harizen - ban appeal

[stompix]

So starting from the assumption that everything you have told us is true, there is a simple thing you should check first
- log in to all accounts created with the email address used for the forum!
- that doesn't trigger any red flags try to verify all accounts for which you have used the username/password combination

If you have discovered others have also been hacked or are blocked for logins or anything fishy then you might have a ton more problems than the bitcointalk account.

Once you zero in on this account only, then it's far easier, no malware will only target your Bitcointalk account, no hacker will be satisfied with this!
From mistakenly using a clone website to log via a phishing link to connecting by mistake to a compromised Wi-Fi while traveling, not that just because it happened now doesn't mean that the person got access yesterday, he might have had it for months and just waited for it or was unable to use it.

[1714663292]

1714663292

[Lafu]

I don't know what's the chance of getting my account unlocked but I'm hoping.

I already sent an email to the address given on the error message.

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account harizen has been hacked/lost. Please reset the email to mirglobalbtc@gmail.com. The current date is October 5, 2003.
-----BEGIN SIGNATURE-----
12tNRHh7q51F2TnVr45hwNH9u1kqHNrgem
IIMhqRIOc18cGvl9IlnqLDMPWjVsN1Ms61bHcZX1TnXtSeQhLn18vEgVl5YdNZyxPYMXFryQR1bbEf3ufa90iJo=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: https://bitcointalk.org/index.php?topic=996318.msg24176166#msg24176166

The chance of getting your Account is already there but nobody can say how long that will take if you are right for what you say.
Sometimes it goes fast like 1 or 2 Weeks but it also can be take longer like a month or 2 so i guess you have to wait and follow the instructions from the recovery team.

Looks like the verified Message is right but its not the year 2003 that you have written in the Message.

For now harizenbanappeal the red tagg from me on your hacked Account will be stay there til you got your Account back.
Write here in this thread with your harizen Account when you have it and i will remove the negativ Feedback then.

[Findingnemo]

Perhaps some cybercriminals were able to extract your Bitcointalk session cookies and sell them on a darknet marketplace while you were away (this can be mitigated by logging out and back in again).
.
.

Cookie stealers mostly concentrate on Google accounts, especially YouTube but this may be the first time in my knowledge if that is the actual reason for this compromise.

In the recent past, a few accounts were compromised in the same way but they just used to take loans via bitcointalk and let the owners pay it back so possibly the same group targeted the bitcointalk accounts again with much more severe like spreading malware and possibly to attack more users whoever by clicking the link.

So I wonder if this is going to be a big issue if this happens to other accounts too.

Apart from using strong passwords, we don't really have any mechanism to fight against this so probably this can be the reason to implement 2FA on bitcointalk.

[Doan9269]

We have to ensure that nobody have access to the device we use to login to the forum at any time, we shouldn't reveal our login details or private keys, passwords email credentials or any sensitive information about us, try check your email as well as your contact number if not hacked as well, it might be someone close to you who have access to your device or things you do that are unhealthy for your safety online.

[SamReomo]

After reading the whole thread and all replies of it I can say that @OP's account was compromised in a way that's not yet determined. The OP confirmed that he didn't install any plugins, extensions, and other software that can be downloaded from unknown sources, but sometimes we mistakenly download software from trusted sources or extensions from the Chrome web store and trust those extensions and software blindly but they may contain malware inside them without our knowledge. The other thing can happen when someone downloads an open-source software in exe format as that one is already compiled as we are not sure that how it was compiled that's why we can still be at risk. Most of us don't really compile open-source software ourselves and we just download those software by thinking that they are open-source and safe.

@OP I recommend you to back-up all of your essential data and then wipe out all drives of your pc. After that you should install a safe Linux distro on your system instead of using Windows operating system because Linux distros are much safe as compare to Windows OS. That thing will at least secure you from the hackers if they have installed a malware in your system. Other than that I suggest you to change password of your e-mail account which you use on this forum because if someone has access to your e-mail account then that hacker can do even worse things with your other accounts on different platforms where you used the same e-mail to register your accounts.

I hope that soon you may get access to your account on forum once again and you may post from your own account. Best of luck in getting your account back. I believe a good member like you should get his account once again and I also believe that the all members of the forum will support you in getting your account back.

[dkbit98]

This is really strange. I mean how??

Did you receive any PM in forum recently, and did you click any links?
Most likely you gave hackers your login details with some phishing page that looks almost identical to original bitcointalk forum.
Maybe you accessed forum from different device/location, and all it takes in few seconds for something like this to happen.
If you are using wind0ws, consider switching to Linux OS (Debian, Fedora, Mint) to reduce chances of getting malware.

