Bitcoin Forum
April 26, 2024, 01:14:10 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: Recovering my hacked account AvenG [signed message]  (Read 613 times)
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
August 06, 2018, 06:00:27 PM
Last edit: March 02, 2019, 10:56:36 AM by mapuche33
 #1

Hi,
 
My Full Member account with 100 Merit +133 posts, registered on 19th September of 2012 AvenG has been stolen presumably by a russian hacker that managed to compromise my profile.



Code:
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account AvenG (ID: 67153) has been hacked/stolen on 11th july 2018. Please reset the email to ~@protonmail.com. The current date is 6th August 2018.
-----BEGIN SIGNATURE-----
1KmUUTK82zhp2QYULV6CXGbZofepBEpziV
IInjvmjDloAI/JX6dTgKR25ZwoVYmgKXK/Dp19Ts4ydiGZHHnCfYvjT7eVOl4+xazudJn3pecZ+4WqnJJT5IG0g=
-----END BITCOIN SIGNED MESSAGE-----

Here are the unedited posts where I posted that address:
https://bitcointalk.org/index.php?topic=192916.msg2310742#msg2310742
https://bitcointalk.org/index.php?topic=192916.msg2301934#msg2301934

I already PM'ed Cyrus and Theymos. However, due to the unfortunate results and negative feedback from other fellows that are facing similar situations..
I ask YOU for your help, it seems that PM's are not enough so I would appreciate anyone who is able to contact the Admins in a straightforward method (IRC, mail, phone, in person, etc) to mention this issue / incident. Also I would like to heard stories of those users who successfully managed to recover his/her account (I couldn't find any recent cases).

Thanks in advance !
Regards, AvenG
1714137250
Hero Member
*
Offline Offline

Posts: 1714137250

View Profile Personal Message (Offline)

Ignore
1714137250
Reply with quote  #2

1714137250
Report to moderator
1714137250
Hero Member
*
Offline Offline

Posts: 1714137250

View Profile Personal Message (Offline)

Ignore
1714137250
Reply with quote  #2

1714137250
Report to moderator
1714137250
Hero Member
*
Offline Offline

Posts: 1714137250

View Profile Personal Message (Offline)

Ignore
1714137250
Reply with quote  #2

1714137250
Report to moderator
"Bitcoin: mining our own business since 2009" -- Pieter Wuille
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714137250
Hero Member
*
Offline Offline

Posts: 1714137250

View Profile Personal Message (Offline)

Ignore
1714137250
Reply with quote  #2

1714137250
Report to moderator
1714137250
Hero Member
*
Offline Offline

Posts: 1714137250

View Profile Personal Message (Offline)

Ignore
1714137250
Reply with quote  #2

1714137250
Report to moderator
LoyceV
Legendary
*
Online Online

Activity: 3290
Merit: 16553


Thick-Skinned Gang Leader and Golden Feather 2021


View Profile WWW
August 07, 2018, 05:24:10 PM
 #2

OP sent me a PM asking "quote me please".
Code:
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account AvenG (ID: 67153) has been hacked/stolen on 11th july 2018. Please reset the email to gbsx@protonmail.com. The current date is 6th August 2018.
-----BEGIN SIGNATURE-----
1KmUUTK82zhp2QYULV6CXGbZofepBEpziV
IInjvmjDloAI/JX6dTgKR25ZwoVYmgKXK/Dp19Ts4ydiGZHHnCfYvjT7eVOl4+xazudJn3pecZ+4WqnJJT5IG0g=
-----END BITCOIN SIGNED MESSAGE-----
Verified.
I don't think it was hacked on July 11, BPIP.org shows this:
Code:
7/19/2018 2:12:30 PM 	    	password changed

Quote
Archived
I'll leave red trust on AvenG. If you get your account back, you'll have to sign another message to confirm it, so I can remove my red trust.

I ask YOU for your help, it seems that PM's are not enough so I would appreciate anyone who is able to contact the Admins in a straightforward method (IRC, mail, phone, in person, etc) to mention this issue / incident.
That's very unlikely to happen.

Quote
Also I would like to heard stories of those users who successfully managed to recover his/her account (I couldn't find any recent cases).
Some accounts have been recovered, but as far as I've seen, most requests are ignored.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
August 07, 2018, 06:18:45 PM
Last edit: August 07, 2018, 06:30:06 PM by mapuche33
 #3

OP sent me a PM asking "quote me please".

Thanks LoyceV, I had to ask someone to verify the signed message as well as quoting in order to stake. Also, I became impatient after noticing that passed 20 views no one leaved a reply. I found you on a related topic here: https://bitcointalk.org/index.php?topic=4605811.0

I don't think it was hacked on July 11, BPIP.org shows this:
Code:
7/19/2018 2:12:30 PM 	    	password changed

Interesting, I never knew about the existence of BPIP. I assumed that the hacked day was when I received the notification "email address changed" on my gmail inbox. Here:
 
I'll leave red trust on AvenG. If you get your account back, you'll have to sign another message to confirm it, so I can remove my red trust.

