[Account Recovered] BitcoinGirl.Club (no longer) hacked

[LoyceV]

I didn't expect BitcoinGirl.Club to share personal messages with a Trollby. Since it's largely off-topic in that LFC_bitcoin sending PMs to his friends to oppose flag and bribing DT inclusion, I think it deserves it's own topic.

Some (shortened) quotes (without the foul language, and in slightly changed order):

One thing I’m bothered about is BitcoinGirl.Club breaking my trust & sending PM’s to a newbie troll. Why, because he asked? Did he pay BitcoinGirl.Club for them? Why would you send a noob troll PM’s?

I fucked it up man, imma keep ma mouth shut. Sorry mate

...proceeds to record his PM's on a video and posts in the forum...

wtf. That's some unethical shit.

I’ve just read through my correspondence with him & he was panicking about Side Chain being angry at him if he didn’t send him all the PM’s.

It's worth pointing out that BitcoinGirl.Club's password was reset via email just over 1 hour before the above post by Side chain.

First thing I thought when I saw that that it may have been compromised.

He may forge a story...

"I WAS HACKED"

I suppose it is plausible it was hacked, though I guess both scenarios are. I'm not sure why BitcoinGirl.Club would expose this to a newbie though. Why would he do that's and what's in it for him, especially when I thought those two were pals at least? He just spammed a PM to 14+ people as well which seems odd and is asking for trouble if someone reports it.

One possibility could be screen-sharing using a teamviewer type of software which the OP recorded without consent or knowledge.

I doubt it’s hacked, he was speaking to me about how worried he was about making Side Chain angry. He was panicking Side Chain is an alt of a highly respected account. He’s either ratted me out, sold the account to Side Chain or faked a hack. All three possibilities are disgusting.

BitcoinGirl.Club changes their password fairly regularly, so they'd be hard pressed to claim their account was hacked (or sold for that matter)

As you see his regular password changes never happened in 2019 and 2020 and the last pass change was via email unlike the others.

Anyway, it doesn't sound like real account owner sent messages:

This is beyond my expectation! [...],BitcoinGirl.Club, [...], [...] are protecting sportsbet.io secretly.

It's beyond bitcoingirl's expectation that bitcoingirl protects sportsbet? Wth?

I'm not familiar with Bitcoingirl.club, but I didn't see anything else than a funny way of talking about himself in the third person.

Or he could be hacked for real. Or social-engineered to share info with a trusted account who turned out to be a sockpuppeting troll.

From the best I can tell, the Pamoldar account changed hands between Oct 16 and Oct 30, 2016. This is quite early compared to some of the other ones in the farm. I don't know why somebody would buy an account with only 46 posts (maybe some got deleted during the last 3 to almost 4 years?) instead of starting their own, but apparently that's what happened.

[1715597913]

1715597913

[1715597913]

1715597913

[1715597913]

1715597913

[1715597913]

1715597913

[LFC_Bitcoin]

Last Active -

BitcoinGirl.Club - Today at 01:04:02 AM
Side Chain - Last Active Today at 01:08:36 AM

BitcoinGirl.Club password change before the above times -

[mindrust]

If It was me that was hacked, i would create another account and announce it at meta. This is what most of us would do.

Another possibility is, the original owner is on vacation or smth.

Or,

Covid19 took him :/

[nutildah]

I'm leaning towards yes he was hacked.

In the video, he exposed way more information about his PMs than was necessary, including PMs that have nothing to do with the situation. And taking time to highlight lines of text that are clearly visible anyway? Lingering on points that really only mattered to the troll(s)?

Another thing that makes me think he was hacked is this (from the video):



BitcoinGirl.club quite often uses these non-forum smileys... On some browsers they show up fine and on others they show up as gibberish. Since we are looking at a video that was supposedly taken from BitcoinGirl.club's computer, why can't he see his own smileys?

So the next question is, who is Side chain, and then how did he get BitcoinGirl.club's password?

This is probably a decent clue:

I don't want to be blacklisted by yahoo of course.

https://bitcointalk.org/index.php?topic=5220203.msg53727618#msg53727618

He's also somewhat technical minded, having inquired about installing Epochtalk.

