, the trollbox GOT flooded by trojaner spam and
they DID suspended wrong accounts as collateral damage because they miss the right user protection and perhaps
they even miss it right now - they never communicated that and communication is the real problem here.

The mess is simple the second level: Their support service is a outsourced crap, their dealing with the trollbox amateurish and when this thread helps
to fix only one of that topics then all will win alot, including btc-e itself.

Please also look in this thread: https://bitcointalk.org/index.php?topic=417094.20

And yes, i joined exactly because that. Why should i without? There is not much to say on my side beside that.

[guybrushthreepwood]

What does the [Gathering] is square brackets mean?

[Thran]

What does the [Gathering] is square brackets mean?

It means that people with the same problem should add at last a "me too".

This will help to see there are more poor victims or only me and swof.

Perhaps all happens because the support there speaks mainly russian and little english, you have
to submit bank data for banking problems for example (following suggestions from the mods)
with an russian copy if you want the support to success.

This thread is not to mark, harm or flame btc-e - its there to get a problem solved.
And even i say "its mainly btc-e's fault" does not means i am biased.
I can live with small problems and glitches - but this is a serious one and its also in the interest of btc-e to solve it.

And no, i am not a noob - that is the problem. I know exactly how critical, stupid and easy to solve that chat problem is.
I can fix it in nearly every implementation you can assume. I already fixed problems like that on other sites.
That is mainly what gives me a bad feeling, because i know that even some simple blogs care more about such a problem as
btc-e did in the past. That must change.

[blueberry]

You are a Mt. Gox sock puppet:

Perhaps we should hear him out and see what others have to say and perhaps be helpful before we go all "HE'S A NOOB, GET HIM!" on him?

Fair enough. I am just trying to make people aware of the possibility, because there is a lot of FUD spreading right now about other exchanges/Bitcoin protocol in an attempt to justify MtGox's actions. A lot of these posters are newbies with only a few posts.

Apologies if the poster is a genuine new member. (I deleted the post)

[Thran]

You are a Mt. Gox sock puppet:

Perhaps we should hear him out and see what others have to say and perhaps be helpful before we go all "HE'S A NOOB, GET HIM!" on him?

Fair enough. I am just trying to make people aware of the possibility, because there is a lot of FUD spreading right now about other exchanges/Bitcoin protocol in an attempt to justify MtGox's actions. A lot of these posters are newbies with only a few posts.

Apologies if the poster is a genuine new member. (I deleted the post)

I ensure i am serious, if needed i can give a proof of over 10 years history in the open source szene and the internet at all.
With a good chance users from this forum had contact with one of my projects in the past.

Anyway, i hope i have enough sane arguments to point out my and btc-e's problem so i don't need to throw that in.

If something is not clear or i make no sense, please point it out - i will try to give more examples or infos.

[Barrack Obama]

Hello!

I have a similiar problem, and a friend of mine told me his account containing funds is also suspended out of nowhere!

BTC-E has suspended my account containing 100 BITCOINS after I reported my email being hacked and requested withdraw be locked until I could recover my email.

I got a reply within two hours saying withdraws would be locked, and I was very pleased.

The next day I recovered my email address and changed my btc-e password, and saw that my account is suspended still. I know for a fact all my funds are still safe in my account because when the hacker changed btc-e password to access my account withdraws are auto locked for two days.

So I make a ticket first day asking for my account to be unsuspended, no response. I keep making tickets for the next 6 days and have received not ONE single response.

I have been trading on btc-e for YEARS. This should not happen. It is very suspicious to me, that they replied nearly instantly on my first ticket asking to lock withdraws, but not on one of my 20 tickets I have made asking for a reply as to my account being unsuspended.

For someone who's payed thousands of dollars to btc-e in past years this should not be happening, it's either a scam that's taking place, or very big problems for BTC-E owners and they have 0 time to respond to tickets?

EDIT: I have recieved a response from BTC-E, they have asked for verification in form of IP, trade history, and method of account funding. I am very pleased. My post will be deleted once I get my account back.

[serotin]

just contact them via skype or icq

[Bit_Happy]

Let's see some established users verify any of this, because:

...and who named that domain
in the chat was suspended too. Suspended means that the whole account access is dropped and all fund are for that time seized.
...

