Account "kenzawak" compromised again

[kenzawak_alt]

https://bitcointalk.org/index.php?topic=3243635.msg51849680#msg51849680

I'm not the one who posted this message, that is not the real kenzawak.
My account seems to have been compromised again, email too.
Please tag the kenzawak account until I solve this issue. It seems like my email address was hacked too so I'm gonna have to deal with this first.

Code:

{
  "address": "0xbdc1e8a238572e8e282b791e993f571bf8640d83",
  "msg": "I'm posting under the handle kenzawak_alt to prove I'm the owner of the following eth address. Account kenzawak has been compromised on july 17",
  "sig": "0xfaa2ccb96f4e05706fd4093dc9a23b3205c500aac4645e3578fa34746606c7dd27bf1e9359e0f94f11e9292367407e6a447c7d84626097a9b66073f5585780a11c",
  "version": "3",
  "signer": "MEW"
}

EDIT : email hacked, binance hacked, kraken hacked...

[1715620241]

1715620241

[1715620241]

1715620241

[1715620241]

1715620241

[1715620241]

1715620241

[1715620241]

1715620241

[1715620241]

1715620241

[hacker1001101001]

Code:

{
  "address": "0xbdc1e8a238572e8e282b791e993f571bf8640d83",
  "msg": "I'm posting under the handle kenzawak_alt to prove I'm the owner of the following eth address. Account kenzawak has been compromised on july 17",
  "sig": "0xfaa2ccb96f4e05706fd4093dc9a23b3205c500aac4645e3578fa34746606c7dd27bf1e9359e0f94f11e9292367407e6a447c7d84626097a9b66073f5585780a11c",
  "version": "3",
  "signer": "MEW"
}

Verified bro !

Bad to see this happen twice, just keep calm.

EDIT : email hacked, binance hacked, kraken hacked...

BTW, did you had a common password used on all this platform ?

[hacker1001101001]

I contacted kraken via chat, they locked the account but I guess there's nothing left on it.
As for binance, I don't see any chat option, I sent them an email.
These accounts are my main worries, not the one here.
Actually, I don't know if it can be locked but if that's possible, it would be safer.

Did you lost any funds?

Also, according to me binance has some good recovery options, if you have set up a 2-factor or SMS verification, I don't think the hacker would be able to move your funds from there.

[JSRAW]

@Kenzawak tagging your account. but just to confirm, if you are real owner then please drop a text outside of this forum too ( Just like last time) real @Kenzy knows this.

[Vod]

BTW, did you had a common password used on all this platform ?

That was my first thought, but then I realized they wouldn't need to know the password on the exchange sites if they controlled his email.

Now that he knows hackers view him as an easy score, he should probably up his security.  Maybe go as far as making a new email just for the exchanges, and only access everything through a virtual machine he does nothing else with.  

[kenzawak_alt]

@Kenzawak tagging your account. but just to confirm, if you are real owner then please drop a text outside of this forum too ( Just like last time) real @Kenzy knows this.

Done.

Any way to lock the "kenzawak" account here ?

[Kavelj22]

@Kenzawak tagging your account. but just to confirm, if you are real owner then please drop a text outside of this forum too ( Just like last time) real @Kenzy knows this.

Done.

Any way to lock the "kenzawak" account here ?

Ask a moderator to lock the account, or cryptios team. You can point one of them to this thread.
Am sorry to say that it will be so difficult to get your account back after loosing access to the used for registration; account's can only be restored to original emails.

Good luck

[elda34b]

Did you use any external/shared/public computer lately? If not, maybe you also need to clean up your computer/devices.

Sad to see you got hacked again, hopefully, it could be solved soon.

[hacker1001101001]

BTW, did you had a common password used on all this platform ?

That was my first thought, but then I realized they wouldn't need to know the password on the exchange sites if they controlled his email.

Yes, his email could get access to most of his linked accounts very easily even without knowing the password. Hacker has done the same with his bitcointalk account.

But, I am inclined to think, he should have linked some mobile number with his email from which I think the email could be recovered and than recover the rest. Just like reversing what the hacker did !

