[TVM]

Hi, today another one of my accounts was stolen! I say another one, because this is the second stolen. The first account was stolen a few weeks ago, and the second today or yesterday. The interesting thing is that the second account was stolen after I received my money on 16.03.2010.

The accounts was bought by Sean and I did not shared the usernames and/or passwords. I've noticed that on the Paypal e-mail of the second account were received 5-6 e-mails with my password for that account. I did not send them. What the f*ck is going on? How would somebody steel my account, how he can get my password?!?!?

Anyone got stolen account too?

I wrote to Gomez, but as you all know they do no answer back to e-mails.

[Despite]

Well, first off, being on these type of sites you are bound to download viruses so I would always recommend having a good solid Antivirus software that runs scans automatically in the early morning because is most likely what happened to you... someone has access to your files/email etc and are waiting for you to get that money and then they pounce. Also, upload the bots or whatever you download to Virustotal or something to make sure you arent downloading a trojan/virus (The exception being crypters/binders/stealers from here). With the binders and crypters you have to just make sure the person who started the thread is trustworthy and even that isnt fullproof. I downloaded some file from here yesterday that was posted by an admin and it had a worm in it so... just be careful. Best of luck!

[FrEeDoM]

get etherdetect your probably either in a botnet or a keylogger also get malwarebytes

[markpolska]

can u try password recovery and get the account back?

[FrEeDoM]

Originally Posted by markpolska

can u try password recovery and get the account back?

if its hot mail all u can do is try but 90% of the time you wont get it back , if u ring hotmail up im pretty sure if u can prove you was the owner at one point they will send a reset link to a email of your choice

[cmdr001]

I already had the same situation, also with Sean, and the response is somewhat simple.
The accounts you got weren't idle.

The first time I saw some little movement on one of my accounts but I ignored it because I believed it was Sean himself who was running in mistake an instance with that account (He checks if they're active after all, so I thought if it was with the client and forgot it on).

At first everything was ok, until I got lots of emails requesting for the password - Obviously someone else was using it. I didn't worried too much, changed password and all until eventually the requests stopped. Thought all was ok.

One morning I woke up to see I no longer had control of the account and the email had been switched. Obviously, my only guess is that the other person entered in contact with Gomez's staff and asked for the account to be retrieved. Since they have been there running a client for ages, I can only guess that if the staff will look at IPs and whatnot they'll notice the abrupt change and revert the account to the previous owner.

[sean]

Wow lol i saw my name in the post while skimmin and was like ughhh cause i thought i was bein acused of stealin someones acct lol.

Ne way ya dude there r many ways people could get ur username and password and the most common was listed above....key loggers.....

[cmdr001]

Well, I for one am not accusing you of stealing the accounts, however, after seeing what I did it seemed somewhat logical what was happening. I mean "Key loggers" would make sense, but so it would losing all my accounts, not just one in particular that just met the circumstances I described: Someone else was using them.

Being honest though, I pretty much believed that seeing how Gomez's staff seems so reluctant to answer to any mail or anything that they wouldn't bother with anyone claiming the account had been stolen, but it still only seems the only logical conclusion for me. It's not like people would try sending the password to their emails if they knew it from the start.

[TheAcclaim]

Originally Posted by Despite

I downloaded some file from here yesterday that was posted by an admin and it had a worm in it so... just be careful. Best of luck!

.. what file did you download from here that had a worm? and from an admin?

[TVM]

No, Sean I'm not accusing you for stealing. Key loggers is not an option for me, I'm Cisco student so I have some knowledge about PCs and networking. Some of my accounts, as cmdr001 said, are running by someone, I can see some online minutes without running the account at that day.

Sean, did you bought these accounts or you personally activated them?

There is a chance for a bug in Gomez peer web site, maybe someone has found a way to receive the passwords to a mail of his own.

Mark, I tried the "Forgotten password" thing, but the mail in my account is changed, so I can't receive the new password.

In Twitter I saw I guy that had the exact problem.

[markpolska]

damn I really hope that my account wont get stolen...

[TVM]

Mark, do you have accounts that have online minutes even if you don't run them?

[afro]

I know one of my accounts sometimes gains about 3 cents per day without me running it, but it's one of the accounts i listed as an example in the .ini file of my Gomez Multi Load program, so obviously someone else is kind enough to leave it in
That reminds me, i really should get the next version finished...

[markpolska]

lol of course not...

[rasmus]

well did u have a friend or anyone at ur house any recent time? and r u one of those people who are lazy and saves the password on the cpu. the person might be a friend who went on ur account at ur place and changed the password so they can access it

[markpolska]

hm that does seem a lot more likely thana keylogger...

[Smoked]

Sounds like you have been keylogged my friend.

[TVM]

Non of my friends knows about Gomez.

OK but if I was keylogged why weren't my other accounts stolen and why did this guy waited for the Feb payment, and then changes the password?!? It doesn't make any sense!

[markpolska]

hm... maybe the thief is not greedy? lol dunno

[cmdr001]

Ignore the key logger theory.. it's more than obvious that this isn't the case here, even if we aren't certain of how the accounts were taken.
Anyway, I had asked on the exploit thread for how long you had noticed the account loss, because if you still had your Paypal account data in at the end of the month, then the money would still go towards you. It's not the information that's on the account by the 15th (or whatever payday) that matters.

[Ercle]

Well, if this person is running your account(s) and YOU keep receiving the payments... let them do it! If you are not getting paid anymore, ask Gomez to verify the account to see if the e-mail address and payment account was changed in the last few months and then you might catch the culprit!

[TVM]

I agree that this isn't a keylogger/virus/trojan case.

For the first stolen account - I did not receive any money for February (I had over $5 in it). For the second one - I'll see what will happen on the March payment.

And why did this guy send 5-6 "Recover A Lost Password" emails? Why not just one?

P.S. @Ercle I did not receive money and Gomez is not answering me.

[markpolska]

lol it would be fabulous indeed if someone is running the account for u and u get paid for their work