Sure, I expect admins to lock the access or ban my AvenG account until they manage to return it to me. I can sign as many messages as you want with that address as well as the previously associated on my profile 1A6UzoDvPybimQg98B22yMoEF75wAZUdmt (which the hacker already erased it).
 
Some accounts have been recovered, but as far as I've seen, most requests are ignored.

That is unfortunate, Admins don't take precautions against those hackers leaving them the doors open to exploit vulnerabilities on their database. Nonetheless they close the doors to initiate the recovery process, aka ignore our requests.  
This kind of malpractice drives us to no other choice than paying those pirates some rescue amount (which I'm not a fan of).

mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
August 17, 2018, 02:12:49 AM
 #4

UPDATE:
 
Hacker managed to sell my account to some spammer 3 days ago, he already updated my profile with a different avatar and signature, as you can see here:



Also, he started posting crap consistenly every single day since 13th August on a basis of 2 posts / day on the following boards as you can see here:



Apparently he is growing in rank for later purposes, could be anything.. I would like to ask / request escalating this incident up to the extend of locking my account AvenG so no one can use it (which seems unlikely due to the fact that the Admins ignores us, but at least I try).
 
SFR10
Legendary
*
Offline Offline

Activity: 2982
Merit: 3409


Crypto Swap Exchange


View Profile WWW
August 17, 2018, 02:58:51 AM
 #5

Nonetheless they close the doors to initiate the recovery process, aka ignore our requests.  
Regardless of how everything seems to be (at the moment), there are a lot of things going on in the background (highlighted part):

If you have not posted that addy elsewhere, it probably won't be accepted.


We don't actually accept the profile field address unless there's some sort of proof that it's remained unchanged, for that very reason.

I'm working on a new address-staking system which will automatically handle signatures, etc. Might have it ready by the end of the month if nothing else comes up to consume my time.

I would like to ask / request escalating this incident up to the extend of locking my account AvenG so no one can use it (which seems unlikely due to the fact that the Admins ignores us, but at least I try).
Did you set/use the "Secret Question" field on that account?
- If "YES", then you can use that for locking your account: PSA: ACCOUNTS WILL BE LOCKED IF THE SECRET QUESTION IS USED TO RECOVER IT

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
morningcoffee
Newbie
*
Offline Offline

Activity: 15
Merit: 0


View Profile
August 17, 2018, 07:29:14 AM
 #6

I feel your pain. I am in the same situation. I also have had my account compromised. I have sent a message to Cyrus as instructed in this thread https://bitcointalk.org/index.php?topic=497545.0 and if he doesn't respond in 2 weeks I will then message Theymos with a signed message using my bitcoin address I posted and still have access to.

My account is being used right now to likely abuse bounty programs... the person who took over the account doesn't seem to use English as a first language, but is rather Eastern European. They did not edit any of my earlier posts oddly, but it's obvious when they started to do this. It is an unfortunate situation. I will follow your thread in hopes that you get your account back, and I will let you know if Cyrus or Theymos respond to me as well. Cheer up, I'm sure they will help eventually.

I really like the idea that Theymos will implement something new to combat this issue. I'm excited to see what he comes up with.
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
August 17, 2018, 10:48:16 PM
Last edit: August 17, 2018, 11:00:39 PM by mapuche33
 #7

Did you set/use the "Secret Question" field on that account?
- If "YES", then you can use that for locking your account: PSA: ACCOUNTS WILL BE LOCKED IF THE SECRET QUESTION IS USED TO RECOVER IT

I have already tried that several times but I'm receiving the following message:
 
Code:
An Error Has Occurred!
Sorry, there is no secret question set for this member.

I don't have written any secret question in the place I store my passwords, so not sure if I ever created one or if the hacker managed to disable it. Any other ideas or suggestions? I will do anything, please someone lock or ban my account until it is returned to me.
 
Anyone knows how many NEGATIVE TRUST do I have to collect in order to get locked / suspended / banned ?  I'll start a TAG ME campaign if it is possible getting locked this way.
SFR10
Legendary
*
Offline Offline

Activity: 2982
Merit: 3409


Crypto Swap Exchange


View Profile WWW
August 18, 2018, 12:45:35 AM
 #8

Any other ideas or suggestions?
Since you can't do anything else, I suggest to patiently wait either for the implementation of the new system or until the manual recovery process happens.

Anyone knows how many NEGATIVE TRUST do I have to collect in order to get locked / suspended / banned ?  I'll start a TAG ME campaign if it is possible getting locked this way.
There's no correlation between the amount of negative trusts and account suspensions.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
August 24, 2018, 03:39:50 AM
 #9

bump
 
Another 2 weeks passed without response from the admins so I PM'ed again...
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
August 27, 2018, 02:30:20 PM
Last edit: September 04, 2018, 07:37:46 AM by mapuche33
 #10

I feel your pain. I am in the same situation. I also have had my account compromised. I have sent a message to Cyrus as instructed in this thread https://bitcointalk.org/index.php?topic=497545.0 and if he doesn't respond in 2 weeks I will then message Theymos with a signed message using my bitcoin address I posted and still have access to.

