I've been hacked (Electrum 4.3.2)

[Little Mouse]

Perhaps. Awfully interesting coincidence timing-wise though.
I also made a mistake. It isn't BUSD - It's USDT (Binance Peg).

It's from here- https://bitcointalk.org/index.php?topic=5433758
julerz12 already have mentioned about this.

I only registered to post this after seeing a 'How to keep Electrum safe' post referenced elsewhere. I have no stakes here and this doesn't really concern me.
But y'all really need to pay attention when you're getting conned.

Stop pretending to be a newbie.

[MuffinMaster]

I'm sorry to say, but looks like you guys are all getting conned.

~

Everything have been made public by @julerz12 earlier:

Also, just for everyone's info.
I am currently managing this bounty campaign wherein $4,000 USDT is (again) in my care, sitting on my Ledger wallet (Address)
I have already contacted several escrows including Hhampuz in hopes of being able to transfer these funds to them to act as a new official escrow.

[julerz12]

Perhaps. Awfully interesting coincidence timing-wise though.
I also made a mistake. It isn't BUSD - It's USDT (Binance Peg).

That campaign has been scheduled to run weeks ago. I've been in communication with that project team for weeks.



It just so happened that they have sent me $4,400 in USDT (BEP20) ($4,000 for the bounty pool and $400 for 4-week campaign management) [TXID] few hours after what happened with the Electrum wallet.

Why would I take $5,000 and put it again on a bounty campaign wherein all that funds are just going to be distributed to all who participated in it  I tell you now, I'm no Santa.

[CryptoHeadlineNews]

Yes. Which is why I vouch to change my behavior. Being so careless got me into these bad circumstances and it sucks.
Not only that I now have a constant headache, and I could barely sleep thinking over and over again how I fucked up, I lost what little reputation I had in this forum.
So, never again. I'd do whatever it takes to keep what little crypto I have left safe.


Just some thoughts. Even though this happened very early of freaking 2023, I still have high hopes everything will be ok since I see some members in this forum giving me encouragement (though I know most still doubt me for what happened) it does ease the pain a little.

Anyways here some update,

Yo!Mix: $320 management fee returned + $150 initial refund for the lost funds: https://www.blockchain.com/explorer/transactions/btc/bdae89f63a82d45cde5412b6c9dd63802a999cb389a3da51adb63d289842c579
Coinomize: $150 initial refund for the lost funds: https://www.blockchain.com/explorer/transactions/btc/246520fe68abe0439c1ea10f8cb17c1f8ff4699fe78e2044102427a637af84e5

I believe "Juler12" truly understand how this forum works, and as such won't dare to trade his reputation of many years for mere $5000, even when I heard him said that amount is equally a big sum of many in Philippines where he came from. Because I have been reading meaning into every statement of his ever since this allegation came up, and with this new update of his taking steps into paying back the lost fund to his clients, really shows that he is innocent and deserves a second chance to continue doing what he knows how to do best on this forum until his dept is fully paid to the last penny.

NOTE:
So my advice to Sir "Juler12" is that this should be a lesson to you, and from next time, security should be your top most priority when handling clients funds.

Don't give up, the year is too early to fail.

[Saisher]

I'm sorry to say, but looks like you guys are all getting conned.

Alt-coin address in OPs profile: 0x5e0668b2aa5836aa3ce67827e9e8d267d2f42d73



Let's see, a 4000 BUSD (BSC-USD) balance. Hm.



Oh Look. Timing also corresponds to the 'hack'.



I only registered to post this after seeing a 'How to keep Electrum safe' post referenced elsewhere. I have no stakes here and this doesn't really concern me.
But y'all really need to pay attention when you're getting conned.

You also need to pay attention to what you're posting because you are not reading the whole story if you happen to back read, do not put malice and be fair you'll get the whole picture, you will not see manipulation or suspect something is wrong, I guess you missed a lot because you're trying to look for loopholes .

[shasan]

You might be right that you have been hacked. But I am confused as I have seen a lot of scammers who were reputed on the forum also few of them was managing bounty campaign, was on the list of most trusted user, and most earned merit list. Also, they had repaid loans to several lenders but once they receive higher than their expectations they just scammed and left the forum. In this case, it is hard to trust you. But all will be changed if you repay the hacked amount from which you will earn or from the savings you have.

