2 BTC bounty for the return of 11.76 stolen btc Some relevant info inside

[lostcoins69]

2 BTC bounty for the return of 11.76 stolen btc.

Looks like coins went to this wallet 12gEgguL2ciHqerypstKM5WYCMcxRKsnQ4  on 4/6 2014

This guy " Tazja" previously admitted to controlling the address my coins went to in this post (Anyone know him?)

https://bitcointalk.org/index.php?topic=259649.3240

Quote:

I use 2 adress,

12gEgguL2ciHqerypstKM5WYCMcxRKsnQ4 (i receive 0.018 btc in this adress)

And

1FtRXz2KdjttgSY9ojcQB7mQ5SBmf2cXLz


Link to transaction occurred on 4/6/2014:

https://blockchain.info/tx/cf8c8247490f9cabd976fdd47c87eb8b19b30a20109685592802d53f05f6991d
I am still not sure how thief got access but suspect a key logger from Usenet. I was running virus checker but it was either AVG or K labs and did not trigger anything. Any and all help tracking these down would be appreciated.

[RiverBoatBTC]

Find me a first and last name and I will be happy to help you.

[SirChiko]

Why are you posting it again? Someone already suggested you to contact the mining pool it seems that there is money arriving for him from mining and they may have more info.

[newIndia]

Why are you posting it again? Someone already suggested you to contact the mining pool it seems that there is money arriving for him from mining and they may have more info.

He is offering 2 BTC. So others can contact the mining pool to nab that guy.

[SirChiko]

Why are you posting it again? Someone already suggested you to contact the mining pool it seems that there is money arriving for him from mining and they may have more info.

He is offering 2 BTC. So others can contact the mining pool to nab that guy.

Yes but he created two identic threads for it with just copy pasted text.

[newIndia]

Why are you posting it again? Someone already suggested you to contact the mining pool it seems that there is money arriving for him from mining and they may have more info.

He is offering 2 BTC. So others can contact the mining pool to nab that guy.

Yes but he created two identic threads for it with just copy pasted text.

Actually creating this in the discussion forum is not ideal. But he is a newbie. So u may assume he may not be that familiar with forum protocol. Moreover his 11 BTC is at stake. I hope mods will move/lock the other thread.

[AirC]

Theres someone who can Dox this person for you, if needed.

But, yeah I dont think anyone can do anything if the coins are already sent to an address which they can tumble more addresses to split up the coin.

Once its lost, its pretty much like cash - gone forever.

Unless the admin pool made a mistake.. you need to contact them with everything whats going..

[newIndia]

Theres someone who can Dox this person for you, if needed.

But, yeah I dont think anyone can do anything if the coins are already sent to an address which they can tumble more addresses to split up the coin.

Once its lost, its pretty much like cash - gone forever.

Unless the admin pool made a mistake.. you need to contact them with everything whats going..

If the address owner's real identity can be found, money can be taken back.

[ajareselde]

Theres someone who can Dox this person for you, if needed.

But, yeah I dont think anyone can do anything if the coins are already sent to an address which they can tumble more addresses to split up the coin.

Once its lost, its pretty much like cash - gone forever.

Unless the admin pool made a mistake.. you need to contact them with everything whats going..

If the address owner's real identity can be found, money can be taken back.

seriously doubt u can get anything back if he doesnt want to give it. you cant force anyone into anything if you dont have some sort of contract with them..
i hope i get your money back, but srsly, u should of been more carefull and use escrow

[Beymond]

Theres someone who can Dox this person for you, if needed.

But, yeah I dont think anyone can do anything if the coins are already sent to an address which they can tumble more addresses to split up the coin.

Once its lost, its pretty much like cash - gone forever.

Unless the admin pool made a mistake.. you need to contact them with everything whats going..

If the address owner's real identity can be found, money can be taken back.

seriously doubt u can get anything back if he doesnt want to give it. you cant force anyone into anything if you dont have some sort of contract with them..
i hope i get your money back, but srsly, u should of been more carefull and use escrow

Its 0% you can get your bitcoin back , this is bitcoin no chargeback and annomity .

I am sorry for your lost .

[Divinespark]

I think you should persist with trying to expose this guy, at least others may benefit

However, sadly think your prospects of getting you coin back is low

[Loophole]

Theres someone who can Dox this person for you, if needed.

But, yeah I dont think anyone can do anything if the coins are already sent to an address which they can tumble more addresses to split up the coin.

Once its lost, its pretty much like cash - gone forever.

Unless the admin pool made a mistake.. you need to contact them with everything whats going..

If the address owner's real identity can be found, money can be taken back.

seriously doubt u can get anything back if he doesnt want to give it. you cant force anyone into anything if you dont have some sort of contract with them..
i hope i get your money back, but srsly, u should of been more carefull and use escrow

Its 0% you can get your bitcoin back , this is bitcoin no chargeback and annomity .

I am sorry for your lost .

If you can actually dox that guy, it is possible to get your money with threatening and brute force...

[Loophole]

i hope i get your money back, but srsly, u should of been more carefull and use escrow

If you read OP carefully, you will know that "Tazja" got access to his private keys and sent OP's bitcoin away (probably with keylogger).
I can't see how using escrow is related at all...

