Why bctalk accounts are getting hacked?

[Darth0ne]

I saw many people's account are hacked any how.My question is how can anyone hack accounts? And how we can protect our accounts? I don't know if this topic should be written here but i really need these answer.               

[1714022595]

1714022595

[1714022595]

1714022595

[1714022595]

1714022595

[mdayonliner]

I saw many people's account are hacked any how.My question is how can anyone hack accounts? And how we can protect our accounts? I don't know if this topic should be written here but i really need these answer.              

There was a database leak in 2015. My guess is most of these hacks are related to this database leak.

You can also take consideration of the phishing sites. When you look for bitcoinTalk on google, it pulls up few phishing sites who wants the credentials of your bitcoinTalk account. So phishing sites are another way of getting hacks.

On the forum people will PM you with phishing link. Once you visit the page it will tell you to login again in your BitcoinTalk account. Innocent, ignorant people types their credentials and give it away to the scammers.

The reason all these happens is because, a bitcoinTalk account with a good rank worth good money. The account can be used to earn money from the signature campaigns. It's not much but for some people it is a handsome amount of money. Bottom line is: BitcoinTalk accounts get hacked because there are money in there.

Always use a strong password for you account.
Use an email which is not publicly known to others (better option is to use a fresh email address and do not use this email address for any other web account)
Make sure the password of the email address is very strong too.
Before login to bitcoinTalk, check the URL is correct: BitcoinTalk.org (always check the url)

[athanz88]

I saw many people's account are hacked any how.My question is how can anyone hack accounts? And how we can protect our accounts? I don't know if this topic should be written here but i really need these answer.               

There was a database leak in 2015. My guess is most of these hacks are related to this database leak.

That, or because other things that may happen. Mostly because of password breach, not because a brute force breach, more like because of the owner of the account fault. Using public wifi while accesing bitcointalk account, using others pc/laptop to access the account, phising site, extension on browser, same email same password, etc. It is kinda hard to know why though.

How to protect it? I guess there are many guides in the beginner section.

[The Cryptovator]

I saw many people's account are hacked any how.My question is how can anyone hack accounts? And how we can protect our accounts? I don't know if this topic should be written here but i really need these answer.              

Hacking isn't much hard work for hacker. Not only account, they can hack database if they want. Depend on security. As far as I know security for forum is very strong.
You should care about your account like hide email, keep password strong. Account might be hacked for your mistake also. Several reason is behind of hacking, like phishing.
There is a helpful thread, it may help you ;   Bitcointalk account security

[Strufmbae]

Basically, users are not quite fond of protecting their accounts by not using a security question, that, is the very best assurance of security you can have in forum. And most of the hacked accounts as you can see are those accounts for sell, without having escrow, if i am not mistaken. 

[peter0425]

I saw many people's account are hacked any how.My question is how can anyone hack accounts? And how we can protect our accounts? I don't know if this topic should be written here but i really need these answer.              

My account was hacked last June and up to this day I don't know how the hacker/s were able to cracked my password because I was very careful of my account. I  suspect that since I used a email that's a been used many times before joining the forum, it could probably been compromised and leaked around.

https://haveibeenpwned.com/

And according to that site my email was:

Pwned on 22 breached sites and found 7 pastes

And follow @Coolcryptovator suggestions, he posted a thread that might help you secure your account.

[LFC_Bitcoin]

- Don’t click on links posted on this forum
- Use a strong password that you don’t use anywhere else
- Use an email address that’s used for nothing else apart from registration here

Just a few pointers

[LTU_btc]

I saw many people's account are hacked any how.My question is how can anyone hack accounts? And how we can protect our accounts? I don't know if this topic should be written here but i really need these answer.              

There was a database leak in 2015. My guess is most of these hacks are related to this database leak.

I don't think that database leak in 2015 is the main reason of high number of hacked accounts. As I see, biggest number of hacked accounts was made after 2015. So, probably main reason of account hacks is phishing websites and people using weak passwords.

[papampi_2]

Basically, users are not quite fond of protecting their accounts by not using a security question, that, is the very best assurance of security you can have in forum. And most of the hacked accounts as you can see are those accounts for sell, without having escrow, if i am not mistaken.  

Actually most of the hacks are coming from "Secret Question".
If you dont have "Secret Question" and want to change email or password, forum will send you email notification to approve your request.
But if you have "Secret Question" , it will ask it, then the hacker have unlimited tries/retries to guess the answer and change your email and password.

Mine got hacked by my "Secret Question" .

Secret Question:
To help retrieve your password, enter a question here with an answer that only you know.
Using this feature is not recommended. Anyone who guesses your secret answer will have access to your account. It's like a second password.

[mk4]

Basically, users are not quite fond of protecting their accounts by not using a security question, that, is the very best assurance of security you can have in forum. And most of the hacked accounts as you can see are those accounts for sell, without having escrow, if i am not mistaken. 

