Bitcoin Forum
August 24, 2019, 10:35:21 AM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1] 2 3 »  All
  Print  
Author Topic: ⚠️ How Scammer tried to Hack my Bitcointalk and how to Protect yourself?⚠️  (Read 708 times)
dkbit98
Full Member
***
Offline Offline

Activity: 504
Merit: 178


Check Polyx Exchange!


View Profile WWW
August 07, 2019, 09:26:54 PM
Last edit: August 09, 2019, 10:43:15 AM by dkbit98
Merited by Lauren Smith (3), bones261 (2), LoyceV (2), Halab (2), DdmrDdmr (2), Daniel91 (1), marlboroza (1), Lafu (1), Pmalek (1), big_daddy (1), Coin-1 (1), Bttzed03 (1), bakasabo (1), tranthidung (1), Dzeronimo (1), morvillz7z (1), CucakRowo (1), lulucrypto (1), rhomelmabini (1), hd49728 (1), SuperTA (1)
 #1

Hello my fellow Bitcointalkers!

Today I will show you how one scammer tried to hack my Bitcointalk account,
and I will teach you how to prevent any future similar hack attack.


1. I received PM from unknown member with this content






2. DO NOT click on any link as it redirects you to FAKE Bitcointalk clone website from Turkey.
With intention to collect your Login information and password, and takeover your account.






3. ALWAYS check website Link in address bar, and if it is safe HTTPS.


4. Always check user trust and profile and again DO NOT CLICK on any links.


When you hover over with mouse over link that is outside this forum, color will be blue




When you hover over link and you see green color, that is link inide Bitcointalk forum.




Here we have clear case of hacked account: kingpin4321
- password is changed recently
https://bitcointalk.org/index.php?action=profile;u=2447711







5. Report user to admin/moderator and give him negative trust.




6. Report phishing website to Google and Symantec.
https://submit.symantec.com/antifraud/phish.cgi
https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en
https://www.phishtank.com/
https://www.comodo.com/home/internet-security/submit.php?

7. Learn how to protect yourself better.



- use Firefox browser, it shows you warnings for unsecure logins, and it is more secure than Chrome browser. Alternative is Brave browser.

- use browser extensions: HTTPS everywhere, ClearURL, NoScript or uMatrix (for experts)

- install Malwarebytes Browser Extension for protection
https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/?src=search
https://chrome.google.com/webstore/detail/malwarebytes-browser-exte/ihcjicgdanjaechkgeegckofjjedodee


- stake your Bitcoin address on forum to prove ownership of your Bitcointalk account -> Stake your Bitcoin address here


8. Ask me if you have any questions.


I will update this topic with more information if needed.
Thank you for your attention.





Translated to Russian language by bakasabo:
https://bitcointalk.org/index.php?topic=5173654.msg52098506#msg52098506


  ●  POLYX EXCHANGE - the easiest and safest way to buy Bitcoin in Europe!
  ●  SECURE AND FRIENDLY
  ●  MAIN TOPIC  ●  GO TO SITE  ●  OUR TELEGRAM  ●  BOUNTY
1566642921
Hero Member
*
Offline Offline

Posts: 1566642921

View Profile Personal Message (Offline)

Ignore
1566642921
Reply with quote  #2

1566642921
Report to moderator
1566642921
Hero Member
*
Offline Offline

Posts: 1566642921

View Profile Personal Message (Offline)

Ignore
1566642921
Reply with quote  #2

1566642921
Report to moderator
1566642921
Hero Member
*
Offline Offline

Posts: 1566642921

View Profile Personal Message (Offline)

Ignore
1566642921
Reply with quote  #2

1566642921
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1566642921
Hero Member
*
Offline Offline

Posts: 1566642921

View Profile Personal Message (Offline)

Ignore
1566642921
Reply with quote  #2

1566642921
Report to moderator
1566642921
Hero Member
*
Offline Offline

Posts: 1566642921

View Profile Personal Message (Offline)

Ignore
1566642921
Reply with quote  #2

1566642921
Report to moderator
1566642921
Hero Member
*
Offline Offline

Posts: 1566642921

View Profile Personal Message (Offline)

Ignore
1566642921
Reply with quote  #2

1566642921
Report to moderator
Lafu
Legendary
*
Offline Offline

Activity: 1246
Merit: 1127



View Profile
August 07, 2019, 09:41:50 PM
 #2

Nice guide and Information about that phishing site and how they doing it .
Hope that this are reading a lot of users and that not much fall into the trap with that .
Nice catch .
dkbit98
Full Member
***
Offline Offline

Activity: 504
Merit: 178


Check Polyx Exchange!