[armanda90]

Need transparent information from  OP about BSC address linked with Bitcointalk profile account, check here and I have open on BSC Network there are having about $4,000 with USDT stable coin and OP having about 2,000,000,000 Moonbet coins and values about $3,800 with current price at Bitmart.

Lets waiting respond from OP about this address seems not hack and there are have enough money refund for last signature campaign service as Yomix campaign. Need positive mindset about is right OP address or other address have linked with OP Bitcointalk account.




Values assets of OP linked address

[BenCodie]

I'm sorry to say, but looks like you guys are all getting conned.

Alt-coin address in OPs profile: 0x5e0668b2aa5836aa3ce67827e9e8d267d2f42d73
*image trimmed


Let's see, a 4000 BUSD (BSC-USD) balance. Hm.
*image trimmed


Oh Look. Timing also corresponds to the 'hack'.
*image trimmed


I only registered to post this after seeing a 'How to keep Electrum safe' post referenced elsewhere. I have no stakes here and this doesn't really concern me.
But y'all really need to pay attention when you're getting conned.

You also need to pay attention to what you're posting because you are not reading the whole story if you happen to back read, do not put malice and be fair you'll get the whole picture, you will not see manipulation or suspect something is wrong, I guess you missed a lot because you're trying to look for loopholes .

I bet he felt real smart for some moments there 

Need transparent information from  OP about BSC address linked with Bitcointalk profile account, check here and I have open on BSC Network there are having about $4,000 with USDT stable coin and OP having about 2,000,000,000 Moonbet coins and values about $3,800 with current price at Bitmart.

Lets waiting respond from OP about this address seems not hack and there are have enough money refund for last signature campaign service as Yomix campaign. Need positive mindset about is right OP address or other address have linked with OP Bitcointalk account.


* image trimmed

Values assets of OP linked address


* image trimmed

If the moonbet tokens can be liquidated and they are not a part of some other campaign or business, then julerz should definitely be obligated to liquidate them with no excuse otherwise, as consequence for not maintaining an adequate level of personal security. As a campaign manager who manages others' funds, part of your job description is being an escrow. A part of being an escrow includes maintaining an adequate cybersecurity level, at minimum to the level where someone can't just send money out of your Electrum, as has happened here.

If the hack is legitimate, there should not definitely not be any pity here. There is way to much of it when the only reason this is possible in the first place is carelessness, ignorance and recklessness toward security.

This leads me to ask julerz; Can the moonbet tokens be sold to cover the loss and if not, why?

[julerz12]

Need transparent information from  OP about BSC address linked with Bitcointalk profile account, check here and I have open on BSC Network there are having about $4,000 with USDT stable coin and OP having about 2,000,000,000 Moonbet coins and values about $3,800 with current price at Bitmart.

Lets waiting respond from OP about this address seems not hack and there are have enough money refund for last signature campaign service as Yomix campaign.

You realize those tokens aren't mine right?
Those were for the bounty campaign's bounty pool. Moonbet and Undeads.
Moonbet campaign has already ended but I am still finalizing its spreadsheet for the rewards distribution, that's why the tokens are still sitting on my ledger.
Undeads just started this week.

https://bitcointalk.org/index.php?topic=5427787 (Still finalizing, haven't distributed the rewards yet) ($4,000 worth of MBET tokens)
https://bitcointalk.org/index.php?topic=5433758 (Just ran, new campaign) ($4,000 worth of USDT)

they are not a part of some other campaign or business

Yes, they are.

[armanda90]

snip

Thanks for clearly update and I don't judge you but little misunderstanding above conversation due have question with your wallet address, now have been clearly with all assets there for Bounties Campaign participants and I hope you can sent as soon possible for Moonbet campaign have been ended last few days.

I am sorry to heard with your loss and don't give up, "after darkness will have lightness one day later"

[BenCodie]

they are not a part of some other campaign or business

Yes, they are.

