What is going on???

[FatFork]

If the hack happened for using the same password and teleporting the account then only the admin/moderators of that site may know the password.

I read the word "teleporting" several times, and it turns out to be something offered by a shitcoin forum. Are people dumb enough to share their password with them for extra "perks"? If so, that's not even a hack, it's just giving it away.

No, that's not how it works. Not even the shitcointalk admin would be that foolish to put its members at such risk. To "teleport" your account, all you need to do is to use the same username and add a link to your altcoinstalk profile on your bitcointalk forum profile (e.g., under your website link) to verify ownership.

But I guess there might be users who are "dumb" enough to think they have to use the same password too.

As for forum admins (or mods) knowing your forum password, that shouldn't happen either. Generally, passwords are stored in a database in a hashed format, which makes it difficult to reverse back into the original password. However, this doesn't mean that people should blindly trust every online platform to have honest intentions.

It's not a good practice to use the same passwords on different platforms

Don't be subtle: it's stupid
Get a password manager, don't store your password database in the cloud, and make regular backups. It takes a while to set up and change passwords for everything, but it's worth it.

I agree. Also, use 2FA wherever possible.

[1714536845]

1714536845

[1714536845]

1714536845

[1714536845]

1714536845

[1714536845]

1714536845

[SamReomo]

Also, there might be another reason if his laptop/computer/mobile phone is used by his friends then the occurrence might happen by one of his friends who does not require anything change.

That could also happen but for doing something like that the other person who has access to his device be aware of Bitcointalk and its lending board. Most of the people still don't know about this forum and that's why it's unlikely that someone friend could done any harm to someone's account. But, still that's a possibility which we can't avoid.

I read the word "teleporting" several times, and it turns out to be something offered by a shitcoin forum. Are people dumb enough to share their password with them for extra "perks"? If so, that's not even a hack, it's just giving it away.

That altforum and it's admin has never asked for someone's password to give them extra perks. Most of the users who teleported to that forum used completely new password and so far no one of them were forced to use the same password that they have on Bitcointalk or on someone else. In fact they were giving good opportunity to the users who already had ranked on Bitcointalk, I don't think anything is wrong in that. It's a win-win situation for all the users but if someone uses the same password due to his/her own irresponsibility then we can't blame that forum or someone else for that thing.

[SmartGold01]

If the hack happened for using the same password and teleporting the account then only the admin/moderators of that site may know the password.

I read the word "teleporting" several times, and it turns out to be something offered by a shitcoin forum. Are people dumb enough to share their password with them for extra "perks"? If so, that's not even a hack, it's just giving it away.

It's only foolish people that will sign up another website and use same password or having a regular password they do use, I have also teleported my account but there no hack or someone using my account to go collect loan and claims it was a hack or something similar. It is unwise for someone to go teleport their account and still use the same password as the previous place and again, for Shasan he doesn't accept loan immediately. For few times I have applied for loans it took me almost about 18hrs to 24hrs before accepting my loans and as then the real account owner might have come online to noticed the evil going on his account then he could call for cancellation.

I think have also told him to always request for a signed a massage from the wallet the used in their current campaign because I believe he wouldn't release any loan if that person is not in campaign so, even though they come claiming is not them with the sign messages it could be very tough for them to apply loan, except that hacker have access the bitcoin wallet as well. And note one thing, when someone also complained about this then you should know that is a lie, after all the discussion going on here you think we could be so loss about our phrase key and private keys after regularly involving in discussion that says not your key not your coin.

[shasan]

Another hacking issue without changing email and/or passord.

Loan amount: 450 USDT
Loan purpose: personal
Loan repay amount: 500 USDT
Loan Repay date: 1 months
Type of collateral: none
USDT (TRC20) address: TJVpMT2vovtMdn3ewRXY4R99gGSxGLQyno

I can accept if you can sign the message via bc1qcgz7decp44zu8d26gjceuef0myz6j3ccljp5dm

Thank you shasan for asking to sign a message first
In fact, I did not submit any loan application, my Wallet has the address:
bc1qcgz7decp44zu8d26gjceuef0myz6j3ccljp5dm

It has been hacked and proven in this topic:
https://bitcointalk.org/index.php?topic=5480462.0

The application post may have been deleted because when I click on the quote, the application does not appear. I am sure that my account may have been hacked.