@kenzawak, did you had any phone number linked with your email ?

[JSRAW]

@Kenzawak tagging your account. but just to confirm, if you are real owner then please drop a text outside of this forum too ( Just like last time) real @Kenzy knows this.

Done.

Any way to lock the "kenzawak" account here ?

Msz received and confirmed offline.

[Halab]

Any way to lock the "kenzawak" account here ?

I relayed your request on the Staff forum, it shouldn't take too long. It's all that I can do.

Edit : Account Kenzawak is now banned.

[AB de Royse777]

https://bitcointalk.org/index.php?topic=3243635.msg51849680#msg51849680

WOW! That was a quick activity to steal some BTC. Good thing that DarkStar_ has sharp eyes.

EDIT : email hacked, binance hacked, kraken hacked...

Anyway, sorry to hear you have this situation. This is the reason I always use 2FA for my gmail account. I hope you get your account back soon along with all those accounts in the other platform.

[LTU_btc]

It's worrying thing to read, especially because your account got compromised not for the first time. You should pay more attention to security. I hope that hacker didn't stolen your money from exchanges. You should enable 2FA on all exchanges and email - it's must do thing. Also, you should set strong and unique passwords on every website thst you're using. And also it would be good to use separate emails for financial things like exchanges and another one just for Bitcointalk.

[malevolent]

Your computer/phone might be compromised if you keep getting hacked all the time. Get a new computer/phone or SSD/HDD at least and exercise more caution/pay more attention to what you click on.

[eternalgloom]

Your computer/phone might be compromised if you keep getting hacked all the time. Get a new computer/phone or SSD/HDD at least and exercise more caution/pay more attention to what you click on.

Could probably be a keylogger if he's always typing in his password and even if he's not, they'd still get is password with him typing it in the first time.

OP, I'd do a clean install of your OS and really check all browser plugins you have installed.
Check whether you have any malicious ones installed.

Shouldn't need a whole new PC or phone. Very unlikely that it's a rootkit, normal format or factory reset should solve it.

[Cyrus]

As Halab mentionef, the account is already locked.
Follow the instructions here please: https://bitcointalk.org/index.php?topic=5089777

[hacker1001101001]

As Halab mentionef, the account is already locked.
Follow the instructions here please: https://bitcointalk.org/index.php?topic=5089777

Please can you clear my doubt @Cyrus

kenzawak's email is also hacked and he doesn't have the access to his original email connected to his account anymore.

But in recovery instruction I read this.

If your account was hacked

Email recoveries...@bitcointalk.org, ideally from the account's email address. Include your username and a brief description of the details of how/when the account was hacked. A signature will likely be required (see below).

Can he recover his account just with the signed message or email address is mandatory ?

[TryNinja]

But in recovery instruction I read this.

If your account was hacked

Email recoveries...@bitcointalk.org, ideally from the account's email address. Include your username and a brief description of the details of how/when the account was hacked. A signature will likely be required (see below).

Can he recover his account just with the signed message or email address is mandatory ?

If your account was hacked

Email recoveries...@bitcointalk.org, ideally from the account's email address. Include your username and a brief description of the details of how/when the account was hacked. A signature will likely be required (see below).

Ideally =/= necessarily.

AFAIK they check a lot of things like IP addresses and activity. Not only a signed message and if the email matches.

[mindrust]

Since he got hacked twice and considering that he (hopefully) took the necessary precautions after the first one, it looks like his situation is very serious.

Somebody collected all the necessary information before making the final blow.

Might be a trojan horse which the latest AV's cant detect or there is somebody around you who have access to your PC. Whatever it is, if you haven't till now, this is the time to clean all of your USB's, format your PC, reset your passwords and pay attention to the people around you.

[logfiles]

Can he recover his account just with the signed message or email address is mandatory ?

I think the recoveries team would "prefer" him to mail them using the original Email address but he still stands a chance of recovering his account using a signed message from a staked bitcoin address. They will probably do further investigations like look into the IP address logs before and after the change of email address.

Use of Original email address comes in handy when one does not have a staked bitcoin address. Once one loses control of their email address too, then there is completely no way to prove ownership of the account.