Your Steem Account gets Hacked? What to do next?

in hive-172186 •  3 years ago  (edited)

recovery1.1.png

Hello beautiful people of Steemit! Lately we have seen a lot of spammy comment that offers an airdrop or free Steem token if you click on the comments' link and then the link will bring you to another site and it asking you for your MASTER PASSWORD.. Never fall for this as there are never free steem token given in the community or an airdrop of some sort by asking you to give up your Master Password.
This tactic is use to lure and making you giving up your Master Password to this bad actors and they will then get full control of your Steem account.
Then the next thing you know, all your liquid Steem/SBD token in your account being transferred to other unknown account without your consent, then next they powering down your steem power without your consent, and next best thing is they start to spam other users with the phishing comments that they post to you earlier using your account and making them the next victim..

hacked11.jpg

What to do if you are in this situation?

Now your account is officially being hacked, and you should start the "Recovery Account Process" to your stolen account.

In this post, I will guide you on how to initiate this Recovery Account if you have sign up through steemit.com.
If you have sign up through other medium/site/services please refer to those site on how to start the recovery account process. But don't worry, I will explain how to start recovery account process if you have signed up through other platforms that is not steemit or @steem as recovery account in the next post.

First step please immediately visit ▶▶🆘 Stolen Account Recovery Page page to initiate the Stolen Recovery Account Process.
You will need to provide the email address that you used when you signed up, your steem account name, and a master password that was used in the last 30 days.

recovery1.png

Just in case you could not get in touch with the email address that you used when you signed up, you may send an email to [email protected]
and provide the original email address and phone number that you used when you signed up, so then Steemit Inc can manually approve this Recovery Account Process request.
You may also send them an email to ask if the recovery account process has been approve with this email address [email protected] if you haven't heard from them for a long time.

That is all for the stolen account recovery process for users that have signed up through steemit.com or through this page Steemit Sign-up



How does the stolen account recovery process work?

If your password has been changed without your consent, then the account designated as your recovery account can generate a new owner key for the account. The account recovery must be completed within 30 days of the password being changed, and you must supply a recent owner key that was valid within the last 30 days.

Steemit Inc. owns the default recovery account (@steem) for all users who sign up using steemit.com. Steemit can only identify users by their original email and phone number that were used to signup via steemit.com.

If you don't have the master password or owner key that was valid the past 30 days, or are unable to prove that you are the original owner of the account, then your account will be unrecoverable.

The stolen account recovery process can only restore ownership of the account. It is not possible to recover funds that were stolen.
Source



Change your Recovery Account

For existing users that have sign up through other medium or platforms(not through steemit.com) please change your recovery account to someone that you trust or who can help you do this Recovery Account Process when your account is compromised. Please refer to this post on how to change your Recovery Account If you have joined Steem before March 2020, you need to revisit your recovery account, may possibly need to change it.

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!
Sort Order:  

Hi @cryptokannon, @steemcurator01

As a part of Security, people have to be careful. Peoples do not try to click on unknown links, advertisements banners that receive from the unknown peoples, in such a case they can check the sender's profile and examine it, check the comment section to know how many comments they have made similar to it.

Here, maybe I am not aware fully yet but, what I am trying to understand is, Active key is an important and only one to perform any action under our wallet.

If your password has been changed without your consent, then the account designated as your recovery account can generate a new owner key for the account.

So similar to this, can I say the process is like first, it will check what has been changed without consent like Owner Key, Posting Key, Active Key and then accordingly it will generate a new key(Owner Key, Posting Key, Active Key) which changed for the account OR only change and generate a new owner key.

I use Steem Keychain which prompts me on every transaction, I mentioned about it when I visit to the newcomer Achievement 2 post which is Basic Security on Steem.

I guess now based on such experience HACKER ALERT! PLEASE CHANGE YOUR PASSWORDS STEEMIANS!! it is time that we need to think more about Security and implementation of something like second layer security like Google Authentication or provide Dynamic key(change every 1 min) under wallet like below, for the transaction while transferring.

