TheButterZone (OP)
Legendary
Offline
Activity: 3024
Merit: 1032
RIP Mommy
|
![](https://bitcointalk.org/Themes/custom1/images/post/exclamation.gif) |
September 03, 2023, 09:35:08 AM |
|
I just got a phishing spam, and as I was viewing the source prior to reporting it to ISPs, I saw a bunch of instances of "bitcointalk" before the @ sign in the To: email addresses. Ended up finding 7 by text search. So it seems these people were using site-specific email addresses; would be weird if they added "bitcointalk" for any other website... Oop, yes there was https://haveibeenpwned.com/PwnedWebsites#BitcoinTalk & I checked all of them, they all matched as pwned from 2015. Nevermind...
|
Saying that you don't trust someone because of their behavior is completely valid.
|
|
|
PrimeNumber7
Copper Member
Legendary
Offline
Activity: 1652
Merit: 1899
Amazon Prime Member #7
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 03, 2023, 10:34:13 AM |
|
Yes, one of the prior hacks of the forum leaked the members table, which includes the email address associated with each forum account at the time
|
|
|
|
hosseinimr93
Legendary
Offline
Activity: 2492
Merit: 5543
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 03, 2023, 11:19:18 AM Merited by vapourminer (2) |
|
There was an attack in 2011 in which the hacker gained administrative access to the forum. For more information about that attack, visit the topic created by theymos. Info about the recent attackThere was also another attack which happened in 2013 and the attacker may have gained access to email addresses. About the recent attack
|
|
|
|
DYING_S0UL
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 03, 2023, 11:22:52 AM |
|
It was mainly because of the attack of 2011 & 2013 where Bitcointalk data got leaked.
|
| AoBT | | ▄▄█████████████████▄▄ ███████████████████████ █████████████████████████ █████████████████████████ █████████████████████████ █████████████████████████ █████████████████████████ █████████████████████████ █████████████████████████ █████████████████████████ █████████████████████████ ███████████████████████ █████████████████████████ | | The Alliance of Bitcointalk Translators | | | | │ | | ▄▄▄███████▄▄▄ ▄███████████████▄ ▄███████████████████▄ ▄█████████████████████▄ ▄███████████████████████▄ █████████████████████████ █████████████████████████ █████████████████████████ ▀███████████████████████▀ ▀█████████████████████▀ ▀███████████████████▀ ▀███████████████▀ ▀▀▀███████▀▀▀ | . JOIN US | | │ | | ▄███████████████████████▄ █████████████████████████ █████▀▀██████▀▀██▀▀▀▀████ ██████████▀██████████████ █████▄▄███████▄▄▀████████ █████████▄▀▄██▀▀█████████ █████████████████████████ █████████████████████████ ████████████▀████████████ ▀███████████████████████▀ █████ ██████████
| . HIRE US | | │ |
|
|
|
Mr.right85
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 03, 2023, 11:54:23 AM |
|
There was an attack in 2011 in which the hacker gained administrative access to the forum. For more information about that attack, visit the topic created by theymos. Info about the recent attackThere was also another attack which happened in 2013 and the attacker may have gained access to email addresses. About the recent attackHaving to be reminded of these series of attacks haven’t taken place in about 3 occasions based on discoveries on this thread, it leads me to believe the forum isn’t completely safe as I would have liked to believe. Could that be the case? What were the possible entry point for these hackers and What was put in place to prevent future occurrences? Seems probable accounts remains accounts within the 2011/2015 time frame for now. Even then, Bitcointalk haven’t gotten more recognition or interest in the minds of most, how about now!
