+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: Account Hacked, Cannot recover my account due to 2FA (/showthread.php?tid=5470936)
Account Hacked, Cannot recover my account due to 2FA - HannibalBarca - Nov 21, 2016
Around a week ago, I got an email from HF saying to click a link if I wanted to reset my password (November 15, when the hacker seemed to gain access to my account, I never clicked the link). As I was busy, three days later on November 18, I actually went and reset my password and got the randomly generated one, but I could not log in due to 2FA being enabled (Which I never enabled).
This timeline seems consistent as someone used my account to scam someone $40 on November 15th). What can I do in this situation? I'm more than happy to pay the man $40 to close the scam report, or talk to the guy, as I value my account more than $40. I'm also willing to do whatever is necessary to prove my identity.
* - Mαxim - Nov 21, 2016
https://hackforums.net/member.php?action=profile&uid=414357
Mhm. Tricky situation. Just wait for Omni to reply here or something.
* - HannibalBarca - Nov 21, 2016
Yeah thats my account, I see two scam reports open. I'm more than happy to pay the people back, and I won't make the mistake of not enabling 2FA ever again, already did it on all my accounts that allow 2FA yesterday.
I honestly never thought I'd get my account compromised, My guess is that username password combo was used on another website somehow, and then brought over to HF
* - Mαxim - Nov 21, 2016
(Nov 21, 2016 04:51 PM)temp_GOLDBACH Wrote: Snip
Welp. I did neg that acc with a dwc. Sucks that people had to get scammed. (Will remove later when situation is solved)
(Nov 21, 2016 04:51 PM)temp_GOLDBACH Wrote: already did it on all my accounts that allow 2FA yesterday.
Wait, what?
* - HannibalBarca - Nov 21, 2016
(Nov 21, 2016 04:56 PM)Mαxim Wrote: Wait, what?
I'm saying that before this incident I didn't bother with 2FA, but now that this happened I realized I could have literally lost tens of thousands of dollars. Thus I've enabled 2FA on all my accounts that I can (gmail, etc).
* - Egregious Jr. - Nov 21, 2016
Good luck with getting your account back. If you have a dynamic IP it's gone forever.
* - NaDe - Nov 21, 2016
Use the contact form.
https://hackforums.net/contact.php
* - HannibalBarca - Nov 21, 2016
(Nov 21, 2016 05:01 PM)Shadow Wrote: Good luck with getting your account back. If you have a dynamic IP it's gone forever.
What do you mean? My IP is dynamic/I have access HF from different places, not just my house. But all my accesses are within the state I live in and roughly in a 2 hour radius
* - Riyu - Nov 21, 2016
Kinda weird how there isn't a ip change...Also did you have 2FA enabled before? If you didn't the chances you get your account back is slim.
* - Egregious Jr. - Nov 21, 2016
(Nov 21, 2016 05:02 PM)temp_GOLDBACH Wrote: What do you mean? My IP is dynamic/I have access HF from different places, not just my house. But all my accesses are within the state I live in and roughly in a 2 hour radiusOmniscient has stated that if your IP doesn't match then he will not recover it.
* - HannibalBarca - Nov 21, 2016
(Nov 21, 2016 05:02 PM)riyu. Wrote: Kinda weird how there isn't a ip change...Also did you have 2FA enabled before? If you didn't the chances you get your account back is slim.
How can I see if theres an IP change? Also no I didn't, someone enabled it after compromising my account. I'd have my account back if it weren't for that (Just send a recovery email)
(Nov 21, 2016 05:03 PM)Shadow Wrote: Omniscient has stated that if your IP doesn't match then he will not recover it.
I can give my home IP (Which I believe should have been the same for the past few months). I also access HF from my University and Mobile (Though I haven't even logged into HF for like a month)
* - THC - Nov 21, 2016
You may want to have a checkup run on your pc incase it is infected with a virus or something similar. Would allow the person to use your connection as a reverse socks to gain access to your account without having another IP come up.
* - HannibalBarca - Nov 21, 2016
(Nov 21, 2016 05:08 PM)M.D. Wrote: You may want to have a checkup run on your pc incase it is infected with a virus or something similar. Would allow the person to use your connection as a reverse socks to gain access to your account without having another IP come up.
You mean scan it with something like MalwareBytes?
* - Omniscient - Nov 21, 2016
You should have had 2FA enabled. Your account would probably still be yours. As a courtesy I upgraded to l33t your new account but consider your old account closed and gone permanently. You should still work to resolve the issue with those who were scammed.
Thank you for reporting the account but it appears your first contact with me was yesterday. That gives a scammer 5 days to rip members off.
* - HannibalBarca - Nov 21, 2016
(Nov 21, 2016 05:45 PM)Omniscient Wrote: You should have had 2FA enabled. Your account would probably still be yours. As a courtesy I upgraded to l33t your new account but consider your old account closed and gone permanently. You should still work to resolve the issue with those who were scammed.
Thank you for reporting the account but it appears your first contact with me was yesterday. That gives a scammer 5 days to rip members off.
Thank you for the upgrade, I really appreciate it. I'll reach out to those scammed to try and work it out.
And yeah I agree I should have reached out earlier; I should have checked on my account when I got that password reset email, but figured it was just someone trying to reset my password, and nothing major.
Thank you again though for hastily dealing with this.