Someone Loan using My Account

[Peanutswar]

Good day!

Dear All,

This morning I saw a neutral tag given by Shashan related to a collateral loan I didn't commit. I know this reason can be skeptical to others. My mistake was that I overlooked a message sent to shashan during my inactive time.

This unknown user continuously makes a comment to Shashan's thread that I didn't notice because if someone messages me, most likely I open those immediately to check if there's a revision for the translations I made. But the user keeps deleting the conversation, which is the reason why too late to catch them up. Also, Gmail is not linked to my phone, so I didn't receive a notification about their conversation, and shashan showed this to me. My account password didn't change seems like I experienced a DOM Attack.

Quoted below is the address I'm only using in the forum.

Good day everyone I would like to update my wallet address

A better way to update your address is to sign the message containing the new address with your old address. Anybody who acquires your account could post a message saying that they are changing the address, but only the original owner can sign that post with the original address.

Without signing using the old address, here are the possibilities:

1. You are the original owner.
2. You are not the original owner, and you hacked the account.
3. You are not the original owner, and you bought the account.

Thanks for the information.

This is my old wallet address

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
This is peanutswars, old wallet address bc1qh45r8qdp5zqf5cux77sq0k3gmjdljv4jdac0n0 and would like to add my new wallet address bc1qnrcpx4q970yhp5t0qqgu5svcu27982cpdd8xnl
-----BEGIN SIGNATURE-----
HwfgN/Z/80aAv1DRUsndg1yWcqi/3IOEOW22lMA2YQ3LdJLn5CNsJbwOVHY3knLRxwEL1ujUQgRN7fO1wW4YHt8=
-----END BITCOIN SIGNED MESSAGE-----

This is my new wallet address.

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
This is peanutswar 11/20/22 new wallet address bc1qnrcpx4q970yhp5t0qqgu5svcu27982cpdd8xnl
-----BEGIN SIGNATURE-----
ILiYa+mSEiu7SB/crI/OujyjELPwJr6tno2mrqIcI0ImOEZvDNHx7EF4eyQwmXeN9WIxVJEN6376YpJp3p3EGp8=
-----END BITCOIN SIGNED MESSAGE-----

I will repay Shashan but not on the designated date given to the loan; every time I receive a payment in a Signature Campaign/another source of income, I will deposit this immediately to Shashan's Address as repayment for the trouble created by that hacker.


I created this thread to be aware that I will only use the quoted and signed address to prevent this from happening again. If someone receives a request not with this address, please don't entertain it. I changed all of the password related to this account.  After noticing this issue of that, there's someone can access my account.

[1715334209]

1715334209

[1715334209]

1715334209

[1715334209]

1715334209

[1715334209]

1715334209

[TryNinja]

Thanks for sharing. I admit lending money here multiple times without asking for a signed message, so it could have been me (and I would have have fulfilled your request if I saw it).

Even scarier that he could have managed to get multiple loans (i.e me and shasan; 1k each).

[Jawhead999]

That's really scary, did you click malicious link before? it would be better if you could attach the proof of how you can guess you're get DOM attack.

Well, it looks like the borrower need to sign a message with the address which has been posted in this forum before. Although there's a chance if the user using web wallet and it's installed in the same device, the hacker can regain access to the wallet too. But that's seems the last way to prove an ownership.

Sorry to hear that @OP and I respect with your promise to pay back your losses.

[jokers10]

Very sad story. I'm very sorry to read that.

I just added a line that I never take any loans to one of a blank lines in my profile. Of course an intruder can easily change this line as well, but if some others will remember that I don't take loans this will make it harder to take a loan from my name. At least some can ask why and what happened and it will take time.

If there was a universal option for everyone to declare that they never take any loans it'd be even better. But making a separate topic for that would be too complicated and I don't see any easy way for that.

Maybe asking a signed message from known addresses of a user by default will be a good decision for loan service.

[_act_]

It is good to always follow the proper procedure. If anyone wants to lend you money, you supposed to sign a message with a bitcoin address that you have used in the past. On the message, the date you want to collect the loan must be included.

I can not wait to see the 2FA authentication to login on this forum for an additional security.

[lovesmayfamilis]

It's pretty weird what happened. Could you describe in more detail what device you are using and how someone was able to hack into your account? Did you have a simple password? Is your mail intact? I think that the hacker who got into your account purposefully went to take out a loan. And maybe it could be someone from your environment, someone who knows you.
Have you seen the IP address change?
All these questions will help you and all other users understand what went wrong with your login to the forum.

[CryptoHFs]

Do you have any web wallet? This hacker couldn't hack them? I believe I saw DM problems here before but posting a lending comment is the most advanced part. Nothing to say but it seems like a couple of loans got stolen these couple of days.

[invincible49]

That wallet address has connection with this Tron address: TXtp6FhA3NXP2eZehTu3W1CptFjaMECDcJ which seems like an exchange address that is mostly used for depositing funds from various investors who then become the victim of Ponzi scam mostly by this person. It kind of feels like that exchange is a safe haven for scammers and frauds.


Reference:
https://www.hyiper.net/blog/421.html
https://invest-tracing.com/detail-FinssConLimited.html
https://scamwatcher.org/Finnscon-review/
https://www.forexpeacearmy.com/forex-reviews/5098/fbs-forex-brokers?per-page=15
https://graspgold.com/details/lid/80/

[Mahdirakib]

Here is the TRC20 USDT address which has been used to take the loan from shasan.

TRX Address: TReZah87Zxhfk7YZtYksQ2Z9fNiq7Z2PMB

shasan has accepted your loan request and sent the USDT to the above address. Then, you or the hacker has sent 999+ USDT to a different address in 3 transactions. The USDT was sent to this address

TRC20 - USDT address: TJjqnqEhWQ8oW9AUgQLwrtMCAxfbEwREeF

This address was posted by user mdgabrielzim whose loan request was declined by shasan one month ago. The user 'mdgabrielzim' had also deleted his post from the lending thread. I'm wondering what is the connection between the hacker and mdgabrielzim!

[Cantsay]

I think I have also seen a similar case although this one was spotted fast by the original owner before the loan was accepted.

Op it isn't a pleasant experience having to pay for money that you had no idea how it was spent and that has brought some curiosity to my mind to know how they were able to gain access to your account; like how often do you log in your account in a different device? Do you frequent those funny sites? like the ones that offer free downloads for apps or software meant to be paid for, Do you use mod apps? I just wanted to know if there's any activity you have done recently or in the past that could have resulted in those hackers getting access to your device, as it could help others avoid making such errors.

~~~

That is very interesting info, but we need also to keep in mind that it could be another hack unless otherwise confirmed...

I'm not sure if @mdgabrielzim uses a Telegram bot, but if he does, he should be aware of this thread. To be safe, I think sending him a PM would also be nice, just in case he doesn't use any notification tool.

[LoyceV]

@Peanutswar: Check https://bitcointalk.org/myips.php

Well, it looks like the borrower need to sign a message with the address which has been posted in this forum before.

The hacked borrower can't help that, if the lender doesn't ask for it.
I can only hope nobody would fall for this if someone ever manages to compromise my account. I've never taken a loan, and if I do, that should raise a big red flag (and there's only one exception).

If there was a universal option for everyone to declare that they never take any loans it'd be even better. But making a separate topic for that would be too complicated and I don't see any easy way for that.

I can give you neutral feedback if you want, with a link to your post. Something like:
"This user confirmed he never wants to take a loan. If his account asks for it, it's not him."
If anyone else wants such feedback: post your confirmation here and I'll add it once I see it. I assume my account will be on DT for many years to come

[CryptoHFs]

@Peanutswar: Check https://bitcointalk.org/myips.php

Well, it looks like the borrower need to sign a message with the address which has been posted in this forum before.

The hacked borrower can't help that, if the lender doesn't ask for it.
I can only hope nobody would fall for this if someone ever manages to compromise my account. I've never taken a loan, and if I do, that should raise a big red flag (and there's only one exception).

If there was a universal option for everyone to declare that they never take any loans it'd be even better. But making a separate topic for that would be too complicated and I don't see any easy way for that.

I can give you neutral feedback if you want, with a link to your post. Something like:
"This user confirmed he never wants to take a loan. If his account asks for it, it's not him."
If anyone else wants such feedback: post your confirmation here and I'll add it once I see it. I assume my account will be on DT for many years to come

Let's make the forum clean.. give me that tag!

[Peanutswar]

It's pretty weird what happened. Could you describe in more detail what device you are using and how someone was able to hack into your account? Did you have a simple password? Is your mail intact? I think that the hacker who got into your account purposefully went to take out a loan. And maybe it could be someone from your environment, someone who knows you.
Have you seen the IP address change?
All these questions will help you and all other users understand what went wrong with your login to the forum.

Before, there was a link sent to me for discord community management, the sender have a link makes a redirect link to other page and the message sent multiple times so i suspected immediately could be an attack, I immediately cleaned my PC for possible preventive attacks, I got confident by that time but my mistake too I didn't change my password, my email are on my PC but not in my device itself that notifies the information of my account, I mislook before that there's a change of wallet address in my profile, I thought I just paste my other address so I ignore this.

LoyceV recently give the IP addresses as I suspected the unknown user makes a move since he make a loan Date of 7-06-23.





Seems like this person lurking around first in the bitcointalk community and checking my activity before committing this trouble.

I think I have also seen a similar case although this one was spotted fast by the original owner before the loan was accepted.

Op it isn't a pleasant experience having to pay for money that you had no idea how it was spent and that has brought some curiosity to my mind to know how they were able to gain access to your account; like how often do you log in your account in a different device? Do you frequent those funny sites? like the ones that offer free downloads for apps or software meant to be paid for, Do you use mod apps? I just wanted to know if there's any activity you have done recently or in the past that could have resulted in those hackers getting access to your device, as it could help others avoid making such errors.

~~~

That is very interesting info, but we need also to keep in mind that it could be another hack unless otherwise confirmed...

I'm not sure if @mdgabrielzim uses a Telegram bot, but if he does, he should be aware of this thread. To be safe, I think sending him a PM would also be nice, just in case he doesn't use any notification tool.

Only every morning before i go to office i check the forum and message if there's any translations i need to revise, and also after going to work, I didn't use any mod apps i know the possible malware they can inject with those free software. At the end I don't want to ruin my reputation here even though its too painful to pay that amount.

[CryptoHFs]

It's pretty weird what happened. Could you describe in more detail what device you are using and how someone was able to hack into your account? Did you have a simple password? Is your mail intact? I think that the hacker who got into your account purposefully went to take out a loan. And maybe it could be someone from your environment, someone who knows you.
Have you seen the IP address change?
All these questions will help you and all other users understand what went wrong with your login to the forum.

Before, there was a link sent to me for discord community management, the sender have a link makes a redirect link to other page and the message sent multiple times so i suspected immediately could be an attack, I immediately cleaned my PC for possible preventive attacks, I got confident by that time but my mistake too I didn't change my password, my email are on my PC but not in my device itself that notifies the information of my account, I mislook before that there's a change of wallet address in my profile, I thought I just paste my other address so I ignore this.

LoyceV recently give the IP addresses as I suspected the unknown user makes a move since he make a loan Date of 7-06-23.

[

Seems like this person lurking around first in the bitcointalk community and checking my activity before committing this trouble.

I think I have also seen a similar case although this one was spotted fast by the original owner before the loan was accepted.

