Beware : This bitcointalk user is trying to steal my an account

[Maslate]

I receive a message from Darkpanda02, but when I click the link, I was redirected to this link  -

Code:

https://bitcointalk.login-index.php-topic.974517.0.gadagrow.com/index/index.php?r=1&u=Maslate&l=4523027.0

please beware of this user, looks like he is trying to steal an account.

here's the screenshot of the PM




I did not enter my password but is my account still safe? or do I need to change the password immediately?

[LeGaulois]

Old scam attempt. Report the PM to the moderation, they will ban the person.

And no, you're ok if you didn't enter your username/password. You can change your password if you want (and clean your cookies).
It's good to do it from time to time, no matter the website.

I say it but never do it myself

[dkbit98]

I did not enter my password but is my account still safe? or do I need to change the password immediately?

I would change account password as soon as possible if I was in your place.
This is most common way of hacking and stealing user account credentials in bitcointalk forum.
I am giving Darkpanda02 negative feedback but you should also report him to moderators.

PS
In future, never click any links you receive in forum or email inbox, and always check destination with right click.

[Maslate]

Thank you for your suggestion guys, I guess I will just change my password now just to make sure it's safe.

I am giving Darkpanda02 negative feedback but you should also report him to moderators.

Yes, I will. So this account will stop from attempting to steal our accounts.

[lovesmayfamilis]

In addition, I'd like to point out that the Darkpanda02 account received merit today from another psylenz account. It is unnecessary to think much about what and why psylenz sent merit. To be able to write a message in a personal.
https://bitcointalk.org/index.php?action=merit;u=2593052



Also, note that this account sends 5 merits. Already blocked 4 accounts. The posts he deserves do not contain information worthy of merit, and again merit has been awarded for the ability to send in private messages, with the aim of hacking accounts.
If you look from whom psylenz  received merit, then everything is quite dirty there.




Therefore, there is an assumption that the psylenz  account is also an alternative account for all previously banned accounts that attempted to hack other people's accounts.

The next account that will try to hack someone else's profile will be srejonboss


edit:

Ban evasion.

Shaon1111 Autoban user
srejonboss

Email Address : Shaon.sharma.shrabon@gmail.com

Coinsbit registration Email: shaon.sharma.shrabon@gmail.com

[ archive ]
====================================================

[Falconer]

Code:

https://bitcointalk.login-index.php-topic.974517.0.gadagrow.com/index/index.php?r=1&u=Maslate&l=4523027.0

Turn off suspicious links from your posts so that no one else clicks on those links, put them in the code for the safety of other users. Just a suggestion.

OP, Darkpanda02 has been auto-ban today and it looks like you are safe now. You've changed your account password, but you may need to sign bitcoin messages if you haven't tried to do so for your account. This is extra security for your future account even though you now feel more secure with the new password. Your case is a reminder to other users to be more careful with links sent via pm or elsewhere.

[dkbit98]

Therefore, there is an assumption that the psylenz  account is also an alternative account for all previously banned accounts that attempted to hack other people's accounts.

Have you noticed that psylenz received positive feedback from DT member vizique?
He was mostly active in Collectibles section in 2019, and he sent all merits this year after getting active again.
Oh and Darkpanda02 is now banned.
RIP

[Maslate]

Code:

https://bitcointalk.login-index.php-topic.974517.0.gadagrow.com/index/index.php?r=1&u=Maslate&l=4523027.0

Turn off suspicious links from your posts so that no one else clicks on those links, put them in the code for the safety of other users. Just a suggestion.

OP, Darkpanda02 has been auto-ban today and it looks like you are safe now. You've changed your account password, but you may need to sign bitcoin messages if you haven't tried to do so for your account. This is extra security for your future account even though you now feel more secure with the new password. Your case is a reminder to other users to be more careful with links sent via pm or elsewhere.

You are right, I should replace the link with a code because the link is very risky for those who don't know how to read. 

About the sign message, I will do it later maybe, but I don't think it's necessary since we have this thread already as evidence of what has happened.

BTW, I'm glad that Darkpanda02 was banned. Thanks to the MOD for the immediate action.

[lovesmayfamilis]

Therefore, there is an assumption that the psylenz  account is also an alternative account for all previously banned accounts that attempted to hack other people's accounts.

Have you noticed that psylenz received positive feedback from DT member vizique?
He was mostly active in Collectibles section in 2019, and he sent all merits this year after getting active again.
Oh and Darkpanda02 is now banned.
RIP

No, I missed that, thanks for the note. But this only suggests that the account psylenz  was hacked. See how owlcatz warns in his buriksreview.