|
..Stake.com.. | | | ▄████████████████████████████████████▄ ██ ▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄ ██ ▄████▄ ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██ ██████ ██ ██████████ ██ ██ ██████████ ██ ▀██▀ ██ ██ ██ ██████ ██ ██ ██ ██ ██ ██ ██████ ██ █████ ███ ██████ ██ ████▄ ██ ██ █████ ███ ████ ████ █████ ███ ████████ ██ ████ ████ ██████████ ████ ████ ████▀ ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██ ██ ▀▀▀▀▀▀▀▀▀▀ ██ ▀█████████▀ ▄████████████▄ ▀█████████▀ ▄▄▄▄▄▄▄▄▄▄▄▄███ ██ ██ ███▄▄▄▄▄▄▄▄▄▄▄▄ ██████████████████████████████████████████ | | | | | | ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄ █ ▄▀▄ █▀▀█▀▄▄ █ █▀█ █ ▐ ▐▌ █ ▄██▄ █ ▌ █ █ ▄██████▄ █ ▌ ▐▌ █ ██████████ █ ▐ █ █ ▐██████████▌ █ ▐ ▐▌ █ ▀▀██████▀▀ █ ▌ █ █ ▄▄▄██▄▄▄ █ ▌▐▌ █ █▐ █ █ █▐▐▌ █ █▐█ ▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█ | | | | | | ▄▄█████████▄▄ ▄██▀▀▀▀█████▀▀▀▀██▄ ▄█▀ ▐█▌ ▀█▄ ██ ▐█▌ ██ ████▄ ▄█████▄ ▄████ ████████▄███████████▄████████ ███▀ █████████████ ▀███ ██ ███████████ ██ ▀█▄ █████████ ▄█▀ ▀█▄ ▄██▀▀▀▀▀▀▀██▄ ▄▄▄█▀ ▀███████ ███████▀ ▀█████▄ ▄█████▀ ▀▀▀███▄▄▄███▀▀▀ | | | ..PLAY NOW.. |
|
|
|
LoyceV
Legendary
Offline
Activity: 3402
Merit: 17183
Thick-Skinned Gang Leader and Golden Feather 2021
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 03, 2023, 02:01:30 PM |
|
it leads me to believe the forum isn’t completely safe as I would have liked to believe. Could that be the case? Nothing is completely safe. I guess you needed the wake-up call.
|
|
|
|
dzungmobile
Sr. Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif) ![*](https://bitcointalk.org/Themes/custom1/images/star.gif) ![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 812
Merit: 407
I stand with Ukraine!
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 03, 2023, 02:06:08 PM Merited by vapourminer (2) |
|
It was mainly because of the attack of 2011 & 2013 where Bitcointalk data got leaked.
The forum was hacked three times, not two times, in 2011, 2013 and 2015. Details in Bitcointalk history of hacks and vandalism
|
|
|
|
elevates
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 03, 2023, 02:29:30 PM |
|
I was so surprised to read that user email address got compromised back in those days. In the time of AI and what not, does anyone think that the forum should think about forum version upgrade. I am not a software engineer but I can relate to issues that can come up in the future. For example there is a dedicated thread to detect AI written content. Whereas the mods are still trying to understand such a contents uniquess. In the end it would be a simple to compile a reason.
|
|
|
|
PX-Z
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 03, 2023, 03:57:51 PM |
|
So it means you didn't change your email since 2015? Even after the hack? Theymos made a reminder to change account's password coz users might received future spam phishing mails. As such, you should change your password here and anywhere else you used that same password. You should disable your secret question and assume that the attacker now knows your answer to your secret question. You should prepare to receive phishing emails at your forum email address.
|
|
|
|
Nwada001
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 03, 2023, 08:00:32 PM |
|
Some questions are really relevant to a few people like me who are not that old of a member and have not come across some threads that have detailed information regarding some things in the forum past the security bridge, as this has added to the little knowledge I have. Even if I have come across some of the forum details threads, I have not really read this email leakage part.
