Saw This on X: Bitcointalk Included in Alleged Cyber Threat List

[SatsPH]

I was browsing X when I chance upon this post,



https://x.com/DailyDarkWeb/status/2055055206564454650

It was a supposedly coming from a threat actor and it includes crypto forums and communities.

An when I checked the lists, in includes our community here.



Of course, nothing is confirmed, we don't know if this is real or not. But this is just a word of precautions to anyone here.

[BlackBoss_]

I was browsing X when I chance upon this post,

It was a supposedly coming from a threat actor and it includes crypto forums and communities.

An when I checked the lists, in includes our community here.

Of course, nothing is confirmed, we don't know if this is real or not. But this is just a word of precautions to anyone here.

Bitcointalk forum has three hacks in history but theymos did his amazing programming jobs together with some bug finding and reporting contributions from community to improve the forum software over years.

The rest things belong to users in their own practice for securing their forum accounts, related emails with strong passwords for forum accounts, emails, 2FA for emails, and good practice for keeping their devices clean.

Bitcointalk history of hacks and vandalism.

Use proper email address, use a strong password for securing your forum account.
[GUIDE] How to Create a Strong/Secure Password.

Make sure that your email address is secure. If you don't want to set an email address, use something like yourUserName@invalid.bitcointalk.org; don't use a random nonsense email like y@x.com, since somebody might create that domain/email.

[noorman0]

Hacking these forum accounts is almost worthless in the end. First, it doesn't store user funds; second, all members are involved in investigating suspicious accounts, and the trust system prevents new owners from attempting further fraud; and third, the forum has a unique account recovery method that isn't controlled by the system.

Perhaps the database contains a list of previously exposed external account credentials or something similar.

[FinneysTrueVision]

It could be fake or it could be data from an old leak that they are trying to repackage as something new. If there was a recent breach, we probably would have seen several notable accounts having their passwords reset and being taken over by people with completely different personalities. We have only seen the standard account farming and account trading stuff, nothing that would indicate a mass exploit affecting the whole forum.

Hacking these forum accounts is almost worthless in the end. First, it doesn't store user funds; second, all members are involved in investigating suspicious accounts, and the trust system prevents new owners from attempting further fraud; and third, the forum has a unique account recovery method that isn't controlled by the system.

Account buyers might not get much value out of it, but the account is still worth something to the original owner, who might have put in a good amount of effort into ranking up and is participating in signature campaigns. For some users it might be devastating to lose something which is a source of income, therefore it’s important to use the necessary precautions to secure an account.

[nc50lc]

I was browsing X when I chance upon this post,
-snip-
https://x.com/DailyDarkWeb/status/2053203424142090620

Did they edited their post or you miscopied the wrong X url?

Because the current link is related to an alleged Coinbase users database that is for sale in the dark web.
And the highlighted part in your screenshot that mentioned "crypto forum" isn't there.
It got me confused for a second.

Perhaps it's this post instead: x.com/DailyDarkWeb/status/2055055206564454650?
If so, they do not need to hack the forum for that, they can fetch email addresses from users who haven't hidden their email address.
With the mentioned covered years, it's either recycled database from old breach or that simple profile view method.

[cryptoaddictchie]

Because the current link is related to an alleged Coinbase users database that is for sale in the dark web.
And the highlighted part in your screenshot that mentioned "crypto forum" isn't there.
It got me confused for a second.

Youre right sir! The one OP copied is the earlier post and avout coinbase but the one he was discussing was the 2nd link youve shared.

Perhaps OP made mistake copying the supposedly link of X.

Honestly OP nothings gonna benefit the hacker if they hacked the forum users email account or let say forum users since thats only an account for using here no funds attached unless they wanna post something useful and be on signature campaign( which is likely not).

[Woodie]

This definitely has more to do with coinbase, but other hand we have seen come casinos on the forum report system comprises, and for some of us on telegram.. noticed of late a swarm of message's from unknown users probably trying to phish for information but security 101 if you don't know the user, don't know the link don't click it, and just as a precaution we better be on the lookout!