View Profile WWW
August 07, 2019, 09:48:47 PM
 #3

Thanks.

One more thing I noticed, after I entered fake account information with password FU.K YOUXXX
is that it redirects me to regular Bitvest Plinko Signature Campaign after it takes my 'login details'
https://bitcointalk.org/index.php?topic=5088858.0

Maybe lightlord, creator of this topic, should be contacted regarding this,
just that he is aware of the situation.
They are probably using other random links, with malicious attachments.

One more way to super protect is to install browser extension called NoScript, but it is a bit complex.

  ●  POLYX EXCHANGE - the easiest and safest way to buy Bitcoin in Europe!
  ●  SECURE AND FRIENDLY
  ●  MAIN TOPIC  ●  GO TO SITE  ●  OUR TELEGRAM  ●  BOUNTY
big_daddy
Sr. Member
****
Online Online

Activity: 826
Merit: 255


CurioInvest [IEO Live]


View Profile WWW
August 07, 2019, 09:49:05 PM
Merited by bob123 (4), hd49728 (3), DdmrDdmr (1)
 #4

On this forum, when you rollover with the cursor the link is green if it’s a link from this forum, it’s blue, if is a link outside of this forum
So, this is also a way to prevent to click on a scam link

                       ░▒▒▒▒▒▒▒▒▒▒▒▒▒░░                                         
              ░░▒▓▓███▓▓░░████████████████▓░                                   
          ░▓▓▓▒██████████░ ███████████████████▒                                 
       ░▓██▒░  ███████████▓ ▒███████████████████▓▓▓▓▓████▓▓                     
  ▒▓▓▓██▒     ████████   ▒██░ ██████████▓▒░      █████████████████▓▓▒░         
 ▓█▒░░        ▒▒▓▓▓▓▓▓  ░▒███░ ▓▓▓▒░░   ░░▒▒▓▓███▓▓▓▓▓▓▒▒       ░▒▓███████▓▒░   
 █                                               ░▒▒▓▓██████████▓▒░░░▒▓██████▓█
 █▒  ▒▓▓▒░▒▓█▓▓▓▒▒▒▒░░                                    ░▒▓▓████████▓▓▒░   ▒█
 ░█ ▒████▓  ▒▒░▒▒▓▓▓▓██████████▓▓▓▒▒▒░                            ░▒      ░▓██ 
  ▒███▒▓▓██  ░              ▒░░█████▓▓▓▓██▓▓▒▒▒▒▓▓▓▓▓▒▒░░          ░░ ▓██████▓▓▒
    ▓█▓▓▒▓█▓ ▒              ▒▒▓███  ███████████▓▓█▓░░▒▒░░░  ▓███████▓████████ ▓█
     ░█  ▓██▓▒░░▒▓▓▓▓▓████████▓░   ████▒▒▓▓▓▓██████      ░ ████████▒█████▓▒  ▒█
      ▓▓▓▓████▓▒░░                ▒███ ░███▓█▓▓████░    ▓ ████████▓▓█▓▒    ▓▓▓ 
      ░▓█████▓▒▓██████▓▒░         ▒██▓ ██▒  ██▓▓████    ▒  ░            ▒██▒   
        ░▒         ░▒▓█████████▓▒  ██▒ █▓    ██▒█████    ▒▒▒░░░▒░░░█▓▒▓██▓     
                          ░▒▓█████████ ██    ▓█▒█████▓             ░▓██▓       
                                  ░▒▓█▓ ██ ░▒██░██████▓  ▒▒▒░   ▒▓███▒         
                                      █▓▒▓████░▓████▓ ▓▓▓██████████░           
                                       ▓█▓▓▓▓▓█████▓          ░▒▒               
                                         ▒▓▓██▓▒░                               
                                                                               
|
|

█████████████████████████
██ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ██
██ ███████████▀     ██ ██
██ ██████████▌   ▄▄▄██ ██
██ ██████████   ██████ ██
██ ███████          ██ ██
██ ███████▄▄▄   ▄▄▄▄██ ██
██ ██████████   ██████ ██
██ ██████████   ██████ ██
██ ██████████   ██████ ██
██▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