Unfortunately, my computer was hacked and my Electreum wallet was stolen. It appears that my Bitcoin account was hacked as well. This is a screenshot of my account showing the IP addresses and access dates:




I am from Syria and all other addresses belong to the hacker.

I assure you that I did not submit any loan application at all, and I did not take any loan during my time on the forum.
Please decline any loan application submitted until I resolve the account hacking issue.

[yhiaali3]

Another hacking issue without changing email and/or passord.

Loan amount: 450 USDT
Loan purpose: personal
Loan repay amount: 500 USDT
Loan Repay date: 1 months
Type of collateral: none
USDT (TRC20) address: TJVpMT2vovtMdn3ewRXY4R99gGSxGLQyno

I can accept if you can sign the message via bc1qcgz7decp44zu8d26gjceuef0myz6j3ccljp5dm

Thank you shasan for asking to sign a message first
In fact, I did not submit any loan application, my Wallet has the address:
bc1qcgz7decp44zu8d26gjceuef0myz6j3ccljp5dm

It has been hacked and proven in this topic:
https://bitcointalk.org/index.php?topic=5480462.0

The application post may have been deleted because when I click on the quote, the application does not appear. I am sure that my account may have been hacked.

Unfortunately, my computer was hacked and my Electreum wallet was stolen. It appears that my Bitcoin account was hacked as well. This is a screenshot of my account showing the IP addresses and access dates:




I am from Syria and all other addresses belong to the hacker.

I assure you that I did not submit any loan application at all, and I did not take any loan during my time on the forum.
Please decline any loan application submitted until I resolve the account hacking issue.

Yes, the hacker did not change anything, he is using my login information.
Now you have changed the password and activated two-factor protection
It is good that two-factor protection has been added to the forum
Thank you

[nutildah]

Yes, the hacker did not change anything, he is using my login information.
Now you have changed the password and activated two-factor protection
It is good that two-factor protection has been added to the forum
Thank you

Can you confirm that you used your Bitcointalk password on Altcoinstalks?

I am not judging you. Just trying to find the root of the problem.

If it was a different password, I recommend running a virus scan on your computer.

[BabyBandit]

Sorry for off-topic but the I took time to catch a trust abuser at the same time.

So little Nut's can maybe come up with proofs before accusing other people? And be honest what you believe or think is totally irrelevant same a what I believe or think.
And I talk about proof's not the nonsense shit you accused me of first time even tho we NEVER interact Are you human enough to do that?

Why did you get so angry so you had to give me feedback when I discussed with the mega liar Alterra57? When I asked him for proof's for he's totally sick lies about me he instant locked the thread and started insult me instead  and you supported it very strange. Can be read here: https://bitcointalk.org/index.php?topic=5480375.msg63492761#msg63492761
That thread was fast to lock and disappear when asking for proof's came up to the table. Why was you so fast to back him up and change my message you quoted?

Just a normal question: I wonder who is in need of money the most. You or Me. Who do you think? You or Me?


Now back to topic

It's terrible that people need to loan money in first place from strangers online. That's not what a forum should offer but Sashan obvious is a good guy and offer it any many cunts take advance of it and I think it's many alt accounts that doing this shit. I can only speak from what I think, but my voice matter's as much as all others here.

But lets be honest (this maybe will be laughed at since it a sensitive subject, and a few rep-members don't like to talk about that)  But who cares? This is a free to speech forum right?
How hard is it for a REP-member to create an ALT just throw it with merits and pretend it's somebody "new"?? I am not saying this is the case, but it's not hard at all if you being here long time enough and know people and if you are a merit source you are home and can do whatever you want, and it's so easy to blame a new user and just switch focus, bet be realistic how will a new member rank up compare to a already know member that can get 100 merits in 10 days if he/she wish.

