Nothing at all to back this up either but I think Darkdays theory is most likely to be true. Rogue employee/former employee/friend of employee seems very possible.
tl;dr, inside job
Topic: BetcoinPoker.com Betcoin.ag-Big Tourneys-BONUS-Freerolls, Ring Games, Real Poker - page 31. (Read 367814 times)
March 16, 2016, 10:38:53 PM
March 16, 2016, 06:13:03 PM
Around the time this happened I believe Betcoin asked everyone to change the PW...so it was probably a stolen case rather than a selling case...but cannot know for sure. Can anything else be done to find out what really happened since Betcoin is not commenting on it?
I'm not saying it's a SITE WIDE CONSPIRACY! I'm saying maybe a member of the support staff tried to get a little extra money on the side and sold a database the she (or he) thought was filled with benign information. And then higher ups later found out about it and tried to mitigate the damage by encouraging everyone to reset their passwords while quietly phasing this support woman (or man) out of her position. All the while not saying anything else to try to prevent backlash.
Obviously this is a pure guess because Betcoin refuses to let it's players know how much of their private information was compromised, and how that information was compromised. I mean, it's not like there has been any support woman (or man) who was very active on the forums and on the site and then since this incident has been oddly silent everywhere, so I'm sure I'm waaaaaaaay off. Right?
March 16, 2016, 04:40:01 PM
Around the time this happened I believe Betcoin asked everyone to change the PW...so it was probably a stolen case rather than a selling case...but cannot know for sure. Can anything else be done to find out what really happened since Betcoin is not commenting on it?
March 16, 2016, 02:08:42 PM
The xxxxx one is my Betcoin username but also the part before @ of my email address so not sure wether they got it: therefore posted the sender email address to see if some other Betcoin user match this one.
Just my 1.2 mBTC
Yes, that's the concerning part. If the phishers ONLY had email addresses, it would be bad but the fact that they have emails + the corresponding user names means it's REALLY bad because that means that whoever stole or sold them had access to some sort of master database. What I want to know is what else was on that database that was either stolen or sold? I now feel like people's status points or at least VIP tier level was on there (which explains why different tier levels have gotten more or less phishing attempts) but what else? IP addresses? Passwords? Private keys?
Just to be sure I made myself clear enough: my email is [email protected] and my betcoijn username is the exact same xxxxxx.
The pishing email I received start with dear xxxxxx: but being it present in both betcoin and firt part of email address no one can tell for sure they got that xxxxxx from Betcoin data because many pishing email I also receive on other email addresses I use start with dear and the part before the @ ( don't know how its called in technical language).
Also, in my opinon, don't think it's likely that the pisher targets mainly upper VIP status and only in a second or third istance lower VIP players: they always use to fire as many bullets as they can (being that bullets free of charge) so that thay rely on large numbers law.
So back to my post and not to be exploited: has some other betcoin player received this same email?
It came from this address: Brenda Levy ([email protected]) (
with this subject: FW: Payment Declined PIN-739263
and this message
Dear xxxxxx,
Our finance department has processed your payment, unfortunately it has been declined.
Please, double check the information provided in the invoice (attached to this mail) and confirm your details.
Thank you for understanding.
Brenda Levy
Financial Manager
If so then we know something more, if not it is just one of the tons of pishing emails I recevie on every email address I use (job one included) and almost every person I know experience the same.
Yes, there have been many people who had their username mentioned in the phishing emails where it was very different from their email address. That's why everyone was able to pinpoint Betcoin as the culprit so quickly.
My theory is that since it's such a closed community, the people sending the phishing emails have to be selective, especially after the initial one was sniffed out so quickly. If they send the same email to everyone, more people will talk to each other and say "I got that email also, it's a scam, don't even open it". If they send out less emails, they have more of a chance of catching someone distratced/unaware of what's going on. And if they are going to send less emails it makes sense to target people who are more likely to have the most bitcoins.
I instantly delete all of the phishing emails, so I'm not positive but I don't recall getting one exactly like that from that fake name, but I know I have gotten one or two "payment accepted/payment declined" ones from the Betcoin attack. The two most recent ones I got this week were from "blockchain" and "bitcoincasino". But make no mistake: your personal information that you gave to Betcoin was stolen or sold by/to people who are using it to try to steal your coins.
March 16, 2016, 10:17:04 AM
We want to thank all of our great signature campaign members and our great manager for performing an excellent job. We will continue to provide an exceptional service for everyone involved. As we continue to grow with our campaign members and Betcoin.ag as a company there will be those that attack you because you cannot please everyone. Fortunately, each one of you can come experience Betcoin and our signature campaign for yourself and we will work very hard to show you why Betcoin.ag should be your home. We truly appreciate all of you. Most of our posters good and bad spend the most time at Betcoin and we appreciate them all the same. Thank you very much again.