█████████████████████████
██ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ██
██ █████████████▀█████ ██
██ ███ ▀█████▀      ▀█ ██
██ ███     ▀▀      ▐██ ██
██ ███▌            ███ ██
██ ████▌          ▄███ ██
██ ██████       ▄█████ ██
██ ████▄▄▄▄▄▄▄████████ ██
██ ███████████████████ ██
██▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

█████████████████████████
██ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ██
██ ████████████▀▀▀████ ██
██ ████████▀▀     ████ ██
██ █████▀    ▄▀  ▐████ ██
██ ██▀     ▄▀    ▐████ ██
██ ████▄▄ █▀     █████ ██
██ ██████ ▄▄█   ▐█████ ██
██ ████████████ ██████ ██
██ ███████████████████ ██
██▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
|
Whitepaper
Ann Thread
Bounty Thread
dkbit98
Full Member
***
Offline Offline

Activity: 504
Merit: 178


Check Polyx Exchange!


View Profile WWW
August 07, 2019, 09:56:23 PM
 #5

On this forum, when you rollover with the cursor the link is green if it’s a link from this forum, it’s blue, if is a link outside of this forum
So, this is also a way to prevent to click on a scam link

I will add that also.
Thanks

  ●  POLYX EXCHANGE - the easiest and safest way to buy Bitcoin in Europe!
  ●  SECURE AND FRIENDLY
  ●  MAIN TOPIC  ●  GO TO SITE  ●  OUR TELEGRAM  ●  BOUNTY
morvillz7z
Sr. Member
****
Online Online

Activity: 462
Merit: 844



View Profile
August 07, 2019, 10:19:16 PM
 #6

I think kingpin4321 fell for the exact same thing.

Yesterday in Services someone posted a fake giveaway with a link to a phishing Bitcointalk clone, he was first to reply. I guess I was late with my tag/flag.  Embarrassed

A third known case (possibly even more) within the past 36 hours: Link




.




  ▄▄▄▄▄▄▄▄▄▄▄▄▄
▄████████▀▀▀▀███▄
███████▀     ████
███████   ███████
█████        ████
███████   ███████
▀██████   ██████▀
  ▀▀▀▀▀   ▀▀▀▀▀

  ▄▄▄▄▄▄▄▄▄▄▄▄▄
▄██▀▀▀▀▀▀▀▀▀▀▀██▄
██    ▄▄▄▄▄ ▀  ██
██   █▀   ▀█   ██
██   █▄   ▄█   ██
██    ▀▀▀▀▀    ██
▀██▄▄▄▄▄▄▄▄▄▄▄██▀
  ▀▀▀▀▀▀▀▀▀▀▀▀▀

            ▄▄▄
█▄▄      ████████▄
 █████▄▄████████▌
▀██████████████▌
  █████████████
  ▀██████████▀
   ▄▄██████▀
    ▀▀▀▀▀

    ██  ██
  ███████████▄
    ██      ▀█
    ██▄▄▄▄▄▄█▀
    ██▀▀▀▀▀▀█▄
    ██      ▄█
  ███████████▀
    ██  ██




