Someone Loan using My Account

[Learn Bitcoin]

Don't you guys expect mdgabrielzim and Woodie to come to this thread and explain what happened? Did anyone send a DM to any of them? TryNinja's bot has not been working for the last 24 hours, so mentioning their name won't work for now. Since this has happened with Peanutswar, Can you please DM them to come into this thread and ask if they have anything to say?

Edit: I also ask others to try to understand before writing anything, but sometimes I do the same thing. Sorry for the misunderstanding!

[ryzaadit]

-snip-

Before you make the suggestion, maybe you can also trying to following the topic trend + try to overview the account or case of the account you're mention.
- mdgabrielzim last active was (30 June).
- Woodie trying to make a requested loan with that address for 900$ and getting rejected. However, Woodie it's self questioned the loan 900$ by saying to the thread that's he don't make any loan requests. It's a clear indicator that, someone got access to his account after that incident he told "shasan" to only give him a loan with signed message. I also checking his "BPIP" on the same day he send that message, he changed the password (got move from him, since that unusual activity from his account).

[FatFork]

-snip-

Before you make the suggestion, maybe you can also trying to following the topic trend + try to overview the account or case of the account you're mention.
- mdgabrielzim last active was (30 June).
- Woodie trying to make a requested loan with that address for 900$ and getting rejected. However, Woodie it's self questioned the loan 900$ by saying to the thread that's he don't make any loan requests. It's a clear indicator that, someone got access to his account after that incident he told "shasan" to only give him a loan with signed message. I also checking his "BPIP" on the same day he send that message, he changed the password (got move from him, since that unusual activity from his account).

But still, It would be great if any of them could come here and share more details about the incident. Taking control of someone else's account is a serious issue, and it would be good to learn more about the circumstances. Were their computers infected? Did they unknowingly click on suspicious links?

After going through the entire thread, I still don't understand what really happened.

[Learn Bitcoin]

-snip-

Before you make the suggestion, maybe you can also trying to following the topic trend + try to overview the account or case of the account you're mention.
- mdgabrielzim last active was (30 June).
- Woodie trying to make a requested loan with that address for 900$ and getting rejected. However, Woodie it's self questioned the loan 900$ by saying to the thread that's he don't make any loan requests. It's a clear indicator that, someone got access to his account after that incident he told "shasan" to only give him a loan with signed message. I also checking his "BPIP" on the same day he send that message, he changed the password (got move from him, since that unusual activity from his account).

If Woodie's account was hacked too, he might have something to say. I've read Peanutswar's posts as well, and it doesn't seem he shared any info about how the hacker got control of his account. He only said he might get a DOM attack. Someone else posted that it's possible that the hacked stole their session cockies or something like that. It's only possible if they have visited some links given by the hacker. 30 June is not too long ago. I haven't checked their profile yet. But, it would be great if Peanutswar write them a PM and they write if they have something to share.

After going through the entire thread, I still don't understand what really happened.

Long story short, Someone from the Peanutswar account takes a $1000 loan from sashan's lending service. Later, the funds were transferred to an address that was used by mdgabrielzim a month ago (it seems this account was hacked too). The same address that was used to loan by the Peanutswar account sent some funds to another address that was used by Woodie to request a loan. Later, Woddie said he did not request a loan, and he didn't recognize the address. That means his account was hacked too.

The ultimate victim is Peanutswar at this moment.
But, it's a mystery how the hacker get access to these accounts?

[lovesmayfamilis]

Before you make the suggestion, maybe you can also trying to following the topic trend + try to overview the account or case of the account you're mention.

 

I am wondering are @OP going to be responsible for the fund loan by a scammer, and need to repay it. Or is there some other solution/discussion between @OP and the lender for these cases?
--
First time to see, session-hijacking.

Strangely, you make a statement like that when you're asking about the implications for the OP. You should also read the OP's assurance that he promises to repay the debt taken by the hacker in his name. I think that many would not go to such an extent, begging to come up with another solution to the issue. Although, for the reputation of the OP, returning the debt would be the right move.