Leak or no leak I just prepare myself to receive emails from any scammer, provided that I have registered the email someplace. That's why it's good to register some things with just a specific email so that when you get some kind of mail, you know it's spam without even opening it, as you were not even expecting them in the first place.
|
R |
▀▀▀▀▀▀▀██████▄▄ ████████████████ ▀▀▀▀█████▀▀▀█████ ████████▌███▐████ ▄▄▄▄█████▄▄▄█████ ████████████████ ▄▄▄▄▄▄▄██████▀▀ | LLBIT | │ | CRYPTO FUTURES | | | | | | | │ | 1,000x LEVERAGE | │ | COMPETITIVE FEES | │ | INSTANT EXECUTION | │ | . TRADE NOW |
|
|
|
franky1
Legendary
Offline
Activity: 4312
Merit: 4632
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 03, 2023, 09:51:41 PM |
|
im not worried about the leak. funnily enough i use many email addresses . and the ones for here doesnt get much spam yet another i used for a popular exchange gets like 12 spam emails a day.. and its a regulated exchange with all the certification of top security... .. the problem is you are more likely to get scam and spam mail from services that sell your data.. not hacked services
the main reason is, if companies are paying for data, they will want ROI on their investments so are more likely to try selling you things you never asked for
a few tricks to learn have several email addresses. mainly used for specific services only. that way you can narrow down the possible sources of who gave out your email. if the spam gets too much, because its not affiliated with other services. you can easily change email with that one service and just abandon that email address
|
I DO NOT TRADE OR ACT AS ESCROW ON THIS FORUM EVER. Please do your own research & respect what is written here as both opinion & information gleaned from experience. many people replying with insults but no on-topic content substance, automatically are 'facepalmed' and yawned at
|
|
|
libert19
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 04, 2023, 03:36:18 AM |
|
My email was leaked in 2015 bitcointalk hack (previous account), and countless other platforms even then I don't receive much spam. I personally don't think having spam mails is a big deal, spam mails in most cases are obvious, and they giveaway so with their titles, you don't even have to open them.
|
| | . .Duelbits. | │ | ..........UNLEASH.......... THE ULTIMATE GAMING EXPERIENCE | │ | DUELBITS FANTASY SPORTS | ████▄▄▄█████▄▄▄ ░▄████████████████▄ ▐██████████████████▄ ████████████████████ ████████████████████▌ █████████████████████ ████████████████▀▀▀ ███████████████▌ ███████████████▌ ████████████████ ████████████████ ████████████████ ████▀▀███████▀▀ | . ▬▬ VS ▬▬ | ████▄▄▄█████▄▄▄ ░▄████████████████▄ ▐██████████████████▄ ████████████████████ ████████████████████▌ █████████████████████ ███████████████████ ███████████████▌ ███████████████▌ ████████████████ ████████████████ ████████████████ ████▀▀███████▀▀ | /// PLAY FOR FREE /// WIN FOR REAL | │ | ..PLAY NOW.. | |
|
|
|
Lucius
Legendary
Offline
Activity: 3332
Merit: 5913
Crypto Swap Exchange🈺
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 04, 2023, 01:12:49 PM |
|
I also thought that it was hacked only twice, because this is the first time I found out that the first hacking happened back in 2011, and it seems to me that maybe the biggest damage was done then, if we take into account that no one noticed the hack even 6 days, and that the hacker took over the Satoshi account. Fortunately, it was still the early days of the forum, because if something like that were to happen today, it would create a real circus. The attacker first paid for a donator account so he could change his displayed username. The displayed username field is not escaped properly, so he was able to inject SQL from there. He took over Satoshi's account, and from Satoshi's administrative interface he was able to inject arbitrary PHP code by modifying the style template.
|
|
|
|
joker_josue
Legendary
Offline
Activity: 1750
Merit: 4780
**In BTC since 2013**
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 04, 2023, 06:51:45 PM |
|
My email was leaked in 2015 bitcointalk hack (previous account), and countless other platforms even then I don't receive much spam. I personally don't think having spam mails is a big deal, spam mails in most cases are obvious, and they giveaway so with their titles, you don't even have to open them.
