learners permit
[H]ard|Gawd
- Joined
- Jun 15, 2005
- Messages
- 1,865
Yea the listing is still there wth is going on with the admins there? This should have been dealt with swiftly.
Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
If that ever happened, you’d think that he would have backdoor/admin access to the database and could reset it himself without having to do it through the website like we do.Has anybody actually gotten a response from heat23 ? I know several people from multiple forums mentioned reaching out to him, but is there any chance he lost access to his account(s) as well and that's why the fraudulent listings remain up? You would think fraudulent listings being on your site where people could be actively losing money due to sending crypto to a scammer would warrant spending the time to at least take the listings down? Maybe when you guys are reaching out it's just going to a scammer that hacked his accounts too? His account was logged in here yesterday, but maybe that was somebody that managed to get a hold of his credentials?
He’s notoriously hard to get in touch with. Heat himself is the only admin of the site but there are a few that have some privileges and can help.Has anybody actually gotten a response from heat23 ? I know several people from multiple forums mentioned reaching out to him, but is there any chance he lost access to his account(s) as well and that's why the fraudulent listings remain up? You would think fraudulent listings being on your site where people could be actively losing money due to sending crypto to a scammer would warrant spending the time to at least take the listings down? Maybe when you guys are reaching out it's just going to a scammer that hacked his accounts too? His account was logged in here yesterday, but maybe that was somebody that managed to get a hold of his credentials?
Admin….. heat himself is the only main admin. I’ve reached out to everyone I can unfortunately. If anyone has better contact info, I’m all ears.Yea the listing is still there wth is going on with the admins there? This should have been dealt with swiftly.
He does, I believe he does the programming there.If that ever happened, you’d think that he would have backdoor/admin access to the database and could reset it himself without having to do it through the website like we do.
Wonder how many got owned this time.Another one? - https://hardforum.com/threads/fs-used-evga-geforce-rtx-3080-ftw3-ultra-gaming-10gb.2015323/ I've done business with that seller before and it went well, so if it's not a hacked account my apologies, but it certainly follows the theme. How many people sent crypto payment?
I asked to send via Paypal, and not heard back. Sad since it's a long time [H] member with good record.Another one? - https://hardforum.com/threads/fs-used-evga-geforce-rtx-3080-ftw3-ultra-gaming-10gb.2015323/ I've done business with that seller before and it went well, so if it's not a hacked account my apologies, but it certainly follows the theme. How many people sent crypto payment?
Wonder how many got owned this time.
O wow, thnx for passing info along.Just posted to Anandtech-
Hello
I know it is not the place, but trying to protect fellow traders at hardforum.com - My account stolen and they changed the email. I created a new account, but cant email admins until it is approved. If you guys contact admins there and maybe see if someone open post with my account and let the possible buyers know?
my username is TurK-FX in hardforum as well.
Oh crud, yeah, Turk-FX just posted on Anandtech that indeed his H account has been compromised and this is a SCAM! I believe Heat has been compromised and the hacker is trying all the passwords from Heat with other forums and doing this scam. I wonder if H needs to temporarily lock the FS/FT subsection for now. I think we should, judging by how many people have fallen for this 3080 thread.Another one? - https://hardforum.com/threads/fs-used-evga-geforce-rtx-3080-ftw3-ultra-gaming-10gb.2015323/ I've done business with that seller before and it went well, so if it's not a hacked account my apologies, but it certainly follows the theme. How many people sent crypto payment?
No. Stop paying with crypto and insist on PP G&S.I wonder if H needs to temporarily lock the FS/FT subsection for now. I think we should, judging by how many people have fallen for this 3080 thread.
No. Stop paying with crypto and insist on PP G&S.
Sorry to hear that. I PM'd him after 4+ people did and asked if it was still available, I knew if he said yes it was highly likely a scam.I just fell for it. Lesson learned.
For transparency I sent eth to this address.
https://etherscan.io/address/0xea0a9e1db1c7569d5217da15c9b427bd08faffc1
It was immediately transferred to a much larger wallet with close to $11M worth of ethereum.
https://etherscan.io/address/0x832f166799a407275500430b61b622f0058f15d6
Looks like I'm the only one so far based on eth to this one address.
