Post
Topic
Board Meta
Re: Bitcoin Talk account hacked any way to recover?
by
TerraMaster
on 12/03/2015, 01:19:45 UTC
I am glad that both of you are peaceful about this and trying to work it out. More than I've seen out of a few on here. Hope you both get this resolved and nobody loses anything. GL.

I agree. I think I said this in the past, but I have to repeat this: I applaud those involved how civilized this is despite the amount of money and merde (pardon my french) is involved.

Id like to offer my advice on this. Take it or not I cant judge how important this is for each of you. Pardon me if I address you with your current accounts names it is just simpler for me and should not be take as bias.

MinermanNC I know - as you PMed me - that you are an experienced user here. I will not reveal your other account as you asked, dont worry. Yes, you should have asked for a signed message. Yes, it is understandable that you did not do so. I also agree that the price is somewhat normal. One might argue that the avatar might increase the value, but the trade was up ~3 days which should have given TerraMaster time to raise flags left and right. On the other hand: If I learned anything from past trades -> a hurried trade is rarely good a sign. Some people are just impatient, but usually I would say selling an account that is >600 days old would be a more considered decision. The asking price fell from 1.3 to .75 in those 3 days.

TerraMaster I personally think you have reasonably estblished that you once owned the account. I dont know if theymos will accept it though. There also is another problem. Lets say theymos accepts your proof, it does not clear up who sold the account. As we have seen from the time line of the events the thread which lead to the trade was opened 3 days prior to you noticing the hack. I also think its odd that the password was not reset as a change of password requires an attacker to have the old password. There are several explanations for this, among them (no order)

#1 you staged the hack
#2 your machine was compromised without you noticing and durring that time the old password was obtained by the hacker via e.g. a keylogger. They speculated you would not change the password for a while as long as they are careful in order to avoid raising flags when selling the account.

The lawn mower analogy is a nice picture, but the important difference is that in our digital world we have no faces or can easily change them. How would a judge rule in such a world?

There has been a similar situation in the recent past. It involved a loan though.

Im not sure where I am going with this. Would this be a battle it would be a draw and the longer this is dragged out the higher are the chances that the civilized conversations stop and more time is invested to solve something that might very well be unsolvable.

Do I have a solution? No. I hope I never have to be in a situation like this.
Do I think theymos will be able to solve this? I dont know, this was his opinion on the last case that seems more similar the longer I think about it.

I think that marcotheminer should return the account now since it was probably hacked, but everyone should give yussuf89 negative feedback for being unable to stand behind his account's actions unless he pays 50-75% of the loan principle. (This is just my opinion -- I'm not going to try to enforce it.)


Hey shorena, I did give theymos some extra supporting material, more than I had initially sent you. If he looks at it for a few minutes or so it should be clear to see yes it was mine. And I am trying to be patient. Give things time.

Ok, since this seems to be a question lately of pure speculations lol, the time gap here, this is my second to last post: not that it really matters now...

https://bitcointalk.org/index.php?topic=967682.msg10656930#msg10656930

I knew that wallet had issues when I wrote that post.. I turned off all processes that had mysteriously appeared. After that I had to work the rest of that day. And stayed busy into the next day on the go. I logged in again late Thursday. The 5th. Posted to unacceptable. That was the last login. Then I did not login any Friday. And had been scanning down my PC just in case. Thought I had got everything ( Trojans) It wasn't until  Saturday that I got this from GMail. or logged in anyways and read it.

Hi xxx,

 Someone recently used your password to try to sign in to your Google Account - xxxxxxxxx@gmail.com.

 We prevented the sign-in attempt in case this was a hijacker trying to access your account. Please review the details of the sign-in attempt:


 Saturday, March 7, 6:37 PM GMT
 IP Address: 185.17.1.82
 Location: Unknown  
 


 If you do not recognize this sign-in attempt, someone else might be trying to access your account. You should sign in to your account and reset your password immediately.

 Reset password  

 Sincerely,
 The Google Accounts team  

From there I went into panic mode and took that PC off line, Pulled the hard drive and separately scanned with another PC using better software and that when I found the backdoor Trojan I had missed initially. Then lastly, when I went to login or post on BCT that's when I noticed he got my accounts AND "scryptonite" account as well. Save that for another battle lol Actually this has been one big blur since I discovered the intrusion into my main PC.

This is more accurate:

#2 your machine was compromised without you noticing and durring that time the old password was obtained by the hacker via e.g. a keylogger. They speculated you would not change the password for a while as long as they are careful in order to avoid raising flags when selling the account.

Anyways, I hope theymos will look at the BTC address and deposit account and deposits made to it from my wallet. If he does he will know what to do.

Look I am not mad at anyone, only the hacker and then myself. Anyone that really knows me in here knows I am cool and knows its me. I have been in this forum 2 years now, seen a lot, heard a lot, learned a lot met some great devs who have been very good to me. Yes it hurts to lose an account 2 years in the making for sure! Like I said, ill just wait and see.

Thanks for the moral support shorena,  Smiley