Op it isn't a pleasant experience having to pay for money that you had no idea how it was spent and that has brought some curiosity to my mind to know how they were able to gain access to your account; like how often do you log in your account in a different device? Do you frequent those funny sites? like the ones that offer free downloads for apps or software meant to be paid for, Do you use mod apps? I just wanted to know if there's any activity you have done recently or in the past that could have resulted in those hackers getting access to your device, as it could help others avoid making such errors.

~~~

That is very interesting info, but we need also to keep in mind that it could be another hack unless otherwise confirmed...

I'm not sure if @mdgabrielzim uses a Telegram bot, but if he does, he should be aware of this thread. To be safe, I think sending him a PM would also be nice, just in case he doesn't use any notification tool.

Only every morning before i go to office i check the forum and message if there's any translations i need to revise, and also after going to work, I didn't use any mod apps i know the possible malware they can inject with those free software. At the end I don't want to ruin my reputation here even though its too painful to pay that amount.

That's really sad. The discord link was clicked from phone or pc? Do you still have the link? Did it download anything or just redirects? Does that mean all bounty and community managers and signature campaign managers may post false loan requests by the time passing? As that hacker would have sent to all the possible targets.

[lovesmayfamilis]

I can give you neutral feedback if you want, with a link to your post. Something like:
"This user confirmed he never wants to take a loan. If his account asks for it, it's not him."
If anyone else wants such feedback: post your confirmation here and I'll add it once I see it. I assume my account will be on DT for many years to come

Yes, I want to ask you, LoyceV, to leave a neutral tag on my profile that I will never take loans on this forum.
Thank you.

[RickDeckard]

Before, there was a link sent to me for discord community management, the sender have a link makes a redirect link to other page and the message sent multiple times so i suspected immediately could be an attack, I immediately cleaned my PC for possible preventive attacks, I got confident by that time but my mistake too I didn't change my password, my email are on my PC but not in my device itself that notifies the information of my account, I mislook before that there's a change of wallet address in my profile, I thought I just paste my other address so I ignore this.

Was the password unique to bitcointalk or did you shared it with other places? I highly advice you to make a full format of your PC (I don't know how deep was your cleaning) and change immediately all the passwords to essential services that you have (banking, services, governmental websites, e-mail...). You don't know for how long did the hacker had access to your account (or PC?) so one can never be too careful. If you don't use it, password managers[1][2][3] are also a great addition to increase the security of your accounts (it isn't foolproof, the greatest anti virus is always between the ears ).
[1]https://psono.com/
[2]https://keepassxc.org/
[3]https://bitwarden.com/

[Jawhead999]

I can only hope nobody would fall for this if someone ever manages to compromise my account. I've never taken a loan, and if I do, that should raise a big red flag (and there's only one exception).

It seems a good idea and increase the real usage of neutral feedback rather than for criticism or conflict

I don't want to be mean, but you, me, or anyone could disappear in the future and the tag always remain in their accounts. I'm just thinking if someone decided to ask a loan when there's a neutral tag where the account will not ever ask any loan in this forum. Do you think if he can sign a message on his old address, the account is still controlled by the real owner?

LoyceV recently give the IP addresses as I suspected the unknown user makes a move since he make a loan Date of 7-06-23.

It's your real IP addresses in this forum? I think it's better for you to remove the images if you're consider about your privacy. But if you not care about your privacy, then you can refuse my suggestion.

[CryptoHFs]

@Peanutswar: Check https://bitcointalk.org/myips.php

Well, it looks like the borrower need to sign a message with the address which has been posted in this forum before.

The hacked borrower can't help that, if the lender doesn't ask for it.
I can only hope nobody would fall for this if someone ever manages to compromise my account. I've never taken a loan, and if I do, that should raise a big red flag (and there's only one exception).

If there was a universal option for everyone to declare that they never take any loans it'd be even better. But making a separate topic for that would be too complicated and I don't see any easy way for that.

I can give you neutral feedback if you want, with a link to your post. Something like:
"This user confirmed he never wants to take a loan. If his account asks for it, it's not him."
If anyone else wants such feedback: post your confirmation here and I'll add it once I see it. I assume my account will be on DT for many years to come

You can also add to that extension per user request
1- This user confirmed he never wants to take a loan without signing a message from the staked address.....
2- This user confirmed he never wants to take a loan without a collateral
To attract more people to enroll in that and arrange with lenders to force request this feedback first before someone requests a loan and if he choose num 1 should be an old address if he's adding a new one must disclose his ip log and use the account for a week before requesting a loan

[decodx]

I don't understand how something like this is even possible if the user's password is not compromised. I tried Googling about the DOM attack, but I couldn't find an explanation that I could understand given my current level of knowledge. Have there been previous cases similar to this? And how can we prevent and defend against these types of attacks?

[LoyceV]

I don't want to be mean, but you, me, or anyone could disappear in the future and the tag always remain in their accounts. I'm just thinking if someone decided to ask a loan when there's a neutral tag where the account will not ever ask any loan in this forum. Do you think if he can sign a message on his old address, the account is still controlled by the real owner?

That will be up to the lender. At least he'll see a warning telling him to be extra careful.

I've left 2 neutral "no loan" tags so far. If someone ever asks me to remove them, I'll require a signed message from an old staked address, and I'll probably wait for 30 days (a cooldown period).

I don't understand how something like this is even possible if the user's password is not compromised.

If the scammer changes the password, he gets noticed quickly. By not changing the password, the scammer can stay under the radar and impersonate the real account owner for a while. It has happened before.

[JeromeTash]

Thanks for sharing. I admit lending money here multiple times without asking for a signed message, so it could have been me (and I would have have fulfilled your request if I saw it).

I guess requesting a signed message from an old staked address should be part of procedure from now on. These streets are really so slippery  


Sorry about terrible ordeal OP and Shashan

[decodx]

I don't understand how something like this is even possible if the user's password is not compromised.

If the scammer changes the password, he gets noticed quickly. By not changing the password, the scammer can stay under the radar and impersonate the real account owner for a while. It has happened before.

That makes sense, but I'm still having trouble understanding what exactly happened here. How did the scammer get into OP's account if he didn't have his password?
I noticed that Peanutswar mentioned receiving a link for Discord community management. Is it really possible for someone to gain access to your bitcointalk account just by clicking on such a link? Sorry if this sounds like a silly question, but I'm genuinely curious to learn about the countermeasures against this type of attack.


Peanutswar, could you please provide more details? When did you first realize that your account had been compromised? Have you noticed any suspicious activity on your system? Also, could you elaborate on the links you mentioned?

[DireWolfM14]

Maybe asking a signed message from known addresses of a user by default will be a good decision for loan service.

This is what I was thinking.  I see shasan often giving loans without requesting a signed message, and I think it adds undue risk.  If for whatever reason the borrower doesn't have the ability to sign a message, at the very least check to see if the funding address has been posted by the borrower on the forum in the past.

[Little Mouse]

I noticed that Peanutswar mentioned receiving a link for Discord community management. Is it really possible for someone to gain access to your bitcointalk account just by clicking on such a link? Sorry if this sounds like a silly question, but I'm genuinely curious to learn about the countermeasures against this type of attack.

There was another such case happened here, I can't remember who was it. Will try to find it out.
I'm not an expert in such cases though I didn't the guy who claimed this few months back. However, I heard such a case recently where hacker got access of facebook account just because the victim clicked on a link. It was not a phishing password steal method. There was a group who recently got arrested in Bangladesh. They used to access facebook account by this trick and blackmail many people by collecting their private data.

[Igebotz]

Maybe asking a signed message from known addresses of a user by default will be a good decision for loan service.

This is what I was thinking.  I see shasan often giving loans without requesting a signed message, and I think it adds undue risk.  If for whatever reason the borrower doesn't have the ability to sign a message, at the very least check to see if the funding address has been posted by the borrower on the forum in the past.

Until one gets scammed, he would never believe scam exist, and sometimes we build blind trust based on past transactions. Op will know the usefulness of linking his forum account to his regular email and the lender will also learn how to secure his deals.

I've never received a loan from Shahan, but if he's giving out loans based on reputation and active signature participants without additional checks, he has to add another layer of security to his loan business to avoid this from happening again.

[SamReomo]

I noticed that Peanutswar mentioned receiving a link for Discord community management. Is it really possible for someone to gain access to your bitcointalk account just by clicking on such a link? Sorry if this sounds like a silly question, but I'm genuinely curious to learn about the countermeasures against this type of attack.

There was another such case happened here, I can't remember who was it. Will try to find it out.
I'm not an expert in such cases though I didn't the guy who claimed this few months back. However, I heard such a case recently where hacker got access of facebook account just because the victim clicked on a link. It was not a phishing password steal method. There was a group who recently got arrested in Bangladesh. They used to access facebook account by this trick and blackmail many people by collecting their private data.

If I'm not wrong then the method is called as "session hijacking" or "session cookie theft." In such type of attacks the hacker often send you a malicious link, and when a users clicks on the link then the hacker take advantage of the vulnerabilities of the browser that the user is using to access the link. The hacker then steal the session cookies of the user and then use that cookie on his/her browser with the help of extensions like cookie editor. Such type of attacks are often planned by the hackers who have access to some hidden vulnerabilities of the browsers that no-one knows yet. Those hackers can steal session cookies of any website they want, and that way they hack the access of the users.

I'm quite sure that the same thing happened with @Peanutswar when he clicked on that malicious link without even thinking about such exploits. The hacker knew that the user would click on the link, and he would be able to steal the cookies one the user will click the link. It's better to be aware of such type of hacks because they can easily hack someone's account and ask for loans that the user isn't asking for. It's our responsivity to protect ourselves from such type of hacking attacks, and we should never click on the links sent by a unknown user. That way we will be able to protect ourselves from such kind of hacks.

[Igebotz]

I've left 2 neutral "no loan" tags so far. If someone ever asks me to remove them, I'll require a signed message from an old staked address, and I'll probably wait for 30 days (a cooldown period).

Why wait 30 days after someone has signed a message from an old staked address to remove a tag? You should assume that the person making such a request may be in desperate need of a loan.

A signed message is enough IMO.

[_BlackStar]

Peanutswar - this is a very unpleasant experience about you. But anyway - you don't seem to be running away from the fact that you have to bear the consequences of this incident.

Of course it is a downright scary occurrence if someone manages to get into an account that is highly reputable. Intruders can take advantage of account reputation for profit by making loans instead of changing password and email and selling account. This might be a new trend for intruders - and I hope I can prevent the same from happening in the future. I didn't take out a loan and probably never will - so someone has to really verify anything if one day this account applies for a loan.

[Findingnemo]

Here is the TRC20 USDT address which has been used to take the loan from shasan.

TRX Address: TReZah87Zxhfk7YZtYksQ2Z9fNiq7Z2PMB

shasan has accepted your loan request and sent the USDT to the above address. Then, you or the hacker has sent 999+ USDT to a different address in 3 transactions. The USDT was sent to this address

TRC20 - USDT address: TJjqnqEhWQ8oW9AUgQLwrtMCAxfbEwREeF

This address was posted by user mdgabrielzim whose loan request was declined by shasan one month ago. The user 'mdgabrielzim' had also deleted his post from the lending thread. I'm wondering what is the connection between the hacker and mdgabrielzim!

In this thread everyone forget to pick this, I hope this will give some clue about what happened to the account since its clear that address used to take loan is under control of hacker and made a transaction with one of the forum member. Either the hacker send the funds to his own addresses or used it for any service or deal among forum member.

So @mdgabrielzim can give some clarification about the incident which may find the way for further investigation.

[DireWolfM14]

There was another such case happened here, I can't remember who was it. Will try to find it out.

kenzawak.

[Dr.Bitcoin_Strange]

Since I joined this forum, I have not seen a case like this, although in my place, someone has used a friend's Mobile phone to request a Loan, collected a loan that's about $800, and disappeared. Another case was that one dude collected his friend's debit card, withdrawn all the money in his account, and disappeared. Those two cases was not really a pleasant experience, but lastly, they courted the two of them after some months.

But in this situation, this is a Blockchain transaction, and there is no way you can catch this thief. I really feel sorry for this kind of experience. It's very painful having to repay this kind of money for the fact that you were not even the one who sent it.