Thanks for the update and all your hard work!Hey all - I am still actively reviewing and responding DMs/emails/threads regarding this topic, but wanted to provide an update after analyzing system logs and access patterns. It appears that at maximum 5 Heatware accounts may have been compromised in the past week with the same/similar pattern as dutnguye. This appears to be a contained and isolated event. No breach has occurred on the Heatware servers or database. All passwords are stored using security best practices and in-transit requests are secured through SSL.
can you provide me with a list of those 5 accounts so I can check if they are members here and possibly get ahead of this?Hey all - I am still actively reviewing and responding DMs/emails/threads regarding this topic, but wanted to provide an update after analyzing system logs and access patterns. It appears that at maximum 5 Heatware accounts may have been compromised in the past week with the same/similar pattern as dutnguye. This appears to be a contained and isolated event. No breach has occurred on the Heatware servers or database. All passwords are stored using security best practices and in-transit requests are secured through SSL.
Which user???I just fell for it. Lesson learned.
For transparency I sent eth to this address.
https://etherscan.io/address/0xea0a9e1db1c7569d5217da15c9b427bd08faffc1
It was immediately transferred to a much larger wallet with close to $11M worth of ethereum.
https://etherscan.io/address/0x832f166799a407275500430b61b622f0058f15d6
Looks like I'm the only one so far based on eth to this one address.
That should have been the Turk-FX 3080 post, if that's what you mean - https://hardforum.com/threads/fs-used-evga-geforce-rtx-3080-ftw3-ultra-gaming-10gb.2015323/Which user???
Yep that is correctThat should have the Turk-FX 3080 post, if that's what you mean - https://hardforum.com/threads/fs-used-evga-geforce-rtx-3080-ftw3-ultra-gaming-10gb.2015323/
turk-fx posted a new discussion "FS Used Evga GeForce RTX 3080 FTW3 ULTRA GAMING 10GB" to a forum you are following
EVGA GeForce RTX 3080 FTW3 Ultra Gaming 10GB KR Model: NOT hash rate limited Product has used for mining and is in excellent physical and working condition. Product purchased on 12/12/2020 and manufacturer warranty will be valid through 12/12/2023 Product will be packed in my new card's...
View Discussion View All Following
overclock.net also has a 2FA option fyiSeems Ovreclock.net as well so watch out there as well. I got an email notice over at OverClock.et forum about a a new Thread in the FS/Video Card section:
You're not wrong, but everybody really needs to enable 2FA at this point here and at any other forum they're able to, change their passwords at all of them and make sure the passwords are not shared between sites. At least with the attack vector that currently exists(credentials lifted from elsewhere used to gain access to this forum's accounts) it would prevent it from happening and people are already out thousands of dollars.2FA isn't the problem. Upfront payment by crypto is just a bad idea. Reputation is great and all but society functions in large part via the fear of consequences. With an upfront crypto payment there is practically zero fear as no one will be able to or bother to track that money.
These accounts have had suspicious activity recently...These are the ones I'm aware of so far - dutnguye, LouPoir, turk-fx, hkklife, thegunner100 but I'm sure heat23 will post back to confirm / with more information.
I appreciate you posting back with that information. Is there any chance at all that the whole Heatware username/password database was compromised? Knowing the answer to that would help the admins of this and other sites make informed decisions on if doing a sitewide password reset, etc. would be beneficial.These accounts have had suspicious activity recently...
thegunner100, dutnguye, LouPoir, TurK-FX, boshuter, batch71, hkklife, hardassthe1
Man I just put two and two together and realized that's exactly what happened(down to the exact price) in the Turk-FX scam - https://hardforum.com/threads/fs-used-evga-geforce-rtx-3080-ftw3-ultra-gaming-10gb.2015323/ Really messed up, either that's a major coincidence or the scammer is reading this thread.Let's face it if my account with ~64 positive Heatware posted today "I have non LHR 3080's for $1100 a piece but you have to pay via ethereum to ___ address" I would probably get 20 PM's right away all ready to send it.
Is there any chance at all that the whole Heatware username/password database was compromised?
No breach has occurred on the Heatware servers or database.
Hey all - I am still actively reviewing and responding DMs/emails/threads regarding this topic, but wanted to provide an update after analyzing system logs and access patterns. It appears that at maximum 5 Heatware accounts may have been compromised in the past week with the same/similar pattern as dutnguye. This appears to be a contained and isolated event. No breach has occurred on the Heatware servers or database. All passwords are stored using security best practices and in-transit requests are secured through SSL.
These accounts have had suspicious activity recently...
thegunner100, dutnguye, LouPoir, TurK-FX, boshuter, batch71, hkklife, hardassthe1