March 16, 2016, 10:10:59 AM
I want to ask .. if its mbtc 0, whether they could play in the freeroll. its a matter of fitting I click registering, can not,,, sorry i newbie. thk's. 
Drop by www.betcoin.ag/support and visit a live chat member or submit a ticket and we can get you taken care of and playing in the freerolls now! We run freerolls all day everyday. Good luck and tank you for choosing us.
March 16, 2016, 05:21:48 AM
The xxxxx one is my Betcoin username but also the part before @ of my email address so not sure wether they got it: therefore posted the sender email address to see if some other Betcoin user match this one.
Just my 1.2 mBTC
Yes, that's the concerning part. If the phishers ONLY had email addresses, it would be bad but the fact that they have emails + the corresponding user names means it's REALLY bad because that means that whoever stole or sold them had access to some sort of master database. What I want to know is what else was on that database that was either stolen or sold? I now feel like people's status points or at least VIP tier level was on there (which explains why different tier levels have gotten more or less phishing attempts) but what else? IP addresses? Passwords? Private keys?
Just to be sure I made myself clear enough: my email is [email protected] and my betcoijn username is the exact same xxxxxx.
The pishing email I received start with dear xxxxxx: but being it present in both betcoin and firt part of email address no one can tell for sure they got that xxxxxx from Betcoin data because many pishing email I also receive on other email addresses I use start with dear and the part before the @ ( don't know how its called in technical language).
Also, in my opinon, don't think it's likely that the pisher targets mainly upper VIP status and only in a second or third istance lower VIP players: they always use to fire as many bullets as they can (being that bullets free of charge) so that thay rely on large numbers law.
So back to my post and not to be exploited: has some other betcoin player received this same email?
It came from this address: Brenda Levy ([email protected]) (
with this subject: FW: Payment Declined PIN-739263
and this message
Dear xxxxxx,
Our finance department has processed your payment, unfortunately it has been declined.
Please, double check the information provided in the invoice (attached to this mail) and confirm your details.
Thank you for understanding.
Brenda Levy
Financial Manager
If so then we know something more, if not it is just one of the tons of pishing emails I recevie on every email address I use (job one included) and almost every person I know experience the same.
March 15, 2016, 02:14:40 PM
The xxxxx one is my Betcoin username but also the part before @ of my email address so not sure wether they got it: therefore posted the sender email address to see if some other Betcoin user match this one.
Just my 1.2 mBTC
Yes, that's the concerning part. If the phishers ONLY had email addresses, it would be bad but the fact that they have emails + the corresponding user names means it's REALLY bad because that means that whoever stole or sold them had access to some sort of master database. What I want to know is what else was on that database that was either stolen or sold? I now feel like people's status points or at least VIP tier level was on there (which explains why different tier levels have gotten more or less phishing attempts) but what else? IP addresses? Passwords? Private keys?
March 15, 2016, 10:45:16 AM
I want to ask .. if its mbtc 0, whether they could play in the freeroll. its a matter of fitting I click registering, can not,,, sorry i newbie. thk's.
March 15, 2016, 10:21:09 AM
Congratulations to Sit & Crush Winners TA65188, nukemecca, and DeepCraft
Betcoin Poker players earn even more bitcoin through the Sit and Crush Promo
You can earn extra btc simply playing your favorite sng's in the Betcoin WPN Sit N Crush promotion.
Congratulations to TA65188 for finishing in 29th position in the sit n crush competition. We have added 298 chips ($125) to your account.
Congratulations to DeepCraft for finishing in 83rd position in the sit n crush competition. We have added 121 chips ($50) to your account.
Congratulations to KrustyTheKlown for finishing in 96th position in the sit n crush competition. We have added 121 chips ($50) to your account.
For more information on the Sit n Crush Promotion, please visit: https://www.betcoin.ag/bonuses/sit-and-crush
Betcoin Poker players earn even more bitcoin through the Sit and Crush Promo
You can earn extra btc simply playing your favorite sng's in the Betcoin WPN Sit N Crush promotion.
Congratulations to TA65188 for finishing in 29th position in the sit n crush competition. We have added 298 chips ($125) to your account.
Congratulations to DeepCraft for finishing in 83rd position in the sit n crush competition. We have added 121 chips ($50) to your account.
Congratulations to KrustyTheKlown for finishing in 96th position in the sit n crush competition. We have added 121 chips ($50) to your account.
For more information on the Sit n Crush Promotion, please visit: https://www.betcoin.ag/bonuses/sit-and-crush
March 15, 2016, 07:54:06 AM
- snip-
What is your tier VIP level on Betcoin? Mine is pretty high and I believe Twitchy's is as well, it's possible that whoever stole/sold our information is targeting high volume players. I've gotten over a dozen of these phishing emails since the first one that everyone got and they seem to be increasing in volume in the past month or so.