Edit

Instead of creating a separate thread, I would like to make it Open that any time I am requesting a loan, it will likely be a loan on only Bitcoin and USDT, for which I will use my Bitcoin address, which I have been using here and also my BEP-20 USDT address which are in the bracket below.( BTC address bc1qkcnglxmm8hxr9lzxdk95e5jj3xcujag442zxgu and Bep-20 USDT address 0x9eb9c615ed45f3a17365d2041e6fdb36a1df8621).

Any loan request using any other address if not those above two listed adress should never be granted. I will use this as proof should there be any incident like this on my account any day.



Cheers 🥂, Dr.Bitcoin_Strange 👺👺

[Mahdirakib]

~snip~

Beside this, I just noticed another address is connected with the hacker TRX address which has been used in the lending board for loan request. 900 USDT loan was requested by user Woodie two times in shasan lending service. Like the previous case, those loan request post have been deleted by the user (check in Ninjastic). Anyway, it seems like shasan had noticed one of those loan requests and declined it. Here is the address which was used for the loan request

USDT Address(TRC-20): TWN2BYmN1cmoGQmNaAVjzYLUX12As4zTrX

Connection between the hacker address which was used in Peanutswar loan request and Woodie loan request.


(Transaction link)

Woodie was worried about the loan request and made a post in shasan lending thread, but he has deleted that post too. What's going on actually? Peanutswar ~ mdgabrielzim ~ Woodie, how big the hacking attempt is?

[Peanutswar]

~~

Seems like there's a lot too not only me as per checking the date its 6-30-23 and in my case the incident starts on 7-06-23, I guess before taking loan they must need to raise up a Signed / Verified address before accepting loans, and the same time hoping in the future have another layer of security in the forum too. This guy is lucky only have ~400 USD and mine takes a thousand USD just to clean my name here.

@CryptoHFs sorry for the DM the forum does not load properly.

@LoyceV Can I have that tag too that I will never take a loan here in the community.

[SmartGold01]

Oh no this is a very bad situation but how could someone login your account and apply for a loan without your knowledge or could it be after your absence and inactive the hacker has been using your account without your knowledge? Do we say the forum should enable a login notification whereby if there's a any unusual activity we get notified via our mails and any other notification medium to ensure the security of our account?

Sincerely speaking, having gone through op's statement I am beginning to be afraid because I won't know what may happen to others or even to me. Before given out loan they should sign message with their current address on a campaign before they can receive loan otherwise if such person fails to sign a message then the loan shouldn't be granted to the requester. Because to what happened to peanutswar is a great lost and a kind of imposing unwanted bill or debt to him or her to start paying $1000 that he didn't plan of.

That's very huge amount of money compared to our currency and is a kind of mind blowing to accepting unnecessary bill. Well I will like to plead with shasan to have patient with op as this could likely happened to anyone out there and if possible the interest should be cancelled for him to be able to clear the whole debt and also for a little extension as I believe even in 10 weeks he can't still pay off the debt, since the average weekly payments from his campaign currently will be $70 to $90, so with this pay rate I don't think he can be able to pay $1k within the next 10 weeks so I think 13 weeks payment can be able to clear the debt.

Except op has other physical business he is doing to generate money to pay quickly before 10 weeks.
I sincerely sympathized with you on this bad ugly situation you are facing right. Please take heart sir and again try increase your account security as you may not predicted what would happened next.

[CYBER_COWBOY]

Sorry for both OP and Sashan that this happen.  
Respect to you @Peanutswar that you take it the way you do and repaying. I hope you will recover from this..
 I could help you to pay back little bit like $10 if you send me your wallet address.


@LoyceV may I ask you for a favour? could you please also leave me the neutral feedback to that I never will ask for a loan just for safety.
I will never been needing a loan in the near future (ever)
Maybe I won't be a newbie forever and would be granted a loan in the future, and this thing was a very smart idéa to avoid problems like these (if my account would end up hacked in the future)

Thanks in advance!  

[Adbitco]

This is a very bad situation and I can't question you how and when it happened, just of few days ago my TG was hacked and I did get notification from my account. That so so device login in my TG from Brazil and I was shocked how could someone login my telegram account without them requesting for OTP to access the telegram, I was weird about the whole situation and how come about it.

Immediately I chatted a fellow local board user explaining to him on the recent activity and he was shocked to see my tg was hacked and immediately the hacker change my username and profile picture to his own, what I did was to go to settings and terminates all active session. This made me start wondering what if I have important thing stored as draft or something else what would have been my fate right now meaning I would had lost all thing.

Then lastly, I would love to say with what happened to peanutswar if my account request for a loan or change of address do not give without me signing a message from my current address in bestchange sig or maybe someone using TG to pm you and start relating with you about a loan please I don't carry out such action and even if I must request for a Loan I have to sign message and post to thread and to the lender. It was from my case I believe hacking is real and scamming is real. This happened immediately I fell asleep when I wasn't active online.


My question is does anyone also experience same thing as well?

[lovesmayfamilis]

That's very huge amount of money compared to our currency and is a kind of mind blowing to accepting unnecessary bill. Well I will like to plead with shasan to have patient with op as this could likely happened to anyone out there and if possible the interest should be cancelled for him to be able to clear the whole debt and also for a little extension as I believe even in 10 weeks he can't still pay off the debt, since the average weekly payments from his campaign currently will be $70 to $90, so with this pay rate I don't think he can be able to pay $1k within the next 10 weeks so I think 13 weeks payment can be able to clear the debt.

I agree with you that some concessions could be made to the OP, as the situation is not simple. Nevertheless, similar cases have already happened on the forum, and I think that everyone should take a closer look at the security of their system. Don't save your passwords in browsers, and also, I think the OP was running on a Windows system and might have some keylogger loaded, or indeed, as SamReomo wrote, a cookie session was stolen. I looked up some information about this, and I think we should know how we can protect ourselves from it.

https://learn.g2.com/session-hijacking

[ryzaadit]

-snip-

Discord Community Management? Does that mean jobs are offered for you for Moderator/Admin, or something like that?

I faced the same case 2 month+ ago, the difference is for (Discord Account) not BTT. It's for (Mod/Admin) jobs, the scammer targeting people who at least moderated a project and shared a phishing/scam.
I am wondering are @OP going to be responsible for the fund loan by a scammer, and need to repay it. Or is there some other solution/discussion between @OP and the lender for these cases?
--
First time to see, session-hijacking.

[AHOYBRAUSE]

I don't want to be mean, but you, me, or anyone could disappear in the future and the tag always remain in their accounts. I'm just thinking if someone decided to ask a loan when there's a neutral tag where the account will not ever ask any loan in this forum. Do you think if he can sign a message on his old address, the account is still controlled by the real owner?

That will be up to the lender. At least he'll see a warning telling him to be extra careful.

I've left 2 neutral "no loan" tags so far. If someone ever asks me to remove them, I'll require a signed message from an old staked address, and I'll probably wait for 30 days (a cooldown period).

I don't understand how something like this is even possible if the user's password is not compromised.

If the scammer changes the password, he gets noticed quickly. By not changing the password, the scammer can stay under the radar and impersonate the real account owner for a while. It has happened before.

Joke? 

[KingsDen]

Extraordinary everyday!
People are putting their brain in use to advance their standard of living or to be more comfortable or profitable and others are still very intelligent in the negative part. Look at how everything was executed smoothly and I guess Op became aware when he saw a negative feedback on their profile.

I have not taken a loan before, but I think there is a thread in the service section where the matter of loan is discussed extensively and agreed before execution?

[Learn Bitcoin]

Don't you guys expect mdgabrielzim and Woodie to come to this thread and explain what happened? Did anyone send a DM to any of them? TryNinja's bot has not been working for the last 24 hours, so mentioning their name won't work for now. Since this has happened with Peanutswar, Can you please DM them to come into this thread and ask if they have anything to say?

Edit: I also ask others to try to understand before writing anything, but sometimes I do the same thing. Sorry for the misunderstanding!

[ryzaadit]

-snip-

Before you make the suggestion, maybe you can also trying to following the topic trend + try to overview the account or case of the account you're mention.
- mdgabrielzim last active was (30 June).
- Woodie trying to make a requested loan with that address for 900$ and getting rejected. However, Woodie it's self questioned the loan 900$ by saying to the thread that's he don't make any loan requests. It's a clear indicator that, someone got access to his account after that incident he told "shasan" to only give him a loan with signed message. I also checking his "BPIP" on the same day he send that message, he changed the password (got move from him, since that unusual activity from his account).

[FatFork]

-snip-

Before you make the suggestion, maybe you can also trying to following the topic trend + try to overview the account or case of the account you're mention.
- mdgabrielzim last active was (30 June).
- Woodie trying to make a requested loan with that address for 900$ and getting rejected. However, Woodie it's self questioned the loan 900$ by saying to the thread that's he don't make any loan requests. It's a clear indicator that, someone got access to his account after that incident he told "shasan" to only give him a loan with signed message. I also checking his "BPIP" on the same day he send that message, he changed the password (got move from him, since that unusual activity from his account).

But still, It would be great if any of them could come here and share more details about the incident. Taking control of someone else's account is a serious issue, and it would be good to learn more about the circumstances. Were their computers infected? Did they unknowingly click on suspicious links?

After going through the entire thread, I still don't understand what really happened.

[Learn Bitcoin]

-snip-

Before you make the suggestion, maybe you can also trying to following the topic trend + try to overview the account or case of the account you're mention.
- mdgabrielzim last active was (30 June).
- Woodie trying to make a requested loan with that address for 900$ and getting rejected. However, Woodie it's self questioned the loan 900$ by saying to the thread that's he don't make any loan requests. It's a clear indicator that, someone got access to his account after that incident he told "shasan" to only give him a loan with signed message. I also checking his "BPIP" on the same day he send that message, he changed the password (got move from him, since that unusual activity from his account).

If Woodie's account was hacked too, he might have something to say. I've read Peanutswar's posts as well, and it doesn't seem he shared any info about how the hacker got control of his account. He only said he might get a DOM attack. Someone else posted that it's possible that the hacked stole their session cockies or something like that. It's only possible if they have visited some links given by the hacker. 30 June is not too long ago. I haven't checked their profile yet. But, it would be great if Peanutswar write them a PM and they write if they have something to share.

After going through the entire thread, I still don't understand what really happened.

Long story short, Someone from the Peanutswar account takes a $1000 loan from sashan's lending service. Later, the funds were transferred to an address that was used by mdgabrielzim a month ago (it seems this account was hacked too). The same address that was used to loan by the Peanutswar account sent some funds to another address that was used by Woodie to request a loan. Later, Woddie said he did not request a loan, and he didn't recognize the address. That means his account was hacked too.

The ultimate victim is Peanutswar at this moment.
But, it's a mystery how the hacker get access to these accounts?

[lovesmayfamilis]

Before you make the suggestion, maybe you can also trying to following the topic trend + try to overview the account or case of the account you're mention.

 

I am wondering are @OP going to be responsible for the fund loan by a scammer, and need to repay it. Or is there some other solution/discussion between @OP and the lender for these cases?
--
First time to see, session-hijacking.

Strangely, you make a statement like that when you're asking about the implications for the OP. You should also read the OP's assurance that he promises to repay the debt taken by the hacker in his name. I think that many would not go to such an extent, begging to come up with another solution to the issue. Although, for the reputation of the OP, returning the debt would be the right move.

I will repay Shashan but not on the designated date given to the loan; every time I receive a payment in a Signature Campaign/another source of income, I will deposit this immediately to Shashan's Address as repayment for the trouble created by that hacker.

[Mahdirakib]

Don't you guys expect mdgabrielzim and Woodie to come to this thread and explain what their connection with the hacker is?

But still, It would be great if any of them could come here and share more details about the incident.

I have sent a PM to Woodie yesterday. He was active after the PM was sent and made a post in the forum too. Maybe he is trying to find out that what actually happened before clarifying the situation. Otherwise, he hasn't checked the message.

- mdgabrielzim last active was (30 June).

Moreover, there is no password change history for him in BPIP. Maybe the hacker still have the access to mdgabrielzim account. I think sending him a PM isn't going to help in this case.

[LoyceV]

Before, there was a link sent to me for discord community management, the sender have a link makes a redirect link to other page and the message sent multiple times so i suspected immediately could be an attack, I immediately cleaned my PC for possible preventive attacks, I got confident by that time but my mistake too I didn't change my password

Once in a while, I get a "friend request" too. I just ignore those on Discord.
