Stolen account yussuf89

[marcotheminer]

I haven't got the time currently to go through the posts here as I am on mobile but I will as soon as I am on my computer.

I do know for a fact that yussuf89's (Zeki) other account is https://bitcointalk.org/index.php?action=profile;u=239151. Not sure if that can be of any help.

[Muhammed Zakir]

Better you prevent not get hacked rather than recover it.

How to prevent it ?
Don't click any suspicious link on any website,
Don't trust anyone

I think this is a risk of loaning bussiness.
Feel sorry for your loss Marco
The Scammer method is getting scary and modified...so everyone should be carefull

It's not so easy as you think. You could get a malware(incl. keylogger) without even knowing. Even U.S. National Security Agency is putting spying program(s) : https://mobile.twitter.com/KZM279/status/568489124136689664.

Indeed, it is! First step is to ask signed message from an address he/she posted ans isn't an eited post.

   -MZ

[marcotheminer]

Since the account is fully under my control, please remove the negative feedback you may have left whilst the situation is dealt with.

[xetsr]

Since the account is fully under my control, please remove the negative feedback you may have left whilst the situation is dealt with.

It's a hacked account. Does it matter who's control its under, unless the rightful owner? This is the risk of accepting accounts without verifying ownership I guess.

[Zeki]

I think I proved that the actual owner of the account is me.
Theymos thinks that the account was hacked. But nobody can prove it.
I want to get my account. Please help.

[Madness]

I think I proved that the actual owner of the account is me.
Theymos thinks that the account was hacked. But nobody can prove it.
I want to get my account. Please help.

Marcotheminer says he have the full control of it it now , nah ?
then all you need to do is repaying the loan to get the account back (unless it wasen't you who took the loan and it was the hacker then it's more complicated)

~ madness

[xetsr]

I think I proved that the actual owner of the account is me.
Theymos thinks that the account was hacked. But nobody can prove it.
I want to get my account. Please help.

Marcotheminer says he have the full control of it it now , nah ?
then all you need to do is repaying the loan to get the account back (unless it wasen't you who took the loan and it was the hacker then it's more complicated)

~ madness

I think he made it pretty clear someone hacked his account and took out the loan. Is that the whole point of this thread?

[redsn0w]

I think I proved that the actual owner of the account is me.
Theymos thinks that the account was hacked. But nobody can prove it.
I want to get my account. Please help.

Marcotheminer says he have the full control of it it now , nah ?
then all you need to do is repaying the loan to get the account back (unless it wasen't you who took the loan and it was the hacker then it's more complicated)

~ madness

I think he made it pretty clear someone hacked his account and took out the loan. Is that the whole point of this thread?

So at the end the solutions are two , zeki should repay the loan or marcotheminer "could" give back the account to zeki but he will lose the loan (0.32 btc if I'm not wrong). This is a very bad situation.

[Muhammed Zakir]

So at the end the solutions are two , zeki should repay the loan or marcotheminer "could" give back the account to zeki but he will lose the loan (0.32 btc if I'm not wrong). This is a very bad situation.

Atleast half of the amount should be paid to marcotheminer.

   -MZ

[Zeki]

I think I proved that the actual owner of the account is me.
Theymos thinks that the account was hacked. But nobody can prove it.
I want to get my account. Please help.

Marcotheminer says he have the full control of it it now , nah ?
then all you need to do is repaying the loan to get the account back (unless it wasen't you who took the loan and it was the hacker then it's more complicated)

~ madness

I think he made it pretty clear someone hacked his account and took out the loan. Is that the whole point of this thread?

Yes.
I did not asked for loan from anyone since my account had registered. Someone hacked my account and he got the money.

[xetsr]

I think I proved that the actual owner of the account is me.
Theymos thinks that the account was hacked. But nobody can prove it.
I want to get my account. Please help.

Marcotheminer says he have the full control of it it now , nah ?
then all you need to do is repaying the loan to get the account back (unless it wasen't you who took the loan and it was the hacker then it's more complicated)

~ madness

I think he made it pretty clear someone hacked his account and took out the loan. Is that the whole point of this thread?

So at the end the solutions are two , zeki should repay the loan or marcotheminer "could" give back the account to zeki but he will lose the loan (0.32 btc if I'm not wrong). This is a very bad situation.

Both are screwed assuming this is a hacked account. Zeki will most likely have to pay to get it back. Marco could have avoided this by verifying ownership, one reason I doubt the neg feedback will be removed... Now he is out of BTC because that account is no good and won't sell because of the neg rep.

[xetsr]

So at the end the solutions are two , zeki should repay the loan or marcotheminer "could" give back the account to zeki but he will lose the loan (0.32 btc if I'm not wrong). This is a very bad situation.

Atleast half of the amount should be paid by marcotheminer.

   -MZ

Yeah but what if it turns out to not be a hacked account? Nobody knows for sure. Looks like both are gonna lose unless someone finds something solid to suggest it was hacked or not hacked.

[Muhammed Zakir]

Both are screwed assuming this is a hacked account. Zeki will most likely have to pay to get it back. Marco could have avoided this by verifying ownership, one reason I doubt the neg feedback will be removed... Now he is out of BTC because that account is no good and won't sell because of the neg rep.

Like I said(theymos replied to an example related to this about splitting), he should atleast pay half of the amount even if it is very hard to prevent hacking, he should be careful clicking the link. It is still suspicious for me, OP may have a VPN with dedicated IP which would have used when doing account sales and these things.

Edit:

Yeah but what if it turns out to not be a hacked account? Nobody knows for sure. Looks like both are gonna lose unless someone finds something solid to suggest it was hacked or not hacked.

Sorry, it isn't 'by marcotheminer', it is 'to marcotheminer'. Corrected my post.

See above. I am in doubt too

   -MZ

[marcotheminer]

There are 2 possible situations here (currently I am thinking this is the 1. situation):

1. Zeki is the original account owner. Zeki took out a loan (using a proxy) and shortly after claimed the account was hacked in the aim of getting the account back. By getting the account back Zeki would profit from the loan which he would not repay, claiming the 'hacker' took out the loan. Zeki will (might?) realise that his scheme failed and will have to repay the loan to get the account back.

2. Zeki is the original account owner. The account has indeed hacked and a loan was taken out. The loan won't be paid back. Zeki will have to pay the loan back on the hacker's behalf to get the account back.

In both situations I am left holding the account until the loan is paid back or collateral is sold.

[arallmuus]

There are 2 possible situations here (currently I am thinking this is the 1. situation):

1. Zeki is the original account owner. Zeki took out a loan (using a proxy) and shortly after claimed the account was hacked in the aim of getting the account back. By getting the account back Zeki would profit from the loan which he would not repay, claiming the 'hacker' took out the loan. Zeki will (might?) realise that his scheme failed and will have to repay the loan to get the account back.

2. Zeki is the original account owner. The account has indeed hacked and a loan was taken out. The loan won't be paid back. Zeki will have to pay the loan back on the hacker's behalf to get the account back.

In both situations I am left holding the account until the loan is paid back or collateral is sold.

this situation is getting messy, in other words both party will try to defend themselves and not gonna surrender , so either way i suggest that both of you find the solution to this , but still there isnt a solid fact that the account was really hacked

[shorena]

Since the account is fully under my control, please remove the negative feedback you may have left whilst the situation is dealt with.

I can understand that you are argueing this as it greatly strengthens your position despite the fact that you made a similar mistake in the past[1] and should have known better.

There are 2 possible situations here (currently I am thinking this is the 1. situation):
-snip-
In both situations I am left holding the account until the loan is paid back or collateral is sold.

You both made mistakes, but you are in loaning business. It is your job to take care of these things, to ask for signatures or otherwise verify that you are talking to the person you think you do. I doubt you will be unable to sell the account for the amount you loaned. Its hacked and the only person that can reasonably ask for the negative ratings to be removed is the original owner. As was allready established thats the person currently posting via Zeki.

The way this currently looks to me is that none of you has an advantage and you two should agree on a middle ground. Hence I repeat settle for half the loan I am sure Zeki can accept that as payment for a lesson in account security.


[1] was allready posted, just for easier reference again https://bitcointalk.org/index.php?topic=750507.msg9283585#msg9283585

[Quickseller]

I haven't got the time currently to go through the posts here as I am on mobile but I will as soon as I am on my computer.

I do know for a fact that yussuf89's (Zeki) other account is https://bitcointalk.org/index.php?action=profile;u=239151. Not sure if that can be of any help.

That is kind of a dick move. I don't think you would like it if someone else were to reveal your other alts that you have, so unless you have more then just speculation that he was trying to scam then you shouldn't go going around posting that information

[theymos]

I think that marcotheminer should return the account now since it was probably hacked, but everyone should give yussuf89 negative feedback for being unable to stand behind his account's actions unless he pays 50-75% of the loan principle. (This is just my opinion -- I'm not going to try to enforce it.)

[Quickseller]

I think that marcotheminer should return the account now since it was probably hacked, but everyone should give yussuf89 negative feedback for being unable to stand behind his account's actions unless he pays 50-75% of the loan principle. (This is just my opinion -- I'm not going to try to enforce it.)

if you are confident the account is hacked then it would be best to post this. I am still looking for blockchain evidence of other alts however the account being likely hacked (instead of possibly) makes the situation more urgent.

Hacker/scammer took out the loan to this address: https://blockchain.info/address/1HQATDRExXexyCc2hHJ8F272evTgm21JZ4

A week ago that address made this transaction where the guy identifies his skype address: https://blockchain.info/tx/c998155f548d0a4ce3c1b311c76c89b4ce13a4489dcf6b5550cea74f73cd23a9

Skype: Nizamhekker

He uses it a lot, just google it and a bunch of hackforums results come up.

Here is one of his btctalk accounts: https://bitcointalk.org/index.php?topic=742872.msg8397265#msg8397265
https://bitcointalk.org/index.php?action=profile;u=164938

Here is another one: https://bitcointalk.org/index.php?topic=857347.msg10001956#msg10001956
https://bitcointalk.org/index.php?action=profile;u=380653

Take the BTC address (1DwQxpZGC5e7ZkR1xbagAmJcaHmU88v5aj) from nizamcc's post and you also find this account: https://bitcointalk.org/index.php?topic=764034.msg8610073#msg8610073
https://bitcointalk.org/index.php?action=profile;u=372665

Both nizamcc and YOLOMAN have fake positive trust from the same sock account: https://bitcointalk.org/index.php?action=trust;u=348988

Confident they are the same person. Anyway, let me know if you can find anymore of his accounts/info about him before I post a scam accusation.  

Edit: my response

I also find it interesting as to just how much whoever got the loan was gambling, there was ~19 pages worth of transactions to/from luckyb.it addresses when looking at blockchain.info. However only ~1.5 pages of those were from after the transaction of the loan. While scrolling through all the transactions, I noticed that he made a few very large bets, one for .25BTC, one for ~.31BTC, among others. Additionally it looks like his bankroll started with 11 BTC. Actually no, he spent that here, which was later spent here which was likely depositing it into either a casino or some other service/site that holds funds on behalf of others. It looks like his initial bankroll was 1.8 BTC (here, here, and here), he then gets a series of <.01 BTC transactions into that address, until he starts playing luckyb.it. He later send ~1.1 BTC to the address (here and here). He sent another ~3 BTC (here, and here).

I lost track of how much he sent to other addresses then luckyb.it address, however one of note is thiswhich sent ~3.1 BTC to some other address. I would say that he likely sent around between 1.5 and 2.5 BTC to other addresses in addition to the above transaction. This is strange because it implies that he was roughly 'even' with his gambling with that specific address.

It looks like this transaction sent .005 to an address tagged as 'lucky bit promo', I am not sure what it is, however a forum search comes up with nothing, and I am having trouble accessing my VPN via foreign country gateways so I can't access luckyb.it appearing to be outside of the US. It is probably a dead end, but it could lead somewhere. I know luckyb.it was running a contest where people could guess the time of the millionth bet if they sent funds to a luckyb.it address, however it is not that one.

The 11 BTC amount is interesting because it is very close to what moreia stole in his ponzi with williamj. There are a small number of people that have that much bitcoin. This was my gut feeling from the start and was somewhat confirmed by him saying that he clicked on a link from the PD chat that likely contained some kind of malware. Moreia has a history of spreading malware, and either him or someone else did a very similar thing on Coinichiwa to Neonecrox13 (convicted2008).

They just posted the link to it. I can't remember their name but they did again the next day after it happened while I was on there talking told RedsnOw to ban them, that link was the only thing I"ve ever downloaded and I got robbed. But yeah I installed a antivirus and did a system backup to a few days prior to this happening. I know u probably think I know them or something, but honestly before now I've never heard of them before. After I downloaded the antivirus I did have like 3 or 4 it said. I think I can still get to it shows the names and what they were in.

Ask Redsnow if they are anyway he can get the chat logs from Coinichiwa on Jan 23 and 24th. Im fairly sure it was that day that I downloaded it, but it could have been the day before I'm not sure. But I do know that the name of it was 999dice.exe. I know that don't help at all though. Also let me check and see if I can find anything on my computer from that date. I'm not sure I can though where I did a system back up. But I will look.

https://i.imgur.com/4cCSRR6.png

https://i.imgur.com/QCCP9Hz.png

https://i.imgur.com/L8HcWGP.png



The webaddress is www dropbox com s hbosomsnyicqxtf 999dice.exe?dl=0 <---maleware

Like I said though, it says Link not found at dropbox. They have took it off there I imagine.

I do agree that the person who got the loan is the same person as nizamcc and IceTurk, although the later doesn't really matter as he has negative trust already. The newbie account is probably also the same but that is less concrete. Assuming the newbie is an alt of them then YOLOMAN is also an alt of them, which is interesting because he gave marcotheminer positive trust for escrowing an account trade (he does not 'publicly' sell accounts, does not have an escrow thread, and I have long suspected that a good amount of his lending thread is him lending to his alts). It is even more interesting because YOLOMAN did not give any feedback to the person who actually sold the account. Even more interesting is that YOLOMAN had a debt to marcotheminer and "defaulted" here, his first post of his lending thread however lists the loan as being "repaid" with no mention of being late, the reuse of his address makes it very difficult to know for sure if the loan was actually repaid or not. Looking from the beginning of November back to the beginning of septemer, I didn't see any transactions sending .007 (the repayment amount) to 12hYBWiPqfwdveGzpbRdGxeqnoMcNvGNSq (marcotheminer's repayment address for all his loans). although there was one for .005 during that time.

[marcotheminer]

Hacker/scammer took out the loan to this address: https://blockchain.info/address/1HQATDRExXexyCc2hHJ8F272evTgm21JZ4

A week ago that address made this transaction where the guy identifies his skype address: https://blockchain.info/tx/c998155f548d0a4ce3c1b311c76c89b4ce13a4489dcf6b5550cea74f73cd23a9

Skype: Nizamhekker

He uses it a lot, just google it and a bunch of hackforums results come up.

Here is one of his btctalk accounts: https://bitcointalk.org/index.php?topic=742872.msg8397265#msg8397265
https://bitcointalk.org/index.php?action=profile;u=164938

Here is another one: https://bitcointalk.org/index.php?topic=857347.msg10001956#msg10001956
https://bitcointalk.org/index.php?action=profile;u=380653

Take the BTC address (1DwQxpZGC5e7ZkR1xbagAmJcaHmU88v5aj) from nizamcc's post and you also find this account: https://bitcointalk.org/index.php?topic=764034.msg8610073#msg8610073
https://bitcointalk.org/index.php?action=profile;u=372665

Both nizamcc and YOLOMAN have fake positive trust from the same sock account: https://bitcointalk.org/index.php?action=trust;u=348988

Confident they are the same person. Anyway, let me know if you can find anymore of his accounts/info about him before I post a scam accusation. 

Edit: my response

I also find it interesting as to just how much whoever got the loan was gambling, there was ~19 pages worth of transactions to/from luckyb.it addresses when looking at blockchain.info. However only ~1.5 pages of those were from after the transaction of the loan. While scrolling through all the transactions, I noticed that he made a few very large bets, one for .25BTC, one for ~.31BTC, among others. Additionally it looks like his bankroll started with 11 BTC. Actually no, he spent that here, which was later spent here which was likely depositing it into either a casino or some other service/site that holds funds on behalf of others. It looks like his initial bankroll was 1.8 BTC (here, here, and here), he then gets a series of <.01 BTC transactions into that address, until he starts playing luckyb.it. He later send ~1.1 BTC to the address (here and here). He sent another ~3 BTC (here, and here).

I lost track of how much he sent to other addresses then luckyb.it address, however one of note is thiswhich sent ~3.1 BTC to some other address. I would say that he likely sent around between 1.5 and 2.5 BTC to other addresses in addition to the above transaction. This is strange because it implies that he was roughly 'even' with his gambling with that specific address.

It looks like this transaction sent .005 to an address tagged as 'lucky bit promo', I am not sure what it is, however a forum search comes up with nothing, and I am having trouble accessing my VPN via foreign country gateways so I can't access luckyb.it appearing to be outside of the US. It is probably a dead end, but it could lead somewhere. I know luckyb.it was running a contest where people could guess the time of the millionth bet if they sent funds to a luckyb.it address, however it is not that one.

The 11 BTC amount is interesting because it is very close to what moreia stole in his ponzi with williamj. There are a small number of people that have that much bitcoin. This was my gut feeling from the start and was somewhat confirmed by him saying that he clicked on a link from the PD chat that likely contained some kind of malware. Moreia has a history of spreading malware, and either him or someone else did a very similar thing on Coinichiwa to Neonecrox13 (convicted2008).

They just posted the link to it. I can't remember their name but they did again the next day after it happened while I was on there talking told RedsnOw to ban them, that link was the only thing I"ve ever downloaded and I got robbed. But yeah I installed a antivirus and did a system backup to a few days prior to this happening. I know u probably think I know them or something, but honestly before now I've never heard of them before. After I downloaded the antivirus I did have like 3 or 4 it said. I think I can still get to it shows the names and what they were in.

Ask Redsnow if they are anyway he can get the chat logs from Coinichiwa on Jan 23 and 24th. Im fairly sure it was that day that I downloaded it, but it could have been the day before I'm not sure. But I do know that the name of it was 999dice.exe. I know that don't help at all though. Also let me check and see if I can find anything on my computer from that date. I'm not sure I can though where I did a system back up. But I will look.

https://i.imgur.com/4cCSRR6.png

https://i.imgur.com/QCCP9Hz.png

https://i.imgur.com/L8HcWGP.png



The webaddress is www dropbox com s hbosomsnyicqxtf 999dice.exe?dl=0 <---maleware

Like I said though, it says Link not found at dropbox. They have took it off there I imagine.

I do agree that the person who got the loan is the same person as nizamcc and IceTurk, although the later doesn't really matter as he has negative trust already. The newbie account is probably also the same but that is less concrete. Assuming the newbie is an alt of them then YOLOMAN is also an alt of them, which is interesting because he gave marcotheminer positive trust for escrowing an account trade (he does not 'publicly' sell accounts, does not have an escrow thread, and I have long suspected that a good amount of his lending thread is him lending to his alts). It is even more interesting because YOLOMAN did not give any feedback to the person who actually sold the account. Even more interesting is that YOLOMAN had a debt to marcotheminer and "defaulted" here, his first post of his lending thread however lists the loan as being "repaid" with no mention of being late, the reuse of his address makes it very difficult to know for sure if the loan was actually repaid or not. Looking from the beginning of November back to the beginning of septemer, I didn't see any transactions sending .007 (the repayment amount) to 12hYBWiPqfwdveGzpbRdGxeqnoMcNvGNSq (marcotheminer's repayment address for all his loans). although there was one for .005 during that time.

Could you link me to the place of this quote? Nizamcc is under my control and YOLOMAN used to be (both were acquired from a defaulted loan).