[lucky80]

I'm leaning towards yes he was hacked.

Possibly, but why doesn't she claim her account? She has a legendary account, and I will shout if that happens to me. Maybe it changed hands. We should wait until someone shows up claiming. I hope she staked her bitcoin address.

[suchmoon]

He's also somewhat technical minded, having inquired about installing Epochtalk.

And yet thinks that open source web == PHP... or it was a phishing attempt in its own right:

If they can provide the files and an empty database for me just to configure by my own then I think I will have more than enough or I will have to use SMF for the forum.

I'd say Occam's razor says that BitcoinGirl.Club didn't give the info to the troll voluntarily. There would be nothing to be gained from that. Password changes in 2018 probably have nothing to do with it. Password reset via e-mail probably means someone got into his e-mail account and IIRC his e-mail address was known publicly but I can't find that info now.

[Pffrt]

Update here from bitcoingirl.club- https://bitcointalk.org/index.php?topic=5264620.msg54926472#msg54926472

[JeromeTash]

I'm leaning towards yes he was hacked.

Possibly, but why doesn't she claim her account? She has a legendary account, and I will shout if that happens to me. Maybe it changed hands. We should wait until someone shows up claiming. I hope she staked her bitcoin address.

Maybe they were offline at that time and have now realized what happened to the account
Let's watch and see how everything unfolds.  This just goes to show how PMs are unsecure, anything can happen and having sensitive information in there when your account gets compromised can be a terrible experience.

[LoyceMobile]

Update here from bitcoingirl.club- https://bitcointalk.org/index.php?topic=5264620.msg54926472#msg54926472

I can't verify it from mobile, but he's used this account before:

Code:

BitcoinGirl.Club
My email got compromised
3/8/2020 
And please stop these nonsense

Code:

bc1q02u7ntt7xagu2f2p6yk8wgkh3xjte5xcnk9l4d

Code:

IGpmgn2yk7INtx0OcoudfArYHWMfz/2lCMcU/qQ1dM6UaOHNQMVJe/MbujuzvNANoE4HNvMBBsgCzSy4wQ9Wgpc=

https://bitcointalk.org/index.php?topic=1935179.msg53648750#msg53648750

I had to reset my system earlier and now I am restoring everything. I have so many things to worried about not just bitcointalk account.

Update: signature confirmed.

[LFC_Bitcoin]

Just because he signs a message it doesn’t prove anything. I could do something bad, claim I was hacked & sign a message from an address owned by me, linked to this account since 2014. What does that prove?

[Pffrt]

Just because he signs a message it doesn’t prove anything. I could do something bad, claim I was hacked & sign a message from an address owned by me, linked to this account since 2014. What does that prove?

Nothing at all but we are relying on what we are getting information here. His alt account just have claimed that he has been hacked. I was surprised to see this thread since I remember bitcoingirl.club had mistakenly public that you sent him a PM other day.
Anyway, I think there are more info to come soon and only bitcoingirl.club can say what happened.

[hilariousetc]

Just because he signs a message it doesn’t prove anything. I could do something bad, claim I was hacked & sign a message from an address owned by me, linked to this account since 2014. What does that prove?

You're right, it doesn't, but lets look at this objectively. Does he have any real reason to so this, and then spam message various people about it? I can't be certain for sure but I'd lean towards his account being compromised in some way as it doesn't really make sense to me why he would do this. Of course I could be wrong but he knew he would make a lot of enemies/lose friends here and also probably compromise the reputation of his account in the process. Take note of nutildah's post above as well about the smiley etc. I think he just got stung here. The question now is who hacked his account because that is some pretty shady stuff over some petty shit.

[LFC_Bitcoin]

Just because he signs a message it doesn’t prove anything. I could do something bad, claim I was hacked & sign a message from an address owned by me, linked to this account since 2014. What does that prove?

You're right, it doesn't, but lets look at this objectively. Does he have any real reason to so this, and then spam message various people about it? I can't be certain for sure but I'd lean towards his account being compromised in some way as it doesn't really make sense to me why he would do this. Of course I could be wrong but he knew he would make a lot of enemies/lose friends here and also probably compromise the reputation of his account in the process. Take note of nutildah's post above as well about the smiley etc. I think he just got stung here. The question now is who hacked his account because that is some pretty shady stuff over some petty shit.

