[Account Recovered] BitcoinGirl.Club (no longer) hacked

[mindrust]

This is what I am understanding.

Yesterday evening after the poker game, I was doing my usual work. At some point, I was going to check my sportsbet T-shirt update. I was looking for the email sportsbet sent so that I get the link to fill up the form. I saw three emails. One already read. The two new with the update of they are running out of the t-shirts. So I opened one of the email, checked the link and it was taking too long time to load the page. When it was annoyingly late, I closed the tab but my system seemed unexpectedly slow. It happens sometimes and I usually force close the system and restart. I did the same and then started my usual work. When I wanted to  login in few of my accounts it always asked me for passwords. Nothing flagged me though. I did not had any 2nd thought. When it was late I gone to bed. Today morning when I wanted to login to bitcointalk discovered everything. Before everything else I knew I had to reset my device which I did.

Now I do not have access of the email. All the accounts, exchanges, business, social media, gambling sites everything that had the email are fucked up. I am contacting each of the sites to help me changing the email addresses. I am going through a lot now. In some accounts I have money locked. This will not be a very easy ride for me. Everything fucked!!!

I do not deserve it. Thanks whoever you are.

One missclick and REKT.

Have a cookie at least

Admin should ban side_chain btw. Fuck him

I saw him as a shit stirring fun troll for a while but this crossed the line.

I don't even answer phone calls if their phone numbers are not in my phonebook let alone clicking a link from an email. NEVER. Always paste the link in your address bar first so you can see which page you are going to visit.

[LFC_Bitcoin]

Pam, check your messages.

To whoever did this, I hope it was worth it for a bit of fame, 5 minutes of everybody discussing DT, stirring up shit.
You are fucking pathetic & I hope karma comes for you. This is a fucking internet forum, was it really worth it. Nothing in those PM’s was bad any way, you pathetic creep.

Admin should ban side_chain btw. Fuck him

Ban every account he’s linked to & post his dox

[JollyGood]

Considering Side chain posted private correspondence from your BitcoinGirl.Club user account after your emails were hacked shows he was probably behind it.

It seems when you clicked the link you downloaded the malware either on to your base unit or it allowed access remotely to Side chain

I really am sorry about some of those accounts where you have money locked, your social media and of course your exchanges... I hope you sort it out soon and protect yourself from further damage.

And yes, you did not deserve it. I hope Side chain and the person behind the alt-account get what they deserve !

This is what I am understanding.

Yesterday evening after the poker game, I was doing my usual work. At some point, I was going to check my sportsbet T-shirt update. I was looking for the email sportsbet sent so that I get the link to fill up the form. I saw three emails. One already read. The two new with the update of they are running out of the t-shirts. So I opened one of the email, checked the link and it was taking too long time to load the page. When it was annoyingly late, I closed the tab but my system seemed unexpectedly slow. It happens sometimes and I usually force close the system and restart. I did the same and then started my usual work. When I wanted to  login in few of my accounts it always asked me for passwords. Nothing flagged me though. I did not had any 2nd thought. When it was late I gone to bed. Today morning when I wanted to login to bitcointalk discovered everything. Before everything else I knew I had to reset my device which I did.

Now I do not have access of the email. All the accounts, exchanges, business, social media, gambling sites everything that had the email are fucked up. I am contacting each of the sites to help me changing the email addresses. I am going through a lot now. In some accounts I have money locked. This will not be a very easy ride for me. Everything fucked!!!

I do not deserve it. Thanks whoever you are.

[hilariousetc]

The question now is who hacked his account because that is some pretty shady stuff over some petty shit.

Can you use some Global Mod powers to see if there are IP matches?

I don’t think it would be appropriate for a moderator admin to disclose confidential information to settle a dispute involving no money and only the disclosure of something that makes another forum user look bad.

Whoever hacked his account committed a criminal act by doing so. Admins don't have to disclose whatever info they find, but it should at least be looked into as they could have been stupid and left breadcrumbs leading them to other users. At the very least he needs his account back so they're going to have to look into fairly deeply to get it back to him.

I don’t think it would be appropriate for a moderator admin to disclose confidential information to settle a dispute involving no money and only the disclosure of something that makes another forum user look bad.

It would be very much in forum's best interest to investigate an account hack and ban the perp if possible.

It would be unusual and counterproductive to ban someone hacking accounts. This would only force the person to connect to the forum via alternate means, and it would be difficult to know if it is the same person if he hacks more accounts. It would also make it more difficult to track possible vulnerabilities that need to be closed. It would be better to give the person rope to bang himself with and go to law enforcement with evidence of his crimes if he is causing a problem.