The reasons why people are getting hacked are most likely not only because of the security question feature. There are a lot of ways of people getting hacked. I personally think the #1 reason is still that people use the same passwords on multiple accounts; and if one of those account's password gets leaked, then the hacker pretty much has access to almost every account the user has. And that's just the tip of the iceberg. There are lots more ways.

[inyakizuryel]

I saw many people's account are hacked any how.My question is how can anyone hack accounts? And how we can protect our accounts? I don't know if this topic should be written here but i really need these answer.               

Based from my findings, most of the hacks are because of the database leakage last 2015 and also the security features of the site that time that are not yet fixed that time, and also to those people that are not changing their passwords.

[Insanerman]

I hope that the launched of the new bitcointalk forum will have a more security feautures like 2fa or the use of verified signed bitcoin address.

Actually most of the hacks are coming from "Secret Question".
If you dont have "Secret Question" and want to change email or password, forum will send you email notification to approve your request.
But if you have "Secret Question" , it will ask it, then the hacker have unlimited tries/retries to guess the answer and change your email and password.

Mine got hacked by my "Secret Question" .

If the "Secret Question" is one of the reasons why accounts are being hacked, then why is it still there? More people will get confused whether they will use it or not.

[TryNinja]

If the "Secret Question" is one of the reasons why accounts are being hacked, then why is it still there? More people will get confused whether they will use it or not.

AFAIK, the "Secret Question" actually locks your account. So I don't think it's one of the major reasons why many accounts are getting hacked. My guess is that most people are getting hacked because they are using the same password in other websites - e.g ICO related websites/dashboards, which is even worse - or because their computer are infected. I've never seen a tech-savvy user getting hacked here.

Mine got hacked by my "Secret Question" .

It didn't.

For reference: PSA: ACCOUNTS WILL BE LOCKED IF THE SECRET QUESTION IS USED TO RECOVER IT

[detector]

Database leak become the main reason why many account got hacked.
Why they want to hack ?
Because some account may worth more than $ 1000 !

[mdayonliner]

AFAIK, the "Secret Question" actually locks your account. So I don't think it's one of the major reasons why many accounts are getting hacked.

Spot on! Secret Question account recovery just locks the account, it has nothing to do with account hack.

I remember I was worried about Secret Question too since I heard that it can lock the account. I was looking for help here and there to know how to remove it so that I can feel safe. Then one day after following a post, I gave it a try to remove it and it worked. Since then I have no secret question attached with my account.

[Kakarot01]

My MEW was hacked yesterday. the reason is because i joined some airdrops yesterday. most of the time phising site , copyboard, using same Email and password for every wallet, saving password in browser etc. there are many other reason and many new ways created everyday. For your protection https://bitcointalk.org/index.php?topic=4920096.0%20[Guide read this topic. It will be helpful.

[coinlocket$]

The reason why the accounts are hacked seems obvious to me and is an economic move, accounts stolen are used to wear the signature with a high rank or to be sold.
High rank accounts can be worth thousands of dollars and provide thousands of dollars from various signatures campaigns.
How are these accounts hacked? First of all the ignorance of the users.
Edit: (somone wrote this link seconds before me )
You can follow this guide to learn more about the security of your account https://bitcointalk.org/index.php?topic=4920096.msg44294262#msg44294262

[LeGaulois]

There was a database leak in 2015. My guess is most of these hacks are related to this database leak.

Most of the accounts are registered after 2015

You can also take consideration of the phishing sites. When you look for bitcoinTalk on google, it pulls up few phishing sites who wants the credentials of your bitcoinTalk account. So phishing sites are another way of getting hacks.

No, frequent users do not use google to connect to the forum. Either they type the URL address or they use the bookmarked URL in their browser

a bitcoinTalk account with a good rank worth good money.

There are more accounts hacked with a low rank than a hight one

main reason of account hacks is phishing websites and people using weak passwords.

I hardly believe the number of people using a weak password is so hight

[butka]

- Don’t click on links posted on this forum

This is a very good point. I nearly fell for a Phishing Scam after clicking on a link posted in the Services board. The link took me to a page looking identical to the login screen of bitcointalk.org. Luckily for me, I checked the URL, which of course wasn't on the bitcointalk domain, and I didn't enter my login data. But someone else (or me in a different situation) might have overlooked the URL check.

[coinlocket$]

No, frequent users do not use google to connect to the forum. Either they type the URL address or they use the bookmarked URL in their browser

a bitcoinTalk account with a good rank worth good money.

There are more accounts hacked with a low rank than a hight one
~

This is true it is due to the fact that most users are of low rank as the photo below shows, and of course the people who have been here on the forum for a long time have also learned about how others protect themselves, so I think that, apart from the accounts attacked during the hacker attack, the oldest accounts are the safest ones


credits to: https://bitcointalk.org/index.php?topic=4901670.0