PS
One good developer is working on adding 2FA on bitcointalk forum, so I would also use that in future when it get's introduced, as additional protection.

[examplens]

<...>

OP, Maybe you should try contacting Cyrus directly via Discord. I got the impression that he is more up-to-date there on PM than here on the forum.
Here is ANN and the invite link.

It's on a short notice, but thought it might be fun to hang out for the 2020 Halving event so we made a Discord server. - Apparently might be a thing now  

Invite link: https://discord.gg/ahgHyku (shouldn't expire)

PS
One good developer is working on adding 2FA on bitcointalk forum, so I would also use that in future when it get's introduced, as additional protection.

Does this good developer also develop epochtalk forum software? I'm afraid it won't be so soon 

[LogitechMouse]

It took me I think or more than a week when I experienced the same thing. My account got hacked last year, and with that, I knew that the email that I used in this account is being pwned (I think this is the term they used correct me please if I'm wrong). I changed my email, used an email that hasn't been used ever since, but created for quite some time, and until now, it's been all good in the hood.

Hey Kabayan.

Did you just send an email to the provided address and just wait? No follow-up?  

Yow . IIRC, they gave an email where I need to recover my account, then waited for a week until they responded with a link where I can reset my password there.
At least that's what I remembered. Don't panic though. @Lafu already said that your account will be back, and he helped me alongside other users here to recover mine, so you will recover yours - much faster than I am I guess.

[SquirrelJulietGarden]

PS
One good developer is working on adding 2FA on bitcointalk forum, so I would also use that in future when it get's introduced, as additional protection.

Does this good developer also develop epochtalk forum software? I'm afraid it won't be so soon 

dkbit98 implied about PowerGlove who developed many SMF patches recent months and some of patches were approved by theymos.

He is in developing 2FA patch for the forum: A concise 2FA/TOTP implementation (SMF patch).

No information, sneak peek from PowerGlove about his plan and contribution for EpochTalk new forum software.

[Peanutswar]

It seems like your account was compromised by the hacker, it created a thread on the same day too base on your trust summary of your account, ideal if you have the fully security with your email so you can recover your account. I encounter someone to access my account I recommend making a daily check with the IP address where you login most of the time.

Code:

https://bitcointalk.org/myips.php

this gives you a heads up immediately if someone takes your account and use the telegram bot notification so every message you will be aware. good luck in your account recovery. Hoping sooner or later there's a 2FA develop so there's another layer of security.

[dkbit98]

No information, sneak peek from PowerGlove about his plan and contribution for EpochTalk new forum software.

Yeah I was talking about him and I was secretly hoping he might pick up and speed up development of EpochTalk
Even if that scenario never happens, he did a great job of fixing bugs and improving current software, but he can't turn grandma into young girl again.  

[freedomgo]

I can vouch for Harizen as one of the reputable users in our local community, so I was surprised that his account was banned. I'm sure the account was compromised. Hopefully, @kabayan, you will be able to get some help to recover your account. I'm following this thread, so I can also get some insight into the current situation. If it's resolved, at least it will give us an idea on how to recover our accounts if they're compromised.

I will post the situation in our local community. Perhaps you'll also receive some advice from users there.

[Lafu]

I can vouch for Harizen as one of the reputable users in our local community, so I was surprised that his account was banned. I'm sure the account was compromised. Hopefully, @kabayan, you will be able to get some help to recover your account. I'm following this thread, so I can also get some insight into the current situation.

The Account got compromised or hacked without any doubts and its proven already with that ban appeal here.

If it's resolved, at least it will give us an idea on how to recover our accounts if they're compromised.

You need no idea on how to recover your account when something happend to it like this.
Its clearly stated here how and what you have to do Recovering hacked/lost accounts
From there on nobody else needs to know whats going on between the Recovery Account Team and the User for security reasons.

[Dr.Bitcoin_Strange]

That's what those hackers do. They no longer change passwords so that the owner of the account won't be alert through their email address that the password has been changed. All they do is log into the compromised account and the post links to malware

You are right, boss. Those hackers are very sensitive and experienced in the sense that they equally know that if they try to steal a forum member's account, they will not be able to prove themselves as the real owners of the account, because definitely the forum will ask for a signed Bitcoin message through the wallet that they have already used on the forum. Crazy things are happening these days, pioneered by these hackers, who always want to reap where they did not sow. I also saw the case of a member on this forum whose account was accessed and was used to collect a $1000 loan from Shasan. In that same case, there was no change of password on the victim account.

