wxa7115 account hacked

[wxa7115_recovery]

On August 14, 2024, 06:02:34 PM the seclog indicates the password for the account wxa7115 was reset by email, however I did not did this, after taking the time to verify and check my devices, I think that what happened was that this was an old email that expired and disappeared some time ago, and the hacker made it again and that is how they could gain control of my account.

This is my signed message proving my ownership:

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
This is wxa7115, my account has been hacked, today is August 16 2024 according to the default forum time, please verify this message and red tag my account until it gets back to me.
-----BEGIN SIGNATURE-----
bc1qc7k8p6mtgss6s3ws3ddhpw0hf6ywhpwzx49tez
IHh1Zgwk1ogMnRuolUBuYr/W3KJnL3oBMyayQBmo74NBSF1NRdrEVhVmUT8uM6mVS75+N3t+GgfwbsGdTGZ2Yro=
-----END BITCOIN SIGNED MESSAGE-----

I used that address here: https://bitcointalk.org/index.php?topic=5280190.msg58274941#msg58274941

Round 55 Payments have been sent out!

Thank you all for yet another great week, keep it up!

We have 1x Hero Member position open, apply now!

Bitcointalk Profile Link: https://bitcointalk.org/index.php?action=profile;u=509190
Current amount of posts (including this one): 5520
SegWit (preferably bech32) BTC Address for Payouts: bc1qc7k8p6mtgss6s3ws3ddhpw0hf6ywhpwzx49tez
EARNED merit in the last 120 days: 45

And here is that post quoted in the case it is deleted by the hacker: https://bitcointalk.org/index.php?topic=5280190.msg58277196#msg58277196

Bitcointalk Profile Link: https://bitcointalk.org/index.php?action=profile;u=509190
Current amount of posts (including this one): 5520
SegWit (preferably bech32) BTC Address for Payouts: bc1qc7k8p6mtgss6s3ws3ddhpw0hf6ywhpwzx49tez
EARNED merit in the last 120 days: 45

Accepted! Welcome to the Campaign

We are once again CFNP, thank you all for the applications.

I am already following the procedure described here to recover my account, but it could take time for this to happen, and the community needs to be aware of what is happening.

[JeromeTash]

I am not sure if i get you right, what do you mean by the email address expired?
Are you trying to say the hacker got hold of your old email address you used to register the account?

Also signing a message from an older Bitcoin address is much more better like this address 14Ff7YBLb4N5QTdE596e8zpFgZeZfLvcgZ

[KingsDen]

I am not sure if i get you right, what do you mean by the email address expired?
Are you trying to say the hacker got hold of your old email address you used to register the account?

I think he meant that he stopped using the email, maybe the purpose of creating the email was accomplished and Op abandoned it and the hacker picked it up. This is why it is advisable to have a separate email for the forum your private or work email.

I have checked the activity log and this is the first time of resetting password in the account.

[wxa7115_recovery]

I am not sure if i get you right, what do you mean by the email address expired?
Are you trying to say the hacker got hold of your old email address you used to register the account?

What I mean is that I bought a VPN and I received a free email, then at a later time the promotion expired and the VPN eventually stopped providing me that email, I stopped having access to it and the data in it was most likely erased, then at a some point the hacker created that same email and use it to reset the password by email.

Also signing a message from an older Bitcoin address is much more better like this address 14Ff7YBLb4N5QTdE596e8zpFgZeZfLvcgZ

If I am not mistaken that address belongs to the online wallet blockchain.com, formerly blockchain.info, so I cannot provide a signature for it.

However I think I can provide a signature from an address that is older than the one I provided already.

I am looking into it.

[Upgrade00]

It appears the account hasn't posted since then, but there is a possibility that it tries to pm people to scam them. You can try account recovery using secret question if you set one up, this will lock the account.

There has been warnings on email security, but it's been a while I saw them. You made the mistake of using a promotional email address. The email providers likely transferred all previous data when the account was retrieved, and the new owner saw some bitcointalk related mails leading them here.

Do you have any other accounts linked to that address?

[FatFork]

Also signing a message from an older Bitcoin address is much more better like this address 14Ff7YBLb4N5QTdE596e8zpFgZeZfLvcgZ

If I am not mistaken that address belongs to the online wallet blockchain.com, formerly blockchain.info, so I cannot provide a signature for it.

However I think I can provide a signature from an address that is older than the one I provided already.

I am looking into it.

You first used the Bech32 address bc1qc7k8... nearly four years ago, and it appears you've consistently used it for DCA-ing since then. Given this history and the absence of previous account issues, I believe it's reasonable to assume you still control this address. So, I think there's no need to sign an older one.

By the way, congrats on finally consolidating those inputs! It was about time, right? You could've saved a few bucks if you'd done it earlier, but hey, better late than never.

[wxa7115_recovery]

It appears the account hasn't posted since then, but there is a possibility that it tries to pm people to scam them. You can try account recovery using secret question if you set one up, this will lock the account.

Never set one if my memory serves me right

There has been warnings on email security, but it's been a while I saw them. You made the mistake of using a promotional email address. The email providers likely transferred all previous data when the account was retrieved, and the new owner saw some bitcointalk related mails leading them here.

Do you have any other accounts linked to that address?

My memory sucks, but I believe the only account linked is the one from blockchain.info, but even that required a password to login and the balance is on zeros anyway.

You first used the Bech32 address bc1qc7k8... nearly four years ago, and it appears you've consistently used it for DCA-ing since then. Given this history and the absence of previous account issues, I believe it's reasonable to assume you still control this address. So, I think there's no need to sign an older one.

Cool, that saves me some effort.

By the way, congrats on finally consolidating those inputs! It was about time, right? You could've saved a few bucks if you'd done it earlier, but hey, better late than never.

LOL, it took me forever to consolidate my inputs, but I do not like to touch my wallets unless I absolutely have to.