My Hero Member Account Hacked. please help

[Rizzrack]

Well, you are "back" in a wrong profile.
I am the original jkoil.

How have you been "helped"??

jkoil (original)

Apparently he had access to the email account and just changed his password by himself.

If you say that the account is actually yours follow the steps in this thread: https://bitcointalk.org/index.php?topic=5089777.0

It appears nothing is that simple around here...

[logfiles]

Well, you are "back" in a wrong profile.
I am the original jkoil.

Then follow the right procedure to recover the account if you are the original owner. I am sure the account recovery team will have ways to prove if you are the original owner.
One of them is by writing to them through an email address that was used for registering the account.

[Rizzrack]

This escalated quickly !



All 2, 3 or how many you are can follow the steps here https://bitcointalk.org/index.php?topic=5089777.0 and we'll figure it out next week.

[jkoil2022]

This escalated quickly !

https://i.imgur.com/eIekiga.jpg

All 2, 3 or how many you are can follow the steps here https://bitcointalk.org/index.php?topic=5089777.0 and we'll figure it out next week.

Damned... that kind of NEM-picture I should have made in 2014 to get a stake of NEM without paying for it.

[decodx]

jkoil (original)

The Curious Case of Jkoil's Account

So is your gmail account also compromised or not? How was the hacker able to reset the password through the e-mail on May 4th?

[jkoil2022]

jkoil (original)

The Curious Case of Jkoil's Account

So is your gmail account also compromised or not? How was the hacker able to reset the password through the e-mail on May 4th?

No idea. I guess BTT admins know, which email was used. My bad memory in this case

Now checking the emails of my 'current' account:
 there are emails from
  - Exchanges
  - NEM Forum, NXT Forum (both already old and shutdown),
  - and finally some from Bitcoin Forum, but old too, eg. this from  2014

    11/20/2014 at 4:07 AM
  
    "You have just been sent a personal message by kodtycoon on Bitcoin Forum.
IMPORTANT: Remember, this is just a notification. Please do not reply to this email.
The message they sent you was:
ok thank you. no that shouldnt do any harm.. hope to see you on the podium!
Reply to this Personal Message here: https://bitcointalk.org/index.php?action=pm;sa=send;f=inbox;pmsg=3119542;quote;u=174773

------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder"



Have to admit that there is a chance that I have changed the email account in BTT account some years ago (after there was some warnings or something).
And that email account was not so active one for me in other issues. If that is the case I have relied on my BTT account : I will always see the account name in my BTT account and then check that email account every now and then.

I found from my files 2 je*.com email addresses, which I suspect to be the candidate for the "latest email in BTT";
other one has been for (mainly) Youtube and that one's pw does not work anymore. Hacked?
The other one's pw is currently "out of my memory"  


My latest posting by "jkoil" was on May 12, 2022.
Is it known that the hack was made on May 4th?

...

...
[Guide] How to create a strong/ secure password.

Looking back, this user knows how to create passwords....

Passwords, lost, stolen, ... the same "old" subjects Smiley
https://nextcoin.org/index.php/topic,1930.45.html
https://nextcoin.org/index.php/topic,2474.30.html

I still skip password generators and password managers Smiley  When being skeptic enough, nothing in the computer is in safe. At least a copy of the password must be written in paper/wood/rock/younameit in safe place.)

However, it didn't work for him, or he's not a real user.

I still skip password generators ...
until it is known what has happened here.
I may be guilty for "overlooking" (looking down) to make strong and safe pw to some "not-money-related" accounts. I have accounts in quite many sites ... yea, maybe I could use some manager, but anyway I would leave the most valuable pws out of pw manager. Papers etc. with possible "encrypting" are best stores for those ... I know think.

Yeah, seriously.  I remember a time when account recovery was next to impossible if you got hacked, but things seem to have gotten easier in the past few years.

He might be lucky that the hacker didn't change his account email ^{[or the new owner didn't change it]} so he might still be able to reset his password via e-mail. This user-generated recovery does not involve the account recovery team as the account owner only resets the password via a link sent to the e-mail to reset the password. But it will be very difficult if the hacker has changed the account e-mail because the account recovery must involve the recovery team, and the only way to get the account back is to prove it by signing bitcoin message.

Imagine if a user never used a bitcoin address anywhere on this forum or he forgot about the wallet he was using. It will definitely make it even more difficult to get his account back ^{[perhaps not even anymore]} because the recovery team won't trust him as easily as one might think.

