Someone Loan using My Account

[CryptoHFs]

Why don't the forum set a warning when a different ip login as they do for password/ email change and waking up  this will make the other party try to verify the account owner first.
!warning this account used a new ip to login date ****
In that case even if someone trying to fake a hack it won't work  

[1714245110]

1714245110

[1714245110]

1714245110

[1714245110]

1714245110

[1714245110]

1714245110

[jokers10]

Why don't the forum set a warning when a different ip login as they do for password/ email change and waking up  this will make the other party try to verify the account owner first.
!warning this account used a new ip to login date ****
In that case even I'd someone trying to fake a hack it won't work 

It has no sense for multiple reasons. I'll name just what first thought: many visit this forum with VPN or Tor not to be tracked, to improve security. So many accounts will have such a note constantly. And others who have a stable IP will have another kind of a problem: potential intruder will know whom to hack to distantly use their own system to scam on the forum. So it would hardly improve security, I'd say that it'll rather lower it.

[Coin_trader]

I don't have any plan to take a loan, I don't care about the money of other people,I don't take any loans even in real life too, after this incident I format all of my devices, and change the password too, hoping we have 2fa in the future in case plus the additional measurement of the post with the lending board to be the same as the service board to take 24 hours before can be deleting the reply.

Oh btw sorry to hear what happened on you mate. Thats a huge loan but I admired you for taking the responsibility yourself. Some would probably not, but I can see that you value your reputation here over some funds. Anyway you could recover that in due time. The culprit should be punish and must be found cause who knows who will be next on their targets. Anyone seems gonna need to have extra careful from now on especially on malicious links.

I think only those disposable account will not take responsibility on this kind of incident since his account will be surely negative trust in case he will not repay the loan that requested using his account. We have the responsibility to secure our account since it can be use to scam someone here in the forum especially if the rank is high or if it has a solid reputation.

Shasan loan service doesn't have a rule about signed message which makes this incident out of his hand imho. I might fall vicitm too on this loan scam if the OP ask for a loan on our local board since his password and email doesn't change while he is currently enrolled on a signature campaign. I will assume that there's no way for him to scam me with this criteria since he is trusted.

This loan incident is really scary since the hacker manage to have access on an active account from high rank user. This means that the method of hacking is very tricky AF.


@Peanutswar, Sorry for your loss brother. 1000$ is very huge in our currency. PM me, have an offer.

[FatFork]

Why don't the forum set a warning when a different ip login as they do for password/ email change and waking up  this will make the other party try to verify the account owner first.
!warning this account used a new ip to login date ****
In that case even if someone trying to fake a hack it won't work  

That's a bad idea. Lots of people have ISPs that give them dynamic IP addresses, meaning their IPs change every now and then. And, as mentioned earlier, let's not forget about those who use VPNs or the TOR network to access the forum for legit reasons like privacy and security. This means that legit users who have no ill intentions could trigger false warnings simply due to the nature of their internet connection. So, if the forum starts setting off warnings for every IP change, it could end up causing a bunch of false alarms for regular users.

[LoyceV]

My fear is that you're providing an opportunity for scammers.

I think that's far-fetched, but if it happens the lender only has himself to thank. My feedback clearly says "no". I can't help it if a future lender ignores a very clear statement.

Don't make that your problem.

I don't consider leaving neutral feedback to be "a problem". After that, it's up to others how to value it.

I already have a very strong suspicion that one of the accounts tagged by LoyceV is the sockpuppet of a loan defaulter and escrow impersonator.

In that case; add your own neutral tag to make it more obvious to others.

someone has found some kind of backdoor or exploit to the system of impersonating users...maybe its a cookie hack!!

If that would be the case, it's unlikely to be abused for $1000 loan scams. Bitcointalk would pay a $10,000 to $50,000 security bounty for this.

Unusual ip I found via bitcointalk.org/myips.php  based on the deleted post date and time thanks to the loyce club archives.

Code:

Singapore 84.17.39.166 

The loan I did not apply for as can be seen below

The myips.php page only goes back 30 days. That means you couldn't have found this IP just now.

Why don't the forum set a warning when a different ip login

That would make many users worry unnecessarily. My IP for instance jumps back and forth between IPv4 and IPv6. Tor users and many others have a different IP every time.

[Igebotz]

I assume Shasan isn't convinced yet, and he doesn't appear to want to be a part of this discussion or accept responsibility for the OP's negligence.  To be honest, I wouldn't.

How does the so call impersonator knew the op password and login to the forum, and if really was hacked then the hacker can take any username and hack the password and use it to take loan. And if the impersonator used the op login details to login then it is a close friend of op that knows the forum very well. Well the op also agreed to pay the loan so Shasan has nothing to say again, but the op is also asking Shasan to extend the repayment of the loan.

This appears to be a mirror or keylogger attack on many accounts; the OP was not the only victim; the same scammer gained access to two other accounts while attempting to obtain a loan; so, this has nothing to do with OP's close pals.

Always check your post history and make it a habit to change your password and email address on a regular basis.

[LoyceV]

Always check your post history and make it a habit to change your password and email address on a regular basis.

That makes no sense. I have hundreds of passwords on hundreds of websites. Especially the sites that require the user to frequently change their password make users use weak passwords, or reuse them. Or they just enter all known passwords on any site until one of them gets accepted.
Either way, it doesn't improve security unless your password is already compromised, in which case case you're too late already.

[CYBER_COWBOY]

Why don't the forum set a warning when a different ip login as they do for password/ email change and waking up  this will make the other party try to verify the account owner first.
!warning this account used a new ip to login date ****
In that case even if someone trying to fake a hack it won't work  

You ever heard about a service called VPN? 

[Woodie]

I'd be curious to know what commonality @Peanutswar, @mdgabrielzim, and @Woodie have had in their browsing history.  If they all clicked on a phishing link, or if they all downloaded some software, or if they all participated in an off-site give-away that asked for forum details.  It would seem they all fell into the same trap.

I thought it was some of the new crypto platforms I have interacted with in the last couple of months, but unfortunately, I have ruled them out on the basis of other two accounts not being participants of service reviews or thread discussion!

I have also looked at Peanutswar and mdgabrielzim post history to try and find common ground of where this exploit might have originated from and honestly, we are three different people.

But my wild guess would be that, we all haven't changed passwords for a very long time and possibly **just assuming** maybe someone had access of the forums database and just started to act on this..and the fact that account sales might not be lucrative anymore, our accounts couldn't be sold but instead went for the loans for easy money...
And lastly, this hacker chose his/her victims based on any history of a user getting a loan and didn't use any other account that has never applied for one as this could raise suspicion ...it's my only logical explanation.

Unusual ip I found via bitcointalk.org/myips.php  based on the deleted post date and time thanks to the loyce club archives.

Code:

Singapore 84.17.39.166 

The loan I did not apply for as can be seen below

The myips.php page only goes back 30 days. That means you couldn't have found this IP just now.

I got that ip using myips.php page when I discovered this compromise months back not that I checked for this yesterday its also saved incase I get a hit when i search for it!
Btw, I have been doing my own investigation to see how much damage was done on my side and everything seems intact,  no social media account login attempts, bank accounts login attemps just cant find this guy.

[Igebotz]

Always check your post history and make it a habit to change your password and email address on a regular basis.

That makes no sense. I have hundreds of passwords on hundreds of websites. Especially the sites that require the user to frequently change their password make users use weak passwords, or reuse them. Or they just enter all known passwords on any site until one of them gets accepted.
Either way, it doesn't improve security unless your password is already compromised, in which case case you're too late already.

Changing password and email occasionally has always been a good security practice what changed now?

Using Google or a third party password suggestions sites is a bad practice and anything closer to username or DOB too.

[lovesmayfamilis]

I'd be curious to know what commonality @Peanutswar, @mdgabrielzim, and @Woodie have had in their browsing history.  If they all clicked on a phishing link, or if they all downloaded some software, or if they all participated in an off-site give-away that asked for forum details.  It would seem they all fell into the same trap.

Interesting. Yes, you yourself are tormented with guesses. This is precisely what will happen to others who do not understand what could happen. There was no password change, and the hacker and the user were posting on the forum simultaneously if you check the sessions of the IP addresses. The statement regarding the security of your account is very true, and this is precisely what works with the LoyceV offer as an additional tool. All the tricks with Linux and complex passwords, including following other people's links and working only with your network, may not work if social engineering specialists exist.
In addition, it may be worth writing in several languages so that someone understands the statement that some people do not need loans. Absolutely.

[cryptoaddictchie]

This loan incident is really scary since the hacker manage to have access on an active account from high rank user. This means that the method of hacking is very tricky AF.

Scammers upgrading their means of activity. This incirent will serve as fair warning to all who offered loans services. They will be tight and secure when it comes to users reputation. Aside from LoyceV, suggestion, what else can we do to avoid scheme like what happened on OP? I really want to figured out how they been able to make the hack possible. Hoping someone could point out terms in detail related to this case so everyone must be alerted but I am thinking on social activities of OP probably.