I think it's something strange at this place, something very strange but I don't throw mud at someone personal I just saying what I am seeing and think.  
And as fast you open your mouth and share opinions you shall be overflooded with Feedback like: "troll" "idiot" "loser" "scammer" "multi account". and bl.a bl.a bl.a
It's sad people don't know what other opinions and constructive criticism here is.

Yes maybe I am an idiot in your eyes but you know what I am isn't? You! and I am so happy for that.
And yes, if you got life exp you can see things and a path after six months.

Best regards
BabyBandit

[yhiaali3]

Yes, the hacker did not change anything, he is using my login information.
Now you have changed the password and activated two-factor protection
It is good that two-factor protection has been added to the forum
Thank you

Can you confirm that you used your Bitcointalk password on Altcoinstalks?

I am not judging you. Just trying to find the root of the problem.

If it was a different password, I recommend running a virus scan on your computer.

No, it's completely different. I use a unique password for each of my accounts

My device has already been infected with a virus, and I have formatted and erased all of the disks, and I am now in the process of changing the passwords for all my accounts.
Thank you

[nutildah]

My device has already been infected with a virus, and I have formatted and erased all of the disks, and I am now in the process of changing the passwords for all my accounts.
Thank you

So the issue seems to be infostealer malware targeting Bitcointalk users. But not only that, whoever is paying for it (its a Malware-as-a-Service subscriber) knows how to apply for loans on Bitcointalk and do so in such a manner that does not arouse suspicion. Very sophisticated, and somewhat of a new phenomenon on the forum (going back to the case of Peanutswar who seems to be the first victim).

[yhiaali3]

My device has already been infected with a virus, and I have formatted and erased all of the disks, and I am now in the process of changing the passwords for all my accounts.
Thank you

So the issue seems to be infostealer malware targeting Bitcointalk users. But not only that, whoever is paying for it (its a Malware-as-a-Service subscriber) knows how to apply for loans on Bitcointalk and do so in such a manner that does not arouse suspicion. Very sophisticated, and somewhat of a new phenomenon on the forum (going back to the case of Peanutswar who seems to be the first victim).

​
Yes, definitely, this is a new and literal way to steal by requesting a loan after hacking the account and not changing anything. If it were not for the notification that came to me via the Telegram bot, I would not have known that my account had been hacked and that someone was submitting a loan request through my account. It is likely that the hacker is a member of Bitcoin Talk and knows how to use the forum well.

Fortunately, Shasan has great experience in loans and acted very professionally, otherwise I would have been exposed to a difficult situation, either repaying a loan that I did not obtain or obtaining negative trust.

It is also good that two-factor protection has been added in the forum to increase security, now I have changed the password and enabled two-factor protection.

[LoyceV]

So the issue seems to be infostealer malware targeting Bitcointalk users.

How do they get infected? If it's targeted attacks, they must know how to get the user to install the malware.

[nutildah]

So the issue seems to be infostealer malware targeting Bitcointalk users.

How do they get infected? If it's targeted attacks, they must know how to get the user to install the malware.

https://socradar.io/what-is-stealer-as-a-service/

Stealer as a Service Distributing Methods

When deploying a stealer as a service model, a major challenge for threat actors is to lead the victim to download the stealer malware. Threat actors can distribute stealer malware through a variety of attack vectors. To deliver the malware to the victims, threat actors frequently use browser extensions, exploited websites, malicious attachments, and Google ads. Some of the most common methods of infection include:

Infected legitimate app: Threat actors infect legitimate apps with malware. Stealer malware is often embedded in YouTube video reviews of popular games, mining software, or NFT (Non-Fungible Token) files on private forums, cheats for popular video games, social media giveaways, and lottery URLs.

Spam: Threat actors generally send stealers via email, often impersonating trusted organizations. The stealer can be attached to the email directly, or the recipients can be tempted to click on a malicious URL.

Compromised system: Stealer malware is sometimes distributed remotely after threat actors gain access to the target system.

Malicious advertising: Victims are redirected to a fake site to download malware by clicking on the malicious ads. In some cases, simply viewing the malicious ads can be enough to initiate the download of a stealer.

