Author

Topic: ANN: Someone made a PD clone and put a virus on their clone. Please Report (Read 1121 times)

legendary
Activity: 1274
Merit: 1004
Appreciate  the help, unfortunately it appears to still be up and their ads are still running. As long as their ads get cancelled users should be safe, waiting on google still.

Looks like godaddy guys are lazy, filed a report again.
b!z
legendary
Activity: 1582
Merit: 1010
I think I find a time based sql injection place for the file host of the virus.  Is too unethical to try to remove virus from host?  Host not seem care what file kind it host.

Depends on how legal that is in your jurisdiction.
newbie
Activity: 46
Merit: 0
Thanks for the heads up Stunna, reported it, hopefully it gets taken down soon.
newbie
Activity: 54
Merit: 0
I think I find a time based sql injection place for the file host of the virus.  Is too unethical to try to remove virus from host?  Host not seem care what file kind it host.
legendary
Activity: 3192
Merit: 1279
Primedice.com, Stake.com
Appreciate  the help, unfortunately it appears to still be up and their ads are still running. As long as their ads get cancelled users should be safe, waiting on google still.
legendary
Activity: 2128
Merit: 1002
reported to Google too
legendary
Activity: 1578
Merit: 1000
May the coin be with you..
Reported, hopefully it gets taken down soon
sr. member
Activity: 324
Merit: 250
legendary
Activity: 2072
Merit: 1049
┴puoʎǝq ʞool┴
Reported, hope this clears!
legendary
Activity: 1274
Merit: 1004
I have checked that java file, some stupid guy from HF is probably doing this.



This Java driveby downloads exe file from here


Virus scan of jar : 0/48 (It's FUD)
https://www.virustotal.com/en/file/4be0944c1ba24240798c1de430c9592c0d56e6338c84c18a7c2084aecb227aa8/analysis/1381564324/

Virus scan of exe file: 2/48 (It's crypted)

https://www.virustotal.com/en/file/c2c20a1f614402b93fe79d11bffda53b35c07e37eebd44e1455cd80ad590aa00/analysis/1381564166/

legendary
Activity: 3192
Merit: 1279
Primedice.com, Stake.com
Reported to google and godaddy.

Reported, hopefully google take down the website before someone lost their wallet.

Really appreciate it, thanks
sr. member
Activity: 434
Merit: 250
Reported, hopefully google take down the website before someone lost their wallet.
legendary
Activity: 1274
Merit: 1004
Reported to google and godaddy.
sr. member
Activity: 938
Merit: 255
SmartFi - EARN, LEND & TRADE
Wow. Well at least you know you've made it when people start trying to impersonate you Tongue
legendary
Activity: 3192
Merit: 1279
Primedice.com, Stake.com
Re-Posting http://www.reddit.com/r/Bitcoin/comments/1o9tmi/ann_someone_has_cloned_my_bitcoin_website_and_put/   for increased awareness.

Hey Everyone,

I run www.primedice.com , unfortunately right now when you google primedice the first result is a google ad for a clone called [PLEASE DO NOT VISIT THIS SITE]: (Primedicebot.com) which prompts you to download the latest version of java which will thus infect your computer. They even appear slightly convincing as they have copy and pasted the source to our site.
I'd strongly appreciate it if everyone could report that malware/clone website (primedicebot.com) to http://www.google.com/safebrowsing/report_badware/

Thank you
Jump to: