Someone Loan using My Account

[CYBER_COWBOY]

 

You act like a third world war has started, why so much feelings engaged into a internet forum? It's a world outside here to, check it out!
If i want a tag its up to me and not you, you act like its your account that get tagged..  
If I would need a loan ever in my life, that I highly doubt since I got a good economy and a good income, but if i would need a loan i would never take it on a anonymous internet forum, I would ask a friend or go to my bank.

Why do you all the time telling other to mind their own business when you not live after that standard yourself.
Mind your own business and we mind our own business, what I do or others have nothing to do with you.

But with that said, I agree with you and you have a very good point that if LoyceV would go offline forever on the forum or something and somebody would need a loan this is not a smart thing, but that should that person have think about before he/she asked for this. It's not like this would harm anyone or anything else expect us.

(Now please try to be funny and qoute 2/3 things and reply like you always do and ignore all the other stuff.  ) but after that, please leave me alone.

[UserU]

If I'm not wrong then the method is called as "session hijacking" or "session cookie theft." In such type of attacks the hacker often send you a malicious link, and when a users clicks on the link then the hacker take advantage of the vulnerabilities of the browser that the user is using to access the link. The hacker then steal the session cookies of the user and then use that cookie on his/her browser with the help of extensions like cookie editor. Such type of attacks are often planned by the hackers who have access to some hidden vulnerabilities of the browsers that no-one knows yet. Those hackers can steal session cookies of any website they want, and that way they hack the access of the users.

I'm quite sure that the same thing happened with @Peanutswar when he clicked on that malicious link without even thinking about such exploits. The hacker knew that the user would click on the link, and he would be able to steal the cookies one the user will click the link. It's better to be aware of such type of hacks because they can easily hack someone's account and ask for loans that the user isn't asking for. It's our responsivity to protect ourselves from such type of hacking attacks, and we should never click on the links sent by a unknown user. That way we will be able to protect ourselves from such kind of hacks.

Can attest to this. Happened several years ago from a foolish decision and got scammed a huge sum by today's standards.

It's really mindblowing and absolutely scary as the perpetrator could do anything without you even realizing he's there.

[Z_MBFM]

This is a very sad incident. this happened because your account didn't use a strong password or you clicked on a known or unknown phishing link that led to a hacker getting your account login details and causing an incident.
But it has to be admitted that the hacker knows this forum very well that he cannot use it by hacking the account.  Because the real owner will recover it again through wallet sign. the hacker was very smart

We should learn a lot from this incident and be careful with account security  and lenders should also research an account thoroughly before giving a loan. And a rule should be kept that the loan will be given to the wallet that has been used for any purpose on the account at least in the last 1 month.

[rat03gopoh]

Is there any chance that this 24 hours rules might implement in the lending section not only for me but for the sake of this possible case scenario?

You'll have to ask theymos, see: this topic.

Someone should upvote it to the Meta board, I think this proposal is also not limited to all business boards: Services, Lendings, Currency Exchange, Goods, etc.
This incident was enough to tell me the importance of using multiple notification bots, excluding lendings boards, and finding ways to gain access to accounts in an emergency.

[lovesmayfamilis]

Lol, this is such a joke.

Don't consider yourself a sage. I have other sources that can help me in extreme cases. I very much hope that this will not happen, and I can confidently say that my request was considered. Likewise, I don't need money from strangers; I don't borrow; that's the rule.
As for my "fucking account", don't be overconfident; something that he does not understand can happen to everyone. I don't like unnecessary fuss, so a neutral tag is an extra safety cushion.

[Rikafip]

@shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

Tbh, I am surprised that this hasn't happened earlier (or maybe it did?) since he doesn't ask for signed message like other lenders are doing, which I thought is a standard here.

What's weird to me in all this is that even after this has happened, he continues to give loans without taking extra measures so something like this doesn't happen again. He can of course do his business as he sees fit, but imo that's just unnecessary risk.

[FatFork]

@shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

Tbh, I am surprised that this hasn't happened earlier (or maybe it did?) since he doesn't ask for signed message like other lenders are doing, which I thought is a standard here.

What's weird to me in all this is that even after this has happened, he continues to give loans without taking extra measures so something like this doesn't happen again. He can of course do his business as he sees fit, but imo that's just unnecessary risk.