I will repay Shashan but not on the designated date given to the loan; every time I receive a payment in a Signature Campaign/another source of income, I will deposit this immediately to Shashan's Address as repayment for the trouble created by that hacker.

[Mahdirakib]

Don't you guys expect mdgabrielzim and Woodie to come to this thread and explain what their connection with the hacker is?

But still, It would be great if any of them could come here and share more details about the incident.

I have sent a PM to Woodie yesterday. He was active after the PM was sent and made a post in the forum too. Maybe he is trying to find out that what actually happened before clarifying the situation. Otherwise, he hasn't checked the message.

- mdgabrielzim last active was (30 June).

Moreover, there is no password change history for him in BPIP. Maybe the hacker still have the access to mdgabrielzim account. I think sending him a PM isn't going to help in this case.

[LoyceV]

Before, there was a link sent to me for discord community management, the sender have a link makes a redirect link to other page and the message sent multiple times so i suspected immediately could be an attack, I immediately cleaned my PC for possible preventive attacks, I got confident by that time but my mistake too I didn't change my password

Once in a while, I get a "friend request" too. I just ignore those on Discord.
What did "the link" do? Was clicking it enough to compromise your system? If that's the case, it's time for a safer browser (and OS)!

I've left 2 neutral "no loan" tags so far. If someone ever asks me to remove them, I'll require a signed message from an old staked address, and I'll probably wait for 30 days (a cooldown period).

Why wait 30 days after someone has signed a message from an old staked address to remove a tag?

A signed message is enough IMO.

My tag is just a warning. If someone signs a message from an old staked address, it's up to the lender to decide whether or not he gives a loan. But if someone's computer including access to his Bitcointalk profile and private key gets hacked, a signed message doesn't mean anything. That's why I won't instantly remove the neutral tag, but first add another neutral tag to mention the intention to remove the other tag.

You should assume that the person making such a request may be in desperate need of a loan.

I disagree. If someone made the explicit statement that he'll never take a loan, you should assume someone else is asking for it, no matter what evidence he shows. The account holder shouldn't be held liable for any loans, that's why he made this explicit statement.

I'm not even sure if 30 days is enough: it's not impossible for the account owner to not even notice a new neutral tag during those 30 days. It might be better if someone else adds said tag in that case, so at least the counter goes up by +1. Or maybe I should just leave new neutral feedback permanently, including the dates of start and "end" of the promise not to take loans.

Moreover, there is no password change history for him in BPIP. Maybe the hacker still have the access to mdgabrielzim account. I think sending him a PM isn't going to help in this case.

I've left him neutral feedback, asking to respond here.

[Igebotz]

Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.

Given that the forum accepts multiple logs, you're more likely to fall prey to this type of fraud if you neglect to look at post history.

Why wait 30 days after someone has signed a message from an old staked address to remove a tag?

A signed message is enough IMO.

My tag is just a warning. If someone signs a message from an old staked address, it's up to the lender to decide whether or not he gives a loan. But if someone's computer including access to his Bitcointalk profile and private key gets hacked, a signed message doesn't mean anything. That's why I won't instantly remove the neutral tag, but first add another neutral tag to mention the intention to remove the other tag.

That's what I was thinking, but shouldn't that be the account owner's problem if he misguard his wallet and private key? That shouldn't be a problem if the required signed message is sent to you from the account. Everyone should be responsible for their own security breach. 

You should assume that the person making such a request may be in desperate need of a loan.

I disagree. If someone made the explicit statement that he'll never take a loan, you should assume someone else is asking for it, no matter what evidence he shows. The account holder shouldn't be held liable for any loans, that's why he made this explicit statement.

