WWZSCOCKI ACCOUNT HACKED!!!

[crypto mania]

I have locked WWZSOCKI account and soon will open thread in meta board

Now that you have Locked the account then it is time to send and email which you used to register the account to Cyrus to unlock the account for you and immediately change the password and if possible the email address, because I am suspecting that your email address has been compromised. Sorry for that stress.

yes i have done it, sent message from registered on forum email to recoveries...@bitcointalk.org

if email would be compromised then they will remove the message about password change and haven't so I guess this is not that

I had secret question, maybe this is how they did it but I also doubt because as I have seen in the message when tried to recover account using that feature, it can take up to 2 weeks, it happened yesterday and hacker already posted scam thread, so this wasn't my secret question hack I assume

keep checking, changing, adding 2FA to all my important accounts, looking at emails, all looks ok besides Bitcointalk

they tried to login to few of my exchanges accounts like Binance, I see emails with login attempts

[crypto mania]

...Honestly, I saw the password change a few days ago on the sec log, but I had no idea that it was being hack. Sorry.

no problem mate, thank you for help

I received email about password change yesterday so it couldn't be few days,

maybe it just felt like few days, I also loose my sense of time sometimes, especially when working too long online

...Since the mods are taking long to delete the thread. How about creating a type 1 flag which can be reversed once the account is recovered?

sure i will be happy to do it, TBH I never did it, despite i am such old member and DT1

I will wait a bit longer, and if still will be not removed i will try to create flag as suggested

right now we posted there also and warned members, so i assume already nobody should be scammed anymore

[Upgrade00]

I had secret question, maybe this is how they did it but I also doubt because as I have seen in the message when tried to recover account using that feature, it can take up to 2 weeks and it happened yesterday but hacker already posted scam thread so this wasn't my secret question hack

Using secret question to recover accounts has also been disabled many years back. If you get the answer right, the best result is you lock the account and will need the admin to recover it. Some people use that feature when their account gets hacked and they don't have the original email, to lock it so the hacker cannot access it.

...Since the mods are taking long to delete the thread. How about creating a type 1 flag which can be reversed once the account is recovered?

Scam is not moderated here no matter how obvious it is, do not expect the thread to be deleted by mods.

[crypto mania]

...Scam is not moderated here no matter how obvious it is, do not expect the thread to be deleted by mods.

Luckily it is removed already, mods did great job and reacted fast to reports

...I hope you wrote to the account's recovery team but writing to them using the original email of the account makes the recovery process quicker and probably no chance of getting rejected. Perhaps with 1-2 weeks tops...

I really count on this, never thought how much i need my account, this one day seem already like a week to me

such hack makes you fill like totally vulnerable, this made my eyes open a lot wider to the security topic

[lovesmayfamilis]

While you are trying to recover your account, it will be useful for you and for us to analyze what happened. How could the hacking have happened? Do you use public networks, and are you the only owner of your device? Is it a computer or a phone? What operating system do you use? And do you often surf the Internet from one browser, visiting different sites?

Sometimes we see topics about hacking forum accounts, but if you check the latest cases, people, just like you, are perplexed by what happened. Therefore, if it is not too much trouble, help yourself and users to look for errors so that everyone can check their security again.

Maybe you had an easy password?

In any case, I wish you a speedy recovery and a return to the forum.

[Pmalek]

After you regain access to your hacked account, it might be a good idea to consider activating 2FA and add an additional security layer to make it harder for something similar to happen to you in the future. Even if someone were to get hold of your password, they would also need the 2FA code to gain access. Check your Account Related Settings in your profile to activate 2FA, and read this thread for more information if you are interested.

[dkbit98]

OP you didn't explain how exactly you got your other account hacked? Did you click on some link or what?
Your explanation could help other members to learn how best to protect from this attacks and losing their accounts.

PS
Add 2FA protection instead secret question, like it was suggested in previous post.

[Pmalek]

If you can't pinpoint what could have happened and gone wrong with your WWZSOCKI account, something similar could happen to this alternative account of yours as well. I would consider the basics first, such as clicking unknown links, using weak passwords, using untrusted software that could have been infected with some malware. I hope you didn't fall for a phishing scheme and entered your password in a Bitcointalk lookalike page somewhere.

[Bitcoin_Arena]

Have you received any reply yet, OP?

I see your account hasn't yet been queued for recovery, yet it seems to be a genuine case. I just wish you the best. There was a member who was a victim of a simillar hack, his account ended up getting banned for spreading malware and despite all the appeals, he was never helped.

He got frustrated, gave up and left the forum!

[crypto mania]

...

OP you didn't explain how exactly you got your other account hacked? Did you click on some link or what?
Your explanation could help other members to learn how best to protect from this attacks and losing their accounts...

sorry that I am not replying please try to understand

looks like only my Bitcointalk account was hacked, nothing more

my only guess they brute-forced my Bitcointalk password or it leaked somehow and when it comes to that on my end only thing that comes to my mind is:

I downloaded some malicious file exactly 1 day before it happened on laptop that I use when traveling, so nothing important on it, at least I thought so, I missed that there was brave browser synced to my other devices and I haven't unsynced it (big mistake)

If this is true then like this they could bruteforce my password manager password and get aces to Bitcointalk password and account

but if this is true why haven't they also removed email on my Protonmail from Bitcointalk, I was able to suspend that account

only explanation that they where not able to hack brave password manager so logged to my account using synced Brave browser and then changed the password as there was no 2FA (another big mistake i don't know how I missed that)

also I have seen attempts to login to few of my accounts that I haven't initiated lately, still it wasn't successful and i was able to change passwords and add 2FA to them

so is hard to tell what happened exactly

[_BlackStar]

The chronology of how you got hacked is a bit confusing to me - but there must have been some fatal mistake you made that led to your account being hacked. The only thing that is more unfortunate is that you admitted to downloading a malicious file the day before the hack - while ignoring the dire consequences of downloading it.