I have a sneaky suspicion that this might become more frequent in the future. Neither Peanutswar nor Woodie seem to have any idea (or they're not willing to share) how this happened, and mdgabrielzim remains silent about it. The first two recorded loan attempts were unsuccessful, but the third one went through. If the scammer has an effective technique for compromising other users' forum accounts, it's reasonable to assume that he will try it again.

If shasan, or any other lender for that matter, continues to give loans without conducting proper due diligence, it will inevitably result in significant consequences sooner or later. However, I suppose that decision ultimately rests with them.

[LoyceV]

What happens if three years from now one of you guys decides you need a loan?

Why it is to hard to imagine some people know they'll never want to take a loan on Bitcointalk? The large majority of all internet users will never need it.

What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?

It's all possible, and in that case, it's just an (Untrusted) neutral tag that shows some of the history of the account.

By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.

Shouldn't a lender check a user's feedback history anyway before deciding on a loan?

What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

I thought of that possibility too. One way or another, it's not a perfect solution.

Nothing good will come of these tags, and if you have asked LoyceV to tag you, I have a suggestion:  SECURE YOUR FUCKING ACCOUNT!  Take some personal responsibility for your own safety and security, and that of the forum.  If you fear some one is after your precious and valuable account, change your password.

Also true. But it's clear many people fail to keep their account secure. That's probably why more and more websites are bugging users with 2FA.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

I was thinking the same too, and it's the reason I made the neutral tag suggestion to avoid this. OP's mistake was not keeping his account secure, but giving a loan is on shasan.
One solution could be to share the losses 50-50, but that would open the possibility for users to claim their account was compromised, and only pay back half their loan.

[jokers10]

Lol, this is such a joke.  What happens if three years from now one of you guys decides you need a loan?  What if you want LoyceV to remove the tag, but he's no longer active?  What if LoyceV takes a break from the forum, and drops off of DT?  By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.  What if you do take a loan from some unsuspecting lender and decide you don't have to pay it because look, "back in 2023 LoyceV left a tag saying I would never take out a loan."  Couldn't this be used as an excuse to scam a lender?

I haven't made a decision yet, but I tend to think that it could be reasonable for me. I'm not the first day on the forums where some loans can be given and taken, and I never took any loan on forums for all the time. So hardly the situation will change so that in 3 years my behaviour will become dramatically different.

Of course the one who agrees to take such a tag should think in advanse, but why do you judge them right now? Why do you think, that many of them would ask for a loan in the future?

A lender should be cautious and not give a loan for the one has this tag at all. Of course it is a risk, so why a lender should take that risk? Being too greedy?

[cryptoaddictchie]

I never took any loan on forums for all the time. So hardly the situation will change so that in 3 years my behaviour will become dramatically different.

Of course the one who agrees to take such a tag should think in advanse, but why do you judge them right now? Why do you think, that many of them would ask for a loan in the future?

Same didnt have any loan transaction here on forum. So I am thinking to do the same cause we dont know if ever we encounter like the same situation like OP. Its quite scary to know that someone will loan in your place but its not you. What can I say about those guys that took the tagged are they are confident to do so since they wouldnt literally do it. Perhaps some wouldnt like that but its their decision and no one can judge them by that actually.

What LoyceV offer is pretty helpful indeed. But DireWolf14 is right on one thing, that we should and its our responsibility to protect our account here. I myself can vouch that I wouldnt do any loans in the future, why? In real life I didnt take any from 0 until now why would I start later right?

[Peanutswar]

I never took any loan on forums for all the time. So hardly the situation will change so that in 3 years my behaviour will become dramatically different.

Of course the one who agrees to take such a tag should think in advanse, but why do you judge them right now? Why do you think, that many of them would ask for a loan in the future?

Same didnt have any loan transaction here on forum. So I am thinking to do the same cause we dont know if ever we encounter like the same situation like OP. Its quite scary to know that someone will loan in your place but its not you. What can I say about those guys that took the tagged are they are confident to do so since they wouldnt literally do it. Perhaps some wouldnt like that but its their decision and no one can judge them by that actually.

I don't have any plan to take a loan, I don't care about the money of other people,I don't take any loans even in real life too, after this incident I format all of my devices, and change the password too, hoping we have 2fa in the future in case plus the additional measurement of the post with the lending board to be the same as the service board to take 24 hours before can be deleting the reply.

