Posts by onioneye

crozer said
May I still ask if this someone you seem to know, is a person you know personally? Otherwise, how do you know his/her IP and what are you basing your conclusions on? I am curious as I would really like to know if this is more of a local matter (e.g. a friend of yours, visited your house, etc. etc.) or if someone virtually hacked/tried hacking you. Thank you

Let’s just say that I have evidences provided by ThemeForest’s staff. I still have some research to do, but I have my doubts. Fortunately, I contacted a few people that are going to help me.

Unfortunately, there’s a lot of people in the world, who don’t want to see you succeed. It makes me really sad that people would rather spend time on trying to put you down, instead of concentrating on their own lives and success. I can’t really say any more details until I hire a lawyer, but I promise I’ll do, as soon as I consult with her/him. There’s also the possibility that the hacker is following this thread, so I can’t go into more details about this. I know I’m a bit paranoid right now, but I think I have a perfect reason to be like that.

Will inform you people, as soon as I get some more news about the subject.

Sincerely,

OnionEye

onioneye said
KiwiStudio said
Well, you’re welcome mate. At least, I was of help I hope everything will get sorted for you.

Thanks, my friend! You were definitely helpful!

As soon as I find out more about this, I’ll post it here. I think this should be a concern for every author out here, as I am the proof of how easily somebody can hack into your account, if they have some knowledge in computer security and possibly a bit of computer networking. I was absolutely sure my password and computer were safe, as stated earlier, but that was obviously not the case.

Sincerely,

OnionEye

KiwiStudio said
Well, if you have the IP and also the time and date when your account was accessed, it’s good, just address a lawyer on this issue and the lawyer will guide you through this issue. I can’t help you more than a lawyer can do He knows the laws in your country better than me

Yes, in all matters you need evidence: Log of the activities on your account and so on … Just find yourself a lawyer and you’re okay

// Paul

Thanks, Paul! I’m definitely getting a lawyer tomorrow and pursuing this matter further, without any doubt or regret. I don’t want this to happen again, and risk having my earnings and all my projects compromised, so I have to stop this hacker, by all means necessary. I have to find somebody who’s knowledgeable about cyber criminal though, and I already contacted one person about that. Also, I have been able to find out a lot of personal info about the hacker, and I must say I’m stunned by the discoveries I have made. However, I won’t reveal any personal information out here, in case the person is following this thread, and is a member of ThemeForest. It’s probably illegal to do it anyway.

By the way, I’m now waiting for ThemeForest’s staff to send me a full log of all the activities on my account, so I can continue to act on this matter.

Thanks again!

Sincerely,

OnionEye

KiwiStudio said
All you need is the IP. The name will reveal itself quite easily : An ISP is obliged to give the name (address etc.) of the user of that IP, if requested by a certain institution

Excellent news! And which institution is that, if I might ask? My logic tells me we are talking about the police, but I need to have some evidence that the person with a specified IP address compromised my account, right? Should I ask for some kind of a log of all the activities on my account from ThemeForest’s staff?

Thanks for the useful info, by the way! I really, really, really appreciate the help in these worrying times!

Sincerely,

OnionEye

cmt said
I would suggest as soon as you get the IP address from Envato Support, head to a lawyer and sue, without even doubting about it. This is a serious crime, equal to someone breaking into your house.

Copyright infrigment (using your account), fake identity, stress, stealing money, etc. And the most important – future earnings / lost profit.

After you win all cases, create a blog post about that and make it popular. It will scare those 15-year-old hackers and inspire victims.

Best of luck.

Of course! I worked my butt off on ThemeForest, and finally started to earn a big buck, after years of studying web design/development. For me, it’s a lot worse than somebody breaking into my house! A real nightmare I tell you. To lose my account and all my savings would be nothing less of a disaster for me. I just don’t know what I would do…

I know one thing however…I won’t hesitate to sue, if I get to the bottom of this. I just need to pinpoint the person who hacked me. Is there any way I can find out the name of the person with this IP address? Is there somebody who hands out this information? I already know the city and the ISP provider, but I need a name, or do I?

I just hope that there are strict laws about this in my country, but I’m sure there are (googling already), so I can end up writing that popular blog post sometimes in the future.

Thanks for all your help!

Sincerely,

OnionEye

Enabled said
Very sorry to hear that. In any case you should contact http://support.envato.com and get yourself a better password. Support should have IP logs and maybe someone from here hacked your account in which case they should be held accountable for that! Good to hear you got your account back! Good luck!

I’m pretty sure I can confirm now that I got hacked. The IP address that was used to access the account is not mine, and I think I have a good idea who it is, which I find even more scarier than not knowing at all. I just can’t believe how anybody would have the heart to do this.

