Bitcoin Forum
December 17, 2017, 10:52:04 AM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1] 2 »  All
  Print  
Author Topic: [HELP]My account may be hacked  (Read 2658 times)
ziggyII
Newbie
*
Offline Offline

Activity: 25


View Profile
September 16, 2014, 12:21:59 PM
 #1

Hi,I am the owner of the account Ziggy,which is registered at 2011
today I find I can not log in with my password,I feel strange and try to reset the password
but I can not receive the password reset email,I used gmail,
just yesterday I have received the forum notification email about the NEM alpha release things
so I register this new account for asking help
I checked the account Ziggy just now,there should be something on the signature but they are gone now
does it means someone hacked my account ,changed the its password and email box,deleted the signature within 24 hours?
help me please!

ziggy
1513507924
Hero Member
*
Offline Offline

Posts: 1513507924

View Profile Personal Message (Offline)

Ignore
1513507924
Reply with quote  #2

1513507924
Report to moderator
1513507924
Hero Member
*
Offline Offline

Posts: 1513507924

View Profile Personal Message (Offline)

Ignore
1513507924
Reply with quote  #2

1513507924
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1513507924
Hero Member
*
Offline Offline

Posts: 1513507924

View Profile Personal Message (Offline)

Ignore
1513507924
Reply with quote  #2

1513507924
Report to moderator
hilariousandco
Gold Member
Global Moderator
Legendary
*
Offline Offline

Activity: 1498


How does one bitcoin?


View Profile WWW
September 16, 2014, 12:35:30 PM
 #2

If your signature is gone and you didn't change it then it's safe to say you are hacked. Read the following on how to recover your account: https://bitcointalk.org/index.php?topic=497545.0

ziggyII
Newbie
*
Offline Offline

Activity: 25


View Profile
September 16, 2014, 12:48:30 PM
 #3

If your signature is gone and you didn't change it then it's safe to say you are hacked. Read the following on how to recover your account: https://bitcointalk.org/index.php?topic=497545.0
thanks,I will try
OnkelPaul
Legendary
*
Offline Offline

Activity: 1045



View Profile
September 16, 2014, 12:56:11 PM
 #4

Looks like you fell for this scam:
https://bitcointalk.org/index.php?topic=784587

Look at the URL in that mail you got. It leads to "bilcointalk", not "bitcointalk".
Never ever click on links in such unsolicited mails!

Onkel Paul

ziggyII
Newbie
*
Offline Offline

Activity: 25


View Profile
September 16, 2014, 03:15:54 PM
 #5

Looks like you fell for this scam:
https://bitcointalk.org/index.php?topic=784587

Look at the URL in that mail you got. It leads to "[Suspicious link removed]", not "bitcointalk".
Never ever click on links in such unsolicited mails!

Onkel Paul

I just check the email and you are right,thank you Onkel Paul!
ziggyII
Newbie
*
Offline Offline

Activity: 25


View Profile
September 17, 2014, 08:10:27 PM
 #6

If your signature is gone and you didn't change it then it's safe to say you are hacked. Read the following on how to recover your account: https://bitcointalk.org/index.php?topic=497545.0
I Pmed theymos my account recover request yesterday,but got no response in the past 24 hours
I guess maybe I misunderstood something and signed wrong message because I am a Chinese who are not good at English
so I think it is better to make it clear here before I sign again
I sew this on the recover template"The current date is <date>."
I have no idea about what is the "current data"
in my situation,Ziggy is the account that I want to recover,
the bitcoin address I signed is 13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk
and you will find it has been posted here: https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242
the new mail address is slxok77@gmail.com which is not the same to my temporary account
but what is "The current date"?
can anyone help me,thanks!

abacus
Hero Member
*****
Offline Offline

Activity: 619


a clockwork miner


View Profile
September 17, 2014, 10:58:55 PM
 #7

I sew this on the recover template"The current date is <date>."
I have no idea about what is the "current data"

It isn't data, but date. It's the current calendar date. Smiley
For example, today you can fill that field with something like "17 September 2014" or "09-17-2014".
ziggyII
Newbie
*
Offline Offline

Activity: 25


View Profile
September 18, 2014, 03:18:32 AM
 #8

I sew this on the recover template"The current date is <date>."
I have no idea about what is the "current data"

It isn't data, but date. It's the current calendar date. Smiley
For example, today you can fill that field with something like "17 September 2014" or "09-17-2014".
What a stupid mistake I have made!
Thank you!
So in my situation I should sign this"My account <ziggy> has been hacked/lost. Please reset the email to <slxok77@gmail.com>. The current date is <09-17-2014>."
Then I get the signature, let's say XXXXXXXXX
So the whole PM should looked like this:

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <ziggy> has been hacked/lost. Please reset the email to <slxok77@gmail.com>. The current date is <09-17-2014>.
-----BEGIN SIGNATURE-----
<13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk>
<XXXXXXXXX>
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address:
https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242

is it OK?