               ▄
       ▄  ▄█▄ ▀█▀      ▄
      ▀█▀  ▀   ▄  ▄█▄ ▀█▀
███▄▄▄        ▀█▀  ▀     ▄▄▄███       ▐█▄    ▄█▌   ▐█▌   █▄    ▐█▌   ████████   █████▄     ██    ▄█████▄▄   ▐█████▌
████████▄▄           ▄▄████████       ▐███▄▄███▌   ▐█▌   ███▄  ▐█▌      ██      █▌  ▀██    ██   ▄██▀   ▀▀   ▐█
███████████▄       ▄███████████       ▐█▌▀██▀▐█▌   ▐█▌   ██▀██▄▐█▌      ██      █▌   ▐█▌   ██   ██          ▐█████▌
 ████████████     ████████████        ▐█▌    ▐█▌   ▐█▌   ██  ▀███▌      ██      █▌  ▄██    ██   ▀██▄   ▄▄   ▐█
  ████████████   ████████████         ▐█▌    ▐█▌   ▐█▌   ██    ▀█▌      ██      █████▀     ██    ▀█████▀▀   ▐█████▌
   ▀███████████ ███████████▀
     ▀███████████████████▀
        ▀▀▀█████████▀▀▀
FIND OUT MORE AT MINTDICE.COM
CucakRowo
Full Member
***
Offline Offline

Activity: 462
Merit: 151


Indonesia Is Beauty. Video : https://youtu.be/ojQ


View Profile WWW
August 07, 2019, 10:29:54 PM
 #7

To OP,
Mind to create flag for kingpin4321?
i will support you.



▂▃▅▇█▓▒░۩۞-SIGNATURE FOR RENT (I'm still looking for projects that are innovative and legit)-۞۩░▒▓█▇▅▃▂
dkbit98
Full Member
***
Offline Offline

Activity: 504
Merit: 178


Check Polyx Exchange!


View Profile WWW
August 07, 2019, 10:33:30 PM
 #8

To OP,
Mind to create flag for kingpin4321?
i will support you.

I can do it... my only concern is that it is a hacked account,
and even if I want to punish the hacker, I also want to bring back original user kingpin4321.

Maybe it is best to wait for moderators to decide.

EDIT:
I created it.
Who knows how many users he contacted...


  ●  POLYX EXCHANGE - the easiest and safest way to buy Bitcoin in Europe!
  ●  SECURE AND FRIENDLY
  ●  MAIN TOPIC  ●  GO TO SITE  ●  OUR TELEGRAM  ●  BOUNTY
tranthidung
Hero Member
*****
Offline Offline

Activity: 560
Merit: 544


CurioInvest [IEO Live]


View Profile
August 08, 2019, 02:21:11 AM
 #9

I think it is good to use Trust, rather than Flag.  Of if you still want to use Flag, it should be a Newbie Flag, as this Flag created by admin, on @newsilike:
https://bitcointalk.org/index.php?action=trust;u=157669
That guy has not broken any contract with you, and has not yet stolen your money.

                       ░▒▒▒▒▒▒▒▒▒▒▒▒▒░░                                         
              ░░▒▓▓███▓▓░░████████████████▓░                                   
          ░▓▓▓▒██████████░ ███████████████████▒                                 
       ░▓██▒░  ███████████▓ ▒███████████████████▓▓▓▓▓████▓▓                     
  ▒▓▓▓██▒     ████████   ▒██░ ██████████▓▒░      █████████████████▓▓▒░         
 ▓█▒░░        ▒▒▓▓▓▓▓▓  ░▒███░ ▓▓▓▒░░   ░░▒▒▓▓███▓▓▓▓▓▓▒▒       ░▒▓███████▓▒░   
 █                                               ░▒▒▓▓██████████▓▒░░░▒▓██████▓█
 █▒  ▒▓▓▒░▒▓█▓▓▓▒▒▒▒░░                                    ░▒▓▓████████▓▓▒░   ▒█
 ░█ ▒████▓  ▒▒░▒▒▓▓▓▓██████████▓▓▓▒▒▒░                            ░▒      ░▓██ 
  ▒███▒▓▓██  ░              ▒░░█████▓▓▓▓██▓▓▒▒▒▒▓▓▓▓▓▒▒░░          ░░ ▓██████▓▓▒
    ▓█▓▓▒▓█▓ ▒              ▒▒▓███  ███████████▓▓█▓░░▒▒░░░  ▓███████▓████████ ▓█
     ░█  ▓██▓▒░░▒▓▓▓▓▓████████▓░   ████▒▒▓▓▓▓██████      ░ ████████▒█████▓▒  ▒█
      ▓▓▓▓████▓▒░░                ▒███ ░███▓█▓▓████░    ▓ ████████▓▓█▓▒    ▓▓▓ 
      ░▓█████▓▒▓██████▓▒░         ▒██▓ ██▒  ██▓▓████    ▒  ░            ▒██▒   
        ░▒         ░▒▓█████████▓▒  ██▒ █▓    ██▒█████    ▒▒▒░░░▒░░░█▓▒▓██▓     
                          ░▒▓█████████ ██    ▓█▒█████▓             ░▓██▓       
                                  ░▒▓█▓ ██ ░▒██░██████▓  ▒▒▒░   ▒▓███▒         
                                      █▓▒▓████░▓████▓ ▓▓▓██████████░           
                                       ▓█▓▓▓▓▓█████▓          ░▒▒               
                                         ▒▓▓██▓▒░                               
                                                                               
