Someone had access to my account last month - Please beware!

[LoyceV]

~snip~

You should open another topic for your case.

[nutildah]

The irony here is

1. Maidak got scammed by Dimitry who was pretending to be me.

2. But Dimitry got scammed by whoever was pretending to be me when they sold my compromised account.

Well to be honest I think this story makes sense, but its a bit strange that you wouldn't think to log in to your account for over three months, until you were contacted by Maidak... your activity was a bit more consistent previously. But anyways. Sounds like Maidak realizes he was scammed by an impostor.

[legendster]

The irony here is

1. Maidak got scammed by Dimitry who was pretending to be me.

2. But Dimitry got scammed by whoever was pretending to be me when they sold my compromised account.

Well to be honest I think this story makes sense, but its a bit strange that you wouldn't think to log in to your account for over three months, until you were contacted by Maidak... your activity was a bit more consistent previously. But anyways. Sounds like Maidak realizes he was scammed by an impostor.

Correction. I was not contacted by Maidak to rejoin here. I was contacted by an unknown stranger on Telegram, who was one of the people who were offered my account for sale.

Besides, I had 'remember me' turned on for my BTT account. Even if I did visit the forums for viewing shit and what not, I would not have noticed the log in until the password was changed by whoever that had access.

And thanks to the toxicity of BTT from users like suchsucker and his hermaphrodite gang members, this place isn't as bright and fun as it used to be. Which is why I don't actively participate in the forum any more.

Maybe I will again.


In any case, I have created a flag against Maidak for trying to blackmail me by scaring me into sending him money by being afraid of how he'd tarnish my 'reputation' here.

I guess he didn't know that suchnobrainer and his/her numbnut posse have already taken care of that years ago.

I don't see how keeping this thread alive is needed anymore.

I will shut this one and the other one within 24 hours. If anyone has to get any words in between now and then. Feel free to.

Once again. I have never, and I will never, ever sell my account. So if you see that message from me. Then its not me.

[suchmoon]

1. Maidak got scammed by Dimitry who was pretending to be me.

2. But Dimitry got scammed by whoever was pretending to be me when they sold my compromised account.

In any case, I have created a flag against Maidak for trying to blackmail me

Sounds a bit schizo TBH. Creating a flag against someone who got scammed by your impersonator, if we were to believe anything you say.

[LoyceV]

In any case, I have created a flag against Maidak for trying to blackmail me by scaring me into sending him money by being afraid of how he'd tarnish my 'reputation' here.

I'm neither Supporting nor Opposing this Flag. This whole case is a clusterfuck of mistakes on both sides.

I guess he didn't know that suchnobrainer and his/her numbnut posse have already taken care of that years ago.

All I see is a tag from 2 years ago for something shady you did 5 years ago. That wouldn't stop me from trading with you.

This is the real problem:

my email got hacked
~
I was stupid enough to have saved some private keys in the drafts along with some other passwords.

It means you can be anyone now.

And there's this:

we still can't be sure if there original owner behind legendster's account.

He keeps saying he can sign a message, but hasn't done it.

Will do.

I'm still waiting.

[legendster]

This is the real problem:

my email got hacked
~
I was stupid enough to have saved some private keys in the drafts along with some other passwords.

It means you can be anyone now.

...

Sure, I am the hacker now. I hacked legendster. Killed him. Peeled off his skin and now I'm wearing his skin like those MIB movies and living his life and posing for pictures and attending events as him.



 

[LoyceV]

Sure, I am the hacker now. I hacked legendster. Killed him. Peeled off his skin and now I'm wearing his skin like those MIB movies and living his life and posing for pictures and attending events as him.

That is exactly what the hacker would say

[vangordian]

Sure, I am the hacker now. I hacked legendster. Killed him. Peeled off his skin and now I'm wearing his skin like those MIB movies and living his life and posing for pictures and attending events as him.

That is exactly what the hacker would say

Account locked.

Hacker logged in using my secret question.. feeling very compromised right now.

In the process of changing everything.

https://i.imgur.com/ly81bo3.png


I can still be reached on my Telegram.

[LoyceV]

Hacker logged in using my secret question.

They tried many times.
Seclog:

Code:

Today at 04:13:39 AM - legendster - password reset via secret question
Today at 04:13:17 AM - legendster - password reset via secret question
Today at 04:02:17 AM - legendster - password reset via secret question
Today at 04:02:03 AM - legendster - password reset via secret question
Today at 04:01:56 AM - legendster - password reset via secret question
Today at 04:00:49 AM - legendster - password reset via secret question
Today at 04:00:24 AM - legendster - password reset via secret question
Today at 03:59:44 AM - legendster - password reset via secret question

Quoting for visibility. Now the real owner has to follow instructions in Recovering hacked/lost accounts and convince Cryptios.