@Harizen, Things like these happen more often these days, and the way to prevent them is to always be cautious of activities, websites, apps, and programs that you run on your device. I wish you luck in getting your account back.

[Bitcoin_Arena]

Damn that sucks OP. Imagine one day logging in and in the last few hours a lot has happened... Account got hacked, post some malware and got banned by the mods. I think I have seen some other user in kind of situation before. His appeal fell on deaf ears/ or blind eyes.
I hope you manage to recover your account, OP.

Just out of curiosity, is there any member in a similar situation who has ever managed to recover his account and get unbanned?

[sheenshane]

Just out of curiosity, is there any member in a similar situation who has ever managed to recover his account and get unbanned?

I remember there is, but in a different case, and luckily it wasn't banned even though the account posted a scam website until the account was recovered quickly.  It's also come from our country but I forgot the name.
This case seems worse because the hacker posted malware links which is a bannable offense.

I'm just curious how the hacker obtained the OP's details and logged into his account.
I've been here in the forum for many years and never changed my password from the start because I know I'm using a safe device.  So now, to prevent incidents like this, it's important to know what's the reason for getting hacked or getting your account compromised.

Mate @harizen, I hope for a fast recovery of your account.
I think you have a high chance of recovering it.

[Dave1]

Damn that sucks OP. Imagine one day logging in and in the last few hours a lot has happened... Account got hacked, post some malware and got banned by the mods. I think I have seen some other user in kind of situation before. His appeal fell on deaf ears/ or blind eyes.
I hope you manage to recover your account, OP.

Just out of curiosity, is there any member in a similar situation who has ever managed to recover his account and get unbanned?

Yes, there is one, My Account - LogitechMouse has been hacked and locked.

Similar in nature, hacker didn't change the password, but instead posted some malicious links and someone caught it, reported his account and the recovery team was able to get it back for him.

Just scary though, I mean I thought that this hacking of accounts here has been reduced since the introduction of merits as it's useless to hack someone and used or sell it. But the criminals have evolved as well, not to change the password as not to aroused suspicions and instead try to PM or create a thread that has some malware on it.

[freedomgo]

Damn that sucks OP. Imagine one day logging in and in the last few hours a lot has happened... Account got hacked, post some malware and got banned by the mods. I think I have seen some other user in kind of situation before. His appeal fell on deaf ears/ or blind eyes.
I hope you manage to recover your account, OP.

Just out of curiosity, is there any member in a similar situation who has ever managed to recover his account and get unbanned?

Yes, there is one, My Account - LogitechMouse has been hacked and locked.

Similar in nature, hacker didn't change the password, but instead posted some malicious links and someone caught it, reported his account and the recovery team was able to get it back for him.

Just scary though, I mean I thought that this hacking of accounts here has been reduced since the introduction of merits as it's useless to hack someone and used or sell it. But the criminals have evolved as well, not to change the password as not to aroused suspicions and instead try to PM or create a thread that has some malware on it.

I'm confident that the account of Harizen will be recovered, he is a valuable member of the forum so I think he'll be considered. Judging on the case of LogitechMouse, the recovery period was only 8 days, or less than 2 weeks, so hopefully soon we wil see some good news coming from Harizen's account saying "hey I'm back" kind of deal.

[UmerIdrees]

No downloading attachments, no downloading apps, not entering any inputs on a field, etc.

I don't welcome any random apps, browser plugins, extensions, etc. from random sources on my PC. It's been well protected by me for years and this is actually the first time I got to this kind of situation. Aside from that, all my keys, passwords, and any personal stuff can't be found on my PC, email, notepad, files, etc. as I stored those on my external flash drive and a backup USB drive.

Sometimes we make sure that all these security requirements are duly followed but we forget that firstly password needs to be strong enough and not easily guessable. I hope you have kept a stongest password for the account so it cannot be guessed by any hacker.

Also i can understand your situation as how you would be feeling with your account locked with none of your mistakes. I hope things are settled quickly and you get back access of your main account soon.

[Lafu]

Just out of curiosity, is there any member in a similar situation who has ever managed to recover his account and get unbanned?

There was a few Users that something similar happened to them and i helped to recover them or assisted them on the way.
But nobody can say how long it takes to recover them as it is a case by case thing for every Account.
Sometimes it takes only 1 or 2 Weeks , sometimes longer , he has just to wait now and follow the steps from the Account Recovery Team.