I call total BS. When they ban you from chat it has no affect on your account.
I'm sorry if your story is true, but this thread has 2 low post noobs bashing btc-e.
You guys combine truth (i.e thier poor English) with what could be a big pile of lies.

[blueberry]

Hello!

I have a similiar problem, and a friend of mine told me his account containing funds is also suspended out of nowhere!

BTC-E has suspended my account containing 100 BITCOINS after I reported my email being hacked and requested withdraw be locked until I could recover my email.

I got a reply within two hours saying withdraws would be locked, and I was very pleased.

The next day I recovered my email address and changed my btc-e password, and saw that my account is suspended still. I know for a fact all my funds are still safe in my account because when the hacker changed btc-e password to access my account withdraws are auto locked for two days.

So I make a ticket first day asking for my account to be unsuspended, no response. I keep making tickets for the next 6 days and have received not ONE single response.

I have been trading on btc-e for YEARS. This should not happen. It is very suspicious to me, that they replied nearly instantly on my first ticket asking to lock withdraws, but not on one of my 20 tickets I have made asking for a reply as to my account being unsuspended. I have told BTC-E if I do not recieve a response in next week Im hiring a lawyer and contacting authorities.

THIS IS RIDICULOUS.

For someone who's payed thousands of dollars to btc-e in past years this should not be happening, it's either a scam that's taking place, or very big problems for BTC-E owners and they have 0 time to respond to tickets?

I don't know WHAT is up with BTC-E but all I know is do NOT deposit ANY money in the site until these issues are resolved with users.

You already have a thread about this:

BTC-E Account containing 100 BITCOINS hacked!
https://bitcointalk.org/index.php?topic=451267.0


Why did you edit your opening post in the other thread that this issue is resolved? Your original post is quoted by the 2nd post of that thread.

I have been longtime BTC-E trader. Recently, a ton of yahoo accounts have been hacked and it's all over the news.

I was one of them.

So your yahoo mail account was hacked...

I foolishly used the same password to login to my email that i used to register my btc-e account..

You used the same password for yahoo email and btc-e and kept 100 BTC in that account???

The hacker was able to get into my email assocaited with my btc-e account and changed my security questions and backup email for that account. He then hacked into my btc-e account and changed the login information.

So let's get this stragiht:
No 2FA for yahoo mail
No 2FA for btc-e
Used same password on both sites.
100 BTC kept in this account.

and you blame btc-e for your own stupidity?


6 days have passed since you edited your opening post in the other thread that the issue was resolved.

And why the need to post in another thread on this issue?

[Wimmah]

Well yeah, I'm an so called 'post noob too', but never the less; I've got the same problem. Noticed my account was hacked; quickly changed my password; and everything seemed allright again: My funds were still there and there were no false logins on my account anymore.

The next day I wanted to trade on my account, but suddenly I was suspended. Thran, I agree this is a adequate action of btc-e . I appreciate their awareness of hacked accounts. And it's OK for me they freeze an account some time if it's been hacked (or an attempt of it)

But then my attemps to regain my account and funds failed. Filled in a couple of tickets (in English and Russian) but after a week: no repley at all...

This frustrates me. Why do they have an ticket option 'account hacked' but don't answer any of them. Also, it should be helpful is they send an automatic e-mail when your account is hacked, which states out an procedure and time of this suspend. In stead I was suprised to see my account suspended after a day... an now don't know how or when I get my account and funds back.

To make clear: I'm not an BTC-e basher. I enjoyed trading on their site...

[Mythul]

BTC-e are really top notch, especially their trading engine. To bad they are Russian sponsored, incorporated in Cyprus with the servers in Bulgaria. But hey....it's the early age in Bitcoin development right ?

[Wimmah]

Agree on that, but they would be much more top notch if they replyed on tickets of suspended user accounts...

[renee25]

obviously they detected unusual activity in your account and suspended it.
i'm sure this has a timer , like money hold, and after that it will be reenabled.

i suppose they do this to give you time to "clean" your computer and reset all of your passwords to secure ones,
after that you should then ask them to re-enable your account.

however, as they don't know who is the legit owner, they will most likely not raise the block/money hold until the timer runs out, if you are in a hurry you should add your ID on the ticket.