Another thing I noticed about this thread, shasan's notable absence.  @shasan, with all due respect, to what extent are you responsible for this tragedy?  Sure, Peanutswar didn't secure his account, but what efforts did you take to make sure the loan you were issuing was going to the same person that built that account?

I was thinking the same too, and it's the reason I made the neutral tag suggestion to avoid this. OP's mistake was not keeping his account secure, but giving a loan is on shasan.
One solution could be to share the losses 50-50, but that would open the possibility for users to claim their account was compromised, and only pay back half their loan.

LoyceV has a point too one of the measurements for taking a loan is having a signed signature and agreeing with other members, I signed my wallet address as one of the ways to secure my account. I guess we need Shashan's response too with this case.

[AHOYBRAUSE]

I don't have any plan to take a loan, I don't care about the money of other people,I don't take any loans even in real life too, after this incident I format all of my devices, and change the password too, hoping we have 2fa in the future in case plus the additional measurement of the post with the lending board to be the same as the service board to take 24 hours before can be deleting the reply.

You write you don't care about loans or money of other people but your feedback history shows you had a loan in this forum in the past.

That's no attack against you, just stating the facts. 

Anyway, shitty situation for both, you and Shasan.

[Igebotz]

By this logic a lender is supposed to go digging through years worth of reviews, possibly untrusted reviews to look for a possible entry by LoyceV saying you won't ever take out a loan.

Shouldn't a lender check a user's feedback history anyway before deciding on a loan?

The neutral tag does not hurt anyone, and many people overlook or even try to verify the message behind such a tag, especially if the user has more than four neutral tags. What most lenders consider risk is the reg paint, and that's the only thing that draws the most attention to someone's feedbacks page.

This isn't going to help much because almost everyone here has a neutral tag. ( Most DT use it as personal note nowadays)

I was thinking the same too, and it's the reason I made the neutral tag suggestion to avoid this. OP's mistake was not keeping his account secure, but giving a loan is on shasan.
One solution could be to share the losses 50-50, but that would open the possibility for users to claim their account was compromised, and only pay back half their loan.

I assume Shasan isn't convinced yet, and he doesn't appear to want to be a part of this discussion or accept responsibility for the OP's negligence.  To be honest, I wouldn't.

[FatFork]

You write you don't care about loans or money of other people but your feedback history shows you had a loan in this forum in the past.
<cut>

If you're talking about the feedback from bL4nkcode, that was actually a loan to bL4nkcode, not the other way around. Peanutswar was the one lending the money.

You can check out their complete conversation in the Pilipinas local section:
https://bitcointalk.org/index.php?topic=5142115.msg56681642#msg56681642

[AHOYBRAUSE]

You write you don't care about loans or money of other people but your feedback history shows you had a loan in this forum in the past.
<cut>

If you're talking about the feedback from bL4nkcode, that was actually a loan to bL4nkcode, not the other way around. Peanutswar was the one lending the money.

You can check out their complete conversation in the Pilipinas local section:
https://bitcointalk.org/index.php?topic=5142115.msg56681642#msg56681642

Ah ok, my bad then. "Had a loan and paid it in 2 months. Thanks." is easy to understand the other way around to be honest.

I assume Shasan isn't convinced yet, and he doesn't appear to want to be a part of this discussion or accept responsibility for the OP's negligence.  To be honest, I wouldn't.

I wouldn't as well. It's not Shasan's responsibility that users take their security serious.

[DireWolfM14]

Why it is to hard to imagine some people know they'll never want to take a loan on Bitcointalk? The large majority of all internet users will never need it.

That's not hard to imagine at all.  Have you known me to ask for a loan in the 5 plus years I've been here?

It's also not hard to imagine all the pea-brained lemmings jumping on the most recent and virtuous "cool-kid-bandwagon."  All this will do is give the account holder an excuse to shirk their responsibility of keeping their account secure (one already claimed that would be an "unnecessary fuss.")  Is that something you want to put yourself in the middle of when the account gets "hacked" and some lender issues a loan?  Mark my words, someone will abuse this and honestly I would expect a more critical stance on this silliness from you.

Shouldn't a lender check a user's feedback history anyway before deciding on a loan?