Shogen
Legendary
*
Offline Offline

Activity: 966



View Profile
September 18, 2014, 04:23:53 AM
 #9

I believe you don't need to include those < and > signs.

After you sign the message, you could copy and paste it to https://brainwallet.github.io/#verify to double check its validity.

ziggyII
Newbie
*
Offline Offline

Activity: 25


View Profile
September 18, 2014, 04:52:11 AM
 #10

I believe you don't need to include those < and > signs.

After you sign the message, you could copy and paste it to https://brainwallet.github.io/#verify to double check its validity.
Hi Shogen
I deleted all the < and > signs and tried to verify it on the page as you told
it passed
thank you very much!
you saved me!
I just PMed theymos again
hope I can have my account recovered


Shogen
Legendary
*
Offline Offline

Activity: 966



View Profile
September 18, 2014, 04:57:02 AM
 #11

I believe you don't need to include those < and > signs.

After you sign the message, you could copy and paste it to https://brainwallet.github.io/#verify to double check its validity.
Hi Shogen
I deleted all the < and > signs and tried to verify it on the page as you told
it passed
thank you very much!
you saved me!
I just PMed theymos again
hope I can have my account recovered

You are welcome. Good luck to your recovery process. Smiley

ziggyII
Newbie
*
Offline Offline

Activity: 25


View Profile
September 19, 2014, 03:28:29 AM
 #12

another day has passed but I got no response from theymos
how long will it take?
or does it mean my pm be ignored by him?
or something is still wrong with my last signed message?
can I post my signed message here so maybe somebody can give me some advices?
I feel confused...
 
steven.G999
Sr. Member
****
Offline Offline

Activity: 266


View Profile
September 19, 2014, 07:49:30 AM
 #13

another day has passed but I got no response from theymos
how long will it take?
or does it mean my pm be ignored by him?
or something is still wrong with my last signed message?
can I post my signed message here so maybe somebody can give me some advices?
I feel confused...
 

case you are just like me. I have one more week to submit evidence theymos and no response at all, even I've sent a little bitcoin to convince bawaha it really addresses that I use on my id is missing. and I am confused what should I do to restore my account
steven.G999
Sr. Member
****
Offline Offline

Activity: 266


View Profile
September 19, 2014, 07:59:16 AM
 #14

if my format is correct?


-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <gelar24> has been hacked/lost. Please reset the email to <nasyaaulia18gmail.com>. The current date is <09-19-2014>
-----BEGIN SIGNATURE-----
<1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE>
< https://bitcointalk.org/index.php?topic=762934.msg8618507#msg8618507 >
-----END BITCOIN SIGNED MESSAGE-----

I forgot my last message. but it's really my ID, and I use email as above, and the ID using the email above as well.
a little late to send me proof of 0.001 BTC bitcoin from my address to your address and this evidence https://blockchain.info/id/tx/62315f86c15b42fec2f8546cf9a5afd6eccc85774c1bfe9632eb45a040ae669d

Thank you so much I wish I had long ID that can wake back
ziggyII
Newbie
*
Offline Offline

Activity: 25


View Profile
September 19, 2014, 12:35:23 PM
 #15

if my format is correct?


-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <gelar24> has been hacked/lost. Please reset the email to <nasyaaulia18gmail.com>. The current date is <09-19-2014>
-----BEGIN SIGNATURE-----
<1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE>
< https://bitcointalk.org/index.php?topic=762934.msg8618507#msg8618507 >
-----END BITCOIN SIGNED MESSAGE-----

I forgot my last message. but it's really my ID, and I use email as above, and the ID using the email above as well.
a little late to send me proof of 0.001 BTC bitcoin from my address to your address and this evidence https://blockchain.info/id/tx/62315f86c15b42fec2f8546cf9a5afd6eccc85774c1bfe9632eb45a040ae669d

Thank you so much I wish I had long ID that can wake back

seems I am not the only one
but I think you do made something wrong in your signed message
the field <signature> should be the result which come from the calculating of the content you sign
in your case ,the content you sign is:
Quote
My account <gelar24> has been hacked/lost. Please reset the email to <nasyaaulia18gmail.com>. The current date is <09-19-2014>

sign this with your bitcoin address 1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE
you will get the signature,it should be something like this:

Quote
HAZP+0g0T4GlmIzORYoN+2e4E8nfrP9EJpLnZJNoja/EOzikTtk2+/dgV6yJI81qG+4MM5AXvBcqqECTyz4u6bQ=


and remember the bitcoin address you signed,in you case is 1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE,should be proved belongs to the account you want to recover,for example,this address has been posted in this forum by the account,or has been included in a PM which sent by the account,find these kind of link and attach them

so,in your case the whole pm should looks like this:

Quote
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account <gelar24> has been hacked/lost. Please reset the email to <nasyaaulia18gmail.com>. The current date is <09-19-2014>
-----BEGIN SIGNATURE-----
1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE
HAZP+0g0T4GlmIzORYoN+2e4E8nfrP9EJpLnZJNoja/EOzikTtk2+/dgV6yJI81qG+4MM5AXvBcqqECTyz4u6bQ= (it's not true,just for example)

-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address: ...
OR
I sent that address to someone in a PM with PM ID#...(you need find them yourself)
when you finished the sign,you can check it here https://brainwallet.github.io/#verify

sorry for my English I hope I make it clear

I post mine here,I have verified it,no problem,I don't know why I got no response so far
any advice will be appreciated

Quote
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account ziggy has been hacked/lost. Please reset the email to slxok77@gmail.com. The current date is 09-18-2014.
-----BEGIN SIGNATURE-----
13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk
HKdGXVZZ4mI6/dmmcRgBpLP5njImMOV6ZoPf23AkzdN9nRYa637bxgwHNP2ilDlaKIbqWT67JcCHcjd2tgHloYY=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address:
https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242
Farmer17
Hero Member
*****
Offline Offline

Activity: 678



View Profile
September 19, 2014, 12:49:29 PM
 #16

I post mine here,I have verified it,no problem,I don't know why I got no response so far
any advice will be appreciated

Quote
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account ziggy has been hacked/lost. Please reset the email to slxok77@gmail.com. The current date is 09-18-2014.
-----BEGIN SIGNATURE-----
13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk
HKdGXVZZ4mI6/dmmcRgBpLP5njImMOV6ZoPf23AkzdN9nRYa637bxgwHNP2ilDlaKIbqWT67JcCHcjd2tgHloYY=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address:
https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242

I haven't tried contacting theymos before, but from what I heard, it usually takes a few days to get a response.
If you still haven't received anything back after a few days, you may try to send another PM just in case he has missed the first one.

ziggyII
Newbie
*
Offline Offline

Activity: 25


View Profile
September 19, 2014, 07:37:24 PM
 #17

I post mine here,I have verified it,no problem,I don't know why I got no response so far
any advice will be appreciated

Quote
-----BEGIN BITCOIN SIGNED MESSAGE-----
My account ziggy has been hacked/lost. Please reset the email to slxok77@gmail.com. The current date is 09-18-2014.
-----BEGIN SIGNATURE-----
13xryvjs4tV3iTA9no9vCMBp9pYXhfWzCk
HKdGXVZZ4mI6/dmmcRgBpLP5njImMOV6ZoPf23AkzdN9nRYa637bxgwHNP2ilDlaKIbqWT67JcCHcjd2tgHloYY=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address:
https://bitcointalk.org/index.php?topic=453580.msg5002242#msg5002242

I haven't tried contacting theymos before, but from what I heard, it usually takes a few days to get a response.
If you still haven't received anything back after a few days, you may try to send another PM just in case he has missed the first one.
Hi Farmer17,thanks for your advice
actually I have sent 3 PM so far
maybe I am a little overreacting
It seems the only thing I can do now is just waiting

steven.G999
Sr. Member
****
Offline Offline

Activity: 266


View Profile
September 20, 2014, 04:20:20 AM
 #18

this already right?

-----BEGIN BITCOIN SIGNED MESSAGE-----
My account gelar24 has been hacked/lost. Please reset the email to nasyaaulia18gmail.com. The current date is 09-20-2014
-----BEGIN SIGNATURE-----

1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE
GwpztbzX3RSD3Y5brSx9jaxxKRInOzPXsIHFQ6+xZgu5JY4wbgKPbepTJVNv6jFjTvTA2aav7xguJLAav64bANs=
-----END BITCOIN SIGNED MESSAGE-----

Here is the unedited post where I posted that address :
https://bitcointalk.org/index.php?topic=752738.msg8539412#msg8539412

but subject to any verification via https://brainwallet.github.io/#verify me. Message says there is always verified to be from 1bStQaRJaTFauPh8Q5CuTmsTbbWBqJaSE (but the address was not found in the signature!)

if there is one?
steven.G999
Sr. Member
****
Offline Offline

Activity: 266


View Profile
September 20, 2014, 07:11:00 AM
 #19

hello can you help me? What words should I fill in the sign message on blockchain?
whether examples like this: My account has been hacked gelar24 / lost. Please reset the email to nasyaaulia18@gmail.com. The current date is 09-20-2014.
DiamondCardz
Legendary
*
Offline Offline

Activity: 1050

A plague on both your houses.


View Profile
September 20, 2014, 09:17:06 AM
 #20

No need to send 3 PMs to theymos, he'll get around to your PMs. He probably has a lot of work to do and I doubt that recovering hacked accounts is his top priority. If he doesn't respond within a week or so, then re-send the PM.
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!