[Wimmah]

Hmm oké... that could be the case...

If they only would announce how long this timer will hold my account, things would be a lot less mysterious though.

[Thran]

just contact them via skype or icq

This is one of the things where i don't know what to say...
Or alot.

First: This problem has nothing really to do with btc-e as exchange - and they can't fix it.
Its just an ill advise and btc-e already removed official support lines to skype from their site.

Ok, in simple words: Following this "suggestion" will lead you with a high chance to a hacker who will try to steal the account.
Lets me show why.

If you look at the btce-e.com site you will notice that there is no hint to any skype, icq or any other support medium as the 2
links on their frontpage - the "support" link listed by contacts  under the chat & twitter box and the support link in the main menu.

Both leads to this page: http://hdbtce.kayako.com/

This is the official and ONLY way to contact the support.
That is also the only way to open a ticket. No ticket, no support.

In theorie, the support can contacted in the chat - but checking the support chat history shoes that
the support only answered 2 times in the last 6 month. Half a year ago it was different, since that the
support account was not used for answers in the chat:
http://trollboxarchive.com/search.php?search_type=username&search=support

I assume that was the date where btc-e buyed the help desk at kayako.com and outsourced the non critical
support questions to some externals. Which is nothing special, alot companies does the same.

So, skype... How should we do that?
Lets try it. We search for "btc-e support".

This is what you will see:
https://imageshack.com/i/j7c0h4j

As you can see we alot support there - 7!! account claiming to be the btc-e support.

Well... at last one should be the official one. 1 or 2 perhaps are some special case one.
But 50% or more of that are just hackers waiting for poor noobs and their accounts.
How is that possible?

Simple: Skype is not an unique address system but a name system. Anyone can select the name
btc-e support and even if you know the EXACTLY name the search will also list the hackers.
Thats not a bug but the design. Like a phone book will give you all members of the same name and it will
not pre select for you.

So... lets play russian roulette... which one?
I mean it... What would you select? Everyone reading this can also search this forum, i don't post links to the sad
threads here where people posted their experience with the hackers and their accounts. Not funny.

There is one way to know the right skype account- where even IS NOT SURE its still valid or in the meantime overtaken by
some hackers - there is no official link anymore.

Here is a a trollbox archive link where a chat moderator tells a user the right skype channel - and some more:
http://trollboxarchive.com/search.php?search_type=all&search=Thomassmulders

Quote: "bumface    ... Thomassmulders, support.btc-e hdbtce.kayako.com (thailand ) is real"
and
"bumface, thnx mate the other one is asking for passwords to " fix" your problems"

So, this tells us 2 things: the real support name and the fact the mods and btc-e knows that the others
are not real.

What means not real? Well, thats clear, or? That are the hackers.

Now, everyone in this thread and reading - ask yourself: How would normal experienced user in terms of the internet and all
handled this? How big is the chance that he comes to this thread, reads the answers to this thread who claims me and the other persons
with the similar problems are noobs and perhaps telling not the truth?

But the guy giving the advise which leds to more hackers as real support is not commented ?
Make your mind. Its not good.

[Thran]

obviously they detected unusual activity in your account and suspended it.
i'm sure this has a timer , like money hold, and after that it will be reenabled.

i suppose they do this to give you time to "clean" your computer and reset all of your passwords to secure ones,
after that you should then ask them to re-enable your account.

however, as they don't know who is the legit owner, they will most likely not raise the block/money hold until the timer runs out, if you are in a hurry you should add your ID on the ticket.

Hmm oké... that could be the case...

If they only would announce how long this timer will hold my account, things would be a lot less mysterious though.

I have another explanation and a very easy one - its something i faced in my time as webmaster too.

First, read please my comment to the user who told us to use skype.

So, you will see now that there is only one support way - to open a ticket at http://hdbtce.kayako.com/.
Even when we assume a direct contact (however you managed that) you must have a ticket number - or they can't help.
Except one of the owner or core members of that company is your friend or contact.

What is kayako.com? Its a help desk company, selling, renting & hosting a browser based ticket software (called help desk, which
is a standard ticket & consumer managment software).