[Coin_trader]

This loan incident is really scary since the hacker manage to have access on an active account from high rank user. This means that the method of hacking is very tricky AF.

Scammers upgrading their means of activity. This incirent will serve as fair warning to all who offered loans services. They will be tight and secure when it comes to users reputation. Aside from LoyceV, suggestion, what else can we do to avoid scheme like what happened on OP? I really want to figured out how they been able to make the hack possible. Hoping someone could point out terms in detail related to this case so everyone must be alerted but I am thinking on social activities of OP probably.

I think a signed message using the original wallet address is the only way to avoid this kind of incident. It’s very hard to avoid potential hack since mistake can always occur when we are vulnerable while taking a loan can strictly moderated with proper loan requirements. DS usually don’t allow loan using new wallet address without any signed message.

I think Lenders should cooperate since this issue is for them too and not only for OP to not happened again in the future.


What about a notification on trust page once user login recently using different country IP address? Like the notification when password and email change? This might help us to determine that user is potentially under hack publicly.

[cryptoaddictchie]

What about a notification on trust page once user login recently using different country IP address? Like the notification when password and email change?

This is nice idea but probably wont be approved for certain reason like what if the user are just doing travelling and more of a vacation? I think thats a possibility that he might uses different IPs and keeps using forum to post or sign in. But thats a very rare case I guess and it will still favors the majority. Anywat is that possible to implement on a trial version?

[xLays]

If it's really true that Peanutswar didn't request the loan from the lender and the hacker actually benefited from the loan, maybe we can request the lender not to charge interest to Peanutswar. Since both parties have negligence IMO. (Not sure about the negligence lmao) Just peace of advice suggestion.

[lovesmayfamilis]

What about a notification on trust page once user login recently using different country IP address? Like the notification when password and email change? This might help us to determine that user is potentially under hack publicly.

It looks like you didn't read the posts above. What about someone who uses TOR or a VPN? Have you read about the features of their work? Why then does the forum carry the idea of anonymity if we are always tied to one IP address?
I previously asked about the idea of binding a user's IP address to protect against cheating, but later I realized that this is a bad idea. The forum is sometimes accessed from mobile phones, and unfortunately, some allow other people's Wi-Fi networks. This will also entail a change in addresses, not to mention the fact that those who use proxy servers do not always know what country they are writing from.

[Coin_trader]

What about a notification on trust page once user login recently using different country IP address? Like the notification when password and email change? This might help us to determine that user is potentially under hack publicly.

It looks like you didn't read the posts above. What about someone who uses TOR or a VPN? Have you read about the features of their work? Why then does the forum carry the idea of anonymity if we are always tied to one IP address?
I previously asked about the idea of binding a user's IP address to protect against cheating, but later I realized that this is a bad idea. The forum is sometimes accessed from mobile phones, and unfortunately, some allow other people's Wi-Fi networks. This will also entail a change in addresses, not to mention the fact that those who use proxy servers do not always know what country they are writing from.

It's just a notification if someone use other country IP and it doesn't exposed the actual IP of the user that breaks the anonymity of his forum account. How is this different on email change, recently woke up and change password notification?

It's like a warning that a user use a different IP from it's normal country. No one cares to see your trust setting if you are not asking for a loan or doing out of normal activity.

Edit:

I already have a glimpse of what you are talking above. I get now your point @lovesmayfamilis.

[Renampun]

sorry for OP.

it's really unimaginable for me if I have to pay a debt that I never made. but I'm still really curious about why something like this could happen (I might missing something), this is a valuable lesson that can be used as an example by everyone. by the way, I also applied for a loan from Shasan but I really did. don't get discouraged OP, repay slowly so it doesn't burden you because your account already has a high rank.

[robelneo]

This incident is very unfortunate for OP I hope Shasan will consider implementing a waiting period of say 48 hours or more for a loan that is higher than $500 and put a neutral tag first like " This user is going to take a loan will grant in the next 48 hours" while waiting for the neutral tag to expire and just change it when the loan is granted.
This is just a suggestion it's still up to Shasan and other lenders to implement it.

[Igebotz]

This incident is very unfortunate for OP I hope Shasan will consider implementing a waiting period of say 48 hours or more for a loan that is higher than $500 and put a neutral tag first like " This user is going to take a loan will grant in the next 48 hours" while waiting for the neutral tag to expire and just change it when the loan is granted.
This is just a suggestion it's still up to Shasan and other lenders to implement it.

It would make no difference and would negatively impact those who desperately need a loan. The only way to avoid this is to request a signed message from a staked address and validate it before issuing a loan..