What did "the link" do? Was clicking it enough to compromise your system? If that's the case, it's time for a safer browser (and OS)!

I've left 2 neutral "no loan" tags so far. If someone ever asks me to remove them, I'll require a signed message from an old staked address, and I'll probably wait for 30 days (a cooldown period).

Why wait 30 days after someone has signed a message from an old staked address to remove a tag?

A signed message is enough IMO.

My tag is just a warning. If someone signs a message from an old staked address, it's up to the lender to decide whether or not he gives a loan. But if someone's computer including access to his Bitcointalk profile and private key gets hacked, a signed message doesn't mean anything. That's why I won't instantly remove the neutral tag, but first add another neutral tag to mention the intention to remove the other tag.

You should assume that the person making such a request may be in desperate need of a loan.

I disagree. If someone made the explicit statement that he'll never take a loan, you should assume someone else is asking for it, no matter what evidence he shows. The account holder shouldn't be held liable for any loans, that's why he made this explicit statement.

I'm not even sure if 30 days is enough: it's not impossible for the account owner to not even notice a new neutral tag during those 30 days. It might be better if someone else adds said tag in that case, so at least the counter goes up by +1. Or maybe I should just leave new neutral feedback permanently, including the dates of start and "end" of the promise not to take loans.

Moreover, there is no password change history for him in BPIP. Maybe the hacker still have the access to mdgabrielzim account. I think sending him a PM isn't going to help in this case.

I've left him neutral feedback, asking to respond here.

[Igebotz]

Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.

Given that the forum accepts multiple logs, you're more likely to fall prey to this type of fraud if you neglect to look at post history.

Why wait 30 days after someone has signed a message from an old staked address to remove a tag?

A signed message is enough IMO.

My tag is just a warning. If someone signs a message from an old staked address, it's up to the lender to decide whether or not he gives a loan. But if someone's computer including access to his Bitcointalk profile and private key gets hacked, a signed message doesn't mean anything. That's why I won't instantly remove the neutral tag, but first add another neutral tag to mention the intention to remove the other tag.

That's what I was thinking, but shouldn't that be the account owner's problem if he misguard his wallet and private key? That shouldn't be a problem if the required signed message is sent to you from the account. Everyone should be responsible for their own security breach. 

You should assume that the person making such a request may be in desperate need of a loan.

I disagree. If someone made the explicit statement that he'll never take a loan, you should assume someone else is asking for it, no matter what evidence he shows. The account holder shouldn't be held liable for any loans, that's why he made this explicit statement.

Life could happen to anyone; Someone could be very comfortable today without needing a loan, but we can't predict what will happen in 6-8 months, so I needed you to be at least flexible with your tag. However, I would prefer it if there is a duration on the tag as you suggested, and if the account owner wants to extend the date, he/she would need to sign another message requesting you to extend the tag.

Donald Trump had no idea 5 years ago that he would be paraded from courtroom to courtroom like a criminal.. Life happened to him 

[LoyceV]

Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.

Only a few boards (such as Services) have the 24 hours rule to delete posts. The Lending board doesn't have this rule.
Theymos created https://bitcointalk.org/myips.php to keep track of access to your account. An attacker can't edit those records.

[HedgeFx]

In my opinion, this is an issue that goes well beyond the possible hacking of an account.

In the lending section there is a large group of spammers who try to cheat every day.

In addition to requesting a signed message or sending loans always and only to the same staked address (for example, I always receive my loans at the same address), it could be interesting to make the lending section off limits for some ranks, a bit like the "investigations" section of the forum. This measure would greatly limit the amount of shitposts and lenders would have more time to better follow up on their borrowers.

[Igebotz]

Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.

Only a few boards (such as Services) have the 24 hours rule to delete posts. The Lending board doesn't have this rule.
Theymos created https://bitcointalk.org/myips.php to keep track of access to your account. An attacker can't edit those records.

It's strange that the lending board doesn't have such a rule; perhaps it's time to adopt one, because the IP tracker wouldn't help if the money heist had already occurred. This issue can only be fixed by the account owner and the 24 hour post delete restrictions.

[Peanutswar]

-snip-

Discord Community Management? Does that mean jobs are offered for you for Moderator/Admin, or something like that?

I faced the same case 2 month+ ago, the difference is for (Discord Account) not BTT. It's for (Mod/Admin) jobs, the scammer targeting people who at least moderated a project and shared a phishing/scam.
I am wondering are @OP going to be responsible for the fund loan by a scammer, and need to repay it. Or is there some other solution/discussion between @OP and the lender for these cases?
--
First time to see, session-hijacking.

I also active in Discord most likely in NFT too at the same time, I'm a moderator for a project. With the issue, my goal currently is at least pay shashan, I ask also LoyceV to put me a neutral tag to prevent this might happen again. For other members also recommend to use a notification with your telegram or more likely safe with the gmail connected with your account.

Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.

Only a few boards (such as Services) have the 24 hours rule to delete posts. The Lending board doesn't have this rule.
Theymos created https://bitcointalk.org/myips.php to keep track of access to your account. An attacker can't edit those records.

Is there any chance that this 24 hours rules might implement in the lending section not only for me but for the sake of this possible case scenario?.

[ryzaadit]

-snip-

Geez, hoping you have the strength for facing these problems.

Since we are from the same continent (Asia) you're on PH while looking at your post history, 1000$ it's really big for us. Take a lot of time for collecting the money, hoping there is no pressure time for giving back the loan. Feel sad mate...
-----
I also learn something from my accident, because of me someone getting scammed (getting yelled as well by my CEO). IMO, your case is really2 worse compared to mine because of the hacked potential from cookie session hijack (pretty new and more hard than mine (Bookmark Method).

[zasad@]

If there was a universal option for everyone to declare that they never take any loans it'd be even better. But making a separate topic for that would be too complicated and I don't see any easy way for that.

I can give you neutral feedback if you want, with a link to your post. Something like:
"This user confirmed he never wants to take a loan. If his account asks for it, it's not him."
If anyone else wants such feedback: post your confirmation here and I'll add it once I see it. I assume my account will be on DT for many years to come

I confirm that I do not need credits on this forum. LoyceV, please put a neutral tag on my profile.

[CryptoHFs]

Congratulations  @LoyceV your idea started to expand widely to prevent scams https://bitcointalk.org/index.php?topic=5459320.msg62530688;topicseen#msg62530688

[dimonstration]

In my opinion, this is an issue that goes well beyond the possible hacking of an account.

In the lending section there is a large group of spammers who try to cheat every day.

In addition to requesting a signed message or sending loans always and only to the same staked address (for example, I always receive my loans at the same address)

I think requesting to receive loans on different wallet address that mention on the signed message is safe too since most of us here use a non custodial wallet address to receive signature campaign payment while loan amount usually use to convert into cash so borrowers preferred to receive it directly on exchange to save fee and reduce waiting time.

it could be interesting to make the lending section off limits for some ranks, a bit like the "investigations" section of the forum. This measure would greatly limit the amount of shitposts and lenders would have more time to better follow up on their borrowers.

This suggestion is good to lessen spam post on lending section from newbie but it restrict low rank member with valid collateral to access this kind of services. Shit posters is not a problem on lending since no lenders will treat them seriously while there's only few users view lending board since there's no discussion in there unless you need to lend or borrow.

[LoyceV]

Is there any chance that this 24 hours rules might implement in the lending section not only for me but for the sake of this possible case scenario?

You'll have to ask theymos, see: this topic.

[SmartGold01]

Snip

I agree with you that some concessions could be made to the OP, as the situation is not simple. Nevertheless, similar cases have already happened on the forum, and I think that everyone should take a closer look at the security of their system. Don't save your passwords in browsers, and also, I think the OP was running on a Windows system and might have some keylogger loaded, or indeed, as SamReomo wrote, a cookie session was stolen. I looked up some information about this, and I think we should know how we can protect ourselves from it.

https://learn.g2.com/session-hijacking

That should be the last thing for me to do because I am very conscious of my account and my personal details since no browser is trusted anymore.
I have red some of the implications involved in saving one details to a browser, so I do real avoid autosave options.

[DireWolfM14]

Lol, this is such a joke.  What happens if three years from now one of you guys decides you need a loan?  What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?  By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.  What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

zasad@

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

CYBER_COWBOY

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Peanutswar

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

lovesmayfamilis

2023-07-08

Reference

This user confirmed she never wants to take a loan. If her account asks for it, it's not her.

CryptoHFs

2023-07-08

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Not to mention, out of these 5 request, one (I suspect) is a sockpuppet of a loan defaulter, lending board troll, and alt farmer that's been spamming and trolling the lending board for over a year, using multiple alts in an attempt to get an unsecured loan.  And, another just literally asked for a loan last week, lol.  You couldn't make this shit up.

Nothing good will come of these tags, and if you have asked LoyceV to tag you, I have a suggestion:  SECURE YOUR FUCKING ACCOUNT!  Take some personal responsibility for your own safety and security, and that of the forum.  If you fear some one is after your precious and valuable account, change your password.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

[CryptoHFs]

Lol, this is such a joke.  What happens if three years from now one of you guys decides you need a loan?  What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?  By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.  What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

zasad@

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

CYBER_COWBOY

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Peanutswar

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

lovesmayfamilis

2023-07-08

Reference

This user confirmed she never wants to take a loan. If her account asks for it, it's not her.

CryptoHFs

2023-07-08

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Not to mention, out of these 5 request, one (I suspect) is a sockpuppet of a loan defaulter, lending board troll, and alt farmer that's been spamming and trolling the lending board for over a year, using multiple alts in an attempt to get an unsecured loan.  And, another just literally asked for a loan last week, lol.  You couldn't make this shit up.

Nothing good will come of these tags, and if you have asked LoyceV to tag you, I have a suggestion:  SECURE YOUR FUCKING ACCOUNT!  Take some personal responsibility for your own safety and security, and that of the forum.  If you fear some one is after your precious and valuable account, change your password.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

Well, I did it to support the idea. If I ever need a loan in the future I will be requesting it from my alt.

This account btc address is compromised, banned before for a week, most likely I will stop using it.

[CYBER_COWBOY]

 

You act like a third world war has started, why so much feelings engaged into a internet forum? It's a world outside here to, check it out!
If i want a tag its up to me and not you, you act like its your account that get tagged..  
If I would need a loan ever in my life, that I highly doubt since I got a good economy and a good income, but if i would need a loan i would never take it on a anonymous internet forum, I would ask a friend or go to my bank.

Why do you all the time telling other to mind their own business when you not live after that standard yourself.
Mind your own business and we mind our own business, what I do or others have nothing to do with you.

But with that said, I agree with you and you have a very good point that if LoyceV would go offline forever on the forum or something and somebody would need a loan this is not a smart thing, but that should that person have think about before he/she asked for this. It's not like this would harm anyone or anything else expect us.

(Now please try to be funny and qoute 2/3 things and reply like you always do and ignore all the other stuff.  ) but after that, please leave me alone.

[UserU]

If I'm not wrong then the method is called as "session hijacking" or "session cookie theft." In such type of attacks the hacker often send you a malicious link, and when a users clicks on the link then the hacker take advantage of the vulnerabilities of the browser that the user is using to access the link. The hacker then steal the session cookies of the user and then use that cookie on his/her browser with the help of extensions like cookie editor. Such type of attacks are often planned by the hackers who have access to some hidden vulnerabilities of the browsers that no-one knows yet. Those hackers can steal session cookies of any website they want, and that way they hack the access of the users.

I'm quite sure that the same thing happened with @Peanutswar when he clicked on that malicious link without even thinking about such exploits. The hacker knew that the user would click on the link, and he would be able to steal the cookies one the user will click the link. It's better to be aware of such type of hacks because they can easily hack someone's account and ask for loans that the user isn't asking for. It's our responsivity to protect ourselves from such type of hacking attacks, and we should never click on the links sent by a unknown user. That way we will be able to protect ourselves from such kind of hacks.

Can attest to this. Happened several years ago from a foolish decision and got scammed a huge sum by today's standards.