We need to find out who Side Chain is. He’s the one with the axe to grind, he’s personally attacked & tried to destroy me. If you look at his post history he has a problem with DT members. He’s had attempts at destroying both Lauda & TMAN.

He’s also voiced his concerns about yahoo finding out who his real account is. Who has applied to join yahoo managed campaigns recently who possibly doesn’t speak English as his native tongue (Side Chain doesn’t type like it is any way).

[LoyceV]

The question now is who hacked his account because that is some pretty shady stuff over some petty shit.

Can you use some Global Mod powers to see if there are IP matches?

[AB de Royse777]

Does he have any real reason to so this, and then spam message various people about it?

I am one of the user who received PM from BitcoinGirl.Club. It seemed to me that someone else was sending the PM but I could be wrong. The PM started with accusing various users including BitcoinGirl.Club protecting SB. One thing is fairly clear, there is something going on and it's hard to draw a line.

[LTU_btc]

The question now is who hacked his account because that is some pretty shady stuff over some petty shit.

Can you use some Global Mod powers to see if there are IP matches?

Correct me if I'm wrong, but I think that only theymos have access to IP addresses of users.

[Upgrade00]

This is a lot to keep track off. If the account was really compromised, why would the user only reveal such information? I'm not sure but there would be some other useful information available other than releasing some private messages which doesn't really profit the supposed hacker.
If it was indeed a targeted attack to divulge the contents of the private message, what means were used? I would think there would have to had been a slip up on the part of Bitcoingirl.club for the account to get compromised (although someone on the other thread hinted at his/her email address being public at a point)

If this version is true, I would suggest bitcoingirl.club posts their email provider (bpip states that the password was changed via email), as the ease of this supposed hack raises some serious privacy concerns and users of their service should be warned.

[hilariousetc]

The question now is who hacked his account because that is some pretty shady stuff over some petty shit.

Can you use some Global Mod powers to see if there are IP matches?

No, only admins. You can ask them to look into it, but they likely wont. Whoever the hacker is they probably used a proxy or something anyway, or at least they would if they were half-smart. I'd be surprised if they were using the same connection that is linked to their other accounts but you never know.

This is a lot to keep track off. If the account was really compromised, why would the user only reveal such information?

What else is there to release, but he obviously had a motive for realising it and has some personal beef with the people involved/exposed.

If this version is true, I would suggest bitcoingirl.club posts their email provider (bpip states that the password was changed via email), as the ease of this supposed back raises some serious privacy concerns.

I'd be interested to know which one it was as well, or how his email was likely compromised.

[hacker1001101001]

Just because he signs a message it doesn’t prove anything. I could do something bad, claim I was hacked & sign a message from an address owned by me, linked to this account since 2014. What does that prove?

Don't be rude again. He is your friend and seem to be a good guy with no intentions to hurt you. It's better if you believe it was not BitcoinGirl.club who dumped those PM or something.

More important thing is you actually sent those PMs to user's to use your DT privileges to protect a casino and you even act blindly on flags yet being a DT1 ( you should check my explanations again ). You being an arrogant freak is harmful to the DT overall.

[LFC_Bitcoin]

Just because he signs a message it doesn’t prove anything. I could do something bad, claim I was hacked & sign a message from an address owned by me, linked to this account since 2014. What does that prove?

Don't be rude again. He is your friend and seem to be a good guy with no intentions to hurt you. It's better if you believe it was not BitcoinGirl.club who dumped those PM or something.

More important thing is you actually sent those PMs to user's to use your DT privileges to protect a casino and you even act blindly on flags yet being a DT1 ( you should check my explanations again ). You being an arrogant freak is harmful to the DT overall.

Oh STFU, you’re talking from an account splattered in red, flamed for bumping ICO’s. I don’t wish to converse with you on anything. Who even are you, another butthurt guy who’s ~ by everybody & wants to take others down with him?

Silence.