I disagree, besides it would be more of a reputation issue to me and it would be nice to know who to not trust. What if there's clear evidence linking them to an existing user here and they're allowed to go on free with an unblemished rep.

[JeromeTash]

--snip--

That's really messed up. So sorry Pam. I am guessing you email had no Factor authentication enabled. You should have every important email address and account of yours on 2FA. It will save you a lot if your email or login details get leaked from any platform you have ever registered (Once in a while, they get leaked or exposed).

My bitcointalk account to got hacked sometime back through leaked login details I had used to register in some random ICO site(I used same logins everywhere) but what saved me from a lot of trouble was 2FA on my Gmail and all other exchange accounts until i was able to change all the details of all sensitive accounts.

[JollyGood]

Absolutely shameful conduct by hacker1001101001 celebrating the hacking of the email account belonging to BitcoinGirl.club

https://bitcointalk.org/index.php?topic=5264620.msg54928134#msg54928134

Just because he signs a message it doesn’t prove anything. I could do something bad, claim I was hacked & sign a message from an address owned by me, linked to this account since 2014. What does that prove?

Don't be rude again. He is your friend and seem to be a good guy with no intentions to hurt you. It's better if you believe it was not BitcoinGirl.club who dumped those PM or something.

More important thing is you actually sent those PMs to user's to use your DT privileges to protect a casino and you even act blindly on flags yet being a DT1 ( you should check my explanations again ). You being an arrogant freak is harmful to the DT overall.

[asche]

It seems when you clicked the link you downloaded the malware either on to your base unit or it allowed access remotely to Side chain

I feel sorry for what happened to you. Must've been a deletion of cookies + simple keylogger.
Having 2fa seems to be the least you need to do today for any email related to crypto :/

This hack also reminds me of kenzawak... Email compromised. But in his case the attacker was after money and not simply throwing shit.

Please let us know if any coin was stolen from you in the process. I cross my fingers that's it's not the case.

[hacker1001101001]

Absolutely shameful conduct by hacker1001101001 celebrating the hacking of the email account belonging to BitcoinGirl.club

Celebrating ! Why should I ?

I don't appreciate any such type of hacking here and don't even have anything against BitcoinGirl.club. I was more inclined to show that the real intend of LFC_Bitcoin should not be forgotten. He sent PMs to manipulate the flag against sportsbet to his friends and later just threw insulating words at them which was wrong if seen by someone ethical unlike you.

You should go back to tagging newbies with valid scam accusations against casino's.

[PrimeNumber7]

Whoever hacked his account committed a criminal act by doing so. Admins don't have to disclose whatever info they find, but it should at least be looked into as they could have been stupid and left breadcrumbs leading them to other users. At the very least he needs his account back so they're going to have to look into fairly deeply to get it back to him.

You are correct in saying that whoever allegedly hacked BitcoinGirl.Club broke the law. Howeer given the lack of apparent financial damages, and the appearance this is an isolated incident, law enforcement is likely to do little more than take a report.

If this becomes a more common occurrence, I am sure the admins will be able to use any information available from this hack.

I disagree, besides it would be more of a reputation issue to me and it would be nice to know who to not trust. What if there's clear evidence linking them to an existing user here and they're allowed to go on free with an unblemished rep.

It would be nice to know who not to trust. You are free to petition the admins to get involved, but I doubt they will for something this petty.

If the admins say they don't know who was behind the hack, whoever is behind the hack would know they are in the clear (somewhat). If they are outed as the hacker, they might destroy evidence for when the police come knocking on their door.

[eddie13]

Inconclusive..

Hacker screwed up ALL of Pam's accounts eh? How much time did he have to accomplish all of that exactly?

Keylogger? That would take a lot of time collecting data no? To catch ALL those accounts..
Would the timetables even fit for that?
No financial damages?

So I opened one of the email, checked the link and it was taking too long time to load the page. When it was annoyingly late, I closed the tab but my system seemed unexpectedly slow. It happens sometimes and I usually force close the system and restart. I did the same and then started my usual work.

Sounds like a hell of a good "virus" to get by just clicking on a link to a page that doesn't load.. It even survived running after closing the tab, and was able to complete its work before the forced restart while it seemed to still be running hard..
Sounds nothing like a keylogger..

When I wanted to  login in few of my accounts it always asked me for passwords.

Now I do not have access of the email. All the accounts, exchanges, business, social media, gambling sites everything that had the email are fucked up.

