hacked account , do not trade "Milkz"

[mikeywith]

https://bitcointalk.org/index.php?action=profile;u=408677

Milkz account was hacked, he reached out via telegram and told me so.

he said there was only 1 new new post by the hacker, long story short, do not trade with this account until things are worked on.

Mikey,

[1714798833]

1714798833

[1714798833]

1714798833

[1714798833]

1714798833

[1714798833]

1714798833

[mdayonliner]

https://bitcointalk.org/index.php?action=profile;u=408677

Milkz account was hacked, he reached out via telegram and told me so.

he said there was only 1 new new post by the hacker, long story short, do not trade with this account until things are worked on.

Mikey,

Just because someone came to your telegram and told that Milkz was hacked - made the account hacked? If someone comes to me and tell me that your account is a hacked account then would I think you are using a hacked account?

You need to ask the guy to give you enough evidences. I hope he did. If yes then you should present them here.

Good luck.

[MadZ]

https://bitcointalk.org/index.php?action=profile;u=408677

Milkz account was hacked, he reached out via telegram and told me so.

he said there was only 1 new new post by the hacker, long story short, do not trade with this account until things are worked on.

Mikey,

Just because someone came to your telegram and told that Milkz was hacked - made the account hacked? If someone comes to me and tell me that your account is a hacked account then would I think you are using a hacked account?

You need to ask the guy to give you enough evidences. I hope he did. If yes then you should present them here.

Good luck.

Seems like a pretty reasonable scenario to me, considering his email and password both reset recently. Better to be overly cautious when that's the case.

[The Cryptovator]

Just because someone came to your telegram and told that Milkz was hacked - made the account hacked?

Absolutely not. But if they have chat log before then we can say its hacked. For example, I have chat with Darkstar for loan purpose, if in case hack my account I can inform immediately to Darkstar. Because we have chart record and he can confirm. I don't think telegram could be hacked same time. On the other hand account changed email and password recently. Tags will remove when recover account successfully.

[mdayonliner]

Just because someone came to your telegram and told that Milkz was hacked - made the account hacked?

Absolutely not. But if they have chat log before then we can say its hacked. For example, I have chat with Darkstar for loan purpose, if in case hack my account I can inform immediately to Darkstar. Because we have chart record and he can confirm. I don't think telegram could be hacked same time. On the other hand account changed email and password recently. Tags will remove when recover account successfully.

You are right but OP did not provide any such information. Even if he provide the screenshot then how would you come to the equation that it was not faked? You need to directly talk to the telegram guy - even that could be a set up too.

The only way is to sign an address (if any) by the guy who is claiming that his account was hacked.

Look, I am not protecting the guy but I am considering the options. I don't believe in leaving red tag for everything unless it's proven 100%. A false red tag is a crime IMO

Seems like a pretty reasonable scenario to me, considering his email and password both reset recently. Better to be overly cautious when that's the case.

The real owner can woke up and change the email and password. Can't he?

Anyway, I guess the current owner of the account should speak here. But there will be problem here: If the account does not have a signed staked address then the real owner (if the current one is real) also can not prove that it was his original account. But for that we can not just tag him/her just because someone came and claimed that the account was hacked.

PS: We should encourage everyone to sing their address and stake in the topic we have. Or this things are very messy to prove real ownership.

[tempmilk]

This is milk

I was able to catch this within 30 minutes of it happening.  I immediately locked the account via the link provided in the email alert.  It looks like any protentional damaged was prevented.

I e-mailed "recoveries...@bitcointalk.org" and am now waiting to recover my account.

What boggles my mind is how they got me.  I am very safe and cannot find any breach anywhere.  ALL of my important accounts have 2FA and any emails do not have any abnormal IP logs.

https://i.imgur.com/H9gqjQ3.png

The hacker was:  lukakostrena@gmail.com by IP address 83.177.38.206

If you do a google search you can find him pretty fast.

It is utterly asinine that bitcointalk does not have 2FA!?!?!

Thanks for the help

[mdayonliner]

I immediately locked the account via the link provided in the email alert.

Good thing that you have locked it (I hope it's the truth). Do you have a signed staked address to prove the original ownership?