[Ghris]

It's a bit of a stretch but here is what I came up with:

Tazja is known as tazbox on a hackers forum (http://jomgegar.com/)
16th post in this topic shows tazbox probably is up to no good/linked to bitcoin (http://jomgegar.com/topic/2801-question-about-bitcoin/?hl=tazbox)

Then if we look a bit further we find this topic about tazja being a hacker: https://bitcointalk.org/index.php?topic=543660.0
If you look at post 18, you see a post of bitdonkey. He stated he also got hacked by tazja.
If we look up bitdonkey's post we see this post about him purchasing a VPS host: https://bitcointalk.org/index.php?topic=342443.msg5598973#msg5598973

Domain is tazbox. As stated previously, that is the username of Tazja. So either bitdonkey is tazja, or he wanted to make a website dedicated to his own hacker?

The extension of the domainname is not stated, but let's assume it's .fr, as he is french. Then we come up with:
contact:     Dubas Julien
address:     18, place de la mairie
address:     07200 Aubenas
country:     FR
phone:       +33 7 53 76 03 40
e-mail:      taznact@gmail.com
Possible second email: taznact@yahoo.com

And what if we search for taznact? Then this comes up as first result:
Antivirus scan for ... - VirusTotal
https://www.virustotal.com/latest-report.html?resource...
SHA256: 6debde863fce2217b8e7e8a58dd948f00c441eb15d5cba30a5a7103d469e07b8. File name: Taznact.exe. Detection ratio: 24 / 47. Analysis date ...


So the domainname tazbox.fr is now linked to not only sha256, but also to a file with the name taznact.exe (same as his email) which most likely contains a virus.

And the virus made you lose your bitcoin.
By the way, he seems to spread his virus through NZB (download website).
Look at his uploaded files: http://www.nzbking.com/poster/Taznact@yahoo.com%20(Taznact)/

Hope this helps!

If you manage to get your btc back, this is my address for a donation:
btc:1AHkjqevi3DcebECujHFAbJjLad58Dqt6A

[Justin00]

If you get their first and real name, honestly what would you do ?
Unfortunately most people here (not everyone) seem to let it slide and would rather lose money then face to face confrontation.

would love a video of someone confronting a scammer!!

[lostcoins69]

If you get their first and real name, honestly what would you do ?
Unfortunately most people here (not everyone) seem to let it slide and would rather lose money then face to face confrontation.

would love a video of someone confronting a scammer!!

first I'll try to contact him politely and give him an opportunity to make nice.  I have friends in France. 

[jeffersonairplane]

If you get their first and real name, honestly what would you do ?
Unfortunately most people here (not everyone) seem to let it slide and would rather lose money then face to face confrontation.

would love a video of someone confronting a scammer!!

first I'll try to contact him politely and give him an opportunity to make nice.  I have friends in France. 

I don't know how much that will work. If you have some type of decent proof, I would just go for a lawsuit, but if you don't, don't bother going for it back.

[bitsmichel]

The guy speaks French, uses Ubuntu 13, forgot a password and is interested in mining. 

[lostcoins69]

It's a bit of a stretch but here is what I came up with:

Tazja is known as tazbox on a hackers forum (http://jomgegar.com/)
16th post in this topic shows tazbox probably is up to no good/linked to bitcoin (http://jomgegar.com/topic/2801-question-about-bitcoin/?hl=tazbox)

Then if we look a bit further we find this topic about tazja being a hacker: https://bitcointalk.org/index.php?topic=543660.0
If you look at post 18, you see a post of bitdonkey. He stated he also got hacked by tazja.
If we look up bitdonkey's post we see this post about him purchasing a VPS host: https://bitcointalk.org/index.php?topic=342443.msg5598973#msg5598973

Domain is tazbox. As stated previously, that is the username of Tazja. So either bitdonkey is tazja, or he wanted to make a website dedicated to his own hacker?

The extension of the domainname is not stated, but let's assume it's .fr, as he is french. Then we come up with:
contact:     Dubas Julien
address:     18, place de la mairie
address:     07200 Aubenas
country:     FR
phone:       +33 7 53 76 03 40
e-mail:      taznact@gmail.com
Possible second email: taznact@yahoo.com

And what if we search for taznact? Then this comes up as first result:
Antivirus scan for ... - VirusTotal
https://www.virustotal.com/latest-report.html?resource...
SHA256: 6debde863fce2217b8e7e8a58dd948f00c441eb15d5cba30a5a7103d469e07b8. File name: Taznact.exe. Detection ratio: 24 / 47. Analysis date ...


So the domainname tazbox.fr is now linked to not only sha256, but also to a file with the name taznact.exe (same as his email) which most likely contains a virus.

And the virus made you lose your bitcoin.
By the way, he seems to spread his virus through NZB (download website).
Look at his uploaded files: http://www.nzbking.com/poster/Taznact@yahoo.com%20(Taznact)/

Hope this helps!

If you manage to get your btc back, this is my address for a donation:
btc:1AHkjqevi3DcebECujHFAbJjLad58Dqt6A

Awesome sleuthing friend.  Certainly will remember if I make headway on return of stolen coins.

[Lizzardis]

e-mail:      taznact@gmail.com
Possible second email: taznact@yahoo.com

Please tell me I can spam these two email addresses using: http://www.crosswalk.com/newsletters/ oh please tell me I can?

Hey I'll even take a donation for it! Ha!