Life could happen to anyone; Someone could be very comfortable today without needing a loan, but we can't predict what will happen in 6-8 months, so I needed you to be at least flexible with your tag. However, I would prefer it if there is a duration on the tag as you suggested, and if the account owner wants to extend the date, he/she would need to sign another message requesting you to extend the tag.

Donald Trump had no idea 5 years ago that he would be paraded from courtroom to courtroom like a criminal.. Life happened to him 

[LoyceV]

Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.

Only a few boards (such as Services) have the 24 hours rule to delete posts. The Lending board doesn't have this rule.
Theymos created https://bitcointalk.org/myips.php to keep track of access to your account. An attacker can't edit those records.

[HedgeFx]

In my opinion, this is an issue that goes well beyond the possible hacking of an account.

In the lending section there is a large group of spammers who try to cheat every day.

In addition to requesting a signed message or sending loans always and only to the same staked address (for example, I always receive my loans at the same address), it could be interesting to make the lending section off limits for some ranks, a bit like the "investigations" section of the forum. This measure would greatly limit the amount of shitposts and lenders would have more time to better follow up on their borrowers.

[Igebotz]

Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.

Only a few boards (such as Services) have the 24 hours rule to delete posts. The Lending board doesn't have this rule.
Theymos created https://bitcointalk.org/myips.php to keep track of access to your account. An attacker can't edit those records.

It's strange that the lending board doesn't have such a rule; perhaps it's time to adopt one, because the IP tracker wouldn't help if the money heist had already occurred. This issue can only be fixed by the account owner and the 24 hour post delete restrictions.

[Peanutswar]

-snip-

Discord Community Management? Does that mean jobs are offered for you for Moderator/Admin, or something like that?

I faced the same case 2 month+ ago, the difference is for (Discord Account) not BTT. It's for (Mod/Admin) jobs, the scammer targeting people who at least moderated a project and shared a phishing/scam.
I am wondering are @OP going to be responsible for the fund loan by a scammer, and need to repay it. Or is there some other solution/discussion between @OP and the lender for these cases?
--
First time to see, session-hijacking.

I also active in Discord most likely in NFT too at the same time, I'm a moderator for a project. With the issue, my goal currently is at least pay shashan, I ask also LoyceV to put me a neutral tag to prevent this might happen again. For other members also recommend to use a notification with your telegram or more likely safe with the gmail connected with your account.

Since it takes 24 hours to delete a post, everyone should make it a habit to check post history every day to avoid something like this.

Only a few boards (such as Services) have the 24 hours rule to delete posts. The Lending board doesn't have this rule.
Theymos created https://bitcointalk.org/myips.php to keep track of access to your account. An attacker can't edit those records.

Is there any chance that this 24 hours rules might implement in the lending section not only for me but for the sake of this possible case scenario?.

[ryzaadit]

-snip-

Geez, hoping you have the strength for facing these problems.

Since we are from the same continent (Asia) you're on PH while looking at your post history, 1000$ it's really big for us. Take a lot of time for collecting the money, hoping there is no pressure time for giving back the loan. Feel sad mate...
-----
I also learn something from my accident, because of me someone getting scammed (getting yelled as well by my CEO). IMO, your case is really2 worse compared to mine because of the hacked potential from cookie session hijack (pretty new and more hard than mine (Bookmark Method).

[zasad@]

If there was a universal option for everyone to declare that they never take any loans it'd be even better. But making a separate topic for that would be too complicated and I don't see any easy way for that.

I can give you neutral feedback if you want, with a link to your post. Something like:
"This user confirmed he never wants to take a loan. If his account asks for it, it's not him."
If anyone else wants such feedback: post your confirmation here and I'll add it once I see it. I assume my account will be on DT for many years to come

I confirm that I do not need credits on this forum. LoyceV, please put a neutral tag on my profile.

[CryptoHFs]

Congratulations  @LoyceV your idea started to expand widely to prevent scams https://bitcointalk.org/index.php?topic=5459320.msg62530688;topicseen#msg62530688

[dimonstration]

In my opinion, this is an issue that goes well beyond the possible hacking of an account.