Nice suggestion. The keychain that you use is not being updated or not operated by steem developers anymore. You may change to this one https://chrome.google.com/webstore/detail/steemkeychain/jhgnbkkipaallpehbohjmkbjofjdmeid this will be updated frequently by its creator/steem community developer.

Nice one, I was able to export from old and import it in this new one.

Is there one for Firefox, I'm on Firefox and not Chrome.

Hello dear friend @cryptokannon good afternoon
It is incredible that these people exist.
excellent information, I hope I never have to use it, but you never know
Thank you very much for the information
have a beautiful afternoon

Thanks for noticing this and read them.

Thanks @cryptokannon for the information and please people on steemit let's take precaution

Awww that very nice information for us
Thank you soo much
I have read it all and I have really appreciate that so much @cryptokannon

Muchas gracias @cryptokannon, gracias por el contenido de calidad y por el apoyo! Saludos desde Paraguay.

Thank you very much @cryptokannon, thank you for the quality content and for the support! Greetings from Paraguay.

This is an excellent step by step explanation. Good work

Very nice post.

Thanks crypto Kannon.

Thank you for posting this valuable info for us!

Thank you so much for this information @cryptokannon. Truly helpful!

Hello dear friend @cryptokannon good afternoon
It is incredible that these people exist.
excellent information, I hope I never have to use it, but you never know
Thank you very much for the information
have a beautiful afternoon

Help me.

good work

Hi @cryptokannon. Interesting information you share in this post. Regarding this content, I address in my third task some aspects related to its thematic context. I would very much appreciate it if you would consider curating my assignments 2 and 3.

With affection, I wish you a happy day.

Very beautiful guideline, as i read through, it helps a lot.

Thank you

very useful, thanks to give us this precious information!

it is the good post that will help others and is so incredible

thank you so much for this very helpful info @cryptokannon, I just wanna ask if you have an idea who are @hiphup and @trieskev? Because every time they upvote a blog, curation value is being deducted. I new to steemit, I will be very grateful if you could answer my question. Thank you so much.

Hi I have no idea who they are, but please let me know if they still doing that to you.

Thank you so much for your response and help in the future. Always grateful to you. Keep safe always. :-)

Greetings @cryptokannon. Please I have this complaint that has been plaguing me for the past days. My account @raphar (this account I am currently using was hacked and the hacker had used the advantage he had over the account to post some links which actually I looked upon to be phishing links). But my account was later recovered and my passwords changed with the help of some admins @steemcameroon.
What bothers me is that the admin using the account @sentinels goes about every day posting comments on every post I write and publish blackmailing me to be a hacker and phisher. Please @cryptokannon my account was only hacked but I successfully recovered the account and changed the password.
because of the blackmail I have loosed so many votes on my post as @ sentinels has made me to rather appear as the hacker. I write to lay this complain and to plead that @sentinels should stop commenting discouraging comments on my timeline. besides I have been struggling and I have already deleted some and I intend to delete all
thanks for your kind understanding.Even after this comment, you will see @sentinels reply immidiately with his blasphemy. I dont know if it is automated then please you help me I have already incured so much losses I will be waiting to hear from you
@raphar

  ·  3 years ago Reveal Comment

Hi @raphar glad that you get control of your account now. I will help you with sentinels reply. Thank you for letting me know about this.

!clear

  ·  3 years ago Reveal Comment

Please @cryptokannon did i offend you
This is the second time am posting my achievememt 3. You dont even look at my account, and you all will always say we should join newcomers communities, then why is it hard for you and @bright-obias to verify account... Please help me am discouraged because of this issue please i beg you below is the link
Achievement 3: Content Etiquette @lordside

Hi @lordside thank you for notifying us. The team will check your achievement task soon, please check the schedule for curation here in this post Steem Greeters Team Members : Updated on 24/3/2021

Hola @cryptokannon excelente herramienta para nosotros que estamos iniciando en Steemit

Buenas tardes @cryptokannon espero se encuentre bien por acá le pasó el link de mi logro 1 https://steemit.com/hive-119845/@auroragil06/naturaleza-en-el-club-pesca-y-paga. El cual aún se encuentra en la espera de verificación.