WARNING - PISHING EMAIL ADDRESS INSIDE THIS POST
The bolded part could be an explanation to the fact I only received one pishing email in last week ( and yes I checked my email and bin and undesired mails folder - and my mail service doesn't have autoerase feature or what)).
But my email is not linked only to Betcoin but ids the one I mainly use for gambling purposes.
It came from this address: Brenda Levy ([email protected]) (
with this subject: FW: Payment Declined PIN-739263
and this message
Dear xxxxxx,
Our finance department has processed your payment, unfortunately it has been declined.
Please, double check the information provided in the invoice (attached to this mail) and confirm your details.
Thank you for understanding.
Brenda Levy
Financial Manager
_____________________________________________________________________________
The xxxxx one is my Betcoin username but also the part before @ of my email address so not sure wether they got it: therefore posted the sender email address to see if some other Betcoin user match this one.
Just my 1.2 mBTC
What is your tier VIP level on Betcoin? Mine is pretty high and I believe Twitchy's is as well, it's possible that whoever stole/sold our information is targeting high volume players. I've gotten over a dozen of these phishing emails since the first one that everyone got and they seem to be increasing in volume in the past month or so.
WARNING - PISHING EMAIL ADDRESS INSIDE THIS POST
The bolded part could be an explanation to the fact I only received one pishing email in last week ( and yes I checked my email and bin and undesired mails folder - and my mail service doesn't have autoerase feature or what)).
But my email is not linked only to Betcoin but ids the one I mainly use for gambling purposes.
It came from this address: Brenda Levy ([email protected]) (
with this subject: FW: Payment Declined PIN-739263
and this message
Dear xxxxxx,
Our finance department has processed your payment, unfortunately it has been declined.
Please, double check the information provided in the invoice (attached to this mail) and confirm your details.
Thank you for understanding.
Brenda Levy
Financial Manager
_____________________________________________________________________________
The xxxxx one is my Betcoin username but also the part before @ of my email address so not sure wether they got it: therefore posted the sender email address to see if some other Betcoin user match this one.
Just my 1.2 mBTC
March 14, 2016, 08:58:50 PM
Only a bronze 1
March 14, 2016, 07:30:42 PM
I can confirm this email was received by email address that was only ever given to Betcoin.
It's linked to what looks like a bitcasino.io or vegascasino (coin gaming) knock off that only has a cashier. They are trying to get you to deposit to their casino without any games it seems.
Or you didn't bother to check your email and continue to defend Betcoin without any consideration as to whether or not your statement is true.
1.2 mbtc per post, guess it adds up?
It's linked to what looks like a bitcasino.io or vegascasino (coin gaming) knock off that only has a cashier. They are trying to get you to deposit to their casino without any games it seems.
Might be another compromised site, I did not receive this email checked all my folders.
Or you didn't bother to check your email and continue to defend Betcoin without any consideration as to whether or not your statement is true.
1.2 mbtc per post, guess it adds up?
It does add up, but no I went back a few days and didn't have anything. Unless my mailbox auto deleted it I never received it. The 2nd email everyone got I didn't get either. I did get the first.
What is your tier VIP level on Betcoin? Mine is pretty high and I believe Twitchy's is as well, it's possible that whoever stole/sold our information is targeting high volume players. I've gotten over a dozen of these phishing emails since the first one that everyone got and they seem to be increasing in volume in the past month or so.
March 14, 2016, 05:09:47 PM
It does add up, but no I went back a few days and didn't have anything. Unless my mailbox auto deleted it I never received it. The 2nd email everyone got I didn't get either. I did get the first.
Auto delete is a possibility. They are usually in the spam box, sometimes marked as suspicious or something.
Here are some which other's have shared, all sent to masked email addresses which were only used when registering on Betcoin.
March 14, 2016, 04:32:07 PM
I can confirm this email was received by email address that was only ever given to Betcoin.
It's linked to what looks like a bitcasino.io or vegascasino (coin gaming) knock off that only has a cashier. They are trying to get you to deposit to their casino without any games it seems.
Or you didn't bother to check your email and continue to defend Betcoin without any consideration as to whether or not your statement is true.
1.2 mbtc per post, guess it adds up?
It's linked to what looks like a bitcasino.io or vegascasino (coin gaming) knock off that only has a cashier. They are trying to get you to deposit to their casino without any games it seems.
Might be another compromised site, I did not receive this email checked all my folders.
Or you didn't bother to check your email and continue to defend Betcoin without any consideration as to whether or not your statement is true.
1.2 mbtc per post, guess it adds up?