Thanks for the share OP.

[AVE5]

Based on my observations on the information, I doubt if that was real update if not a scamming scheme.
From the screenshot i noticed a domain spoofing our forum with the typosquatting domain of bitcointalk.org_found while the original or this forum domain is bitcointalk.org. So it's likely that they scammer is impersonating our community. Moreover, the forum is currently clean and safe with no threat as described according to the X update.
So anyone trading with the person or Impersonator is at it own risk if they think the referenced website is this one of our own community.

[JeromeTash]

Or the threat actor could just be another scammer pretending to be in possession of those cryptocurrency-related records up for sale, just like we see scammers advertise a pack of wallet.dat files for sale.

Hacking these forum accounts is almost worthless in the end. First, it doesn't store user funds; second, all members are involved in investigating suspicious accounts, and the trust system prevents new owners from attempting further fraud; and third, the forum has a unique account recovery method that isn't controlled by the system.

1. People still buy the accounts, so they are worth the value to the hacker.
2. The credentials could be used to log into other accounts of value for people who repeatedly use the same login credentials for different platforms.

[TokenTikas]

and third, the forum has a unique account recovery method that isn't controlled by the system. Perhaps the database contains a list of previously exposed external account credentials or something similar.

There is a way to recover an account, but people who have not used their accounts for many years and have also forgotten the wallets they used because of changing devices usually cannot recover them anymore. If someone can properly complete all the recovery steps then the account can still be recovered.

But in my opinion, those who have stayed away from the forum for (7–10+-) years may never come back again, although there are still a few exceptions. In most cases, when accounts with such a long posting gap suddenly become active again, they often turn out to be hacked accounts.

[robelneo]

They are offering this for

The actor appears to be marketing:
• aggregated breach collections
• scraped datasets
• combo lists
• marketing intelligence packs
• previously leaked crypto-related user information

I don't think Bitcointalk has any of these. This is a forum, not an exchange. We do not have KYC here; they may have email addresses, but email marketing is subject to the CAN-SPAM Act.

[LTU_btc]

From the screenshot i noticed a domain spoofing our forum with the typosquatting domain of bitcointalk.org_found while the original or this forum domain is bitcointalk.org. So it's likely that they scammer is impersonating our community.

There is no typo, it's just how they named file with data. Domain name is correct.

Hacking these forum accounts is almost worthless in the end. First, it doesn't store user funds; second, all members are involved in investigating suspicious accounts, and the trust system prevents new owners from attempting further fraud; and third, the forum has a unique account recovery method that isn't controlled by the system.

You're wrong. Demand to buy Bitcointalk account didn't disappear anywhere. Also, with hacked account you can make fast scam, something like taking loan.

[mindrust]

The forum in its current state has barely any meaningful activity. How can it possess any threat to anybody seriously... The forum is on life support, about to give its last breath. It wasn't a threat 10 years ago neither... We can't even promote mixers now. We are as harmless as a kitten. Miau.

[aioc]

They just included it because Bitcointalk has a high market value, but buyer going to get nothing here because members here are pseudonyms and only use aliases. If they are that good, they can take Bitcointalk's bug challenge they can make money checking exploits.

[Ultegra134]

There is no typo, it's just how they named file with data. Domain name is correct.

You're wrong. Demand to buy Bitcointalk account didn't disappear anywhere. Also, with hacked account you can make fast scam, something like taking loan.

That's what I was about to say when reading this reply. Yes, Bitcointalk isn't a financial institution/wallet service etc. that a potential hack/stolen account would lead to immediate loss. However, ranked up accounts are on high demand and accounts are being sold as we aleak on Reddit or other forums. A frequent user would most likely notice it right away that something isn't right, but someone who's inactive won't, and could lead to exit scams through the stolen accounts.