|
|

█████████████████████████
██ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ██
██ ███████████▀     ██ ██
██ ██████████▌   ▄▄▄██ ██
██ ██████████   ██████ ██
██ ███████          ██ ██
██ ███████▄▄▄   ▄▄▄▄██ ██
██ ██████████   ██████ ██
██ ██████████   ██████ ██
██ ██████████   ██████ ██
██▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

█████████████████████████
██ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ██
██ █████████████▀█████ ██
██ ███ ▀█████▀      ▀█ ██
██ ███     ▀▀      ▐██ ██
██ ███▌            ███ ██
██ ████▌          ▄███ ██
██ ██████       ▄█████ ██
██ ████▄▄▄▄▄▄▄████████ ██
██ ███████████████████ ██
██▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

█████████████████████████
██ ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ██
██ ████████████▀▀▀████ ██
██ ████████▀▀     ████ ██
██ █████▀    ▄▀  ▐████ ██
██ ██▀     ▄▀    ▐████ ██
██ ████▄▄ █▀     █████ ██
██ ██████ ▄▄█   ▐█████ ██
██ ████████████ ██████ ██
██ ███████████████████ ██
██▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
|
Whitepaper
Ann Thread
Bounty Thread
darklus123
Hero Member
*****
Offline Offline

Activity: 1092
Merit: 580


LocalEthereum.com


View Profile
August 08, 2019, 03:40:31 AM
 #10

Nice catch tho, it can really be pretty obvious attempt  from the hacker. I just wondered why choose your account over a higher account which he can benefit more, hmm sounds fishy.

 
~
As if lightlord would even care. There is also actually no point in letting him know.

████
████
████
████
████          
████             █████████▄
████           ██████████████
████          ██████     ██████
████         ██████       █████
██████████████████████████████
█████████████████████████████▀
              ██████▄
               ██████████████
                 ████████████
  LocalEthereum    50+ Ways To Buy & Sell Ethereum (ETH)   ▄████████████████████▄
██████████████████████
██████████████████████
██████▀▀██████████████
████▀░░░░▀████████████
███▀░░▄▄░░░░░░░░░░████
███▄░░▀▀░░▄▄░░▄▄░░████
████▄░░░░▄██▄▄██▄▄████
██████▄▄██████████████
██████████████████████
██████████████████████
▀████████████████████▀
▄████████████████████▄
██████████████████████
██████████████████████
█████░░▀▀░░░░▀▀░░█████
█████░░░░░░░░░▄░░█████
█████▄░░░░░░▄▀░░▄█████
██████░░░▀▄▀░░░░██████
███████░░░░░░░░███████
████████░░░░░░████████
█████████▄░░▄█████████
██████████████████████
▀████████████████████▀
No verificationsNon-Custodial
Built-in Escrow   ● External Wallet Integration
rhomelmabini
Full Member
***
Offline Offline

Activity: 378
Merit: 117


I Mean It.


View Profile
August 08, 2019, 05:42:51 AM
 #11

Nice catch tho, it can really be pretty obvious attempt  from the hacker. I just wondered why choose your account over a higher account which he can benefit more, hmm sounds fishy.
Well, I've got this assumption that the hacker thinks he can get as this user is just a Member rank and have little to know about phishing. Not knowing what he tried to mess is a techy guy and even surpass him on the knowledge about those kinds of things.