Lenders should be considering a lot more than just the borrower's feedback, especially for an unsecured loan.  As it is lenders face a lot of challenges, and the last thing they need is a highly reputable and trusted member of the community giving some shitty account "plausible deniability" to further erode the lenders ability to recover loans.

I thought of that possibility too. One way or another, it's not a perfect solution.

"Not a perfect solution" would be acceptable, but this is far from that.  My fear is that you're providing an opportunity for scammers.

Also true. But it's clear many people fail to keep their account secure. That's probably why more and more websites are bugging users with 2FA.

Don't make that your problem.

I was thinking the same too, and it's the reason I made the neutral tag suggestion to avoid this. OP's mistake was not keeping his account secure, but giving a loan is on shasan.
One solution could be to share the losses 50-50, but that would open the possibility for users to claim their account was compromised, and only pay back half their loan.

I don't think shasan should pay a penny, not the right president to set.  But at the same time this could have gone a very different way for him if Peanutswar wasn't a standup guy.  Maybe shasan needs to learn this lesson in the hardest way possible before he secures his service.

Why do you think, that many of them would ask for a loan in the future?

I don't think that many of them will ask for a loan in the future, but I think there's a very distinct possibility that one of them will, get it, then say it wasn't him and point to LoyceV's feedback as "proof" that it wasn't him.  Sure, the lender should have been more scrutinous, but as has been demonstrated in this case not all lenders are as scrutinous as they should be.  I already have a very strong suspicion that one of the accounts tagged by LoyceV is the sockpuppet of a loan defaulter and escrow impersonator.

[cryptoaddictchie]

I don't have any plan to take a loan, I don't care about the money of other people,I don't take any loans even in real life too, after this incident I format all of my devices, and change the password too, hoping we have 2fa in the future in case plus the additional measurement of the post with the lending board to be the same as the service board to take 24 hours before can be deleting the reply.

Oh btw sorry to hear what happened on you mate. Thats a huge loan but I admired you for taking the responsibility yourself. Some would probably not, but I can see that you value your reputation here over some funds. Anyway you could recover that in due time. The culprit should be punish and must be found cause who knows who will be next on their targets. Anyone seems gonna need to have extra careful from now on especially on malicious links.

[Woodie]

Woodie was worried about the loan request and made a post in shasan lending thread, but he has deleted that post too. What's going on actually? Peanutswar ~ mdgabrielzim ~ Woodie, how big the hacking attempt is?

Just for the record I did not delete that message of me making my inquiry of what was happening, thought the mods did!

Believe it or not, if I hadn't had another loan with Shasan,  today I would have been paying a loan of $900+ which I didn't not get or apply for... And in my case, I had a loan for which I was late by a day or so and I thought it was a way of Shasan trying to get at me as I only saw a quote of the loan application without actual application and this was done when I was going offline!
But whatever is happening someone has found some kind of backdoor or exploit to the system of impersonating users...maybe its a cookie hack!! Because I never reuse my passwords, am not the kind of person that clicks on unknown links and lastly the only possible way of my password being got was through lastpass, but after this failed loan attempt I have been moving away from the last pass. (Even if lastpass was compromised, at least i think a geolock would have prevented this from happening, besides what were the odds of a lastpass hacker knowing about the forum and the loan section ZERO CHANCE)

Unusual ip I found via bitcointalk.org/myips.php  based on the deleted post date and time thanks to the loyce club archives.

Code:

Singapore 84.17.39.166 

The loan I did not apply for as can be seen below


And this is how my pending loan saved me from a $900+ loan, its getting scary out here...

[Mate2237]

I assume Shasan isn't convinced yet, and he doesn't appear to want to be a part of this discussion or accept responsibility for the OP's negligence.  To be honest, I wouldn't.

How does the so call impersonator knew the op password and login to the forum, and if really was hacked then the hacker can take any username and hack the password and use it to take loan. And if the impersonator used the op login details to login then it is a close friend of op that knows the forum very well. Well the op also agreed to pay the loan so Shasan has nothing to say again, but the op is also asking Shasan to extend the repayment of the loan.

[DireWolfM14]

I'd be curious to know what commonality @Peanutswar, @mdgabrielzim, and @Woodie have had in their browsing history.  If they all clicked on a phishing link, or if they all downloaded some software, or if they all participated in an off-site give-away that asked for forum details.  It would seem they all fell into the same trap.