xxf8xx
Supreme Member
- Nov 30, 2009
- 1,322
- 605
Well, I've hesitated to do this, but here goes. I've purchased some Youtube accounts from VebXperts, all of which we're recently hacked and all my links changed to bitty links redirecting to Cleanfiles (about 50 accounts). At first it never crossed my mind that such a reputable seller that's been here longer than I have would have went rogue, but now I'm having my doubts.
I first contacted VebXperts about the issue on June 6th. Here's the conversation:
Me:
Hello. Many of the accounts I have purchased have been hacked. I am 99% I do not have any type of virus or keylogger. I believe the accounts were simply brute forced. I was wondering if it is possible to have stronger passwords on future accounts to prevent such an attack. I would like my passwords to contain 14 characters, and a random mixture of upper/lower case letters, numbers and symbols.
Please let me know if this is possible.
Thanks,
Brad
VebXPerts:
Hi,
Please guide you are using which bot kindly?
It is possible to make 14 characters and I think we are already making uper+lower case letters numbers. though not symbols. But I am sure its not brute force.
Please guide which bot you are using.
Me:
The only software installed on the VPS I am using is MVB Pro and u2bviews. The accounts have not been logged into for over a week now but they were just hacked yesterday/today, so I don't see it being a keylogger issue.
VebXperts:
My doubt was correct.
Yesterday I had received same complaint about 1 out of 10 accounts from another customer, about password change issue.
He said that he used only 1 out of 10 and that 1 has its password changed and even the videos he uploaded have different bit.ly link in them. He had not used other 9 thats why they were safe.
I asked him which bot he is using and he had reported "MVB Pro" You are using the same one and problem is also same.
Brute forcing any complicated password like we have for our YT is not that easy, it needs lots of effort mate. Use accounts without MVB Pro and then see if your passwords get changed or not.
===========================
Note here that he is trying to put the blame on MVB Pro which seems like a red flag to me. There is no way Vlad and Stoica are stealing accounts, but I PMed Vlad anyway. He assured me he could give hard proof that MVB Pro does not collect or send any data other than connecting to the licencing server. He also reminded me that if someone was to try and brute force their way into an account, it would most likely get locked before they got into it.
This started to make me dig deeper and see if anyone else has had the same thing happen to them. To my surprise, I have found that everyone I talked to that claims they have had hacked accounts and links being changed has purchased their accounts from VebXperts.
Here are those claims. Please note I left the claims anonymous as I wasn't sure if they wanted to be involved in this shit list thread.
============
[2013-06-07 3:07:29 PM] xxf8xx: I see. Did others claim it was vebxperts as well stealing accounts?
[2013-06-07 3:07:41 PM] anon: Jus use the tool i gave you in the facebook thread, batch change all the youtube passwords and you will be fine
[2013-06-07 3:07:54 PM] xxf8xx: yea I'm going to try it out
[2013-06-07 3:08:22 PM] anon: They did not claim it, but it was the only thing we all had in common, buying from vebexperts
===========


In the next PM it was explained that VebXperts and Yawarabbas are the same person. Yawarabbas is the name VebXperts sells under on the Cleanfiles market place.

Anyway, that's all the proof I have. It's not much, but even if it's not enough to get VebXperts banned, which is the outcome I'd prefer, at least people might be a little more cautious about who where they get their accounts from.
If anyone else has a claim against VebXperts, I ask that you please come forward and state your claim here as well.
Cheers,
xxf8xx
I first contacted VebXperts about the issue on June 6th. Here's the conversation:
Me:
Hello. Many of the accounts I have purchased have been hacked. I am 99% I do not have any type of virus or keylogger. I believe the accounts were simply brute forced. I was wondering if it is possible to have stronger passwords on future accounts to prevent such an attack. I would like my passwords to contain 14 characters, and a random mixture of upper/lower case letters, numbers and symbols.
Please let me know if this is possible.
Thanks,
Brad
VebXPerts:
Hi,
Please guide you are using which bot kindly?
It is possible to make 14 characters and I think we are already making uper+lower case letters numbers. though not symbols. But I am sure its not brute force.
Please guide which bot you are using.
Me:
The only software installed on the VPS I am using is MVB Pro and u2bviews. The accounts have not been logged into for over a week now but they were just hacked yesterday/today, so I don't see it being a keylogger issue.
VebXperts:
My doubt was correct.
Yesterday I had received same complaint about 1 out of 10 accounts from another customer, about password change issue.
He said that he used only 1 out of 10 and that 1 has its password changed and even the videos he uploaded have different bit.ly link in them. He had not used other 9 thats why they were safe.
I asked him which bot he is using and he had reported "MVB Pro" You are using the same one and problem is also same.
Brute forcing any complicated password like we have for our YT is not that easy, it needs lots of effort mate. Use accounts without MVB Pro and then see if your passwords get changed or not.
===========================
Note here that he is trying to put the blame on MVB Pro which seems like a red flag to me. There is no way Vlad and Stoica are stealing accounts, but I PMed Vlad anyway. He assured me he could give hard proof that MVB Pro does not collect or send any data other than connecting to the licencing server. He also reminded me that if someone was to try and brute force their way into an account, it would most likely get locked before they got into it.
This started to make me dig deeper and see if anyone else has had the same thing happen to them. To my surprise, I have found that everyone I talked to that claims they have had hacked accounts and links being changed has purchased their accounts from VebXperts.
Here are those claims. Please note I left the claims anonymous as I wasn't sure if they wanted to be involved in this shit list thread.
============
[2013-06-07 3:07:29 PM] xxf8xx: I see. Did others claim it was vebxperts as well stealing accounts?
[2013-06-07 3:07:41 PM] anon: Jus use the tool i gave you in the facebook thread, batch change all the youtube passwords and you will be fine
[2013-06-07 3:07:54 PM] xxf8xx: yea I'm going to try it out
[2013-06-07 3:08:22 PM] anon: They did not claim it, but it was the only thing we all had in common, buying from vebexperts
===========
In the next PM it was explained that VebXperts and Yawarabbas are the same person. Yawarabbas is the name VebXperts sells under on the Cleanfiles market place.
Anyway, that's all the proof I have. It's not much, but even if it's not enough to get VebXperts banned, which is the outcome I'd prefer, at least people might be a little more cautious about who where they get their accounts from.
If anyone else has a claim against VebXperts, I ask that you please come forward and state your claim here as well.
Cheers,
xxf8xx