I changed all the passwords to super safe ones, including the email account on my profile page, but even though I installed a reputable anti-logger software, I’m still afraid that I’m being monitored somehow, and that I’m going to get hacked again.

Do you, or anybody else know of any other way I can protect my account? Any steps that I can take to secure myself? Also, can a person who hacked me be pinpointed by her/his IP address? If so, then how?

By the way, thanks a lot for your help! I truly appreciate it! The same goes for you too, Drew! Oh, and I replied to my support ticket again because I’m still very desperate and afraid that this thing is going to turn into a disaster for me.

Sincerely,

OnionEye

KiwiStudio said

onioneye said
Hey there, fellow ThemeForesters!

I woke up a few hours ago and noticed a warning box, when I tried to visit ThemeForest, saying that my password has been changed, since I last logged in on this computer and that I had to login again. When I tried to do that, my password wasn’t being accepted. Fortunately, I was able to reset this new password, but I’m still shocked as to why this happened in the first place. Also, no harm has been made to the account whatsoever, but I’m really scared that it might happen again, and that I won’t be able to retrieve the password, once and if this repeats. Now, what are the chanced that I got hacked?

As soon as this happened, I installed Zemana AntiLogger ( http://www.zemana.com/ ) to make sure nobody is monitoring me in any way, like my keystrokes and stuff like that, and the popular software hasn’t detected anything thus far. By the way, when I tried visiting ThemeForest, I was actually redirected to ActiveDen, and that’s where I got the message box. It was very strange to me because in the last following months, since I changed my password to a lot more secure one, the only place from where I logged into ThemeForest was my computer, which nobody has access to.

I contacted envato support and tweeted them immediately, and now I’m waiting for a reply. Does anybody has any suggestions or useful information to share with me on this topic? Anything really.

Thanks!

Sincerely,

OnionEye

If you’re on Windows, type msconfig in the Run dialog and try to spot any “dangerous” app that might start when your OS starts. Also, you might want to check the processes in the task manager. Anything unfamiliar should be pretty easy to spot.

I’d change the account e-mail (if it is possible), and reset my password to a password with, a-z A-Z 0-9 and *$#@! and so on…

I hope everything will be ok and it would not happen again to you matey

// Paul

Thanks a lot for responding, Paul! I truly appreciate it!

I took a few hours to change all of my passwords, including my email account. I also tried everything to see if my computer is somehow infected, but found nothing. I even asked ThemeForest’s staff to send me a log of IP addresses from which the account has been accessed today, but I’m still waiting for a reply.

Anyway, I think I’m pretty secure now; however, I’m still dying to know if I was hacked in the first place, and how I got hacked. I hope I’ll find out.

Once again, thanks for responding, my friend!

Best of luck,

OnionEye

Hey there, fellow ThemeForesters!

I woke up a few hours ago and noticed a warning box, when I tried to visit ThemeForest, saying that my password has been changed, since I last logged in on this computer and that I had to login again. When I tried to do that, my password wasn’t being accepted. Fortunately, I was able to reset this new password, but I’m still shocked as to why this happened in the first place. Also, no harm has been made to the account whatsoever, but I’m really scared that it might happen again, and that I won’t be able to retrieve the password, once and if this repeats. Now, what are the chanced that I got hacked?

As soon as this happened, I installed Zemana AntiLogger ( http://www.zemana.com/ ) to make sure nobody is monitoring me in any way, like my keystrokes and stuff like that, and the popular software hasn’t detected anything thus far. By the way, when I tried visiting ThemeForest, I was actually redirected to ActiveDen, and that’s where I got the message box. It was very strange to me because in the last following months, since I changed my password to a lot more secure one, the only place from where I logged into ThemeForest was my computer, which nobody has access to.

I contacted envato support and tweeted them immediately, and now I’m waiting for a reply. Does anybody has any suggestions or useful information to share with me on this topic? Anything really.

Thanks!

Sincerely,

OnionEye

Hey people,

just got the following reply from Envato support, and thought you might find it useful:

I’ve taken a look in the validation code and it appears “Top level directory” is being used in an arguably ambiguous manner. The directory structure you need should be

theme_name.zip
-theme_name (folder)
--images (folder)
--admin (folder)
--style.css
--header.php

Hopefully that helps. I’m going to open up a ticket to try and come up with some better terminology for that to try and prevent future confusion.

Thanks Envato!

Sincerely,

OnionEye

ZoomIt said

onioneye said
Thanks for trying to help me out, but I’m actually pretty sure I tried that, and it didn’t work. I also tried having a zipped theme folder, within the main folder, but that didn’t work as well.

+1

Evetually we just ditched the theme only attachment

I bet this is just a temporary problem, and that ThemeForest is working on it.