If I remember my postings correctly, there is no need to imagine

Edit: clarif.




[moderator's note: consecutive posts merged]

[hosseinimr93]

Have to admit that there is a chance that I have changed the email account in BTT account some years ago (after there was some warnings or something).

In the case you have changed the email address associated with your bitcointalk account, you should see an email sent to your old email address regarding the email address change.

[jkoil2022]

Have to admit that there is a chance that I have changed the email account in BTT account some years ago (after there was some warnings or something).

In the case you have changed the email address associated with your bitcointalk account, you should see an email sent to your old email address regarding the email address change.

Currently no trace of such an email. If that happened 2 - 5 years ago, I likely deleted it, coz in those days "everything was fine".

[decodx]

My latest posting by "jkoil" was on May 12, 2022.
Is it known that the hack was made on May 4th?
<...>

Sorry, my mistake. Looks like I was checking the wrong profile. It appears your password was changed (password reset via email) for the first time on June 13th, 2022, at 2:41:17.
You can check it yourself at: https://bpip.org/Profile?id=206476

As far as I know, a hacker couldn't have done it without access to your email account.

[jkoil2022]

My latest posting by "jkoil" was on May 12, 2022.
Is it known that the hack was made on May 4th?
<...>

Sorry, my mistake. Looks like I was checking the wrong profile. It appears your password was changed (password reset via email) for the first time on June 13th, 2022, at 2:41:17.
You can check it yourself at: https://bpip.org/Profile?id=206476

As far as I know, a hacker couldn't have done it without access to your email account.

yea ...
"The other one's pw is currently "out of my memory""

Now found the pw for it. And it does not work. When sending a pw recovery request to the operator, there is shown this info:
"Send instructions to my contact email address: b******@gmail.com
 Send release code for a new password to my cell phone: +880*******020"

And certainly, those contact informations are not mine


Edit:
BD-phone matches with the "cricket interests" ...

[jkoil2022]

This escalated quickly !

https://i.imgur.com/eIekiga.jpg

All 2, 3 or how many you are can follow the steps here https://bitcointalk.org/index.php?topic=5089777.0 and we'll figure it out next week.

No news, no emails to my Inbox yet ...

Yeah, seriously.  I remember a time when account recovery was next to impossible if you got hacked, but things seem to have gotten easier in the past few years.

He might be lucky that the hacker didn't change his account email ^{[or the new owner didn't change it]} so he might still be able to reset his password via e-mail. This user-generated recovery does not involve the account recovery team as the account owner only resets the password via a link sent to the e-mail to reset the password. But it will be very difficult if the hacker has changed the account e-mail because the account recovery must involve the recovery team, and the only way to get the account back is to prove it by signing bitcoin message.

Imagine if a user never used a bitcoin address anywhere on this forum or he forgot about the wallet he was using. It will definitely make it even more difficult to get his account back ^{[perhaps not even anymore]} because the recovery team won't trust him as easily as one might think.

jkoil did not use BTC address on this forum. Only official address of jkoil is the one, which was set to him in NEM ICO. And from that address/wallet was sent a signed message to recoveries_*@bitcointalk.org 10 days ago.

Seems to be a difficult case ...

[_BlackStar]

jkoil did not use BTC address on this forum. Only official address of jkoil is the one, which was set to him in NEM ICO. And from that address/wallet was sent a signed message to recoveries_*@bitcointalk.org 10 days ago.

Seems to be a difficult case ...

It doesn't matter if you do have the option of proving your account by sign messages from whatever address you've posted in the past, I'm sure the recovery team will take that into account.

If you have emailed them then I believe your case is in the queue and you will have to wait patiently. They can get it done in a week, a month, or maybe a year if all the evidence you present isn't convincing enough ^{[just a guess]} but hopefully not. But be patient, your case will be processed soon after the investigation.

[jkoil2022]

jkoil did not use BTC address on this forum. Only official address of jkoil is the one, which was set to him in NEM ICO. And from that address/wallet was sent a signed message to recoveries_*@bitcointalk.org 10 days ago.

Seems to be a difficult case ...

It doesn't matter if you do have the option of proving your account by sign messages from whatever address you've posted in the past, I'm sure the recovery team will take that into account.

If you have emailed them then I believe your case is in the queue and you will have to wait patiently. They can get it done in a week, a month, or maybe a year if all the evidence you present isn't convincing enough ^{[just a guess]} but hopefully not. But be patient, your case will be processed soon after the investigation.

Do you know how long the queue is ?
No replies yet to my emails.