It's really mindblowing and absolutely scary as the perpetrator could do anything without you even realizing he's there.

[Z_MBFM]

This is a very sad incident. this happened because your account didn't use a strong password or you clicked on a known or unknown phishing link that led to a hacker getting your account login details and causing an incident.
But it has to be admitted that the hacker knows this forum very well that he cannot use it by hacking the account.  Because the real owner will recover it again through wallet sign. the hacker was very smart

We should learn a lot from this incident and be careful with account security  and lenders should also research an account thoroughly before giving a loan. And a rule should be kept that the loan will be given to the wallet that has been used for any purpose on the account at least in the last 1 month.

[rat03gopoh]

Is there any chance that this 24 hours rules might implement in the lending section not only for me but for the sake of this possible case scenario?

You'll have to ask theymos, see: this topic.

Someone should upvote it to the Meta board, I think this proposal is also not limited to all business boards: Services, Lendings, Currency Exchange, Goods, etc.
This incident was enough to tell me the importance of using multiple notification bots, excluding lendings boards, and finding ways to gain access to accounts in an emergency.

[lovesmayfamilis]

Lol, this is such a joke.

Don't consider yourself a sage. I have other sources that can help me in extreme cases. I very much hope that this will not happen, and I can confidently say that my request was considered. Likewise, I don't need money from strangers; I don't borrow; that's the rule.
As for my "fucking account", don't be overconfident; something that he does not understand can happen to everyone. I don't like unnecessary fuss, so a neutral tag is an extra safety cushion.

[Rikafip]

@shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

Tbh, I am surprised that this hasn't happened earlier (or maybe it did?) since he doesn't ask for signed message like other lenders are doing, which I thought is a standard here.

What's weird to me in all this is that even after this has happened, he continues to give loans without taking extra measures so something like this doesn't happen again. He can of course do his business as he sees fit, but imo that's just unnecessary risk.

[FatFork]

@shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

Tbh, I am surprised that this hasn't happened earlier (or maybe it did?) since he doesn't ask for signed message like other lenders are doing, which I thought is a standard here.

What's weird to me in all this is that even after this has happened, he continues to give loans without taking extra measures so something like this doesn't happen again. He can of course do his business as he sees fit, but imo that's just unnecessary risk.

I have a sneaky suspicion that this might become more frequent in the future. Neither Peanutswar nor Woodie seem to have any idea (or they're not willing to share) how this happened, and mdgabrielzim remains silent about it. The first two recorded loan attempts were unsuccessful, but the third one went through. If the scammer has an effective technique for compromising other users' forum accounts, it's reasonable to assume that he will try it again.

If shasan, or any other lender for that matter, continues to give loans without conducting proper due diligence, it will inevitably result in significant consequences sooner or later. However, I suppose that decision ultimately rests with them.

[LoyceV]

What happens if three years from now one of you guys decides you need a loan?

Why it is to hard to imagine some people know they'll never want to take a loan on Bitcointalk? The large majority of all internet users will never need it.

What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?

It's all possible, and in that case, it's just an (Untrusted) neutral tag that shows some of the history of the account.

By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.

Shouldn't a lender check a user's feedback history anyway before deciding on a loan?

What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

I thought of that possibility too. One way or another, it's not a perfect solution.

Nothing good will come of these tags, and if you have asked LoyceV to tag you, I have a suggestion:  SECURE YOUR FUCKING ACCOUNT!  Take some personal responsibility for your own safety and security, and that of the forum.  If you fear some one is after your precious and valuable account, change your password.

Also true. But it's clear many people fail to keep their account secure. That's probably why more and more websites are bugging users with 2FA.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

I was thinking the same too, and it's the reason I made the neutral tag suggestion to avoid this. OP's mistake was not keeping his account secure, but giving a loan is on shasan.
One solution could be to share the losses 50-50, but that would open the possibility for users to claim their account was compromised, and only pay back half their loan.

[jokers10]

Lol, this is such a joke.  What happens if three years from now one of you guys decides you need a loan?  What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?  By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.  What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

I haven't made a decision yet, but I tend to think that it could be reasonable for me. I'm not the first day on the forums where some loans can be given and taken, and I never took any loan on forums for all the time. So hardly the situation will change so that in 3 years my behaviour will become dramatically different.

Of course the one who agrees to take such a tag should think in advanse, but why do you judge them right now? Why do you think, that many of them would ask for a loan in the future?

A lender should be cautious and not give a loan for the one has this tag at all. Of course it is a risk, so why a lender should take that risk? Being too greedy?

[cryptoaddictchie]

I never took any loan on forums for all the time. So hardly the situation will change so that in 3 years my behaviour will become dramatically different.

Of course the one who agrees to take such a tag should think in advanse, but why do you judge them right now? Why do you think, that many of them would ask for a loan in the future?

Same didnt have any loan transaction here on forum. So I am thinking to do the same cause we dont know if ever we encounter like the same situation like OP. Its quite scary to know that someone will loan in your place but its not you. What can I say about those guys that took the tagged are they are confident to do so since they wouldnt literally do it. Perhaps some wouldnt like that but its their decision and no one can judge them by that actually.

What LoyceV offer is pretty helpful indeed. But DireWolf14 is right on one thing, that we should and its our responsibility to protect our account here. I myself can vouch that I wouldnt do any loans in the future, why? In real life I didnt take any from 0 until now why would I start later right?

[Peanutswar]

I never took any loan on forums for all the time. So hardly the situation will change so that in 3 years my behaviour will become dramatically different.

Of course the one who agrees to take such a tag should think in advanse, but why do you judge them right now? Why do you think, that many of them would ask for a loan in the future?

Same didnt have any loan transaction here on forum. So I am thinking to do the same cause we dont know if ever we encounter like the same situation like OP. Its quite scary to know that someone will loan in your place but its not you. What can I say about those guys that took the tagged are they are confident to do so since they wouldnt literally do it. Perhaps some wouldnt like that but its their decision and no one can judge them by that actually.

I don't have any plan to take a loan, I don't care about the money of other people,I don't take any loans even in real life too, after this incident I format all of my devices, and change the password too, hoping we have 2fa in the future in case plus the additional measurement of the post with the lending board to be the same as the service board to take 24 hours before can be deleting the reply.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

I was thinking the same too, and it's the reason I made the neutral tag suggestion to avoid this. OP's mistake was not keeping his account secure, but giving a loan is on shasan.
One solution could be to share the losses 50-50, but that would open the possibility for users to claim their account was compromised, and only pay back half their loan.

LoyceV has a point too one of the measurements for taking a loan is having a signed signature and agreeing with other members, I signed my wallet address as one of the ways to secure my account. I guess we need Shashan's response too with this case.

[AHOYBRAUSE]

I don't have any plan to take a loan, I don't care about the money of other people,I don't take any loans even in real life too, after this incident I format all of my devices, and change the password too, hoping we have 2fa in the future in case plus the additional measurement of the post with the lending board to be the same as the service board to take 24 hours before can be deleting the reply.

You write you don't care about loans or money of other people but your feedback history shows you had a loan in this forum in the past.

That's no attack against you, just stating the facts. 

Anyway, shitty situation for both, you and Shasan.

[Igebotz]

By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.

Shouldn't a lender check a user's feedback history anyway before deciding on a loan?

The neutral tag does not hurt anyone, and many people overlook or even try to verify the message behind such a tag, especially if the user has more than four neutral tags. What most lenders consider risk is the reg paint, and that's the only thing that draws the most attention to someone's feedbacks page.

This isn't going to help much because almost everyone here has a neutral tag. ( Most DT use it as personal note nowadays)

I was thinking the same too, and it's the reason I made the neutral tag suggestion to avoid this. OP's mistake was not keeping his account secure, but giving a loan is on shasan.
One solution could be to share the losses 50-50, but that would open the possibility for users to claim their account was compromised, and only pay back half their loan.

I assume Shasan isn't convinced yet, and he doesn't appear to want to be a part of this discussion or accept responsibility for the OP's negligence.  To be honest, I wouldn't.

[FatFork]

You write you don't care about loans or money of other people but your feedback history shows you had a loan in this forum in the past.
<cut>

If you're talking about the feedback from bL4nkcode, that was actually a loan to bL4nkcode, not the other way around. Peanutswar was the one lending the money.

You can check out their complete conversation in the Pilipinas local section:
https://bitcointalk.org/index.php?topic=5142115.msg56681642#msg56681642

[AHOYBRAUSE]

You write you don't care about loans or money of other people but your feedback history shows you had a loan in this forum in the past.
<cut>

If you're talking about the feedback from bL4nkcode, that was actually a loan to bL4nkcode, not the other way around. Peanutswar was the one lending the money.

You can check out their complete conversation in the Pilipinas local section:
https://bitcointalk.org/index.php?topic=5142115.msg56681642#msg56681642

Ah ok, my bad then. "Had a loan and paid it in 2 months. Thanks." is easy to understand the other way around to be honest.

I assume Shasan isn't convinced yet, and he doesn't appear to want to be a part of this discussion or accept responsibility for the OP's negligence.  To be honest, I wouldn't.

I wouldn't as well. It's not Shasan's responsibility that users take their security serious.

[DireWolfM14]

Why it is to hard to imagine some people know they'll never want to take a loan on Bitcointalk? The large majority of all internet users will never need it.

That's not hard to imagine at all.  Have you known me to ask for a loan in the 5 plus years I've been here?

It's also not hard to imagine all the pea-brained lemmings jumping on the most recent and virtuous "cool-kid-bandwagon."  All this will do is give the account holder an excuse to shirk their responsibility of keeping their account secure (one already claimed that would be an "unnecessary fuss.")  Is that something you want to put yourself in the middle of when the account gets "hacked" and some lender issues a loan?  Mark my words, someone will abuse this and honestly I would expect a more critical stance on this silliness from you.

Shouldn't a lender check a user's feedback history anyway before deciding on a loan?

Lenders should be considering a lot more than just the borrower's feedback, especially for an unsecured loan.  As it is lenders face a lot of challenges, and the last thing they need is a highly reputable and trusted member of the community giving some shitty account "plausible deniability" to further erode the lenders ability to recover loans.

I thought of that possibility too. One way or another, it's not a perfect solution.

"Not a perfect solution" would be acceptable, but this is far from that.  My fear is that you're providing an opportunity for scammers.

Also true. But it's clear many people fail to keep their account secure. That's probably why more and more websites are bugging users with 2FA.

Don't make that your problem.

I was thinking the same too, and it's the reason I made the neutral tag suggestion to avoid this. OP's mistake was not keeping his account secure, but giving a loan is on shasan.
One solution could be to share the losses 50-50, but that would open the possibility for users to claim their account was compromised, and only pay back half their loan.

I don't think shasan should pay a penny, not the right president to set.  But at the same time this could have gone a very different way for him if Peanutswar wasn't a standup guy.  Maybe shasan needs to learn this lesson in the hardest way possible before he secures his service.

Why do you think, that many of them would ask for a loan in the future?

I don't think that many of them will ask for a loan in the future, but I think there's a very distinct possibility that one of them will, get it, then say it wasn't him and point to LoyceV's feedback as "proof" that it wasn't him.  Sure, the lender should have been more scrutinous, but as has been demonstrated in this case not all lenders are as scrutinous as they should be.  I already have a very strong suspicion that one of the accounts tagged by LoyceV is the sockpuppet of a loan defaulter and escrow impersonator.

[cryptoaddictchie]

I don't have any plan to take a loan, I don't care about the money of other people,I don't take any loans even in real life too, after this incident I format all of my devices, and change the password too, hoping we have 2fa in the future in case plus the additional measurement of the post with the lending board to be the same as the service board to take 24 hours before can be deleting the reply.

Oh btw sorry to hear what happened on you mate. Thats a huge loan but I admired you for taking the responsibility yourself. Some would probably not, but I can see that you value your reputation here over some funds. Anyway you could recover that in due time. The culprit should be punish and must be found cause who knows who will be next on their targets. Anyone seems gonna need to have extra careful from now on especially on malicious links.

[Woodie]

Woodie was worried about the loan request and made a post in shasan lending thread, but he has deleted that post too. What's going on actually? Peanutswar ~ mdgabrielzim ~ Woodie, how big the hacking attempt is?