[suchmoon]

What boggles my mind is how they got me.  I am very safe and cannot find any breach anywhere.  ALL of my important accounts have 2FA and any emails do not have any abnormal IP logs.

How strong was your password and when did you last change it? There have been password hash leaks.

Another option could be some nasty keylogger even if you can't find anything.

[mdayonliner]

There have been password hash leaks.

Date registered January 04, 2015. I don't know when was the 2015 hack. If this was before the hack then it's possible assuming OP did not use his account since then.

How strong was your password and when did you last change it?

How would you determine the strong password in this case  
My password has capital latter, small latter, special characters, numbers. In facts I can not remember my password LOL it's so hard to type when I do. I consider it hard but don't know the level of hardness to define.

Another option could be some nasty keylogger even if you can't find anything.

Could be if the system was infected.

[mikeywith]

OK smarty-pants , so i do not tag the user, i do not warn people about it, take all the time in the world to do the "Sherlock Holmes" thing. let 5-10 people get scammed trading with a green trusted account that is possibly hacked ? when the party is over i come back here with my evidence ? is that what you are suggesting? brilliant.

one thing i know for sure is that only someone with access to Milkz account could have reached out to me on telegram, so be it him or the hacker makes no difference, the account is now hacked, and that's all about it, if you have any doubts still, ignore all the negative feedback, go trade with him.

if the original user still has access to this account he can simply reply here and prove me wrong, and tags will be removed.

[mdayonliner]

OK smarty-pants , so i do not tag the user, i do not warn people about it, take all the time in the world to do the "Sherlock Holmes" thing. let 5-10 people get scammed trading with a green trusted account that is possibly hacked ? when the party is over i come back here with my evidence ? is that what you are suggesting? brilliant.

Mate you did a good job. Why so angry. I am asking for evidences to put together LOL

I don't want to see anyone get scammed nor want to see anyone get red trust without having enough proof. I hope this make sense.

Before tagging you need to be sure enough.

one thing i know for sure is that only someone with access to Milkz account could have reached out to me on telegram, so be it him or the hacker makes no difference, the account is now hacked, and that's all about it, if you have any doubts still, ignore all the negative feedback, go trade with him.

if the original user still has access to this account he can simply reply here and prove me wrong, and tags will be removed.

Prove with a signed staked address or a valid evidence. Based on the evidences you tag or remove a tag.

This is what you provided:

https://bitcointalk.org/index.php?action=profile;u=408677

Milkz account was hacked, he reached out via telegram and told me so.

he said there was only 1 new new post by the hacker, long story short, do not trade with this account until things are worked on.

Mikey,

Do you want me to tag an account just because you said so?

if the original user still has access to this account he can simply reply here and prove me wrong, and tags will be removed.

I am also waiting for this. I hope he had/has a signed staked address to prove the ownership.

[tempmilk]

I sadly do not have a BTC addy posted anywhere, however, I do have access to my first registered e-mail and my IP address maybe changed one-two times since 2015.  IP location has not changed since registration.

All I can do is wait for the admins to respond to the email I sent.

I have also done a decent amount of trades here.  Its fairly easy to determine with people I have traded with, but the admins are another story

----

My password was sadly not that strong, but I am fairly certain it was changed since 2015.  If I somehow had a keylogger, more would have been lost than this.

[mikeywith]

 do you hear yourself?

common sense, it is safer to tag an account even for 1% possibility of it being hacked. this is called " better safe than sorry" .

assuming the guy who reached out to me on telegram was a random out of the blue " which indeed was not the case", but just for the sake of this argument ,what do you think the right decision would be?

1-tag the user, save poor souls , wait for him to prove the opposite ?
2-collect more evidence, risk people's money waste everybody's time?

The damage of no 1 is very minimal , DT remove their tags and story is over.

sadly you can't undo number 2.

 providing evidence " the way you want them" is nothing under my obligation, let alone the time needed for screenshots and the stuff you asking for, by the time i get all those stuff, the hacker would have already finished what he came for.

also ,why are you assuming that i am angry? never, it's the way i reply to non-sense B.S. sorry nothing personal tho.

thanks for your input, highly appreciated.

Do you want me to tag an account just because you said so?

I have not asked anybody to tag the account.

 i also have no desire in going on with this discussion with you. i don't want to lock this thread for obvious reasons. but sure thing i won't be replying to any of your non-sense here.

