Bitcointalk account hacking/phishing Alert

[Ojima-ojo]

Forum account hacking attempt, I received a personal massage with a fake forum link from user tuannguyentn1 that he made a reply to my comment, on clicking the link I was taken to fake forum log in page requesting my password on checking the URL I discovered it is a hacking attempt aimed at stealing my password, both old and new members should be careful because the rate of Bitcointalk account hacking is on the increase. I will share all the link including screenshots, I hope user tuannguyentn1 get red trust Dt2 member to save other from falling victim to this hacker.

Screenshot of message including the fake link:

Screenshot of redirected page

 If you look at the second screenshot closely you will discover the address in the address bar is not Bitcointalk

So once you fall victim by inputting your forum password your details will be stolen and your account gone.

[1714909364]

1714909364

[1714909364]

1714909364

[1714909364]

1714909364

[1714909364]

1714909364

[acroman08]

this kind of phishing attempt has happened before in this forum and the same thing happened to this member PowerGlove a few days ago(yesterday, if we are basing on forum time). the member received a similar PM from a different user.

I suggest reporting the PM to the MODs so proper action can be taken against the user who sent you the phishing link.

[Upgrade00]

This has been around for quite a while, and there was a case of the hacker using an already hacked account to send the PMs. This could be the case here as the user tuannguyentn1 just recently woke up as can be seen on his trust profile.

You don't have to wait for DT members to send a feedback, you can do that yourself and use this post as a reference.
Reporting the PM as suggested above is also a great idea.

[Saint-loup]

Forum account hacking attempt, I received a personal massage with a fake forum link from user tuannguyentn1 that he made a reply to my comment, on clicking the link I was taken to fake forum log in page requesting my password on checking the URL I discovered it is a hacking attempt aimed at stealing my password, both old and new members should be careful because the rate of Bitcointalk account hacking is on the increase. I will share all the link including screenshots, I hope user tuannguyentn1 get red trust Dt2 member to save other from falling victim to this hacker.

Screenshot of message including the fake link:

Screenshot of redirected page

 If you look at the second screenshot closely you will discover the address in the address bar is not Bitcointalk

So once you fall victim by inputting your forum password your details will be stolen and your account gone.

That's really sad to hear those kinds of things, did you try to speak with him? What he was expecting to do with a newbie account precisely? I really don't understand what those guys are looking for. Are you sure it was a human at least and not a bot? As it has been said please report the PM to moderators.
I quote your post to show the pictures to everybody.

[DdmrDdmr]

Oddly enough, both recent cases of accounts sending this phishing link (santhosh121081 and tuannguyentn1) were both merited and became Jr. Members either yesterday or today, being both merited on different threads for non-substantial posts by SIXMJ to that effect …

[348Judah]

Forum account hacking attempt, I received a personal massage with a fake forum link from user tuannguyentn1 that he made a reply to my comment, on clicking the link I was taken to fake forum log in page requesting my password on checking the URL I discovered it is a hacking attempt aimed at stealing my passwor

Countless time I've experienced issues related to this requesting that he likes my comment oost on a particular topic ot threads that he will like to learn more from me, then i wonder if that couldn't be discussed or asked on that dame thread but on a PM that has link address which is suspicious enough for an hacking format, the aren't wise enough than us, all i do is just to ignor the user, avoid the link sent nor reply the trash PM, and i then reported such to the moderator.

[KingsDen]

Oddly enough, both recent cases of accounts sending this phishing link (santhosh121081 and tuannguyentn1) were both merited and became Jr. Members either yesterday or today, being both merited on different threads for non-substantial posts by SIXMJ to that effect …

Both tuannguyentn1 and santhosh121081 are relatively old in this forum and I guess that is why they have an idea of the old phishing attempts. I think they should be stopped before it will become a trend in the forum. The case of tuannguyentn1, the account work up recently after long time of inactivity. The merit that made the user a Jr member was giving on a bounty report comment. A post that doesn't worth meriting. Everything about this scenario is fishy.

[Taskford]

Forum account hacking attempt, I received a personal massage with a fake forum link from user tuannguyentn1 that he made a reply to my comment, on clicking the link I was taken to fake forum log in page requesting my password on checking the URL I discovered it is a hacking attempt aimed at stealing my password, both old and new members should be careful because the rate of Bitcointalk account hacking is on the increase. I will share all the link including screenshots, I hope user tuannguyentn1 get red trust Dt2 member to save other from falling victim to this hacker.

Screenshot of message including the fake link:
Snip
Screenshot of redirected page
Snip
 If you look at the second screenshot closely you will discover the address in the address bar is not Bitcointalk

So once you fall victim by inputting your forum password your details will be stolen and your account gone.

Nothing new with this as their are still users want to hack some account for their own personal interest and luckily you check the url before going. Also you can report this up to the moderator so that the accounts used for sending you a message about that phising link will get banned so that they or he cannot used that for another phising link spreading again.