Just for the record I did not delete that message of me making my inquiry of what was happening, thought the mods did!

Believe it or not, if I hadn't had another loan with Shasan,  today I would have been paying a loan of $900+ which I didn't not get or apply for... And in my case, I had a loan for which I was late by a day or so and I thought it was a way of Shasan trying to get at me as I only saw a quote of the loan application without actual application and this was done when I was going offline!
But whatever is happening someone has found some kind of backdoor or exploit to the system of impersonating users...maybe its a cookie hack!! Because I never reuse my passwords, am not the kind of person that clicks on unknown links and lastly the only possible way of my password being got was through lastpass, but after this failed loan attempt I have been moving away from the last pass. (Even if lastpass was compromised, at least i think a geolock would have prevented this from happening, besides what were the odds of a lastpass hacker knowing about the forum and the loan section ZERO CHANCE)

Unusual ip I found via bitcointalk.org/myips.php  based on the deleted post date and time thanks to the loyce club archives.

Code:

Singapore 84.17.39.166 

The loan I did not apply for as can be seen below


And this is how my pending loan saved me from a $900+ loan, its getting scary out here...

[Mate2237]

I assume Shasan isn't convinced yet, and he doesn't appear to want to be a part of this discussion or accept responsibility for the OP's negligence.  To be honest, I wouldn't.

How does the so call impersonator knew the op password and login to the forum, and if really was hacked then the hacker can take any username and hack the password and use it to take loan. And if the impersonator used the op login details to login then it is a close friend of op that knows the forum very well. Well the op also agreed to pay the loan so Shasan has nothing to say again, but the op is also asking Shasan to extend the repayment of the loan.

[DireWolfM14]

I'd be curious to know what commonality @Peanutswar, @mdgabrielzim, and @Woodie have had in their browsing history.  If they all clicked on a phishing link, or if they all downloaded some software, or if they all participated in an off-site give-away that asked for forum details.  It would seem they all fell into the same trap.

[CryptoHFs]

Why don't the forum set a warning when a different ip login as they do for password/ email change and waking up  this will make the other party try to verify the account owner first.
!warning this account used a new ip to login date ****
In that case even if someone trying to fake a hack it won't work  

[jokers10]

Why don't the forum set a warning when a different ip login as they do for password/ email change and waking up  this will make the other party try to verify the account owner first.
!warning this account used a new ip to login date ****
In that case even I'd someone trying to fake a hack it won't work 

It has no sense for multiple reasons. I'll name just what first thought: many visit this forum with VPN or Tor not to be tracked, to improve security. So many accounts will have such a note constantly. And others who have a stable IP will have another kind of a problem: potential intruder will know whom to hack to distantly use their own system to scam on the forum. So it would hardly improve security, I'd say that it'll rather lower it.

[Coin_trader]

I don't have any plan to take a loan, I don't care about the money of other people,I don't take any loans even in real life too, after this incident I format all of my devices, and change the password too, hoping we have 2fa in the future in case plus the additional measurement of the post with the lending board to be the same as the service board to take 24 hours before can be deleting the reply.

Oh btw sorry to hear what happened on you mate. Thats a huge loan but I admired you for taking the responsibility yourself. Some would probably not, but I can see that you value your reputation here over some funds. Anyway you could recover that in due time. The culprit should be punish and must be found cause who knows who will be next on their targets. Anyone seems gonna need to have extra careful from now on especially on malicious links.

I think only those disposable account will not take responsibility on this kind of incident since his account will be surely negative trust in case he will not repay the loan that requested using his account. We have the responsibility to secure our account since it can be use to scam someone here in the forum especially if the rank is high or if it has a solid reputation.

Shasan loan service doesn't have a rule about signed message which makes this incident out of his hand imho. I might fall vicitm too on this loan scam if the OP ask for a loan on our local board since his password and email doesn't change while he is currently enrolled on a signature campaign. I will assume that there's no way for him to scam me with this criteria since he is trusted.

This loan incident is really scary since the hacker manage to have access on an active account from high rank user. This means that the method of hacking is very tricky AF.


@Peanutswar, Sorry for your loss brother. 1000$ is very huge in our currency. PM me, have an offer.

[FatFork]

Why don't the forum set a warning when a different ip login as they do for password/ email change and waking up  this will make the other party try to verify the account owner first.
!warning this account used a new ip to login date ****
In that case even if someone trying to fake a hack it won't work  

That's a bad idea. Lots of people have ISPs that give them dynamic IP addresses, meaning their IPs change every now and then. And, as mentioned earlier, let's not forget about those who use VPNs or the TOR network to access the forum for legit reasons like privacy and security. This means that legit users who have no ill intentions could trigger false warnings simply due to the nature of their internet connection. So, if the forum starts setting off warnings for every IP change, it could end up causing a bunch of false alarms for regular users.

[LoyceV]

My fear is that you're providing an opportunity for scammers.

I think that's far-fetched, but if it happens the lender only has himself to thank. My feedback clearly says "no". I can't help it if a future lender ignores a very clear statement.

Don't make that your problem.

I don't consider leaving neutral feedback to be "a problem". After that, it's up to others how to value it.

I already have a very strong suspicion that one of the accounts tagged by LoyceV is the sockpuppet of a loan defaulter and escrow impersonator.

In that case; add your own neutral tag to make it more obvious to others.

someone has found some kind of backdoor or exploit to the system of impersonating users...maybe its a cookie hack!!

If that would be the case, it's unlikely to be abused for $1000 loan scams. Bitcointalk would pay a $10,000 to $50,000 security bounty for this.

Unusual ip I found via bitcointalk.org/myips.php  based on the deleted post date and time thanks to the loyce club archives.

Code:

Singapore 84.17.39.166 

The loan I did not apply for as can be seen below

The myips.php page only goes back 30 days. That means you couldn't have found this IP just now.

Why don't the forum set a warning when a different ip login

That would make many users worry unnecessarily. My IP for instance jumps back and forth between IPv4 and IPv6. Tor users and many others have a different IP every time.

[Igebotz]

I assume Shasan isn't convinced yet, and he doesn't appear to want to be a part of this discussion or accept responsibility for the OP's negligence.  To be honest, I wouldn't.

How does the so call impersonator knew the op password and login to the forum, and if really was hacked then the hacker can take any username and hack the password and use it to take loan. And if the impersonator used the op login details to login then it is a close friend of op that knows the forum very well. Well the op also agreed to pay the loan so Shasan has nothing to say again, but the op is also asking Shasan to extend the repayment of the loan.

This appears to be a mirror or keylogger attack on many accounts; the OP was not the only victim; the same scammer gained access to two other accounts while attempting to obtain a loan; so, this has nothing to do with OP's close pals.

Always check your post history and make it a habit to change your password and email address on a regular basis.

[LoyceV]

Always check your post history and make it a habit to change your password and email address on a regular basis.

That makes no sense. I have hundreds of passwords on hundreds of websites. Especially the sites that require the user to frequently change their password make users use weak passwords, or reuse them. Or they just enter all known passwords on any site until one of them gets accepted.
Either way, it doesn't improve security unless your password is already compromised, in which case case you're too late already.

[CYBER_COWBOY]

Why don't the forum set a warning when a different ip login as they do for password/ email change and waking up  this will make the other party try to verify the account owner first.
!warning this account used a new ip to login date ****
In that case even if someone trying to fake a hack it won't work  

You ever heard about a service called VPN? 

[Woodie]

I'd be curious to know what commonality @Peanutswar, @mdgabrielzim, and @Woodie have had in their browsing history.  If they all clicked on a phishing link, or if they all downloaded some software, or if they all participated in an off-site give-away that asked for forum details.  It would seem they all fell into the same trap.

I thought it was some of the new crypto platforms I have interacted with in the last couple of months, but unfortunately, I have ruled them out on the basis of other two accounts not being participants of service reviews or thread discussion!

I have also looked at Peanutswar and mdgabrielzim post history to try and find common ground of where this exploit might have originated from and honestly, we are three different people.

But my wild guess would be that, we all haven't changed passwords for a very long time and possibly **just assuming** maybe someone had access of the forums database and just started to act on this..and the fact that account sales might not be lucrative anymore, our accounts couldn't be sold but instead went for the loans for easy money...
And lastly, this hacker chose his/her victims based on any history of a user getting a loan and didn't use any other account that has never applied for one as this could raise suspicion ...it's my only logical explanation.

Unusual ip I found via bitcointalk.org/myips.php  based on the deleted post date and time thanks to the loyce club archives.

Code:

Singapore 84.17.39.166 

The loan I did not apply for as can be seen below

The myips.php page only goes back 30 days. That means you couldn't have found this IP just now.

I got that ip using myips.php page when I discovered this compromise months back not that I checked for this yesterday its also saved incase I get a hit when i search for it!
Btw, I have been doing my own investigation to see how much damage was done on my side and everything seems intact,  no social media account login attempts, bank accounts login attemps just cant find this guy.

[Igebotz]

Always check your post history and make it a habit to change your password and email address on a regular basis.

That makes no sense. I have hundreds of passwords on hundreds of websites. Especially the sites that require the user to frequently change their password make users use weak passwords, or reuse them. Or they just enter all known passwords on any site until one of them gets accepted.
Either way, it doesn't improve security unless your password is already compromised, in which case case you're too late already.

Changing password and email occasionally has always been a good security practice what changed now?

Using Google or a third party password suggestions sites is a bad practice and anything closer to username or DOB too.

[lovesmayfamilis]

I'd be curious to know what commonality @Peanutswar, @mdgabrielzim, and @Woodie have had in their browsing history.  If they all clicked on a phishing link, or if they all downloaded some software, or if they all participated in an off-site give-away that asked for forum details.  It would seem they all fell into the same trap.

Interesting. Yes, you yourself are tormented with guesses. This is precisely what will happen to others who do not understand what could happen. There was no password change, and the hacker and the user were posting on the forum simultaneously if you check the sessions of the IP addresses. The statement regarding the security of your account is very true, and this is precisely what works with the LoyceV offer as an additional tool. All the tricks with Linux and complex passwords, including following other people's links and working only with your network, may not work if social engineering specialists exist.
In addition, it may be worth writing in several languages so that someone understands the statement that some people do not need loans. Absolutely.

[cryptoaddictchie]

This loan incident is really scary since the hacker manage to have access on an active account from high rank user. This means that the method of hacking is very tricky AF.

Scammers upgrading their means of activity. This incirent will serve as fair warning to all who offered loans services. They will be tight and secure when it comes to users reputation. Aside from LoyceV, suggestion, what else can we do to avoid scheme like what happened on OP? I really want to figured out how they been able to make the hack possible. Hoping someone could point out terms in detail related to this case so everyone must be alerted but I am thinking on social activities of OP probably.

[Coin_trader]

This loan incident is really scary since the hacker manage to have access on an active account from high rank user. This means that the method of hacking is very tricky AF.

Scammers upgrading their means of activity. This incirent will serve as fair warning to all who offered loans services. They will be tight and secure when it comes to users reputation. Aside from LoyceV, suggestion, what else can we do to avoid scheme like what happened on OP? I really want to figured out how they been able to make the hack possible. Hoping someone could point out terms in detail related to this case so everyone must be alerted but I am thinking on social activities of OP probably.

I think a signed message using the original wallet address is the only way to avoid this kind of incident. It’s very hard to avoid potential hack since mistake can always occur when we are vulnerable while taking a loan can strictly moderated with proper loan requirements. DS usually don’t allow loan using new wallet address without any signed message.

I think Lenders should cooperate since this issue is for them too and not only for OP to not happened again in the future.


What about a notification on trust page once user login recently using different country IP address? Like the notification when password and email change? This might help us to determine that user is potentially under hack publicly.

[cryptoaddictchie]

What about a notification on trust page once user login recently using different country IP address? Like the notification when password and email change?

This is nice idea but probably wont be approved for certain reason like what if the user are just doing travelling and more of a vacation? I think thats a possibility that he might uses different IPs and keeps using forum to post or sign in. But thats a very rare case I guess and it will still favors the majority. Anywat is that possible to implement on a trial version?