Milkz if you have any problem with the tag, start your own thread.

good luck.

edited : thread unlocked upon request , a user said he has some more information to post related to the subject.

@mdayonliner : if you have anything to oppose the tag, please start your own thread.

[coinlocket$]

This is milk

The hacker was:  lukakostrena@gmail.com by IP address 83.177.38.206

only adding one thing, This email is used by this user: luka1987

Several times like https://bitcointalk.org/index.php?topic=1178337.0 Archived: http://archive.fo/tDEYS#selection-544.1-544.3

[notserp]

This is milk

I was able to catch this within 30 minutes of it happening.  I immediately locked the account via the link provided in the email alert.  It looks like any protentional damaged was prevented.

I e-mailed "recoveries...@bitcointalk.org" and am now waiting to recover my account.

What boggles my mind is how they got me.  I am very safe and cannot find any breach anywhere.  ALL of my important accounts have 2FA and any emails do not have any abnormal IP logs.



The hacker was:  lukakostrena@gmail.com by IP address 83.177.38.206

If you do a google search you can find him pretty fast.

It is utterly asinine that bitcointalk does not have 2FA!?!?!

Thanks for the help

no way you caught this within 30 mins of happening i was looking for amazon gc a few days ago and the password and email was changed already and only now you say its hacked

[tempmilk]

no way you caught this within 30 mins of happening i was looking for amazon gc a few days ago and the password and email was changed already and only now you say its hacked

I had changed my email a few days ago, but never my password.  This all happened today.  Feel free to confirm that with a mod/admin.

This is milk

The hacker was:  lukakostrena@gmail.com by IP address 83.177.38.206

only adding one thing, This email is used by this user: luka1987

Several times like https://bitcointalk.org/index.php?topic=1178337.0 Archived: http://archive.fo/tDEYS#selection-544.1-544.3

yep, seems he received neg trust for buying/selling accounts

he is active here: https://www.mpgh.net/forum/member.php?u=3397589

-----

EDIT: I just found out how this happened. I used the site haveibeenpwned.com and found I had an account on cheapassgamer with the same username and password as here.  cheapassgamer was hacked a few year ago -.-  This luka1987 guy deals in accounts and happened upon my info I guess.  I was also flagged on haveibeenpwned.com for bitcointalk, but the password here must have been different at the time.  2 different emails.

[Kavelj22]

Your account is queued for ownership change by manual recovery, you will get it back by January 30th. Your entry has been added to SecLog since 4 days:

Code:

January 23, 2019, 03:10:41 PM - MiLkz - manual recovery, ownership change queued

You can track the queued change and add notes by visiting this thread:  All the Ownership-Changed and Restored accounts 

[MiLkz]

I just now successfully recovered my account.

I am confident I know how all this happened..

I used the site haveibeenpwned.com and found out I was part of the 2015 bitcointalk hack and a hack in the same year on a site called cheapassgamer.

I never even used the account I had on cheapassgamer, but I sadly used the same username and same password I was currently using on bitcointalk. I am leaning toward cheapassgamer as the culprit because I think I used a different password here in 2015.  It really could be either one though. I guess it just took awhile for someone to use/find my info.

When my account was compromised, the e-mail was changed to lukakostrena@gmail.com. The "hacker" luka was not actually a hacker.  I found this guy's skype(lucky.strike1987) via google and he told me he purchased my account information. He claims he purchased my account from: https://bitcointalk.org/index.php?topic=5092343

No way to know for sure if he is lying, but the timeline matches and there is no real reason for him to lie.

I am just happy it all turned out well in the end.  The guy was only able to make 1 post before I locked the account.

I appreciate everyone's help, Thanks!

[sandy-is-fine]

Just got a PM from "Milkz" saying account was restored but I don't yet see it in list so not YET removing neg (admittedly I did remove it for about 5 secs until I realized it hadn't yet been confirmed).

[MiLkz]

Just got a PM from "Milkz" saying account was restored but I don't yet see it in list so not YET removing neg (admittedly I did remove it for about 5 secs until I realized it hadn't yet been confirmed).

That's fair..haha

I just got the "Manual recovery complete" email 1 hour ago, I do not know how long it takes for it to show up