In the lending section there is a large group of spammers who try to cheat every day.

In addition to requesting a signed message or sending loans always and only to the same staked address (for example, I always receive my loans at the same address)

I think requesting to receive loans on different wallet address that mention on the signed message is safe too since most of us here use a non custodial wallet address to receive signature campaign payment while loan amount usually use to convert into cash so borrowers preferred to receive it directly on exchange to save fee and reduce waiting time.

it could be interesting to make the lending section off limits for some ranks, a bit like the "investigations" section of the forum. This measure would greatly limit the amount of shitposts and lenders would have more time to better follow up on their borrowers.

This suggestion is good to lessen spam post on lending section from newbie but it restrict low rank member with valid collateral to access this kind of services. Shit posters is not a problem on lending since no lenders will treat them seriously while there's only few users view lending board since there's no discussion in there unless you need to lend or borrow.

[LoyceV]

Is there any chance that this 24 hours rules might implement in the lending section not only for me but for the sake of this possible case scenario?

You'll have to ask theymos, see: this topic.

[SmartGold01]

Snip

I agree with you that some concessions could be made to the OP, as the situation is not simple. Nevertheless, similar cases have already happened on the forum, and I think that everyone should take a closer look at the security of their system. Don't save your passwords in browsers, and also, I think the OP was running on a Windows system and might have some keylogger loaded, or indeed, as SamReomo wrote, a cookie session was stolen. I looked up some information about this, and I think we should know how we can protect ourselves from it.

https://learn.g2.com/session-hijacking

That should be the last thing for me to do because I am very conscious of my account and my personal details since no browser is trusted anymore.
I have red some of the implications involved in saving one details to a browser, so I do real avoid autosave options.

[DireWolfM14]

Lol, this is such a joke.  What happens if three years from now one of you guys decides you need a loan?  What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?  By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.  What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

zasad@

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

CYBER_COWBOY

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Peanutswar

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

lovesmayfamilis

2023-07-08

Reference

This user confirmed she never wants to take a loan. If her account asks for it, it's not her.

CryptoHFs

2023-07-08

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Not to mention, out of these 5 request, one (I suspect) is a sockpuppet of a loan defaulter, lending board troll, and alt farmer that's been spamming and trolling the lending board for over a year, using multiple alts in an attempt to get an unsecured loan.  And, another just literally asked for a loan last week, lol.  You couldn't make this shit up.

Nothing good will come of these tags, and if you have asked LoyceV to tag you, I have a suggestion:  SECURE YOUR FUCKING ACCOUNT!  Take some personal responsibility for your own safety and security, and that of the forum.  If you fear some one is after your precious and valuable account, change your password.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

[CryptoHFs]

Lol, this is such a joke.  What happens if three years from now one of you guys decides you need a loan?  What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?  By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.  What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

zasad@

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

CYBER_COWBOY

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Peanutswar

2023-07-10

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

lovesmayfamilis

2023-07-08

Reference

This user confirmed she never wants to take a loan. If her account asks for it, it's not her.

CryptoHFs

2023-07-08

Reference

This user confirmed he never wants to take a loan. If his account asks for it, it's not him.

Not to mention, out of these 5 request, one (I suspect) is a sockpuppet of a loan defaulter, lending board troll, and alt farmer that's been spamming and trolling the lending board for over a year, using multiple alts in an attempt to get an unsecured loan.  And, another just literally asked for a loan last week, lol.  You couldn't make this shit up.

Nothing good will come of these tags, and if you have asked LoyceV to tag you, I have a suggestion:  SECURE YOUR FUCKING ACCOUNT!  Take some personal responsibility for your own safety and security, and that of the forum.  If you fear some one is after your precious and valuable account, change your password.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

Well, I did it to support the idea. If I ever need a loan in the future I will be requesting it from my alt.

This account btc address is compromised, banned before for a week, most likely I will stop using it.