Totally agree. And I don't remember receiving spam that has any reference to the forum. What could have happened is that the email entered some database, and they received spam - which I don't even see - about some other subject. Personally, I am extremely selective about opening an email, even more so when clicking on a link.
|
█████████████████████████ ████████▀▀████▀▀█▀▀██████ █████▀████▄▄▄▄██████▀████ ███▀███▄████████▄████▀███ ██▀███████████████████▀██ █████████████████████████ █████████████████████████ █████████████████████████ ██▄███████████████▀▀▄▄███ ███▄███▀████████▀███▄████ █████▄████▀▀▀▀████▄██████ ████████▄▄████▄▄█████████ █████████████████████████ | BitList | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . REAL-TIME DATA TRACKING CURATED BY THE COMMUNITY . ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | List #kycfree Websites |
|
|
|
digaran
Copper Member
Hero Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif) ![*](https://bitcointalk.org/Themes/custom1/images/star.gif) ![*](https://bitcointalk.org/Themes/custom1/images/star.gif) ![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 1330
Merit: 899
🖤😏
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 06, 2023, 04:35:40 AM |
|
IMO, the only reason for all the hacks were to obtain information about satoshi and a few others directly in contact with him.
|
🖤😏
|
|
|
robelneo
Legendary
Offline
Activity: 3332
Merit: 1214
Payment Gateway Allows Recurring Payments
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 06, 2023, 05:24:27 AM |
|
Having to be reminded of these series of attacks haven’t taken place in about 3 occasions based on discoveries on this thread, it leads me to believe the forum isn’t completely safe as I would have liked to believe. Could that be the case?
The last attack was ten years ago and every attack makes the site improve its security, No platform is safe that is why there is such a thing as bounties for security breaches not only on Bitcointalk but on other platforms as well. What were the possible entry point for these hackers and What was put in place to prevent future occurrences? There is no one process, it could be social engineering, software exploitation, or brute force attack, in the case of SMF there is modification software to enhance security, and since the version is one of the oldest versions they can modify the source to enhance security.
|
|
|
|
scorrem
Newbie
Offline
Activity: 3
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 06, 2023, 09:09:15 AM |
|
This hack must be responsible for lot of hacked high rank accounts which were meant to be sold. But merit system broke the heart of these hackers and sellers.
|
|
|
|
libert19
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 09, 2023, 11:57:28 AM |
|
This hack must be responsible for lot of hacked high rank accounts which were meant to be sold. But merit system broke the heart of these hackers and sellers.
How? People got merit airdropped according to their rank when merit system was implemented.
|
| | . .Duelbits. | │ | ..........UNLEASH.......... THE ULTIMATE GAMING EXPERIENCE | │ | DUELBITS FANTASY SPORTS | ████▄▄▄█████▄▄▄ ░▄████████████████▄ ▐██████████████████▄ ████████████████████ ████████████████████▌ █████████████████████ ████████████████▀▀▀ ███████████████▌ ███████████████▌ ████████████████ ████████████████ ████████████████ ████▀▀███████▀▀ | . ▬▬ VS ▬▬ | ████▄▄▄█████▄▄▄ ░▄████████████████▄ ▐██████████████████▄ ████████████████████ ████████████████████▌ █████████████████████ ███████████████████ ███████████████▌ ███████████████▌ ████████████████ ████████████████ ████████████████ ████▀▀███████▀▀ | /// PLAY FOR FREE /// WIN FOR REAL | │ | ..PLAY NOW.. | |
|
|
|
Zenp
Jr. Member
Offline
Activity: 33
Merit: 37
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
September 09, 2023, 12:34:50 PM |
|
I was reminded of a phishing attempt warning email I received on June 2, 2016 as my email was registered with bitcointalk in 2015. This attempt might've been from the email db leak from 2011 or 2013 that others have mentioned. I can say this because I didn't actually receive the phishing attempt email, but only a warning of it from Kraken: ![](https://ip.bitcointalk.org/?u=https%3A%2F%2Fi.ibb.co%2FmTDSC2z%2FKraken.png&t=665&c=GkEa8fCBGKOYFw) Here is the link to the reddit post: https://www.reddit.com/r/Bitcoin/comments/4m3op0/psa_phishing_attempts_reported_today_kraken_re/Some users on the reddit post also mentioned that they did not receive the phishing attempt email. My guess is because they registered between 2013 and 2016, and their data was not leaked, and as such did not receive the phishing attempt.
|
|
|
|
|