@alanst @3dOOm @Rizzrack: please consider this when deciding who's the real owner of account legendster:

I was stupid enough to have saved some private keys in the drafts along with some other passwords.

"Secret questions" are a terribly insecure method to restore access, it's (often) easy to "hack" using information publicly accessible through social media.

[Rizzrack]

@alanst @3dOOm @Rizzrack: please consider this when deciding who's the real owner of account legendster:

I was stupid enough to have saved some private keys in the drafts along with some other passwords.

Definitely will ! These things are rarely straightforward anyway 

"Secret questions" are a terribly insecure method to restore access, it's (often) easy to "hack" using information publicly accessible through social media.

Reset via secret queation does NOT reset the password. It Locks the account and user need to go through the account recovery process...

[LoyceV]

Reset via secret queation does NOT reset the password. It Locks the account and user need to go through the account recovery process...

I knew that, my comment was meant in general I've disabled my secret questions, nobody can lock my account that way.

[Rizzrack]

I knew that, my comment was meant in general I've disabled my secret questions, nobody can lock my account that way.

That really is the recomend approach. It was easier to repurpose than to remove I guess and also be sure it doesn't break anything else

"Secret questions" are a terribly insecure method to restore access, it's (often) easy to "hack" using information publicly accessible through social media.

Reminds me of this: https://youtu.be/opRMrEfAIiI

[suchmoon]

In the process of changing everything.

[GeorgeJohn]

Can say maybe the person in question knows your login details, because for someone trying to hack someone account or an account their is every tendency that the account details has been reviewed to the hacker weather through the email information, the user login the details of he or her account to different or numerous system that can cause ot result out weakness of password for easier assessment or penetration.

[alanst]

After a few days of checking every foreseeable aspect of this case (email, private keys, synced browser passwords, secret questions and what not, seem to have been compromised at some point), we've come to the conclusion that the hacking extent is way to big to determine the ownership correctly so it will be better if the account remains locked indefinitely.

[LoyceV]

it will be better if the account remains locked indefinitely.

Well, case closed. Lol.
Is this a first for a user who can sign a message? Or does it happen more often?

[alanst]

it will be better if the account remains locked indefinitely.

Well, case closed. Lol.
Is this a first for a user who can sign a message? Or does it happen more often?

Theoretically, he can, but never did nor did we feel the need to ask for one as it wouldn't have meant much since the private keys seem to have been kept on a possibly compromised email address. There were a lot of question marks that wouldn't have been answered even with the help of a signed message in this case.

[suchmoon]

Theoretically, he can, but never did nor did we feel the need to ask for one as it wouldn't have meant much since the private keys seem to have been kept on a possibly compromised email address. There were a lot of question marks that wouldn't have been answered even with the help of a signed message in this case.

There is one problem with this though. Someone hacks an account, burns it with a scam of some sort, and then on the way out says "by the way, my account got hacked and the hacker got private keys too". Then the real owner shows up, who possibly never really lost those private keys, and signs a message. I hope you have a bit more to go on than just a word of a (potential) hacker.

[alanst]

There is one problem with this though. Someone hacks an account, burns it with a scam of some sort, and then on the way out says "by the way, my account got hacked and the hacker got private keys too". Then the real owner shows up, who possibly never really lost those private keys, and signs a message. I hope you have a bit more to go on than just a word of a (potential) hacker.

We sure do, and I'm certain you understand the reason why we're not able to disclose any more than this. There was a combination of factors that made us come to this decision. It's never easy to leave an account locked, more so a legendary account such as this one and we've said many times that, even if there's a 1% possibility that we're not returning the account back to it's original owner, we'd rather have it remain locked instead of it ending up in the wrong hands.

[nutildah]

Is this a first for a user who can sign a message? Or does it happen more often?

Theoretically, he can, but never did nor did we feel the need to ask for one as it wouldn't have meant much since the private keys seem to have been kept on a possibly compromised email address. There were a lot of question marks that wouldn't have been answered even with the help of a signed message in this case.

That's understandable but it would have evidenced the possibility that Legendster was telling the truth. Without it, there's no reason to believe whoever has the account is currently capable of doing it, and it could have just been part of a story.

I would have signed the message first and then disclosed that its possible the hacker had the private key. It's a weird statement to make without backing up but not completely relevant to what's at stake.

In any case, its a moot point now.