There was an "if" before that quote.
In this case though, I guess it is fine.
My next question is, what steps have you taken since to improve your security levels, or what steps are you planning to take? Do you need help or have you done research to create a plan? Also what have you done to mitigate the existing attack? If you were hacked/compromised it is very likely that you are still compromised. I am intrigued to read more details.

[Wind_FURY]

Don't just say it, as one of the security measures, you truly need to learn Linux if you are involved in cryptocurrencies. It's not that hard. But if you really need to run Windows, you can run it as a VM within your Linux OS. It's much safer.

I would never use Windows + Chrome/Firefox for my exchange/banking/Bitcoin needs, it's just a security hole, and a hack/malware waiting to happen.

I think that kind of observation is a bit radical!

Regardless of the system used, security begins with user behavior. If the person has a bad behavior, he is subject to problems, regardless of the system he has. It is true that one or another system can make it difficult to have problems, but they are not infallible.

Safety is always related to the behavior that the person has!

But isn't choosing the best technical approach for securing your system also part of human behavior? In Bitcoin, we like to say "Be your own Bank", and that we should take absolute responsibility for our own private keys. Plus between overshooting or undershooting system security, it's definitely better to overshoot especially if you HODL a large amount of Bitcoin, OR if you're holding other people's Bitcoin like OP.

[julerz12]

snip

Thanks for clearly update and I don't judge you but little misunderstanding above conversation due have question with your wallet address, now have been clearly with all assets there for Bounties Campaign participants and I hope you can sent as soon possible for Moonbet campaign have been ended last few days.

I am sorry to heard with your loss and don't give up, "after darkness will have lightness one day later"

Yeah you could've searched a little though, info about the Moonbet's bounty pool in my ledger is already posted here: https://bitcointalk.org/index.php?topic=5427787.msg61424830#msg61424830

Do you need help or have you done research to create a plan?

Already talked privately to some knowledgeable members of this forum about it. Google is helpful too. I don't feel the need to share such info here.

Also what have you done to mitigate the existing attack?

Wiped the drives. New Os (which will probably be wiped again for Linux). Changed a lot of passwords. Did some meditation to clear my mind. Drank a lot of coffee.

I am intrigued to read more details.

You can read some of them here:
https://bitcointalk.org/index.php?topic=5433643.msg61576110#msg61576110
https://bitcointalk.org/index.php?topic=5433643.msg61579376#msg61579376
https://bitcointalk.org/index.php?topic=5433643.msg61573933#msg61573933

[BenCodie]

Don't just say it, as one of the security measures, you truly need to learn Linux if you are involved in cryptocurrencies. It's not that hard. But if you really need to run Windows, you can run it as a VM within your Linux OS. It's much safer.

I would never use Windows + Chrome/Firefox for my exchange/banking/Bitcoin needs, it's just a security hole, and a hack/malware waiting to happen.

I think that kind of observation is a bit radical!

Regardless of the system used, security begins with user behavior. If the person has a bad behavior, he is subject to problems, regardless of the system he has. It is true that one or another system can make it difficult to have problems, but they are not infallible.

Safety is always related to the behavior that the person has!

But isn't choosing the best technical approach for securing your system also part of human behavior? In Bitcoin, we like say "Be your own Bank", and that we should take absolute responsibility for private keys. Plus between overshooting or undershooting system security, it's definitely better to overshoot especially if you HODL a large amount of Bitcoin, OR if you're holding other people's Bitcoin like OP.

It should be pushed a lot more than it is. I think that it is usually more like human behavior to suffer a loss/consequence for lack for security before taking it seriously. I think this thread validates that theory.

snip

Thanks for clearly update and I don't judge you but little misunderstanding above conversation due have question with your wallet address, now have been clearly with all assets there for Bounties Campaign participants and I hope you can sent as soon possible for Moonbet campaign have been ended last few days.

I am sorry to heard with your loss and don't give up, "after darkness will have lightness one day later"

Yeah you could've searched a little though, info about the Moonbet's bounty pool in my ledger is already posted here: https://bitcointalk.org/index.php?topic=5427787.msg61424830#msg61424830

Do you need help or have you done research to create a plan?

Already talked privately to some knowledgeable members of this forum about it. Google is helpful too. I don't feel the need to share such info here.

Also what have you done to mitigate the existing attack?

