[Soulmate～っ☆]

You guys are giving me really good info but I'm not sure how to organize this whole thread so I will maybe rewrite it once I have the time unless someone else would be able to do it.

Basically we have 3 compromised accounts
Regulus
BLXK
Roy Wood$

His main was Roy Wood$ but now he is going through every account and isn't even trying to cover his tracks. However the original owner of that account was hacked by Bullets, a known scammer who also buys accounts. After that he stole Sup?'s account and then threatened Regulus out of his account OR Ratted him.

I'm just going to post what I put over there, onto here as to avoid confusion around 2fa security for the average user.

If you use Authy it's quite easy to use the google chrome add on and login with your google account. It's also not impossible to hijack his browsing session to avoid 2fa all together especially if the person was infected with a RAT.

You do need a master password for Authy but seeing as you are infected, the "attacker" shouldn't find it too hard to find the average persons master pw.

Yesterday someone posted a thread with an .exe that was a RAT in the JTAG/RGH section because their account was apparently compromised, but now the contents of the thread are [SOLVED] which was really suspicious so I decided to check it out more.
He is trying to do exchanges for very high amounts so I expect he will now try to exit scam on that account.

https://hackforums.net/showthread.php?ti...id52385474


That's what was in the thread contents, and when he got his account back he posted that someone named "Roy Woods" or "hackeros" might have stolen it because he left +reps on those accounts however the thread contents have now been changed and the member was compromised for the second time which was when the person that stole his account tried to cover his tracks.

Roy Wood$' account might not be the original owners in the first place since he has a 90% warning level and the original Roy Woods claimed his account was stolen by the person that is using it now. I'm not saying this member's claim is true but it just makes him seem more guilty.

https://hackforums.net/showthread.php?tid=5369582

After the RAT incident and Sup? got his account back, a few hours later Roy Woods made a thread about his "Boats" that I immediately reported and his warning level went from 70 to 90 and this thread is basically just him admitting that he spread the RAT on HF so at that point he might have wanted to switch to the other account.

The thread is junked, but using Mr. Robot's trick you can tell my screenshot is valid.
https://hackforums.net/showthread.php?tid=5400265
Spoiler (Click to View)

I thought the OP had his original account so I tried to contact him but by then Roy Woods may have switched to the "Sup?" account and changed the username
https://hackforums.net/private.php?action...d=73190596
Spoiler (Click to View)

Now like I said he has changed all the contents of the thread to SOLVED which makes no sense because he was saying that his account was compromised by Roy Woods and that means that Roy Woods is now on the account trying to cover his tracks.

https://hackforums.net/showthread.php?tid=5400129

Now that you have seen my evidence on why I think that user is compromised, here is more proof on why I think it was Roy Wood$, besides "Sup?" 's original accusations.

1. The thread he made about "Boats"
2. This thread about free twitter followers, which is the same exact layout on both accounts.
https://hackforums.net/showthread.php?tid=5400551
https://hackforums.net/showthread.php?tid=5372474
3. Asking about twitter appraisals, RATs, and generally typing like he does on the other account
https://hackforums.net/search.php?action...e38351345e
https://hackforums.net/search.php?action...8c16c798eb

For now this is all the evidence I have but I may update if I see anything else or people have any questions. I don't have time to screenshot every single thread if it gets junked, but the Mr Robot trick and staff can validate them in my evidence.
If I left something or anyone has any questions let me know.

[minimalist]

I'd love to read this thread but it's a Friday night
can't wait for PI's to come into this thread and analyze this for me though

Nice write-up

[Gary]

Looks like dark days ahead for HF

[Parks]

He just received rep from Regulus when we all know there wasn't a deal made.

[zeroday]

I doubt Regulus sold his account (not saying he isn't hacked) as he really doesn't seem like the person to do that.

[Gary]

I doubt Regulus sold his account (not saying he isn't hacked) as he really doesn't seem like the person to do that.

There's a lot more to it. I doubt Regulus willingly sold his account.

[Soulmate～っ☆]

There's a lot more to it. I doubt Regulus willingly sold his account.

I'm on the same boat. Under normal circumstances I'm completely sure he wouldn't so I'll change that in my thread, but he could have very well been threatened into it.

[MethPipe]

now that I think of it regulus doesn't have money as he told me he would put me to L33t if he did. he might be compromised im not sure.

[Soulmate～っ☆]

@Roger I'll change the title but that is the "Sup?" account's new username.

[zeroday]

There's a lot more to it. I doubt Regulus willingly sold his account.

I'm on the same boat. Under normal circumstances I'm completely sure he wouldn't so I'll change that in my thread, but he could have very well been threatened into it.

Just had a little search into this situation and it does appear that something is going on. He told me 2 days ago that he has no money and I've just seen his thread "h pp need 1200 btc". I definitely don't think he's the one that made that thread.

[Gary]

I'm on the same boat. Under normal circumstances I'm completely sure he wouldn't so I'll change that in my thread, but he could have very well been threatened into it.

Message me on Skype.

[MethPipe]

this is what he said to me via Skype. http :// prnt scr. com/ cg8l62

[The Silenced]

Thanks for the heads up man. It's a shame seeing so many people getting compromised as of lately..

[Soulmate～っ☆]

this is what he said to me via Skype. http :// prnt scr. com/ cg8l62

His skype account may have been stolen too, or it's not his real skype.

[i a m g o n e]

Yo you guys gotta spread this around asap or regulus won't be able to come back