[xLays]

If it's really true that Peanutswar didn't request the loan from the lender and the hacker actually benefited from the loan, maybe we can request the lender not to charge interest to Peanutswar. Since both parties have negligence IMO. (Not sure about the negligence lmao) Just peace of advice suggestion.

[lovesmayfamilis]

What about a notification on trust page once user login recently using different country IP address? Like the notification when password and email change? This might help us to determine that user is potentially under hack publicly.

It looks like you didn't read the posts above. What about someone who uses TOR or a VPN? Have you read about the features of their work? Why then does the forum carry the idea of anonymity if we are always tied to one IP address?
I previously asked about the idea of binding a user's IP address to protect against cheating, but later I realized that this is a bad idea. The forum is sometimes accessed from mobile phones, and unfortunately, some allow other people's Wi-Fi networks. This will also entail a change in addresses, not to mention the fact that those who use proxy servers do not always know what country they are writing from.

[Coin_trader]

What about a notification on trust page once user login recently using different country IP address? Like the notification when password and email change? This might help us to determine that user is potentially under hack publicly.

It looks like you didn't read the posts above. What about someone who uses TOR or a VPN? Have you read about the features of their work? Why then does the forum carry the idea of anonymity if we are always tied to one IP address?
I previously asked about the idea of binding a user's IP address to protect against cheating, but later I realized that this is a bad idea. The forum is sometimes accessed from mobile phones, and unfortunately, some allow other people's Wi-Fi networks. This will also entail a change in addresses, not to mention the fact that those who use proxy servers do not always know what country they are writing from.

It's just a notification if someone use other country IP and it doesn't exposed the actual IP of the user that breaks the anonymity of his forum account. How is this different on email change, recently woke up and change password notification?

It's like a warning that a user use a different IP from it's normal country. No one cares to see your trust setting if you are not asking for a loan or doing out of normal activity.

Edit:

I already have a glimpse of what you are talking above. I get now your point @lovesmayfamilis.

[Renampun]

sorry for OP.

it's really unimaginable for me if I have to pay a debt that I never made. but I'm still really curious about why something like this could happen (I might missing something), this is a valuable lesson that can be used as an example by everyone. by the way, I also applied for a loan from Shasan but I really did. don't get discouraged OP, repay slowly so it doesn't burden you because your account already has a high rank.

[robelneo]

This incident is very unfortunate for OP I hope Shasan will consider implementing a waiting period of say 48 hours or more for a loan that is higher than $500 and put a neutral tag first like " This user is going to take a loan will grant in the next 48 hours" while waiting for the neutral tag to expire and just change it when the loan is granted.
This is just a suggestion it's still up to Shasan and other lenders to implement it.

[Igebotz]

This incident is very unfortunate for OP I hope Shasan will consider implementing a waiting period of say 48 hours or more for a loan that is higher than $500 and put a neutral tag first like " This user is going to take a loan will grant in the next 48 hours" while waiting for the neutral tag to expire and just change it when the loan is granted.
This is just a suggestion it's still up to Shasan and other lenders to implement it.

It would make no difference and would negatively impact those who desperately need a loan. The only way to avoid this is to request a signed message from a staked address and validate it before issuing a loan..

[Poker Player]

After going through the entire thread, I still don't understand what really happened.

I found it hard to understand what happened too. I had to read the whole thread carefully, and some posts to reread, because I find it quite shocking. The essential difference I see here is that in other cases, when an account has been hacked, the hacker took full control, but in this case he enters the account, asks for a loan and lets the person who created it handle it normally.

I have a sneaky suspicion that this might become more frequent in the future. Neither Peanutswar nor Woodie seem to have any idea (or they're not willing to share) how this happened, and mdgabrielzim remains silent about it.

This is the worst of all.

In my case I think I will never ask for a loan in Bitcointalk, and I don't think a neutral tag is even necessary. Nor will I put anything in my profile.

If any lender gives a loan to this account, Poker Player, without requesting a signed message from the following address, I won't be accountable:

Message: This is Poker player from bitcointalk. December30th 2020.

Address: 3MqbAyRieHuKH9VzKNQnvBBUwZ4dXrwSrb

Signature: INQEACt2vlczkMOZmn0JrQgig/wavq4fQfa1PKwHbaHpfqk6ffucbSR7BuoR3qc2GmE4OgOs7graZIHiTfDkXds=

Quoted and verified.

[robelneo]

This incident is very unfortunate for OP I hope Shasan will consider implementing a waiting period of say 48 hours or more for a loan that is higher than $500 and put a neutral tag first like " This user is going to take a loan will grant in the next 48 hours" while waiting for the neutral tag to expire and just change it when the loan is granted.
This is just a suggestion it's still up to Shasan and other lenders to implement it.

It would make no difference and would negatively impact those who desperately need a loan. The only way to avoid this is to request a signed message from a staked address and validate it before issuing a loan..

I definitely support this, it's a good option if Shasan will ask for a signed message from a staked address, nevertheless, it's still an option to consider to protect lenders and those asking for loans as not all loans are emergency loans, in case there is a hack the real user will notice the tag.
Anyway, it's just a suggestion for reference.

[LoyceV]

Changing password and email occasionally has always been a good security practice what changed now?

People realized it was stupid in the first place

Read the NCSC:

Regular password expiry is a common requirement in many security policies. However, in the Password Guidance published in 2015, we explicitly advised against it. This article explains why we made this (for many) unexpected recommendation, and why we think it’s the right way forward.

Let’s consider how we might limit the harm that comes from an attacker who knows a user’s password. The obvious answer is to make the compromised password useless by forcing the legitimate user to replace it with a new one that the attacker doesn’t know. This advice seems straightforward enough.

The problem is that this doesn’t take into account the inconvenience to users - the ‘usability costs’ - of forcing users to frequently change their passwords. The majority of password policies force us to use passwords that we find hard to remember. Our passwords have to be as long as possible and as ‘random’ as possible. And while we can manage this for a handful of passwords, we can’t do this for the dozens of passwords we now use in our online lives.

To make matters worse, most password policies insist that we have to keep changing them. And when forced to change one, the chances are that the new password will be similar to the old one.

Attackers can exploit this weakness.

The new password may have been used elsewhere, and attackers can exploit this too. The new password is also more likely to be written down, which represents another vulnerability. New passwords are also more likely to be forgotten, and this carries the productivity costs of users being locked out of their accounts, and service desks having to reset passwords.

It’s one of those counter-intuitive security scenarios; the more often users are forced to change passwords, the greater the overall vulnerability to attack. What appeared to be a perfectly sensible, long-established piece of advice doesn’t, it turns out, stand up to a rigorous, whole-system analysis.

The NCSC now recommend organisations do not force regular password expiry. We believe this reduces the vulnerabilities associated with regularly expiring passwords (described above) while doing little to increase the risk of long-term password exploitation. Attackers can often work out the new password, if they have the old one. And users, forced to change another password, will often choose a ‘weaker’ one that they won’t forget.

Or PCMag: Stop Changing Your (Strong, Unique) Passwords So Much.

I checked my seclog log: there is no password change in there for theymos.

What about a notification on trust page once user login recently using different country IP address?

You'd see that notification on me. It wouldn't mean anything. Besides, an attacker could easily avoid it by using a VPN based on local boards used by the user.
If you're worried about it, you can make myips.php the default page when you open a new tab.

[shasan]

Let's make the forum clean.. give me that tag!

I have just found from your neutral trust that you will never take a loan from the forum. And also came to know that you are the Alt of thepeterson u=3557808 which has been mentioned by Timelord2o67 Are you really alt of that person and you do not want to take a loan? If yes, then how I got this message:

[CryptoHFs]

Lol, this is such a joke.  What happens if three years from now one of you guys decides you need a loan?  What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?  By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.  What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

zasad@

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

CYBER_COWBOY

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Peanutswar

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

lovesmayfamilis

2023-07-08

Reference

This user confirmed she never wants to take a loan. If her account asks for it, it's not her.

CryptoHFs

2023-07-08

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Not to mention, out of these 5 request, one (I suspect) is a sockpuppet of a loan defaulter, lending board troll, and alt farmer that's been spamming and trolling the lending board for over a year, using multiple alts in an attempt to get an unsecured loan.  And, another just literally asked for a loan last week, lol.  You couldn't make this shit up.

Nothing good will come of these tags, and if you have asked LoyceV to tag you, I have a suggestion:  SECURE YOUR FUCKING ACCOUNT!  Take some personal responsibility for your own safety and security, and that of the forum.  If you fear some one is after your precious and valuable account, change your password.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

Well, I did it to support the idea. If I ever need a loan in the future I will be requesting it from my alt.

This account btc address is compromised, banned before for a week, most likely I will stop using it.

Hey shasan I spoke to you 3rd of July and my comment is 8th of July not only that when people mentioned what you said I stated that if I need a loan I will request it through my alt. So in both cases there's no point at all I am seeing in your question.

I literally just requested today a loan from CC to be received on my alt if you have a valid point let me know.

Also timelord didn't solve a mystery it's me who writing everywhere both of the accounts are mine  

Edit: lol, even me telling you both are mine in the DMs

[Stalker22]

Hey shasan I spoke to you 3rd of July and my comment is 8th of July not only that when people mentioned what you said I stated that if I need a loan I will request it through my alt. So in both cases there's no point at all I am seeing in your question.

I literally just requested today a loan from CC to be received on my alt if you have a valid point let me know.

Also timelord didn't solve a mystery it's me who writing everywhere both of the accounts are mine  

Edit: lol, even me telling you both are mine in the DMs

The point is that it does not make much sense to claim with one of your accounts that you will not ask for a loan on this forum while, at the same time, asking for a loan with your alt account. Did you inform LoyceV of that fact when you asked him for a neutral tag?

[CryptoHFs]

Hey shasan I spoke to you 3rd of July and my comment is 8th of July not only that when people mentioned what you said I stated that if I need a loan I will request it through my alt. So in both cases there's no point at all I am seeing in your question.

I literally just requested today a loan from CC to be received on my alt if you have a valid point let me know.

Also timelord didn't solve a mystery it's me who writing everywhere both of the accounts are mine  

Edit: lol, even me telling you both are mine in the DMs

The point is that it does not make much sense to claim with one of your accounts that you will not ask for a loan on this forum while, at the same time, asking for a loan with your alt account. Did you inform LoyceV of that fact when you asked him for a neutral tag?

LoyceV himself did the same thing and said I will never request from my alt and if I ever request will be from my main loyce and I will sign a message if you don't like the concept go tag him. I did what he did and I supported his tagging idea with this account to support the forum which was after my conversation end with shasan,  direwolf and more. No one can try to blame me for anything as I'm aware of what I do.

[Stalker22]

~

LoyceV himself did the same thing and said I will never request from my alt and if I ever request will be from my main loyce and I will sign a message if you don't like the concept go tag him. I did what he did and I supported his tagging idea with this account to support the forum which was after my conversation end with shasan,  direwolf and more. No one can try to blame me for anything as I'm aware of what I do.

No, I have nothing against the concept, but it is evident that you have not understood the concept. Also, as far as I know, LoyceV did not do the same thing you did. Please direct me to the post where LoyceV stated that he would never ask for a loan with his main account but could ask with his alt?

Why do you object to my neutral tag on your accounts when it basically echoes your own words? Is there anything factually incorrect in it? (Consider this a reply to your PM; no need to repeat the same thing privately.)

By the way, I find the negative feedback you left on my profile to be factually incorrect ^{(as I am fully capable of reading full sentences and I can prove it)}, lacking valid references, and an abuse of the trust system. I recommend reading LoyceV's Beginners guide to correct use of the Trust system.

CryptoHFs

2023-07-22

Reference

Unfortunately, most likely doesn't know how to read full sentences.

[CryptoHFs]

~

LoyceV himself did the same thing and said I will never request from my alt and if I ever request will be from my main loyce and I will sign a message if you don't like the concept go tag him. I did what he did and I supported his tagging idea with this account to support the forum which was after my conversation end with shasan,  direwolf and more. No one can try to blame me for anything as I'm aware of what I do.

No, I have nothing against the concept, but it is evident that you have not understood the concept. Also, as far as I know, LoyceV did not do the same thing you did. Please direct me to the post where LoyceV stated that he would never ask for a loan with his main account but could ask with his alt?

