I don't think the accounts were hacked or bought though, since emails weren't changed, owner probably forgot passwords.
The post gaps, pattern of writings, timing of changing passwords all show those accounts were bought along with Email address. You probably know there are platforms where account owners sell their accounts along with emails.
The only connection between both account is that "RBF" applied for Best Change campaign while "thisnewcoin" was already in, so it could have been a case of copied application.
EDIT2:
According to loyce.club it actually showed that, RBF actually edited the original post (last edited time was 5 hours after the orignal post, which is enough time to have noticed the address if it was a case wrongly edited application) and used the address mentioned in the OP, but could this be enough proof of ?
Thank you for noticing it. You just exposed more of his high ranked account! I have wasted enough time on this scammer. But to dig deep I will continue tomorrow! Cheers.
Bitcointalk Userame: pgbit
BTC Address: 325FFTmBpgwBdQBeVX1N7vSSSgtwxcEqwZ
Archive:
http://archive.is/wip/VlybgBitcointalk Name: pgbit
BTC Address: 325FFTmBpgwBdQBeVX1N7vSSSgtwxcEqwZ
Archive:
http://archive.is/wip/HbuTx