As you can see here http://www.kayako.com/pricing/ you have to pay $50 bucks per month to use the software "per staff user".
What that means?

Staff user are the number of support members dealing with the software and helping you. Aka how many people are working as a unique support account.
For every support guy dealing with the software you pay $50 bucks. Thats quite a cheap & good offer btw.
Ok, why i pointing that out? You remember that skype account, even its outdated? The real one is "support (thailand)".

Thailand? Yes - thats guys doing the base support. And that is normal. That is a hired guys from, well,  thailand doing the daily support.
Working through tickets and all. The name for that is outsourcing and thats how you do that as internet company, big or small.
There is no reason for many trivial support tickets like changing an email or such to burn the time of the admin or some other core members
of btc-e.

Now, here is what i think the problem is and what happend to people who experienced that their initial ticket was handled fast but
then the next step stopped.

The guy in thailand is not a core member of btc. With a chance its an independent internet guy or some student. Thats not bad - he
seems to do a good job. In fact thailand is known to deliver good and inexpensive people for this kind of outsourceing.

That thai guy will see your first ticket and he has some base access to the btc-e core system. For example he can set a flag to block a account.
Or to give an new email free. Such stuff, not critical and not dealing with money or account details related to the assets.

You don't want an outsourced support guy in thailand with access to your acocunt funds , right? And for sure btc-e don't want give
external people access to their hot or cold wallet, internal transaction data or the funds of an account too.

Thats something you want hold inside the company. In best case right in the next room under control of the owners or the high staff members.

So, what happens?

As the first ticket about was written, it was just an account block. The thai guy dealed with that. Because that kind of action must be
handled "in time" at support side, it is important to have a first fast eye on such tickets. You must have enough support guys dealing with
trivial and/or time critical tickets. If that initial ticket had needed like 5 days, the hacker would had already plundered the account and would
be gone. It must be handled in a somewhat close time window.

After he dealed with the hot problem and the account was successful blocked so no one can remove funds and manipulate it, the thai guy
moved the ticket over to someone inside the btc-e company itself. A second support member, an internal btc-e guy who has access to
funds & wallets and who can go in the details to determinate who is who, what the hacker did and how the real account status it.

That is, how a help desk ticket system works and why you have to pay for every staff member.

And that is now the explanation, why the ticket was handled one time fast and then slow. The fast must be fast or it will fail.

The slow is the worse one and the problem
. That support step is going wrong atrm. That btc-e support staff member , who ever he or she is, is not doing the right job.
He does not communicates, he did not gives signals and it needs far to long.

That is the point this thread hooks in. To suspend a account is one thing - to let it unexplained suspended and drop the communication
is another. Because hacked or suspended by other system - at last a core support member must deal with it and i assume they have
not a dozen of that sitting there.

[Thran]

Let's see some established users verify any of this, because:

...and who named that domain
in the chat was suspended too. Suspended means that the whole account access is dropped and all fund are for that time seized.
...

I call total BS. When they ban you from chat it has no affect on your account.
I'm sorry if your story is true, but this thread has 2 low post noobs bashing btc-e.
You guys combine truth (i.e thier poor English) with what could be a big pile of lies.

Ok, i can show you at last what had happened at btc-e in the last 2 month and how btc-e and the trollbox was
attacked by hackers and malware links and that the site and the mods was not able to deal with it.

Bitcoinwisdom is one of the main chart sites - as many know they warned some time with a popup people that
other domains claimed to be bitcoinwisdom and tried to install maleware. I think enough people had seens that.

So - one major source to spread that malware domain was the trollbox. There was some domains used i can't remember,
some included bitcoinwisdom as frame and had a download link for "better charts" (you can think what it was), some
had java trojaner. The most successful of that domains was the .net variant, which was a fake domain and not releated
to the com. Here is, what happend 8 weeks ago at the trollbox. That was one of the first bigger attacks.

http://trollboxarchive.com/search.php?search_type=all&search=bitcoinwisdom.net

Scroll a bit down - you will see soon rows of rows with that domain, claiming to offer charts.  You will see 2 things.