My account is being used right now to likely abuse bounty programs... the person who took over the account doesn't seem to use English as a first language, but is rather Eastern European. They did not edit any of my earlier posts oddly, but it's obvious when they started to do this. It is an unfortunate situation. I will follow your thread in hopes that you get your account back, and I will let you know if Cyrus or Theymos respond to me as well. Cheer up, I'm sure they will help eventually.

I really like the idea that Theymos will implement something new to combat this issue. I'm excited to see what he comes up with.

Will see where it goes. So far nobody notice it, is a major concern so action should be taken as soon as possible in order to preserve a healthy community.
Can you tell us more about the Theymos "project" / "new idea" ? for me are just rumors... I mean where are the updates?
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
September 04, 2018, 07:36:13 AM
 #11

bump
 
I PM'ed again @cyrus & @theymos, another 2 weeks passed being ignored. Meanwhile spammer is posting crap with my stolen account.
Lucius
Legendary
*
Offline Offline

Activity: 3220
Merit: 5628


Blackjack.fun-Free Raffle-Join&Win $50🎲


View Profile WWW
September 04, 2018, 10:49:08 AM
 #12

bump
 
I PM'ed again @cyrus & @theymos, another 2 weeks passed being ignored. Meanwhile spammer is posting crap with my stolen account.

Unfortunately for you this procedure may take months, situation is not good regarding recovering stolen/hacked accounts and theymos admitted it - but he is working on something which will allow much easier recovering of hacked accounts, but this will also take some time (few months).

Did you try to contact person who bought your account and present the facts from this thread? It is unlikely to succeed, but I know one case when person who bought stolen account was returned that account to the right owner.

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
morningcoffee
Newbie
*
Offline Offline

Activity: 15
Merit: 0


View Profile
September 04, 2018, 12:19:19 PM
Last edit: September 20, 2018, 06:03:11 AM by morningcoffee
 #13

I was hoping you would be wrong Lucius, but you were completely right. Thank you for at least correcting my expectations. Cyrus did not respond in two weeks time and now I'm going to try to send a signed message to Theymos. I'm a little less optimistic about my chances of recovering my account now, but as long as there's a chance I will keep trying.

---.-----.---.-----.----.-----.-----.------.-----

Help!

My bitcointalk account kworrom was stolen from me!

      Help!

I have messaged admins Cyrus and Theymos with a signed bitcoin message, but no reply!

            Help!

I have messaged Hilariousandco and mprep about suspending the person who stole my account, but no action taken!

                  Help!

I've posted a public signed BTC message and link to and unedited message where I posted address as kworrom: https://bitcointalk.org/index.php?topic=4864633.msg44391814#msg44391814

                        MY ACCOUNT KWORROM WAS STOLEN! PLEASE HELP!

-----BEGIN BITCOIN SIGNED MESSAGE-------------------------------------------------------------------
This is morningcoffee. My account kworrom was stolen. Please help! This message was created on 9/20/18.
-----BEGIN SIGNATURE----------------------------------------------------------------------------------
189EGkRQHkzPwqrzvaabgAVj696eL6uQeB
HGs4ofERMfkg+yo8E2+HxRsfYxdr8xmfRuGdIB0CMJL4eAIZzicdvnMlJ6WzxvXr9q2hrXblDcLIBN5iLBWSGTM=
-----END BITCOIN SIGNED MESSAGE----------------------------------------------------------------------

AN UNEDITED POST WHERE I USED ADDRESS: https://bitcointalk.org/index.php?topic=246400.msg2633111#msg2633111
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
September 18, 2018, 02:29:59 AM
 #14

another 2 weeks passed without any updates from the admins so I PM'ed again.
I also sent a message to @CobraBitcoin on twitter but he also ignored it, so I must assume no one cares.
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
October 02, 2018, 03:35:54 AM
 #15

15 days passed without any replies or updates so I PM'ed again... 😞
Dig Bicks
Member
**
Offline Offline

Activity: 348
Merit: 22


View Profile
October 02, 2018, 03:47:47 AM
 #16

15 days passed without any replies or updates so I PM'ed again... 😞

Just be patient, it will only take 1-2 years most likely.  Maybe 5 years if your unlucky.  Patience is a virtue.
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
October 19, 2018, 03:17:52 AM
 #17

2 more weeks passed without any updates from the admins so I PM'ed them again.. 👎👎👎
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
November 01, 2018, 02:44:15 PM
 #18

15 days passed without any updates or replies so I PM'ed again...  Undecided
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
November 15, 2018, 06:02:19 AM
 #19

time flies..

another 2 weeks without response nor updates so I PM'ed @theymos and @cyrus again.
mapuche33 (OP)
Jr. Member
*
Offline Offline

Activity: 55
Merit: 15


View Profile
November 30, 2018, 06:34:45 PM
 #20

still nothing, so I PM'ed them again.
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!