Topic: 0.6 btc was stolen from my faucet by hacker (Read 1569 times)

Donaldbitcoin - Dear Friend I will be with you to SUPPORT - Your Real FAN from INDIA - Fan of Markabi

Admin of Bitcointalk Org.. Hello, My Friend Struggled with HACKERS and I am here only to Write for my Friend - All his Struggles are Real and He is badly struggling . HACKERS are around us only I can see them since I get attack in Chat "TomyGame", Previously I got attack in Cetobeto Chat. Now I am keeping a track on Behaviors of HACKERS since I have a list. HACKERS Behaviors are ABUSIVE in Nature.

I like the hackers life for save the world, not the hackers who steal something from the world.

As i know faucetbox box has increased their security levels, atleast for me to acess my account i need to sign a message all the times, its a huge ammount to be at faucetbox, knowing you paying 0,02btc daily would be better you make deposit of 0,08 btc every 3 days. Anyway this is a warning to all faucetbox faucets admin as claimers, raise your security or risk to loose your balance.

Hello,

I have seen the thief but i don't have a way to get hold on him or ban him completely from my site because he is using proxies or vpn, he used the same ip from email message to navigate to my site and I caught him through a chat software that also monitor ip logs of visitors on my site. There he told me that he stole my coin through recaptcha php, and he keep mocking at me.

Right now I really don't know what to do to get rid of this dude

  Sqli and sql injection script.

I just made two claims cashout as per your request, a bit earlier 2230 satoshi I was thinking here we go again    the ban hammer.

They attacked my faucet today. Just banned all IP range from the VPN used(50 ips with 50address, it's a good bot), few minutes and everything is normal again.

Yes when it down, it was no website was found at all, so why was that happening?
So it would be natural to assume everything was gone.

@Hoop what can stop these injections anything at all?

 
 math captcha can't do any security tips with sql injection.

i feel so sorry , i love donaldcoin and other faucetgames .
Last night i was posting on hotelbtc topic and someone appeared and said :
I didn't knew donaldcoin coin were offline but how racey knew and said all balances are gone   i guess he believed that donaldcoin turned into scam and run away with our work  

I'm supporting donald and hotelbtc or mario sometimes by clicking on the ads (adsense) once a day.

The bitcoin/cryptocurrency based websites (faucets, cloud mining, wallets ,ect) will always be hackers' target and these sites needs higher security .

He should not have discouraged you over antibots at all, I see math captcha can be good at avoiding bots.
Seem like you know the hackers, name and shame them, this would be good for all people who need these type of services.
Damn, you pay them then they rob you.

http://pinoyhappynetwork.com/anti-bot-verification-for-your-bitcoin-faucet/

I am also facing the same issues, I lost  more than 0.045btc last month on the spot to a hacking activity on my faucet and faucetbox is not helpful in returning enough mail to help me out, they only gave me some security tips to implement but not enough details how to do this even after i mailed several times. The worst is that, you don't even know who to trust online when it comes to faucet security. I met a guy on fiverr who installed faucetbox script for the first time on my site: https://bitcoinlordz.com . I asked him to add antibot script, but he told me the then faucetbox script couldn't handle the antibot script, I asked him of all other security options and he discouraged me. He said my faucet was good the way it is.

He even told me to increase payment to 500 satoshi every 360 minutes. These were strategies he had designed in place to steal from my coin since he knew my API, database password and admin. We both disagreed on several occasions because he was trying to use fiverr service to screw money out of me. But I felt he was behind several both attacks on my sites at the early stage. After changing all my domain and database password, I discovered that the bot activities reduced. This made me hire another dude trying to improve security, but this guy from guru.com and freelancer.com was behind the hacking and stealing of my over 0.045 btc.

To make sure I was in control of all security measures, I had to clean all the files and database and reinstall the new version of faucetbox script. But at this juncture, I don't know what to do. My hosting company provided some security tips I have implemented too which is helpful in a way. But I don't know if I need to switch to another faucet script or if there is anyone who could be so kind and really generous enough to help me with security tips on a private message. Is cloudflare a good security option?
Thank you

i am disappointed to those people who has a knowledge in computer technologies but they just used it to do something that is not good that's the one of the example they are using their knowledge about the computer to steal something from the other people . so if you don't want this to happen again increase your security to protect all your belongings from these kinds of people do not trust everyone too quickly .

bad notice, but you can't add a daily limit for the withdraw ? For example, later your faucet have pay 0,1 at day, you stop the autopayment and confirm manual. And you have all this bitcoin to faucetbox for pay your user?

2 ways they stole your btc. one sql injection... means your faucet is not hack proof and 2 you used your password to your faucet somewhere else besides you faucet and they put it together and tried it ! means someone who owns a site , you put in the password to your faucet to there site and they hacked you !

so how the hacker can stolen your bitcoin faucet?

That's a lot my friend, you should never add more than you can afford to lose. I own two faucet and each day i only load each of them up with just 0.012BTC each. only add more when the balance must have gone down. There are hackers and as a bitcoin faucet owner you should be aware and cautious about that. I did lose a lot when i started my two faucets "bit-freebie.com and satoshipalace.com" when i started i knew little about faucet security coding  but now i can create a wall and even track down hackers. Not saying my websites are not hackable but as a precaution i only add a little bitcoin each day.

So they hacked into your faucetbox account?

Have you figured out how they were able to hack you, so other faucet owners may be able to avoid the same kind of hack in the future with their own websites?