First, i need on a big screen 14 page down to move through all that rows. Thats alot, the attack was done over several days.
Second, you will see at some point that the user account spreading the line is changing over and over.

The trollboxarchive does not log bans and such but that is what happend. The mods banned the account of the hacker, but that
guy simply created a new one and spamed on.

Well, as i pointed out the chat miss basic protections. So mods was always behind.
They are not to blame, they use the tools they have.

Now, one way to stop the spam (not only malware) was the idea that a user must have at last $100 in its account to post in the chat.
But that did not stopped any hacker.

Because a mod can only ban a user from the chat! NOT suspend the account.
So, what happend? The hacker transfered 10 litecoins or so to the account, spamed, got banned, moved the coins out and to another
new account. That simple. The transfer costs are no problem, every infected user gave him alot more.

That was only the start. One other phishing site was predict-btc, preditinfo and such. And that attack is already going on.
Its incredible to watch, even that hacker was one week not active. Then he attacked again this week.

http://trollboxarchive.com/search.php?search_type=all&search=predictcoin
As you can see, the user spaming that malware domain is changing as fast as mods ban him.

Now, what happens then? The mods banned all this spammer accounts. For weeks or a month.
And then the chat ban weared out. They returned. And the spammer used them partly again.

At that point, because the mods are no team members of btc-e but some exclusive traders (not sure they get payment too),
they needed someone dealing with this incredible amount of known hacker accounts. Look at only the 2 links i gave you.
Search for more "predict" spam. We talk about some dozen accounts, if you count all perhaps hundreds of hacker accounts,
if you look all that different malware links posted in the last 2-3 month in that chat.

They needed to ban then to kill them and to avoid the reuse and all.

But how? you don't work yourself by hand through 8 weeks of chat lines. They did something automated. Like a grep on the data.

And there we are - that is the point where people get caught when they had that patterns too in a chat line.
I am sure the admin or whoever did the bans tried to catch only the hackers but this kind of action always have
some collateral damage. I know it, i had to deal with similiar problems on my own sites.

I hope i was able to explain it good enough: Again - i don't think btc-e tries to scam people or doing harm to poeple.
They was caught on the wrong leg and they missed to deal with a problem in time.
Thats ok - but they should now a bit more helpful.

[Thran]

Another example from the trollbox archive.

Here is a user claiming what happens as he signed up for the predict coin page.
Its of course not to verify he is honest, but there are some signs:

- a normal character starts to spread automated spam lines out of nowhere (why should he? At last he should use a different sentence).
- he is explaning it with a twink and see how confused he is
- there is no one helping as you can see
- the bad domain get posted over and over by more and more accounts
- mods KNOW that domain is malware and even warn & ban it !
- different users told out of nowhere the same story

The twink: http://trollboxarchive.com/search.php?search_type=username&search=Thomassmulders
The original account: http://trollboxarchive.com/search.php?search_type=username&search=thomas89

and again the phishing domain (is a bunch of "predict" domains all using the same layout and all), still active TODAY posted and spread by the btc-e chat:
http://trollboxarchive.com/search.php?search_type=all&search=predictcoin

Please look at the insane amount of used chars - some of that have history never doing anything wrong.
Then, boom, they spread the malware domain - all with the same sentence.

These are, with a good chance, hacked people. Hacked by links who are spread even now by btc-e because
they can't deal in a sane way with domains in the chat.

Example: i just clicked on the users in the link above. http://trollboxarchive.com/search.php?search_type=username&search=wimmah1985

You see how he is starting to spam that link. then something happend.
When i should guess he logged in (the original owner). Then he starts to wonder what happens. Then he is gone - no post anymore
close after he posted the link. That means with a chance he is also suspended.


As far i know there are alot more cases like that. Just check the users!

It can't be that out of nowhere such many users without any negative history started to pop out as long hidden hackers.
I assume many make it not public for some reason, at last they fear a permanent ban and the lose of all asset.

And yes of course - joining such a phishing site with logins/emails you use on your trading site IS stupid.
But not everyone is a computer nerd and to be naive and missing a security mind is no reason to thread people like we see here.

Would it make a difference when the malware domain would be a zero day infection adding a trojan to your site by an automated drive-by-attacken
who added a keyboard logger? I think not.