Posts in my profile that I had not made

[krishnaverma]

I do not know how but someone has made two posts using my profile. Looks like the account was compromised (I think mods can check I.P or so of the user while making those posts). Those two posts are :

https://bitcointalk.org/index.php?topic=5205982.msg53229762#msg53229762

https://bitcointalk.org/index.php?topic=5205846.msg53223561#msg53223561

Can  a moderator please check the IP and delete these posts.

[1714818869]

1714818869

[1714818869]

1714818869

[1714818869]

1714818869

[1714818869]

1714818869

[o_e_l_e_o]

You can check your own IP logs here: https://bitcointalk.org/myips.php

You can also delete those posts yourself.

I suggest you also change your account password (Edit: I can see from BPIP you've already done this), and change the password of your associated email account. Don't use the same password for both.

[rhomelmabini]

As per bpip:

Code:

2019-04-18 4:11:19 PM	password reset via email
2019-12-10 2:10:01 PM	password changed

If you haven't made these post then you can edit it or that reply you've made in the Invites and Accounts board I pretty sure you can delete it since 24 hrs. already passed it is dated on the 1st of December.

I advise you to change your password on this account as well as the email address.

[krishnaverma]

As per bpip:

Code:

2019-04-18 4:11:19 PM	password reset via email
2019-12-10 2:10:01 PM	password changed

If you haven't made these post then you can edit it or that reply you've made in the Invites and Accounts board I pretty sure you can delete it since 24 hrs. already passed it is dated on the 1st of December.

I advise you to change your password on this account as well as the email address.

I had changed the password today. I am really surprised to see these posts today. Glad at least I checked recent posts, otherwise I would have never found about this.

[The Sceptical Chymist]

You can check your own IP logs here: https://bitcointalk.org/myips.php

Dang, I didn't know about that functionality--that's pretty neat.

And it's very strange that someone apparently used OP's account to make posts but didn't completely take over the account.  That's suspicious, and if that's what really happened then he got really lucky.  Usually when accounts get hacked, the hacker changes the password and the owner can kiss their account goodbye.

[krishnaverma]

You can check your own IP logs here: https://bitcointalk.org/myips.php

Dang, I didn't know about that functionality--that's pretty neat.

I think this is a newly added functionality. I also noticed it today in profile.

[hugeblack]

Do not forget to sign a message from the address stacked on this topic ---> Stake your Bitcoin address here or one of your old addresses.

I think this is a newly added functionality. I also noticed it today in profile.

No, it's since last June.

For now, I added this page where you can see your IP logs for the past 30 days: https://bitcointalk.org/myips.php . You could pretty easily write a userscript to periodically check this and warn you if it's weird. (But don't scrape it on every pageload.)
I don't want to make older IP logs automatically accessible because that'd give a hacker a bunch of useful/sensitive information. But 30 days is probably not too harmful.

BTW: if someone wrote a userscript using that page it will be useful for early warning about the possibility of hack, as happened to the user.

[o_e_l_e_o]

Dang, I didn't know about that functionality--that's pretty neat.

It was implemented about 6 months ago here: https://bitcointalk.org/index.php?topic=5150936.msg51367307#msg51367307

Usually when accounts get hacked, the hacker changes the password and the owner can kiss their account goodbye.

If you read the whole thread that the post I linked to above is from, you can see this pattern of activity where the hacker breaks in to an account but does not change the password. This happened to the "kenzawak" account, and allowed the scammer to send out PMs to victims and scam users via Telegram without raising any suspicion or the account being locked or red flagged.

OP, I'd also check your inbox/outbox to see if any PMs were sent without your knowledge, although an attacker may already have deleted any evidence of this.

[krishnaverma]

I checked the IPs for last 30 days https://bitcointalk.org/myips.php . The IPs are from 3 different countries in last 30 days. The posts I mentioned were made before these 30 days though and I cannot check the IPs for those posts. I am almost sure though that I had not logged in the account on those days.

[hosseinimr93]

I checked the IPs for last 30 days https://bitcointalk.org/myips.php . The IPs are from 3 different countries in last 30 days. The posts I mentioned were made before these 30 days though and I cannot check the IPs for those posts. I am almost sure though that I had not logged in the account on those days.

So, someone knows your password and can log in to your account but didn't have control over your email address.
Reset your password via your email and be safe.

Edit: I just noticed you have changed your password today. So, I don't think that person can access to your account anymore.

Edit 2: Both of those posts have been made in the last 30 days. (One post on December 1 and another one on November 30). So, why can't you check the IPs?

[krishnaverma]

Edit 2: Both of those posts have been made in the last 30 days. (One post on December 1 and another one on November 30). So, why can't you check the IPs?

My bad. Yes I can check the IP for these two dates and they are from a different country than mine.