Another gambling platform deposit (extension) Scammer - 1xBit

Harkorede

copper member

Activity: 2044

Merit: 793

Here is another user: https://bitcointalksearch.org/user/tnpuki-2818099
Thread: https://bitcointalksearch.org/topic/earn-up-to-5-btc-for-becoming-a-beta-tester-for-nitrogensportseu-5257174
Link: https://telegra.ph/Become-a-Beta-Tester-of-NitrogenSports-Promotions-addon-and-earn-up-to-5-BTC-06-12 [ Archived ]

tyKiwanuka

legendary

Activity: 1722

Merit: 1671

#birdgang

Here is the next scammer: https://bitcointalksearch.org/topic/--5246636 [ archived ]
User profile: https://bitcointalksearch.org/user/tomasos1982-2803766

And some Amazon giftcard scam:

User profile: https://bitcointalksearch.org/user/dimormma-2803810
Thread #1: https://bitcointalksearch.org/topic/--5246683 [ archived ]
Thread #2: https://bitcointalksearch.org/topic/--5246681 [ archived ]
Reddit: https://www.reddit.com/r/ManyVidsFree/comments/gfcs7b/get_100_amazon_giftcards_for_free_g2a_exploit/ [ archived ]

Harkorede

copper member

Activity: 2044

Merit: 793

A Similar scam attempt has been exposed Here and Here, but this time around halosanos is targeting 1xbit users with another fake script/plugin to ~~double~~ steal their deposit.

User: https://bitcointalksearch.org/user/halosanos-2803398
Thread link: https://bitcointalksearch.org/topic/double-your-bitcoins-with-1xbit-exploit-tested-today-5246402
Archive: http://archive.is/Oliwe

Flag: https://bitcointalk.org/index.php?action=trust;flag=1789

Quote from: https://bitcointalksearch.org/topic/double-your-bitcoins-with-1xbit-exploit-tested-today-5246402

3. Now you should see a warning, that tells you to deposit only Bitcoins, not any other coins to that address. Just click “Confirm”.

4. Now you should see your main deposit address (the one that is displayed when their deposit system is working). Just note that address so you will be able to confirm that it changes after using the exploit.
screenshot: https://i.imgur.com/bl1uaSJ.png

Important: Don’t deposit to this address! If you do that - your deposit will count only once. You have to reveal the backup address, and make a deposit to the backup address to make it work. (next steps)

5. When you are on the deposit page, click a right button of your mouse anywhere on the site, and click “Inspect”.
screenshot: https://i.imgur.com/RyqdFu8.png

6. Now go to the “Console” - just like on the screenshot:
screenshot: https://i.imgur.com/6FGwnJ5.png

7. Now paste the javascript code in the console and click Enter. You will notice that your main deposit address is not displayed anymore. You will only see the hidden address. You can find the exploit javascript source code in this link: https://pastebin.com/raw/gqg8nNdg (make sure to copy everything, and don’t miss any characters.)

Important: if you can’t see the “Inspect” option, or the “Console”, just use a Google Chrome browser. I am using this browser, and I see these options without any problems.

8. Now make a deposit to the new address. (hidden backup address should start with number “1”).

Quote from: https://pastebin.com/raw/gqg8nNdg

Code:

Topic: Another gambling platform deposit (extension) Scammer - 1xBit (Read 159 times)