Cracked software: Combining stealer malware with cracked software is a distribution method commonly preferred by threat actors.

There may be something that these users all have in common:

- Peanutswar
- tjtonmoy
- ryzaadit
- yhiaali3

I don't think it has to do with altcoinstalks b/c it happened to Peanutswar before the account teleport option was a thing, and I'm not sure they are all members of that forum...

Could be any number of things. It could even be somebody buying stolen login credentials from the malware service subscribers.

[yhiaali3]

So the issue seems to be infostealer malware targeting Bitcointalk users.

How do they get infected? If it's targeted attacks, they must know how to get the user to install the malware.

There may be something that these users all have in common:

- Peanutswar
- tjtonmoy
- ryzaadit
- yhiaali3

I don't think it has to do with altcoinstalks b/c it happened to Peanutswar before the account teleport option was a thing, and I'm not sure they are all members of that forum...

Could be any number of things. It could even be somebody buying stolen login credentials from the malware service subscribers.

I don't think it has anything to do with the AltcoinTalk forum, I personally used a completely different password from my BitcoinTalk account.

I guess that my problem started after downloading a crack for a video format converter program. Although the site from which I downloaded the file is usually reliable, it may have contained a Trojan.

No one sent me a link or a suspicious email. I downloaded the file personally at my own risk. It was a big mistake for which I unfortunately paid dearly.

[AlttAdmn]

hello bitcoiners.
Altcoinstalks admin does not need your money to hack your accounts.
the software operating on Altt is similar to the one used on btt >>> in both cases the passwords are encrypted!

The crypto community is full of dishonest people and scammers. Everywhere ...

Altt admin does not need your money to scam you, and honestly have no idea what half the shit you have here on btt is (including loaning)!

here's a topic to read : https://www.altcoinstalks.com/index.php?topic=312821.0

[LoyceV]

I guess that my problem started after downloading a crack for a video format converter program.

People still do that?
I barely dare install official wallet software on my main systems. Why don't you run those cracks in an isolated environment instead of giving them access to your passwords?

[AlttAdmn]

https://i.imgur.com/V7zECKQ.png

altt TL users are asked to have different pwd - just in case.

[yhiaali3]

I guess that my problem started after downloading a crack for a video format converter program.

People still do that?
I barely dare install official wallet software on my main systems. Why don't you run those cracks in an isolated environment instead of giving them access to your passwords?

What do I do? I am not happy with what I do, but when you live in a country like Syria where everything is banned, you have no choice but this one.

I know this is very dangerous but I have no choice but to install the cracked software. I tried looking for a way to buy through Crypto but unfortunately my country is banned from all payment services.

[lovesmayfamilis]

What do I do? I am not happy with what I do, but when you live in a country like Syria where everything is banned, you have no choice but this one.

I know this is very dangerous but I have no choice but to install the cracked software. I tried looking for a way to buy through Crypto but unfortunately my country is banned from all payment services.

You can install the second system on VirtualBox or another virtual machine and perform all operations with cracks there. If we talk about the fact that you needed to convert a video from one format to another, having done all this in Virtualbox, the output would be the desired file that can be transferred to the host system, of course, having first checked the file again, at least on VirusTotal.
Another option may be to install a second system on a hard drive. I would advise installing Linux to work with the forum and installing your favorite Windows as the second system.

[LoyceV]

What do I do?

I can think of many different things, but none of them includes installing untrusted (hacked) software on your main system. You could for instance:

• use an open source video converter
• use a VM
• use another system
• forget about converting videos
• use an online video converter

I am not happy with what I do, but when you live in a country like Syria where everything is banned, you have no choice but this one.

That's a weird excuse to install compromised software. I only use open source software and nobody can ban that as long as I have an internet connection.

[yhiaali3]

.....

......

Thank you for the valuable advice.

After the harsh experience, I decided to use only open source software and install Linux on a bootable flash drive
I think it's the best way to avoid running into this problem again.

Perhaps a somewhat late decision, but it is better late than never.