Wiped the drives. New Os (which will probably be wiped again for Linux). Changed a lot of passwords. Did some meditation to clear my mind. Drank a lot of coffee.

I am intrigued to read more details.

You can read some of them here:
https://bitcointalk.org/index.php?topic=5433643.msg61576110#msg61576110
https://bitcointalk.org/index.php?topic=5433643.msg61579376#msg61579376
https://bitcointalk.org/index.php?topic=5433643.msg61573933#msg61573933

Without (rightfully) going into too much detail it is pretty clear to me that you're on the right track to a much better level of security. Good stuff and credits are due to the members who helped you and clearly steered you to a better path, and all the best to you in the future! I'll read the details later too, about to log off. Thank you for the links.

[shasan]

You realize those tokens aren't mine right?
Those were for the bounty campaign's bounty pool. Moonbet and Undeads.
Moonbet campaign has already ended but I am still finalizing its spreadsheet for the rewards distribution, that's why the tokens are still sitting on my ledger.
Undeads just started this week.

I think armanda90 though those tokens/dollars are of you and if you are legit then you may send from those funds. Anyway, as you have those funds as managing bounty you may clear those funds to the participant as soon as possible so that the community can understand you are working as you worked before the hack. And it will help you to prevent getting new negative tags and also may help you to remove the previous tag. And more important thing is that the Bitcointalk community will be able to know that you are legit and the fund has really been hacked. Also, please try to repay your earnings slowly.

[julerz12]

-SNIP-
Anyway, as you have those funds as managing bounty you may clear those funds to the participant as soon as possible so that the community can understand you are working as you worked before the hack. And it will help you to prevent getting new negative tags and also may help you to remove the previous tag. And more important thing is that the Bitcointalk community will be able to know that you are legit and the fund has really been hacked.

Finalizing a bounty campaign spreadsheet takes time. I don't want to rush these things as when the rewards have been distributed, there's no going back, no undo button for that. I'd rather take my time and check everything on the spreadsheet carefully.

Also, please try to repay your earnings slowly.

I've already started doing that.
https://bitcointalk.org/index.php?topic=5433643.msg61579376#msg61579376

EDIT

I also just posted the listing of my motorbike on Facebook [ LINK ]
Link deleted per other forum member's suggestion*

[Rikafip]

I also just posted the listing of my motorbike on Facebook [ LINK ]

I understand that you wanna prove that you are doing everything you can to repay the money lost, but I don't think that this a smart thing to do, to doxx yourself over this. Imho, you should remove that link asap.

[julerz12]

I also just posted the listing of my motorbike on Facebook [ LINK ]

I understand that you wanna prove that you are doing everything you can to repay the money lost, but I don't think that this a smart thing to do, to doxx yourself over this. Imho, you should remove that link asap.

I'm an open book. I have nothing to hide. I understand the risks and possible consequeces of giving up your privacy for the sake of transparency. I think I mentioned it somewhere before that it is pretty hard to stay anonymous nowadays, you had to be a hermit living in cave with zero connections to do that (at least that's what I think). So it's fine, what are they gonna do? come here and steal the bike? Goodluck on that. We Mindanaoans are tough as nails.
Besides, that post still needs to be public so it reaches more people so I could sell it ASAP.

[Rikafip]

I'm an open book. I have nothing to hide. I understand the risks and possible consequeces of giving up your privacy for the sake of transparency.

You can remain decently transparent even without doxxing yourself, and just because you think that you understand the consequences, doesn't mean that you actually do as you probably also understood the risks of storing funds on hot wallet, and we can see how that ended up.

So it's fine, what are they gonna do? come here and steal the bike?

Stealing the bike should be the least of your worries. You are a bounty manager that is regularly storing your client's money and people may get all kind of ideas in their head (read $5 wrench attack). Anyway, suit yourself.

[lovesmayfamilis]

Anyway, suit yourself.

Some need more than one lesson. If a person is forced to be public, and this is exactly what a manager is on the forum, then he is forced to communicate with people. Anyone the OP considers a "friend" can send him a link containing malware, and once again the OP will be trapped. But yes, all his contacts are visible since 2017 and this Facebook account is not new in his today's display.