I was wondering - has the recovery team responded to your account recovery request so far?

[crypto mania]

I was wondering - has the recovery team responded to your account recovery request so far?

yes Cyrrus answered that I will be contacted so i am waiting patiently

when it comes to download malicious file of course i was also attacked, hacker pretended to be client and want to cooperate

this is why i use empty device to download such files still I missed synced Brave browser, forget to unsync it and this is how they got to my Bitcointalk account - I assume, nothing certain here

[logfiles]

I downloaded some malicious file exactly 1 day before it happened on laptop that I use when traveling, so nothing important on it, at least I thought so, I missed that there was brave browser synced to my other devices and I haven't unsynced it (big mistake)

Never use a web browser based password manager if you want to improve your password security. At least standalone apps like Bitwarden are much better. There is a security vulnerability I saw about the Chrome browser password manager where someone can still access your login details minus using any password prompt on your Windows OS. Brave browser is also chromium based, so it could also be having the same vulnerability.

[_BlackStar]

-snip-

yes Cyrrus answered that I will be contacted so i am waiting patiently

That sounds good now - it means your case is in the queue. I wish you good luck in recovering your account.
But, rightg now I started to wonder - why is this account on auto-bann status?
Is it because of the topic the hacker posted or maybe your previous mistake?
I realized that while reading your other thread in the meta section.

when it comes to download malicious file of course i was also attacked, hacker pretended to be client and want to cooperate

this is why i use empty device to download such files still I missed synced Brave browser, forget to unsync it and this is how they got to my Bitcointalk account - I assume, nothing certain here

Of course - hackers are smart and they have tricks up their sleeves to manipulate anyone by pretending to be them. Your mistake should be a valuable lesson for other users - especially when downloading files. That's why everyone needs to disable the auto-download setting on all social media platforms on their devices. Of course, the goal is to prevent all media sent in messages from being downloaded automatically and users can filter which media they can safely download.

[paid2]

-snip-
But, rightg now I started to wonder - why is this account on auto-bann status?
Is it because of the topic the hacker posted or maybe your previous mistake?
I realized that while reading your other thread in the meta section.

This is because he clicked on the link to block this account, from the email that warned him of the account login changes.

[albon]

also I have seen attempts to login to few of my accounts that I haven't initiated lately, still it wasn't successful and i was able to change passwords and add 2FA to them

No problem. Everyone makes mistakes, and I'm really glad you figured it out quickly and fixed the situation. The good thing is that the hacker only managed to steal your legendary account on BTT and couldn't scam the members through his scam topic using your account about one of the meme coins. His wallet addreess on Solana Explorer shows that he has 0 SOL. The Mods responded really quickly, and I appreciate their cooperation and efforts for this community.

Anyway, I hope you used a different device, not the infected one, to change the passwords of the accounts that the hacker failed to steal. And I hope that once the ban on your account is lifted, you enable 2FA and review your forum messages in case the hacker noticed any important information. Also, when you open the infected laptop, don't forget to disable the internet, and ASAP create a new system with a format of the C drive, and install a strong security program.

[JeromeTash]

This is because he clicked on the link to block this account, from the email that warned him of the account login changes.

When you lock your account using the link. It doesn't get banned.At least that what I recall when I locked mine after they hacked it. The account gets disabled, but I don't think it's more of a ban. Maybe the mods banned the account on grounds that it has posted some malicious websites immediately after getting hacked.

That sounds good now - it means your case is in the queue. I wish you good luck in recovering your account.

It's not yet queued.

[_BlackStar]

-snip-

This is because he clicked on the link to block this account, from the email that warned him of the account login changes.

The link sent to the email is not to automatically ban your account ^{[as far as I know],} but it is only to lock your account so that no one can access it. Automatic ban and locked account are definitely different - meaning you can still log in to your account even though it has been banned, but not when your account is locked.

Tell me if I'm wrong.

-snip-

It's not yet queued.

Do you have any useful links about it?
If so - please let me know.

[hosseinimr93]

Tell me if I'm wrong.

You are right.
The link which is sent to the orginal email address when the email address is changed locks the account and as you said account being locked is different from getting banned.
wwzsocki's account was banned on August 23, one day before creation of this thread.

It's not yet queued.

Do you have any useful links about it?

Once the account recovery is queued, it's reported on security log and it's also recorded on BPIP.

[crypto mania]

...I wish you good luck in recovering your account...

Thank you mate, really appreciate

...Automatic ban and locked account are definitely different - meaning you can still log in to your account even though it has been banned, but not when your account is locked.

Tell me if I'm wrong...

No you can't login, account is not accessible anymore after lock,

this is what i have seen with my account after I locked it, when I tried to reach it using my profile link, I have seen message: "account locked"

...The good thing is that the hacker only managed to steal your legendary account on BTT and couldn't scam the members through his scam topic using your account about one of the meme coins. His wallet addreess on Solana Explorer shows that he has 0 SOL. The Mods responded really quickly, and I appreciate their cooperation and efforts for this community...

indeed I am really happy that mods reacted blazing fast to reports and deleted this scam thread posted from my account immediately

That was most important for me and first I did was to comment in this malicious thread to warn everybody, reported and then locked account