Hello @cryptokannon
I lost my job last year from last year I m job less and searching job any where after long time my old friend suggested me to use steemit platform and i come here but actually i m feeling not good because i m doesn't gate good response on steem u r my last hope please help me

This platform not guarantee an income, its just like other social media platform. Do not plagiarized contents, comment on other people post more and write contents that you think helpful for people.

Thanks for this wonderful information.

@cryptokannon, one of our accounts was recently hacked and i just realized @neoxian #neoxian is the default recovery account but cann't find neoxian. Do you have any ideas on how we can contact @neoxian? Any leads will be very much appreciated!

@thegreens they are on hive now, and they are not that fond of steem, so I think it will be a bit tough, but you may try your luck.

I made up my mind to let go. Decided to use funds from @thegreens to pay rents for ecoDesigns and will henceforth blog ecoDesigns issues via @thegreens

https://steemit.com/hive-172186/@faheemking/achievement-2-by-faheemking-basic-security-on-steem-blessingamey

minutes ago
@cryptokannon
I was complete my achievement 2 before 6 days but No one is verifying the post please visit my post

Hi @cryptokannon,

This is a great post.It is a call for carefulness among steemians and also a form of succour in the case of a hacked account.

Regards!!

amazing job good work

tnx sharing imformative post

@cyprokannon maam if you have time please visit my introduction post. I completely done posting my achievement 1 but nobody verified. Thank you so much maam ! Hope you can visit so that I can proceed to my next blog

https://steemit.com/hive-172186/@peterpan62/achievement-1-verification-through-introduction-04-05-21

Please I will like to know, do you people have a particular day you curate and labell africans?

How good that I saw your post at the very beginning of my knowledge of the Steemit platform, you are doing a good job. Forewarned means armed! Thank you for the warning.

It really pays to be careful. There's a lot of people who would take advantage on other's weakness. Thank you for this guide...will definitely take note on this.

Goodwork۔۔۔۔

I have one case on the @rozipasee account, he is my friend. some time ago his account could not be opened again. But what is surprising is that the contents of the wallet are still as before.
Can we find a way to get the account back.

please guide me @cryptokannon cause @rozipasee need this account.
thanks

how is that possible? did your friend lost the master password?

Yes, now it can be used again thanks to the help of steemchiler and el-nailul

:)

Aquí mi logro 2 deseo que me den información acerca si me han verificado o no mi logro para poder hacer el logro 3 ya tiene varios días y ninguno me dan respuesta y ya no se que hacer porque le he escrito por todos lados https://steemit.com/hive-172186/@derlis13/achievement2-or-logro-2-by-derlis13-consigna-seguridad-basica-en-steem

Just wondering how i will get my account back when hacked. Thanks for this valuable information

Very good and important information. I am joining steemit. I have a question about the tasks in this community. Are they still active? Can I do it? I already did my reintroduction, do I have to do another one?

What an excellent thorough and usefull post. I'd advise every Steemit user to read this! Thanks indeed for taking the time to share these nuggets of wisdom @cryptokannon

Thank you for your work and contribution to steem greeters project.

It is when this kind of thing happens that you as a technical team need the support of the community the most.

It would be good if you could organise an army of users to review complaints, I'll apply, tell me what task to do and I'll be at your service! Greetings!

Hola muchas gracias por la informacion ,casualmente me paso lo mismo me robaron mi cuenta hace una semana ,seguire los pasos para poder intentar recuperarla,..deberian brindar mas proteccion a la plataforma ya que perderia su credibilidad

@cryptocannon i'm aktive before 2020, what need update to my pasword now