What is going on???

[shasan]

I have noticed several accusations that they have not asked me for any loan but they have not changed their password. Unfortunately, I have accepted one of them. I am worried about the access of those accounts without changing the password. How is the hacker processing like this?

Case 1: https://bitcointalk.org/index.php?topic=5459055
Case 2: https://bitcointalk.org/index.php?topic=5478004.msg63344637#msg63344637
Case 3: https://bitcointalk.org/index.php?topic=5030169.msg63440375#msg63440375
I think there might be many more though I can't remember and do not know how many people are facing problems like this. And how long we may keep safe ourselves.
Case 4: https://bitcointalk.org/index.php?topic=5030169.msg63543020#msg63543020

[1714954484]

1714954484

[1714954484]

1714954484

[1714954484]

1714954484

[shasan]

reserve

[tranthidung]

I think there might be many more though I can't remember and do not know how many people are facing problems like this.

Not sure about two other cases but for case 2, it seems a terrible practice was made (at least it is what the user told us).

Teleporting an account from Bitcointalk to Altcoinstalks, and using a same password. It breaks an important principle, don't reuse password on different platforms.

I recently teleported my account in altcoinstalks. I was required to put the same username there too. So I used the same password there as well.

No requirement to use the same password for the process!

I don't know it is a reason or just a fake one, used by the user to fool us but let's say, reuse password is bad practice.
I don't believe admin of Altcoinstalks forum plays bad and do something like this with his forum members but who knows. And let's take this case to make a warning, again

Don't reuse password.
Password must be unique, best if randomly generated, and strong.

[stompix]

I don't know it is a reason or just a fake one, used by the user to fool us but let's say, reuse password is bad practice.
I don't believe admin of Altcoinstalks forum plays bad and do something like this with his forum members but who knows. And let's take this case to make a warning, again

Sound like too much of a stretch, if anyone with access to that data would have had really malicious intents he wouldn't have opened a loan request from an active user, they would have ta lot of other things too and for sure not acted just as soon as they got the pass for $300 knowing they will be the fist to have the fingers pointing at them. But leaving altcoinstalk side, another compromised platform might be indeed plausible, all the users should check if their email isn't already on some pawned list , with so many scam shitty offers around here I wouldn't be surprised if more haven't already entered the same credentials to dozens of sites.

Of course, there are a few other explanations for this but I'm not going to create a shitstorm by mentioning them, I'm leaving that to some other unlucky bastard!

Unfortunately, I have accepted one of them. I am worried about the access of those accounts without changing the password.

Will be a bit of pain in the ass for the eons asking for a loan but make it mandatory to ask for a loan with a signed message from an used address on this forum, at that point you don't have to look for suspicious activity and waste your time wondering every moment if this is the real guy while siding hundreds of "is this really you?" messages.

Plus there won't be any kind of 'it wasn't me" situations where you get scammed of some $.

[notblox1]

I have noticed several accusations that they have not asked me for any loan but they have not changed their password. Unfortunately, I have accepted one of them. I am worried about the access of those accounts without changing the password. How is the hacker processing like this?

Maybe someone else in their surrounding had access to their accounts, so there was no need to rest password and take full ownership of account.
Weak passwords are easy to crack but in most times users made mistake with sharing password, or keeping browser opened with logged in account.
I looked at examples you posted and I would not fully trust what those members are saying.

[Stalker22]

~
I looked at examples you posted and I would not fully trust what those members are saying.

Exactly. Just because someone claims their account was hacked doesnt mean its true. That tjtonmoy character looks particularly suspicious. He has a history of lying and cheating in contests and bounties. I do not believe in his story.

[SamReomo]

Exactly. Just because someone claims their account was hacked doesnt mean its true. That tjtonmoy character looks particularly suspicious. He has a history of lying and cheating in contests and bounties. I do not believe in his story.

Although, you're right with your doubts but the story he shared seems a little bit informative at least for the ones who use same password on many platforms. It's always better to use different passwords for different platforms and one should avoid using same password or similar passwords on different platforms. I'm not saying that whatever the guy claimed might be correct exactly but it's a matter of concern and that's why I believe others should learn from it.

In 3rd case I also found something strange and I believe that someone else might have used his account to place that loan request as in the 1st case, but in 3rd case the user's account wasn't compromised at all, and I believe someone around him might knows his computer's password and that person might have asked for a loan instead of the real owner of the account.

[alani123]

Easy guess. But we can only speculate.
Probably some accounts that grew to become reputable haven't actually change their passwords in a good while and it must have been caught on a compromise.
Someone with malicious intent was just testing accounts and got access to these.

It might be a good idea from now on to require loan requests to be done with a staked address or signed by one.

[Poker Player]

I don't think it is due to a generalized problem, considering that the first case occurred six months ago, the second one a month ago and the third one yesterday. And even more so if we question any of the three stories. As you have been told repeatedly, by asking for a signed message you avoid problems, and as I see you already did yesterday in the case of ryzaadit.

[tjtonmoy]

~
I looked at examples you posted and I would not fully trust what those members are saying.

Exactly. Just because someone claims their account was hacked doesnt mean its true. That tjtonmoy character looks particularly suspicious. He has a history of lying and cheating in contests and bounties. I do not believe in his story.

FatFork's proof shows OP's isn't honest. He hasn't posted after FatFork's post. He's said he doesn't know how to ask for loans. He didn't tell why he's asked $450 USDT before this topic. Why'd he send MRI scans on telegram in private if he's begging in forum he should've posted them here.OP's deleted the $450 loan post trying to remove proof after Shasan's rejected it. He's changed his bitcoin payment address for eloncoin sig campaign. His password's changed to This user changed his/her password recently.. There's hole in his story.I don't believe OP's story. I don't want to offend ppl who believe him but OP's 2023 trust says he isn't honest so I'll say he's a liar.