It might be good to move this one on B&H board as it is more appropriate there. Nice catch OP.

▀▀▀▀▀▀▀▀▀▀▀▀─────────────    █▀▀ ▀▀█                                            ELAD NETWORK | YOUR TOKEN TO REAL ESTATE                                                            █▀▀ ▀▀█    ─────────────
▀▀▀▀▀▀▀▀▀▀▀▀▀─────────────      ██ ██     COMBINING BLOCKCHAIN, REAL ESTATE AND ARTIFICIAL INTELLIGENCE FOR A SMARTER WAY TO INVEST     ██ ██      ─────────────
▀▀▀▀▀▀▀▀▀▀▀▀▀▀─────────────█▄▄ ▄▄█                                                               ANN Thread | Twitter | Facebook | Telegram | Medium                                                                █▄▄ ▄▄█─────────────
mainconcept
Sr. Member
****
Offline Offline

Activity: 546
Merit: 398


View Profile
August 08, 2019, 07:02:33 AM
 #12

I just opened a pull request for MetaMask: https://github.com/MetaMask/eth-phishing-detect/pull/3221

The site should be blocked through the MetaMask extension if they accept it.

dkbit98
Full Member
***
Offline Offline

Activity: 504
Merit: 178


Check Polyx Exchange!


View Profile WWW
August 08, 2019, 07:37:12 AM
Last edit: August 08, 2019, 08:05:29 AM by dkbit98
 #13

Nice catch tho, it can really be pretty obvious attempt  from the hacker. I just wondered why choose your account over a higher account which he can benefit more, hmm sounds fishy.

 
Quote from: dkbit98  link=topic=5173531.msg52094489#msg52094489 date=1565214527
~
As if lightlord would even care. There is also actually no point in letting him know.

Same reason why he hacked user kingpin4321
and maybe he thinks members like me are stupid brainless sheeps.

Thank you for your 'advice'.

I just opened a pull request for MetaMask: https://github.com/MetaMask/eth-phishing-detect/pull/3221

The site should be blocked through the MetaMask extension if they accept it.



Thanks.
Fake bitcointalk login website is still very much active!
I noticed that time is not changing on fake site June 07, 2019, 10:23:06 PM for now

https://whois.domaintools.com/sebiltv.com.tr









  ●  POLYX EXCHANGE - the easiest and safest way to buy Bitcoin in Europe!
  ●  SECURE AND FRIENDLY
  ●  MAIN TOPIC  ●  GO TO SITE  ●  OUR TELEGRAM  ●  BOUNTY
Bttzed03
Full Member
***
Offline Offline

Activity: 686
Merit: 140



View Profile WWW
August 08, 2019, 08:14:06 AM
 #14

I wonder why the account (kingpin4321) isn't tagged yet.

I created it.
Add the flag in your OP.

Saint-loup
Hero Member
*****
Offline Offline

Activity: 882
Merit: 652


View Profile
August 08, 2019, 09:01:52 AM
Last edit: August 08, 2019, 09:17:38 AM by Saint-loup
 #15

I wonder why the account (kingpin4321) isn't tagged yet.

I created it.
Add the flag in your OP.
I've supported the flag and tagged it since this account obviously tried to hack the OP. But we don't know if it's a hacked account or a bought account.

But yes I'm a little bit surprised to see that so few people have already done the same.  Huh


https://bitcointalk.org/index.php?action=trust;u=2447711
LoyceV
Legendary
*
Offline Offline

Activity: 1582
Merit: 4447


Largest Merit Circle on BPIP!


View Profile WWW
August 08, 2019, 09:04:17 AM
 #16

Can you copy the URL as shown in the PM?

I'm asking because you can't do this (I can't even do it within quote tags, so I've replaced the "/" by "slash"):
Code:
[url=https://bitcointalkFAKE.org]http://bitcointalk.org[slashurl]
It shows like this:
https://bitcointalkFAKE.org

I think the scammer replaced the lower case L by an upper case i:
Code:
[url=https://bitcointalkFAKE.org]https://bitcointaIk.org[/url]

And now it works:
https://bitcointaIk.org

dkbit98
Full Member
***
Offline Offline

Activity: 504
Merit: 178


Check Polyx Exchange!