Trying to scam users in collectibles for high value goods for sale - Don't click on any links he sends you, it will send you to a phony btctalk site to steal your creds.

The account was likely hacked by clicking on some link sent to him and subsequently began to distribute merits to newbie accounts, for further fraud.

I would like to buy the 5 remaining solo chips?
Plz send me a PM.

Sorry, but I'm very suspicious.

[BitMaxz]

Like Falconer said better remove the suspicious link you are helping the domain to get backlink here. You can just use the insert tag and paste the link there.

Anyway, I tried to access the link and try to log in with a fake password, and after I log in it redirected me to this link below.

- https://bitcointalk.org/index.php?topic=4523027.0

Does it seem that he also targetting other users listed on that link?

I also check the domain it is registered on ownregistrar.com you can also report the domain if you want to take down the website link below.
- https://ownregistrar.com/abuse/

[Findingnemo]

I guess everything about this case already discussed but this thread may serve as reference for future similar kind of attacks from same person with different account. Anyone who receives inappropriate PM just go and click the Report to admin button and they will get ban which what they deserve.

[isaac_clarke22]

Wasn't this the similar "fake bitcointalk site" back then? It has something along the lines of BitMiners scam as well. I can't quite pinpoint the thread that it was being discussed, but it contained the similar misleading link as well.
Never mind, I found the link of thread. It was this thread - Fake bitcointalk site (bitminers.asia)
This is why I hover my cursor first into a hyperlink before clicking it to see if it is the actual link that I was about to click. I learned it only when I got rickrolled back then, lol.

[BitcoinGirl.Club]

PS
In future, never click any links you receive in forum or email inbox, and always check destination with right click.

In this type of case, I mouse hover on the link and check the URL that shows in the bottom left corner of the screen. I do not know what does the area is called.

Oh and Darkpanda02 is now banned.

That's what spammers should receive after getting caught.

[khaled0111]

In this type of case, I mouse hover on the link and check the URL that shows in the bottom left corner of the screen. I do not know what does the area is called.

I think it's called status bar. The problem is that this feature is not available on mobile browsers. Personally, I never click on links directly. I either quote the message/post or copy the link address and paste it somewher to figure out if the visible link is indeed the address I'll be redirected to or just an anchor text.

[RapTarX]

I think it's called status bar. The problem is that this feature is not available on mobile browsers. Personally, I never click on links directly. I either quote the message/post or copy the link address and paste it somewher to figure out if the visible link is indeed the address I'll be redirected to or just an anchor text.

In case of mobile version, you can copy the link inside instead of copy the text. In that way, you can check out whether you are going to click a real link or a phishing one. Most of the times, I browse the forum through mobile these days & more or less, I'm used to check out the link inside all the time regardless of what the url is about and how much trustworthy the source is.

[BitcoinGirl.Club]

In this type of case, I mouse hover on the link and check the URL that shows in the bottom left corner of the screen. I do not know what does the area is called.

I think it's called status bar. The problem is that this feature is not available on mobile browsers. Personally, I never click on links directly. I either quote the message/post or copy the link address and paste it somewher to figure out if the visible link is indeed the address I'll be redirected to or just an anchor text.

I am using android and just realized that if you long hold the hyperlink text then if will show you the options and at the top it will also show you the url of the hyperlink. It's easy to figure out.

Problem is, with a know url you can figure out a scam link but if you are not familiar with the service and the url then it's hard to tell. The best practice is not to click and open any unknown URL. If you really need to check then have another device and try it from there instead of the device which has sensitive financial files or even information you are storing.

[shasan]

This is not a new type of scam attempt. It is very old way op trying to hack password or other personal information. They use several accounts for this type of task. We should aware any link like this either posted on the forum and sent link via pm. Previously I have created a post like this one.

[aioc]

A very nice trick to trick you to enter your password if you read the message and you are already logged in on Bitcointalk you will be redirected to the topic, not the login page, he uses the topic URL as a phishing link this guy deserves a red flag.
People should be aware and knows how to decipher a URL there should be an unknown domain in this case this is the domain

https://gadagrow.com/ I have this feeling he controls this domain

[Maslate]

Thanks to those who gave their advice and opinion, this thread has already served its purpose so I'm locking it now.

Also, for those who receive a similar message, please report the user to the mods or make a thread similar to this so you can give a warning to the community, we should not be tired of helping each other as that is what makes us a great community here.