So it might have keylogged a "few" accounts, but then fucked up "all" accounts on that email..
Just fucked them up to piss him off but didn't steal anything?


Sounds like a hell of a hacker..
Glad Mr. Hacker likes me enough to have thought to send me a PM, so hopefully he won't get me next..

[suchmoon]

Hacker screwed up ALL of Pam's accounts eh? How much time did he have to accomplish all of that exactly?

His e-mail account was compromised so his account on any other service where that e-mail address is used has to be treated as compromised. It's a major issue and his story makes sense. Can't guarantee it's true but certainly more likely than him just posting those messages for no apparent reason.

[asche]

Sounds nothing like a keylogger..

The virus is just the way the keylogger gets into the system, the delivery method if you will.
A virus is just design to put new code on a machine and try to infect new machines going further from this one.

The keylogger is effectively the part that does record your password/credentials and sends it to the hacker.

[JollyGood]

Maybe after BitcoinGirl.Club manages to get things back to some sort of normality with emails and passwords hopefully being reset, we need a step by step explanation of everything that happened so no other member here falls prey to the same hack strategy.

Sounds nothing like a keylogger..

The virus is just the way the keylogger gets into the system, the delivery method if you will.
A virus is just design to put new code on a machine and try to infect new machines going further from this one.

The keylogger is effectively the part that does record your password/credentials and sends it to the hacker.

[NotATether]

Sounds nothing like a keylogger..

The virus is just the way the keylogger gets into the system, the delivery method if you will.
A virus is just design to put new code on a machine and try to infect new machines going further from this one.

The keylogger is effectively the part that does record your password/credentials and sends it to the hacker.

A keylogger can only track the passwords that you type on the keyboard not the ones that are already saved in your password store. This leans more to Windows malware that exploited a browser vulnerability to decrypt the password store.

There is at least one (very old) such CVE for Firefox https://www.mozilla.org/en-US/security/advisories/mfsa2019-24/, but Chrome always requires your Windows password to access its password store.

[asche]

A keylogger can only track the passwords that you type on the keyboard not the ones that are already saved in your password store. This leans more to Windows malware that exploited a browser vulnerability to decrypt the password store.

Sorry but you are wrong.

1- The victim stated he typed the passwords.
2- A keylogger is able to intercept autofilled fields. Please read a bit how this Chrome/FF/IE feature works. A keylogger is 100% able to intercept these. Same goes for lastpass etc.
3- Another easy way to do this is a malicious browser extension that only records the data typed in any field on any page.

[LFC_Bitcoin]

Anybody heard from him, what’s the latest on him trying to get his account back?

[JollyGood]

It is sad we have not heard from him. Imagine trying to change all those logins and passwords associated with the single email account.

Whoever this user "Side chain" is, it seems he has committed a criminal offence by hacking in to the account of BitcoinGirl.club and it seems though he is still not banned according to the Mod Log

Anybody heard from him, what’s the latest on him trying to get his account back?

[Little Mouse]

Whoever this user "Side chain" is, it seems he has committed a criminal offence by hacking in to the account of BitcoinGirl.club and it seems though he is still not banned according to the Mod Log

There is no such rules for banning an account which commit criminal offence. If that was the case, all the scammers here would get ban, all the cheaters would get ban. I can not remember seeing any such rule of ban, mate. So, do not expect the hacker Side chain to be banned.

[hilariousetc]

Anybody heard from him, what’s the latest on him trying to get his account back?

The BitcoinGirl.Club account is banned so I'm sure the admins locked it at least. Not sure how long they take to restore it but it seems like a pretty clear cut case especially if BitcoinGirl.Club can send them a signed message.

It is sad we have not heard from him. Imagine trying to change all those logins and passwords associated with the single email account.

Whoever this user "Side chain" is, it seems he has committed a criminal offence by hacking in to the account of BitcoinGirl.club and it seems though he is still not banned according to the Mod Log

Anybody heard from him, what’s the latest on him trying to get his account back?

Unlikely to get banned but the admins should have at least looked into that account and seen if it was tied to any others.

[JollyGood]

I wonder if BitcoinGirl.club will be in a position to report this to the Police in his country and then see if the hacker criminal "Side chain" can be investigated. It would be great if he was prosecuted in a Court of law over this.

It is sad we have not heard from him. Imagine trying to change all those logins and passwords associated with the single email account.

Whoever this user "Side chain" is, it seems he has committed a criminal offence by hacking in to the account of BitcoinGirl.club and it seems though he is still not banned according to the Mod Log

Unlikely to get banned but the admins should have at least looked into that account and seen if it was tied to any others.