View Profile WWW
August 08, 2019, 09:10:30 AM
 #17

I wonder why the account (kingpin4321) isn't tagged yet.

I created it.
Add the flag in your OP.
I supported the flag and tagged it since this account obviously tried to hack the OP. But we don't know if it's a hacked account, it could have been bought too.

Someone stated this before:

I think kingpin4321 fell for the exact same thing.

Yesterday in Services someone posted a fake giveaway with a link to a phishing Bitcointalk clone, he was first to reply. I guess I was late with my tag/flag.  Embarrassed

A third known case (possibly even more) within the past 36 hours: Link

And I checked his history also.

  ●  POLYX EXCHANGE - the easiest and safest way to buy Bitcoin in Europe!
  ●  SECURE AND FRIENDLY
  ●  MAIN TOPIC  ●  GO TO SITE  ●  OUR TELEGRAM  ●  BOUNTY
dkbit98
Full Member
***
Offline Offline

Activity: 504
Merit: 178


Check Polyx Exchange!


View Profile WWW
August 08, 2019, 09:14:09 AM
Merited by LoyceV (1)
 #18

Can you copy the URL as shown in the PM?

I'm asking because you can't do this (I can't even do it within quote tags, so I've replaced the "/" by "slash"):
Code:
[url=https://bitcointalkFAKE.org]http://bitcointalk.org[slashurl]
It shows like this:
https://bitcointalkFAKE.org

I think the scammer replaced the lower case L by an upper case i:
Code:
[url=https://bitcointalkFAKE.org]https://bitcointaIk.org[/url]

And now it works:
https://bitcointaIk.org


Sure I can.
Here it is:

Code:
https://bitcointalk.oгg/index.php?topic=5154525.0#msg51488782

Active now:
Code:
http://sebiltv.com.tr/index/index.php?topic=5088858.0&

NOTE to newbies:
Do NOT visit this links!

  ●  POLYX EXCHANGE - the easiest and safest way to buy Bitcoin in Europe!
  ●  SECURE AND FRIENDLY
  ●  MAIN TOPIC  ●  GO TO SITE  ●  OUR TELEGRAM  ●  BOUNTY
LoyceV
Legendary
*
Offline Offline

Activity: 1582
Merit: 4447


Largest Merit Circle on BPIP!


View Profile WWW
August 08, 2019, 09:21:10 AM
 #19

Code:
https://bitcointalk.oгg/index.php?topic=5154525.0#msg51488782
Firefox expands it to this:
Code:
https://bitcointalk.xn--og-hlc/index.php?topic=5154525.0#msg51488782
And then obviously can't find the site.

If I try this (the first 5 characters copied from the URL from the PM, then "test" added by me:
Code:
k.oгgtest
Firefox turns it into this:
Code:
http://www.k.xn--ogtest-pof/
What kind of sorcery is this?

It reminds me of the homograph attack, which is now automatically replacred on all English boards.

This is the culprit:
Code:
г
Google confirms it's Cyrillic: https://en.wikipedia.org/wiki/Ge_(Cyrillic)

I guess theymos missed this one.

Saint-loup
Hero Member
*****
Offline Offline

Activity: 882
Merit: 652


View Profile
August 08, 2019, 09:24:50 AM
 #20

I wonder why the account (kingpin4321) isn't tagged yet.

I created it.
Add the flag in your OP.
I supported the flag and tagged it since this account obviously tried to hack the OP. But we don't know if it's a hacked account, it could have been bought too.

Someone stated this before:

I think kingpin4321 fell for the exact same thing.

Yesterday in Services someone posted a fake giveaway with a link to a phishing Bitcointalk clone, he was first to reply. I guess I was late with my tag/flag.  Embarrassed

A third known case (possibly even more) within the past 36 hours: Link

And I checked his history also.
Why the real owner doesn't say anything, if his account had been hacked?  Huh
He would already come in meta or on this thread to report the hack, no?
There is something fishy.
Pages: [1] 2 3 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!