Gaoxing84 is Banned and This is the new me

[trackingtime]

Hi guys!

I used to be Darryll aka gaoxing84 here but unfortunately the account was hacked and banned.

I will be here using this account with a VERY STRONG PW and 2FA authentication so those hackers or scammers will never get to me and the good members here.

so here's to a new era for my account.

cheers!

[Andad]

How did the scammer get to you.

I thought that even with a single password I would be safe?

How did a spammer get your password?

[trackingtime]

Originally Posted by Andad

How did the scammer get to you.

I thought that even with a single password I would be safe?

How did a spammer get your password?

that i wouldn't know.

i got hacked the first time (I 100% did not click on any TRF emails, even for pm, i will delete the email and go read the PM on the forum immediately)
emailed the admins, paid a verification fee (which i don't mind) and changed to a pretty strong password.

within 24 hours, i got hacked again. some friends of mine from here went to troll the scammer. the scammer even used my old photos of watches for sale (which i have already deleted from the image hosting site sometime ago). he probably saved it and planned this.

i am pretty sure he got access into my email associated with gaoxing84. so i changed it as well

so i decided to forgo that account and use a password manager for encrypted password and 2FA for both my email account and this new account.

bloody scammers

[sgwatchguy]

Welcome, back

[trackingtime]

hey thanks man!

[Andad]

Wow!!

[trackingtime]

so stay safe out there.

activate 2FA!

[77T]

For the uninitiated, there are several ways to have your TRF account compromised. The most common way is an email scam called phishing.

But gaoxing84 said he didn’t click on any links - so the #2 is likely a keylogger (malware that watches for credit card numbers and user ID/passwords).

Either way, gaoxing84 did enable 2-Factor Authentication to protect his account.

You can do that for your own account, too. Here is the method for TRF: https://www.rolexforums.com/showthre...2#post10685992

[trackingtime]

probably and the scammer planned his way well. he already have photos of my watches saved up and sent out to people.
some of the photos are few months back and usually once i sold the watch, i delete them on the image hosting site.
received these screenshot from a good member here and a friend of mine

stay safe people.

Gotta appreciate the mods and admin for getting the 2FA done.
thank you!
will share the screenshot when i hit 10 post count

[77T]

Originally Posted by trackingtime

probably and the scammer planned his way well. he already have photos of my watches saved up and sent out to people.

The scammer didn’t have to save the photos from your hosting site. Just sharing in spirit of safety.

If my instinct is correct, the scammer has access to your hard drive. Do you keep your listing photo’s on it?

Also, if s/he compromised your computer, the malware is still working now. There are many websites that the scammer may have gained access.


Sent from my iPhone using Tapatalk Pro

[trackingtime]

Originally Posted by 77T

The scammer didn’t have to save the photos from your hosting site. Just sharing in spirit of safety.

If my instinct is correct, the scammer has access to your hard drive. Do you keep your listing photo’s on it?

Also, if s/he compromised your computer, the malware is still working now. There are many websites that the scammer may have gained access.


Sent from my iPhone using Tapatalk Pro

I don't think he has access to my hard drive for sure. because these isn't saved in my computer
it's in my phone and i never ever use icloud at all. don't trust it.

so it's physically in my phone flash storage. unless he can hack all the way from US to Asia, connecting thru the big web.

he probably saved it before hand.

i am using a mac and i keep my mac pretty clean from anything. no extra nonsense. i don't click into stupid emails that i don't recognise.

now with my password manager + 2FA + I use 2FA for my email associated with this account, i should be fine.

it's crazy how much effort the scammer did just to scam.

[trackingtime]

here are the screenshots

[interestedwatcher]

That's actually a fairly sophisticated scam.

[77T]

Malware is a fairly simple insertion. Any teenager with bitcoin can buy the kit on the dark web.

The compromise can be done remotely even on a mobile phone.