It does add up, but no I went back a few days and didn't have anything. Unless my mailbox auto deleted it I never received it. The 2nd email everyone got I didn't get either. I did get the first.
March 14, 2016, 04:21:18 PM
I can confirm this email was received by email address that was only ever given to Betcoin.
It's linked to what looks like a bitcasino.io or vegascasino (coin gaming) knock off that only has a cashier. They are trying to get you to deposit to their casino without any games it seems.
Or you didn't bother to check your email and continue to defend Betcoin without any consideration as to whether or not your statement is true.
1.2 mbtc per post, guess it adds up?
It's linked to what looks like a bitcasino.io or vegascasino (coin gaming) knock off that only has a cashier. They are trying to get you to deposit to their casino without any games it seems.
Might be another compromised site, I did not receive this email checked all my folders.
Or you didn't bother to check your email and continue to defend Betcoin without any consideration as to whether or not your statement is true.
1.2 mbtc per post, guess it adds up?
March 14, 2016, 03:44:07 PM
Just as a warning, I think that the people who compromised Betcoin's database are at it again. I received the following e-mail today. I removed my e-mail address/password/their referral link. I haven't heard of this site before and assume it is a scam.
Quote
Subject: Welcome to BitcoinCasino
From: BitcoinCasino <[email protected]>
To: [my Betcoin e-mail address]
Date: Mar 13, 2016 5:10:56 PM
Hi, you are invited to BitcoinCasino!
Login detail:
E-mail: [my Betcoin e-mail address]
Password: [removed]
Login link: http://bitcoincasino.ml/?e=[removed]
First Deposit Bonus:
25% from 0.1 up to 1 BTC
50% from 1.1 up to 5 BTC
75% from 5.1 up to 10 BTC
100% from 10.1 BTC
Thank you!
Regards, BitcoinCasino
From: BitcoinCasino <[email protected]>
To: [my Betcoin e-mail address]
Date: Mar 13, 2016 5:10:56 PM
Hi, you are invited to BitcoinCasino!
Login detail:
E-mail: [my Betcoin e-mail address]
Password: [removed]
Login link: http://bitcoincasino.ml/?e=[removed]
First Deposit Bonus:
25% from 0.1 up to 1 BTC
50% from 1.1 up to 5 BTC
75% from 5.1 up to 10 BTC
100% from 10.1 BTC
Thank you!
Regards, BitcoinCasino
I got the exact same email yesterday, AND another phishing email from "blockchain". I've been getting scam/phishing emails about 3 times a month since the "security breech". It would be really nice to know what happened and what other sensitive information got compromised since it's clear that out personal information either got stolen or sold.
March 14, 2016, 02:47:32 PM
Just as a warning, I think that the people who compromised Betcoin's database are at it again. I received the following e-mail today. I removed my e-mail address/password/their referral link. I haven't heard of this site before and assume it is a scam.
Quote
Also, for the record, Mali gives away top level .ml domains for free. I wouldn't trust a "casino" that won't even shell out a couple bucks to register a domain name in the country they are actually doing business in. Apparently, 6% of all .ml domains are phishing sites:
http://www.thewhir.com/web-hosting-news/mali-ml-domain-phishiest-tld-of-any-country-in-the-world-netcraft
March 14, 2016, 02:16:52 PM
Might be another compromised site, I did not receive this email checked all my folders.
March 14, 2016, 12:35:34 PM
Just as a warning, I think that the people who compromised Betcoin's database are at it again. I received the following e-mail today. I removed my e-mail address/password/their referral link. I haven't heard of this site before and assume it is a scam.
Quote
Subject: Welcome to BitcoinCasino
From: BitcoinCasino <[email protected]>
To: [my Betcoin e-mail address]
Date: Mar 13, 2016 5:10:56 PM
Hi, you are invited to BitcoinCasino!
Login detail:
E-mail: [my Betcoin e-mail address]
Password: [removed]
Login link: http://bitcoincasino.ml/?e=[removed]
First Deposit Bonus:
25% from 0.1 up to 1 BTC
50% from 1.1 up to 5 BTC
75% from 5.1 up to 10 BTC
100% from 10.1 BTC
Thank you!
Regards, BitcoinCasino
From: BitcoinCasino <[email protected]>
To: [my Betcoin e-mail address]
Date: Mar 13, 2016 5:10:56 PM
Hi, you are invited to BitcoinCasino!
Login detail:
E-mail: [my Betcoin e-mail address]
Password: [removed]
Login link: http://bitcoincasino.ml/?e=[removed]
First Deposit Bonus:
25% from 0.1 up to 1 BTC
50% from 1.1 up to 5 BTC
75% from 5.1 up to 10 BTC
100% from 10.1 BTC
Thank you!
Regards, BitcoinCasino
Jump to: