early this morning, somehow my account was compromised and someone with an IP address in Paris, France (based on email from bitcointalk.org email) and changed my password and email address and also posted for an unsecured loan in this thread
https://bitcointalk.org/index.php?topic=3243635.msg51724618#msg51724618 - Luckily I was online when it happened and attempted to first change my password but they had done so and locked me out - I got the email from the forums stating I could lock the account thru the link they sent - So, I did. I have changed my email password and the password for pretty much every other site I use.
I sent an email to
recoveries...@bitcointalk.org as instructed - just waiting to get a response.
anyone able to provide a rough ETA? It has been about 18 hours so far. I would like to get in the account and check
https://bitcointalk.org/myips.php to verify the ip address.
I have sent an email to the ISP that provides service to the user of the ip address I got via forum email and they are also "investigating" so they said at least - not sure how far that will go.
I would hate to have to start over on a new account
my original account is:
https://bitcointalk.org/index.php?action=profile;u=1478835I was online and saw something pop up on the "Show new replies to your posts" (I have a 15 second refresh set up on that page in a separate window) - at the point of all of this I had been logged into the forum for over 43 days without logging out) - I clicked it, saw no post by me - went to my "show last posts of this user" and saw that the post was not there, So I posted the:
"not sure why this is has my name --- I never made this post and it does not show in my post history. that address is also not my btc address"
When I went back to my profile to attempt a password change, I was then notified that my password was wrong - when I attempted to reset it, it said my email was not found - I went to my email and saw the two emails from the forums - I used the provided link to lock the account and emailed the provided address referenced in the email.
I believe they derived/obtained my password somehow and were on the account at the same time I was and then changed it while we were both on - it is quite possible to be logged in from multiple locations - I have an active window on at least 2 pcs in my house and one at my job -without ever logging out of the other pcs.
I believe had I not been online at the same time, it would be a completely different situation. They may have tried to post more scams or pulled some other shenanigans.
I did not make the post asking for the loan - it is shown to have a Paris France IP address whereas I am in Florida, USA
I am still unsure how they obtained my password but I am glad I was online when it occurred but I assure @WhyFhy I was not trying to scam anyone and I sure as hell do not need a .05 BTC loan
Email was changed afterwards. This is the rough timeline from what I understand:
1. Stryfe was hacked. Hacker keeps the same information so that Stryfe is unaware of the hack
2. 'Stryfe' posts a loan request
3. I deny the loan request
4. Hacker deletes loan request, trying to hide their tracks
5. Stryfe receives an notification of some sort when I quoted them and comes to this thread wondering what it was about
6. Hacker realizes that Stryfe realizes that the hacker has access to his account and changes the account information
7. Stryfe locks the account
This pretty much hits on the head - if my first description was unclear (note all the edits to that post) it is because I had already been up 18 hours and was also trying to figure out what happened while also changing all the pw's to every account I have.