Do you want me to share my bank details here too? Come on man grow up. I am not in the mood to talk about this now. I am not sure myself yet how that happened so I did some research. You should too before pointing fingers at someone. I recently teleported my account in altcoinstalks. I was required to put the same username there too. So I used the same password there as well. And I can say for sure that that was the reason why my account was compromised. I will just leave a picture with all it IP addresses from which my account was accessed. I have blurred my personal IP address for my own privacy reasons. If you think that they are forged, give me a dm and I will show live proof with a video too. But you need to be at least a hero or legendary member. I did not also get any notification on ninjastic space tg notification bot for any mentions otherwise I would have known before. Thanks, FatFork for your investigation otherwise I wouldn't have noticed it and I would've been in a very bad situation. Also thanks Royse777 for reaching out to me and asking for proof. I gave him the evidence through inbox because I trust him. I will not be sharing any of my info publicly.

READ FULL POST HERE: https://bitcointalk.org/index.php?topic=5478004.msg63344637#msg63344637

I have shared non-blurred ip address screenshot with shasan too... If you want to know then you can ask him.

[JeromeTash]

Account hacks without changing passwords have been happening before, mostly afterward the accounts would be used to spread malware. Perhaps the hacker has noticed it is profitable to get no collateral loans using those active accounts.

I would like to reecho this

I guess requesting a signed message from an old staked address should be part of procedure from now on. These streets are really so slippery 

[yahoo62278]

Could all be that 1 user claimed hacked and didn't get tagged and was given time to pay, so others came up with their own story along the same lines. They could be telling the truth, but they could be full of shit too.

For example, the teleport to altcoinstalk story. There are a load of us who have teleported and have faced 0 problems.

[nutildah]

READ FULL POST HERE: https://bitcointalk.org/index.php?topic=5478004.msg63344637#msg63344637

I have shared non-blurred ip address screenshot with shasan too... If you want to know then you can ask him.

Here's the thing: you could also have been using a VPN to pretend your account was being accessed from somewhere else. However unlikely, we have no way of knowing what happened for sure.

If shasan had lent you (your account) any amount of money, you would be 100% responsible for paying him back. So even though nobody should lend to you ever from now on, I hope you at least learned a lesson about account security.

[ryzaadit]

I must say, I'm one of the victims.

My passwords have not changed for more than 2-3 years, I have discussed this with my friends as well for these cases. The possibility for my case is by:
- Reused password.
- The password getting leaked due reused password.
- Saved password (google) getting leaked (my friend says).

I have not done anything regarding bitcointalk and discussions with strangers for the past month.
Based on the hacker requesting a loan, seems like they're overview activity from the original owner. I checked my Bitcointalk IP, I have 4 activities and the first one on (18th December). at that time I still had a loan of around 300$ with shasan, I and him have a successful loan with 7-10+ of course with the same address.

I finished my loan more early, paid all back on 30th December. Then, the hacker had activity yesterday 3-4x times and requested a loan with the 300$ (the most amount can pay, around 300-400$) mark.

Luckily shansan knew the address differently and rejected the loan.

IP Log from My Account
Yesterday


18th December (First Activity)


I change my password after these 2x time to make sure + add my account with 2FA as well.

[digaran]

Did you teleport to altcoinhack forum with the same password or not?

[LoyceV]

My guess: accounts getting compromised is nothing new. But since you (OP) have handed out loans before without asking for a signed message, I guess the attacker just tries his luck with you again.

[BitcoinGirl.Club]

@shasan, if I can remember correctly then in the past someone [may be more members] suggested you to ask for signed message from the borrowers. I hope you are practicing it in your business.

- Reused password.

No one is hack proof but reusing password deserves to be hacked or you will not learn lessons.

If anything happen to an account and the account takes any loan then the original account holder is responsible for it. There are no escape.

[LoyceV]

If anything happen to an account and the account takes any loan then the original account holder is responsible for it.

I prefer a combination of common sense and signed messages:

Watch for loan requests from users you wouldn't expect it from. If, for example, I would ask for a large loan, don't jump at the opportunity! I've never asked for a loan before, and this should be treated as a big red flag.

[BitcoinGirl.Club]

If anything happen to an account and the account takes any loan then the original account holder is responsible for it.

I prefer a combination of common sense and signed messages:

Watch for loan requests from users you wouldn't expect it from. If, for example, I would ask for a large loan, don't jump at the opportunity! I've never asked for a loan before, and this should be treated as a big red flag.

A small loan to recover any accidental situation is fine. It's not a bad thing but when a person become a regular on lending board and taking loans, repaying it then repeating it for long time, I see two reasons for it:
[1.] Trust farming
[2.] Waiting for a good opportunity to scam a large amount and never come back.

I had to make an Announcement LOL

[tjtonmoy]

READ FULL POST HERE: https://bitcointalk.org/index.php?topic=5478004.msg63344637#msg63344637

I have shared non-blurred ip address screenshot with shasan too... If you want to know then you can ask him.

Here's the thing: you could also have been using a VPN to pretend your account was being accessed from somewhere else. However unlikely, we have no way of knowing what happened for sure.

If shasan had lent you (your account) any amount of money, you would be 100% responsible for paying him back. So even though nobody should lend to you ever from now on, I hope you at least learned a lesson about account security.

I can't go back in time to change my ip with vpn. See the date and login info. If you thik that it's edited or something like that you can ask me in dm i can screen record refresh every page and show you.
Drop a dm if you want any further info.