Why do you object to my neutral tag on your accounts when it basically echoes your own words? Is there anything factually incorrect in it? (Consider this a reply to your PM; no need to repeat the same thing privately.)

By the way, I find the negative feedback you left on my profile to be factually incorrect ^{(as I am fully capable of reading full sentences and I can prove it)}, lacking valid references, and an abuse of the trust system. I recommend reading LoyceV's Beginners guide to correct use of the Trust system.

CryptoHFs

2023-07-22

Reference

Unfortunately, most likely doesn't know how to read full sentences.

Why do you object to my neutral tag on your accounts when it basically echoes your own words?

Because it is not my own words you want to merge the alt in it.

For loyce he did the opposite which is technically the same exact thing

I will read his trust post however I won't apply it with abusers

Also as you tagged both sides I will do the same from the alt as well

[LoyceV]

The point is that it does not make much sense to claim with one of your accounts that you will not ask for a loan on this forum while, at the same time, asking for a loan with your alt account. Did you inform LoyceV of that fact when you asked him for a neutral tag?

I didn't know this when he requested a neutral tag.

LoyceV himself did the same thing and said I will never request from my alt and if I ever request will be from my main loyce and I will sign a message if you don't like the concept go tag him.

I think you're mixing up a few things. For starters, I made it obvious LoyceMobile is my alt.

By the way, I find the negative feedback you left on my profile to be factually incorrect ^{(as I am fully capable of reading full sentences and I can prove it)}, lacking valid references, and an abuse of the trust system. I recommend reading LoyceV's Beginners guide to correct use of the Trust system.

Agreed. @CryptoHFs: it's off-topic here (and considering how much drama there is, you should probably create your own Reputation thread for this), but you should reconsider your Trust abuse on Stalker22.

[CryptoHFs]

The point is that it does not make much sense to claim with one of your accounts that you will not ask for a loan on this forum while, at the same time, asking for a loan with your alt account. Did you inform LoyceV of that fact when you asked him for a neutral tag?

I didn't know this when he requested a neutral tag.

LoyceV himself did the same thing and said I will never request from my alt and if I ever request will be from my main loyce and I will sign a message if you don't like the concept go tag him.

I think you're mixing up a few things. For starters, I made it obvious LoyceMobile is my alt.

By the way, I find the negative feedback you left on my profile to be factually incorrect ^{(as I am fully capable of reading full sentences and I can prove it)}, lacking valid references, and an abuse of the trust system. I recommend reading LoyceV's Beginners guide to correct use of the Trust system.

Agreed. @CryptoHFs: it's off-topic here (and considering how much drama there is, you should probably create your own Reputation thread for this), but you should reconsider your Trust abuse on Stalker22.

I will remove his tag but he must be an ethical person not trying to mix things together and have his removed as it shows nothing new. I am capable to fuck back whoever tries to fuck with me.

Edit: removed prior to loyce opinion

[CYBER_COWBOY]

Let's make the forum clean.. give me that tag!

I have just found from your neutral trust that you will never take a loan from the forum. And also came to know that you are the Alt of thepeterson u=3557808 which has been mentioned by Timelord2o67 Are you really alt of that person and you do not want to take a loan? If yes, then how I got this message:

Sashan are you using a pirate copy of windows?
I don't try to be funny or rude, but I think its best to have a real license, I think you would afford it without any problem.
Cheers.

[CryptoHFs]

Let's make the forum clean.. give me that tag!

I have just found from your neutral trust that you will never take a loan from the forum. And also came to know that you are the Alt of thepeterson u=3557808 which has been mentioned by Timelord2o67 Are you really alt of that person and you do not want to take a loan? If yes, then how I got this message:

Sashan are you using a pirate copy of windows? 

lol, luckily he hasn't got hacked until now using unverified copies

[shasan]

Sashan are you using a pirate copy of windows? Kiss
I don't try to be funny or rude, but I think its best to have a real license, I think you would afford it without any problem.
Cheers.

I am not using any paid Windows version. Because the price of windows is almost the same as my laptop (LOL) and I feel comfortable using the free version. I think it will not effect too much for the windows.

Sashan are you using a pirate copy of windows? Kiss
I don't try to be funny or rude, but I think it's                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      best to have a real license, I think you would afford it without any problem.
Cheers.

And I do not think if I use the paid version then I will be able to safe mine from being attacked by malware.
Op is trying to repay already started repaying the loan.

[CryptoHFs]

Sashan are you using a pirate copy of windows? Kiss
I don't try to be funny or rude, but I think its best to have a real license, I think you would afford it without any problem.
Cheers.

I am not using any paid Windows version. Because the price of windows is almost the same as my laptop (LOL) and I feel comfortable using the free version. I think it will not effect too much for the windows.

Sashan are you using a pirate copy of windows? Kiss
I don't try to be funny or rude, but I think it's                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      best to have a real license, I think you would afford it without any problem.
Cheers.

And I do not think if I use the paid version then I will be able to safe mine from being attacked by malware.
Op is trying to repay already started repaying the loan.

You'll never be safe using a windows anyways.

[CYBER_COWBOY]

y paid Windows version. Because the price of windows is almost the same as my laptop (LOL) and I feel comfortable using the free version. I think it will not effect too much for the windows.

A valid cd-key for windows is very cheap, i think you can buy them for around $10-$20.
But hey, if it works for you why change. 

Op is trying to repay already started repaying the loan.

That's great mate, funny to hear that you guys have started a solution.

[shasan]

A valid cd-key for windows is very cheap, i think you can buy them for around $10-$20.
But hey, if it works for you why change.  Smiley

I don't know the value of it and also wasn't eager to use this but as you have posted I tried to check the service but before doing so DireWolfM14 helped me to activate my windows and I have done that. Now my windows working perfectly.

That's great mate, funny to hear that you guys have started a solution.

The solution was figure out at the time of OP came to know about the incident.

[shasan]

Update:
I received partial repayment on 11th August and earlier. On 18th August I checked my balance for personal reasons and came to know I had not received anything on that week. Then I tried to check the payment of the signature campaign and came to know the payment had already been made. I have tried again and again and later came to understand the wallet has been changed. I have searched on the forum and came to know that the wallet is of OP which has been used to replace my wallet which was announced by the OP. But at the time of replacement, there is no announcement. When I contacted the OP, the OP said:

Good day Shashan,
I don't have a job yet now and to sustain my daily needs to live I change back to mine again and send my payment to your wallet for this coming end of the month I hope you u understand.

Thank you.

If OP really needs a few dollars then OP could tell me at least inform about the replacement. And as here is an open thread Op should update on this thread too. But OP did not do that.
Today I checked my balance and no balance was added to my wallet.

Conclusion:
I think OP is trying to delay the payment and the loan that has been received by someone else is nothing but gossip which has been made to get sympathy for what can take a long time to repay the loan.

Note: I will create a scam accusation if I do not get positive response from the OP.

[Peanutswar]

Update:
I received partial repayment on 11th August and earlier. On 18th August I checked my balance for personal reasons and came to know I had not received anything on that week. Then I tried to check the payment of the signature campaign and came to know the payment had already been made. I have tried again and again and later came to understand the wallet has been changed. I have searched on the forum and came to know that the wallet is of OP which has been used to replace my wallet which was announced by the OP. But at the time of replacement, there is no announcement. When I contacted the OP, the OP said:

Good day Shashan,
I don't have a job yet now and to sustain my daily needs to live I change back to mine again and send my payment to your wallet for this coming end of the month I hope you u understand.

Thank you.

If OP really needs a few dollars then OP could tell me at least inform about the replacement. And as here is an open thread Op should update on this thread too. But OP did not do that.
Today I checked my balance and no balance was added to my wallet.

Conclusion:
I think OP is trying to delay the payment and the loan that has been received by someone else is nothing but gossip which has been made to get sympathy for what can take a long time to repay the loan.

Note: I will create a scam accusation if I do not get positive response from the OP.

Good day Shashan,

I know doesn't having a job makes me suffer with this debt, I just changed my wallet address in signature campaign for a while to cater to my expenses, and based on our conversation I will send the payment this coming week. As you can see I keep updating you once I send the funds

[logfiles]

Good day Shashan,

I know doesn't having a job makes me suffer with this debt, I just changed my wallet address in signature campaign for a while to cater to my expenses, and based on our conversation I will send the payment this coming week. As you can see I keep updating you once I send the funds

I think what he is trying to say is that communicate to him in case of any changes and once you guys come into an agreement, you can also make an update in this thread rather than just do things quietly.

Try to do like what this member did when his wallet containing signature campaign payment funds got hacked until when you completely solve your problem. You are in a hard situation, but you can achieve it.

[AHOYBRAUSE]

Good day Shashan,

I know doesn't having a job makes me suffer with this debt, I just changed my wallet address in signature campaign for a while to cater to my expenses, and based on our conversation I will send the payment this coming week. As you can see I keep updating you once I send the funds

I think what he is trying to say is that communicate to him in case of any changes and once you guys come into an agreement, you can also make an update in this thread rather than just do things quietly.

Try to do like what this member did when his wallet containing signature campaign payment funds got hacked until when you completely solve your problem. You are in a hard situation, but you can achieve it.

Exactly. It's kind of a scammy move to make an arrangement with Shasan and then change something behind his back. Did you think he wouldn't find out?
The situation is already bad enough at is is, with all the account hacking and what not, no need to make it even worse. That's a bad look for you and since it's not 100% sure what actually happened with the loan, doing something like this doesn't make you look more like a victim in this case.

[LoyceV]

Conclusion:
I think OP is trying to delay the payment

This part is clear.

and the loan that has been received by someone else is nothing but gossip which has been made to get sympathy for what can take a long time to repay the loan.

Maybe. Maybe not. Either way, this is pure speculation. And don't forget: all of this could have been prevented if you would have asked for a signed message to begin with.

That being said, OP volunteered to pay back the debt and made a promise:

I will repay Shashan but not on the designated date given to the loan; every time I receive a payment in a Signature Campaign/another source of income, I will deposit this immediately to Shashan's Address as repayment for the trouble created by that hacker.

I know doesn't having a job makes me suffer with this debt, I just changed my wallet address in signature campaign for a while to cater to my expenses, and based on our conversation I will send the payment this coming week. As you can see I keep updating you once I send the funds

To use a movie quote: "Rule One: Never change the deal", especially not without discussing it first.

Note: I will create a scam accusation if I do not get positive response from the OP.

Interesting case.

[Learn Bitcoin]

Interesting case.

FYI, I noticed OP paid around $50 to the lender this morning, which was posted in his Lending service thread.

Good day Shashan,

Payment sent, kindly confirm you received the payment

Code:

Txid:
Payment sent for this week : 49.68 usd
224c0ac9b755ed7183f41ec8b76b6fe4480f33ccc7f5b71f0b53a44c55d76671 

Received the partial repayment of the loan.

Since this was settled again, this thread became somewhat irrelevant again. However, since there was a discussion, one of them could have shared information about their latest transaction. Maybe they forgot about this thread. Since the repayment was made, Shasan is not going to create the accusation thread. Good luck to both of them.

[DireWolfM14]

and the loan that has been received by someone else is nothing but gossip which has been made to get sympathy for what can take a long time to repay the loan.

Maybe. Maybe not. Either way, this is pure speculation.

I can't make heads or tails of this either.  There's no evidence to support Shasan's speculation, and since I don't know Peanutswar well enough it's hard to make the judgement call.  But since he's willing to pay back this kind of speculation is irrelevant and unhelpful.  

And don't forget: all of this could have been prevented if you would have asked for a signed message to begin with.

If Peanutswar's claims are factual, then it's my opinion that both members are equally responsible.  Certainly Peanutswar should have been more careful with his account security, and Shasan should be asking for signed messages for loan requests.  At the very least insist on sending only to an address that's been posted by the member in the past.  I think Shasan takes a lot of unneeded risks in his lending activities, and unfortunately this is one of the pitfalls of those risks.

[xLays]

I really feel bad for PeanutsWar. Dealing with a situation where you have to pay a loan you didn't borrow must be frustrating. I think PeanutWars already paid back the loan that he didn't request after this last payment: https://bitcointalk.org/index.php?topic=5030169.msg63434148#msg63434148
Waiting for @shasan to confirm this.

[Peanutswar]

Just giving an update, I already settled the payment to shashan, and I would like to repeat again this is my only address.

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
This is peanutswar 11/20/22 new wallet address bc1qnrcpx4q970yhp5t0qqgu5svcu27982cpdd8xnl
-----BEGIN SIGNATURE-----
ILiYa+mSEiu7SB/crI/OujyjELPwJr6tno2mrqIcI0ImOEZvDNHx7EF4eyQwmXeN9WIxVJEN6376YpJp3p3EGp8=
-----END BITCOIN SIGNED MESSAGE-----

and I will not take a loan in the forum.

Thank you. I will lock this thread now.