Sent from my iPhone using Tapatalk Pro

[trackingtime]

Originally Posted by 77T

Malware is a fairly simple insertion. Any teenager with bitcoin can buy the kit on the dark web.

The compromise can be done remotely even on a mobile phone.

Sent from my iPhone using Tapatalk Pro

probably, so i guess with the improvement on the forum with 2FA, it should deter scammers from getting into accounts.

[Bearxj86]

Originally Posted by trackingtime

probably, so i guess with the improvement on the forum with 2FA, it should deter scammers from getting into accounts.

I had something similar happen within a 24 hour period. I am taking precautions (similar to what is suggested here). But I will keep mum since said hacker is probably on these forums.

It is sophisticated and I do not think it is a single hacker, more likely a group.

[trackingtime]

Originally Posted by bearxj86

I had something similar happen within a 24 hour period. I am taking precautions (similar to what is suggested here). But I will keep mum since said hacker is probably on these forums.

It is sophisticated and I do not think it is a single hacker, more likely a group.

i didn't had time to activate the 2FA because of time difference that's why i got hack twice.

damn it

[Old Expat Beast]

If this happens to you again, I think that's probably the end of your trading presence on TRF. Just FYI.

[trackingtime]

Originally Posted by Old Expat Beast

If this happens to you again, I think that's probably the end of your trading presence on TRF. Just FYI.

hopefully not, i do more buying then selling here anyway.

it's weird that i am targeted.

[trackingtime]

to keep thing safe, i will be adding my new username and contact number as a watermark on all photos that i post for sale.

things i have done to keep my account protected

1) Strong PW with Encryption (both forum account and email account associated)
2) 2FA with the forum and google authenticator ((both forum account and email account associated)
3) Watermark on photos with username and contact number

hope this helps

[trackingtime]

as a added precaution, i scanned my macbook pro
here are the results

[77T]

Originally Posted by trackingtime

as a added precaution, i scanned my macbook pro
here are the results

The malware problems are much like Covid-19 - nobody knows they are infected until a full-blown takeover occurs. So on one day your devices seem clear and the next day things are terrible.

The 2FA will help TRF members in the long run when most have adopted it.

But most new malware has a way to thwart detection like a simple Mac scan.

AV software can miss threats because it is based on well-known virus signatures. However, the security industry sees up to 1 million new malware variants each day.

Cybercriminals aren't making millions of new packages. There are probably ten thousand truly unique malware families. But malware authors have developed hundreds of techniques to make their malware look "new again" to evade security controls.


Sent from my iPhone using Tapatalk Pro

[Knappo 1307]

What's 2FA?

[Bearxj86]

Originally Posted by Knappo 1307

What's 2FA?

2 Factor authentication - it links it to your cell phone so that if your account is signed in from an unknown location it will require a 2nd code to sign in.

TRF has kindly offered it as an optional service. See below for Steve's post:

https://www.rolexforums.com/showthread.php?t=747721

[Knappo 1307]

Originally Posted by bearxj86

2 Factor authentication - it links it to your cell phone so that if your account is signed in from an unknown location it will require a 2nd code to sign in.

TRF has kindly offered it as an optional service. See below for Steve's post:

https://www.rolexforums.com/showthread.php?t=747721

Thank you.

[trackingtime]

i think 2FA should be implemented on all Pledged Members since they're given the opportunity to sell or trade watches here.

just a suggestion

[77T]

Originally Posted by trackingtime

i think 2FA should be implemented on all Pledged Members since they're given the opportunity to sell or trade watches here.

just a suggestion

Steve has decided that won’t be a requirement. But it is a good idea for everyone to secure with 2FA now.

I am a big proponent of it as a way to protect.


Sent from my iPhone using Tapatalk Pro

[trackingtime]

OK. Got it.
I am protected by 2FA now

All should be good.

[Atone]

that was me trolling him, LOL. he shut that phone number down, i just tried to call it.

[Atone]

sorry this happened Darryll, i always appreciate the ease of our transactions and hope to deal with you more in the future.