[Ryker1]

Well scammers are everywhere so you dont need to wonder why that happen --this is a common issue that we heard of even before.
The second layer security option of our account is to stake your address on this link^[1], which is you have a strong proof of ownership that you are a real owner by staking your address which you have control.
Upon attempting to click the link in your message what color did you see? Because safe link appears a color green when you attempt to the link.
^{[1] https://bitcointalk.org/index.php?topic=996318.0}

[Xal0lex]

(santhosh121081 and tuannguyentn1)

Both users are banned.

[acroman08]

being both merited on different threads for non-substantial posts by SIXMJ to that effect …

I have a feeling that they are connected, apart from sending merits to both users who sent phishing PMs, SIXMJ also got merited by someone(dragospirvu75) who also got banned due to sending Phishing PMs to members. other than that assumptions, I don't have anything else, so I don't really expect any action to be taken against SIXMJ.

[Mpamaegbu]

It's really a shame that @tuannguyentn1, an account that has been here since 2017 can only muster just a single merit till date. BTW, what an ugly username that's there. That hack attempt should reinforce anyone's alertness to a given fact that if something smells fishy, crosscheck it. Don't be in a rush to run over it. It was in your ability to check facts that you realized the URL was totally different from this site. It goes to show that once you've your account in "always stay logged in" and you're asked to log in again, be suspicious. I don't know why there's resurgence of this type of attitude now. Sad.

[RILWAN]

So bad to see this happening still happening frequently, but make sure to report the message to moderators for them to take action against that account. Am sure you can also leave a negative trust on the account to prevent others from falling to this trick.

[SquirrelJulietGarden]

Both tuannguyentn1 and santhosh121081 are relatively old in this forum and I guess that is why they have an idea of the old phishing attempts. I think they should be stopped before it will become a trend in the forum. The case of tuannguyentn1, the account work up recently after long time of inactivity. The merit that made the user a Jr member was giving on a bounty report comment. A post that doesn't worth meriting. Everything about this scenario is fishy.

Maybe they woke up for phishing business in bear market. Incentivize by loss in bear market and need to find some bad jobs to cover their asses.

Password changed / Woke up recently. Good signals to know potential scammers
What to do to avoid phishing sites
[GUIDE] Use this for identifying Scam/Phishing Websites & Exchanges in Crypto
[Tutorial] How To Report Phishing Email & Create Auto Delete Filter - Gmail User
Tool For Catch Phishing
[LEARN & EARN] Phishing Quizzes - Beginners & Experts
Phishing with Punny code

[aysg76]

It's really a shame that @tuannguyentn1, an account that has been here since 2017 can only muster just a single merit till date. BTW, what an ugly username that's there.

He is not only alone in this bounty hunting scheme account setup and has made only 56 posts from 2017 so you can clearly see his intentions and single merit helped him to achieve the junior rank member on forum but he didn't stop his work and now he's banned on the forum.These bounty hunters have hundred of pages with only bounty reports submissions and don't have any single merit on their profile.

Both users are banned.

Yes they have been banned and these actions are required for the safety of the forum and we also have some phising warning on the forum sometimes but still we see these things:



So there are many scammers trying to contact your through PM so it's our responsibility to be alert and take a look at them carefully while don't click on these links without any means.

[Ojima-ojo]

So bad to see how this guy keep trying to hack people's accounts and the rise in the sale of accounts, this situation needs to be given close attention.

[RILWAN]

Cases like this have been happening for some time now on this forum, but we need to be more careful because lately this kind of hack attempt is more prominent and a lot of users are falling for this trick from hackers looking for ways to steal your login information.

[JollyGood]

Thank you for posting about it with screenshots.

I think this is the first time I have seen an attempt of this particular nature being sent in PMs. All users especially newbies are advised to take notice of the excellent work by the OP and avoid falling victim to these types of scams.

~snip~

If you look at the second screenshot closely you will discover the address in the address bar is not Bitcointalk

So once you fall victim by inputting your forum password your details will be stolen and your account gone.

[Ojima-ojo]

(santhosh121081 and tuannguyentn1)

Both users are banned.

Thanks for getting this information to my notice, i feel excited to see that two scammers are busted out the forum for good.

[CryptocurencyKing]

Out of curiosity, I visited the address on my browser by just inputting thegermanaccess.com and it lead to a website who's vision and mission is more about availing foreign nations the opportunity to study in Germany and learn the German language.

From the look of it, the site seems legitimate but, these hackers tries to use it for a cloak to use legitimacy in hiding there intent. It's a good thing they've been banned but, that doesn't mean they would for ever stay away as, they could always create an alt.

It becomes a matter of necessity that users be careful of the links they respond to and don't rush to login in the event of being logged out. You cod always go back and refresh the page just to be sure. At other times, always examine the browser, link and interface. Should you find any suspicion, report to the forum and have it sorted out.