Its the emails that should probably be examined. If I had any doubts I'd isolate first all, setup a new gmail with 2fa and start using that new address for anything wanting to secure. Keep a separate email account any emails of lesser importance, junk mail basically. Use a site called spamgourmet to filter emails perhaps could be of help. Gmail let you put a dot anywhere in your name to distinguish its usage, that might help.
The old email account that possibly received emails should not be used, examine those emails for anything that was possibly phishing etc. Thats something in possession of the user that can be checked to try and narrow it down.
Topic: FreeBitco.in-$200 FreeBTC⭐Win Lambo🔥0.2BTC DailyJackpot🏆$32,500 Wager Contest - page 117. (Read 559515 times)
May 05, 2024, 11:07:03 AM
May 05, 2024, 10:19:32 AM
The hackers targeted high rollers and i was among them. I took the top 7 in the weekly contest and became a victim the next day after receiving the $1000 prize. I have the same hacking scenario as the others. The address of the hackers' deposit is implanted in my profile and funds are automatically withdrawn to this address when you try to withdraw them yourself, regardless of what address you entered manually.
Can you verify if the email you received from freebitco.in is official email when you received a notification from the tournament rewards. Not only that you are all high roller but all of you might possibly receive a malicious email that resulted to unknowingly downloading a malware that cause this hack
I’m less active on this casino since I only use this before for faucet but somethings strange on how you are the only one affected here even if you’re username is available publicly, hackers can’t hack your account by just knowing your user id.
May 05, 2024, 08:18:40 AM
I have been reading the last few posts in the thread and I understand that few users are facing problems with their withdrawals.
But do we have a number of users who are affected or the hack is even real or may be it's a technical glitch.
The issue with TheQuin not responding in this thread has been since few months and so we cannot take that into account for the recent issues.
Freebitco.in has had a good reputation and so it's a big concern if a huge number of users are facing such issues.
But do we have a number of users who are affected or the hack is even real or may be it's a technical glitch.
The issue with TheQuin not responding in this thread has been since few months and so we cannot take that into account for the recent issues.
Freebitco.in has had a good reputation and so it's a big concern if a huge number of users are facing such issues.
May 05, 2024, 07:06:53 AM
The ticket list for the 10th lambo drawing has been posted on the freebitco.in twitter account. We will know the winner when bitcoin block 842189 is mined.
Good luck to everyone who earned tickets during round 10!
Good luck to everyone who earned tickets during round 10!
May 05, 2024, 06:31:06 AM
It seems to me the freebitco.in's backend works as it should but somebody found a way to inject a script on the front-end of the app and it manipulates the DOM and tricks you into doing the shit you shouldn't be doing.
Like: "You are hacked, send x amount of btc to this adress to get unhacked"
In reality, you weren't hacked at all. It is just what this script kiddie wants you to believe. Regardless of that, it should be handled asap.
Is it possible to solve this with manually putting some scripts in developers' console? Sorry if it's a dumb question, I am not a developer.Like: "You are hacked, send x amount of btc to this adress to get unhacked"
In reality, you weren't hacked at all. It is just what this script kiddie wants you to believe. Regardless of that, it should be handled asap.
No you can't do anything like that and it looks like my assumption was half-true half-wrong, the attacker is able send withdrawal requests to the server according to codergeek.
...
I wonder if this script can send a withdrawal request or change the withdrawal address though. Since it has an access to the client side, it can do whatever it wants. (From your side)
I wonder if this script can send a withdrawal request or change the withdrawal address though. Since it has an access to the client side, it can do whatever it wants. (From your side)
Yes, it can do both. An unauthorised withdrawal was initiated on my account. And it was able to bypass my profile address.
The same thing happened to Legendary member BayAreaCoins.
That case is opened here:
https://bitcointalksearch.org/topic/m.64024210
May 05, 2024, 06:30:43 AM
Update!!!:
After I posted the video with the substitution of the withdrawal address, an hour later I tried to withdraw funds again and surprisingly my address did not change and the withdrawal went to the correct address! Is it a coincidence??? Or are hackers monitoring this forum topic?
This is really strange, I already requested an instant withdrawal of my funds from Freebitco and I received them. Btw thanks for sharing your info, I think that it's not a good time to deposit and play on Freebitco. I hope everyone who deposited Bitcoin to get 4% APY will withdraw soon because the situation is really terrible.After I posted the video with the substitution of the withdrawal address, an hour later I tried to withdraw funds again and surprisingly my address did not change and the withdrawal went to the correct address! Is it a coincidence??? Or are hackers monitoring this forum topic?
@wetsuit and @TheQueen, please come here and solve this problem, this is urgent! Or many people like me will withdraw from your casino.
One of the representatives from freebitcoin Thequin is always active, but it seems that he hasn't answered anything in this thread, even though this issue is important to clarify so that there is no chaos or some kind of accusation that makes the reputation of this site even worse, especially since round 10 Lambo winners have not yet been announced. announce, is this site okay or has it gone bankrupt because almost every time I think about that and have not yet made a withdrawal from this site, but I hope their representatives will come to solve the problem that is occurring.
May 05, 2024, 05:53:15 AM
I add a discover from @Zibi321 than could help the Freebitco.in people (if they really exist):
Praying that hackers don't attack again soon and hoping for some explanation from freebitco.in.
Quote
Of course I could be wrong, but from my point of view attackers are able to put link into particular place on fbc website.
And it's exactly:
FBC -> "REFER" tab -> "ADVANCED TRACKING USING TAGS" button -> "SELECT A TAG TO VIEW ITS STATS" and link is hidden in drop down list.
It was not visible from GUI, but it was somehow placed into html code.
Link leads to malicious script which is executed during website loading.
And because of it website content can be modified.
And it's exactly:
FBC -> "REFER" tab -> "ADVANCED TRACKING USING TAGS" button -> "SELECT A TAG TO VIEW ITS STATS" and link is hidden in drop down list.
It was not visible from GUI, but it was somehow placed into html code.
Link leads to malicious script which is executed during website loading.
And because of it website content can be modified.
Praying that hackers don't attack again soon and hoping for some explanation from freebitco.in.
May 05, 2024, 05:27:04 AM
Update 11:50am CET.
It seems i have recovered my account but... why? when? where?
I see my real deposit address in the Deposit window and none of the scripts that I had until now appear.
Developer tools: Sources - Top > freebitco.in > ?op=home
WHEN I REPORTED THE ISSUE:
YESTERDAY (My deposit address was still fake):
TODAY (My deposit address is the mine one again):
No one from freebitco.in has contacted me or responded to any of my emails sent.
I don't know if Freebitco.in fixed it or if the hackers have removed the scripts to calm us down and can attack whenever they want again.
My trust in Freebitcoin = 0%
It seems i have recovered my account but... why? when? where?
I see my real deposit address in the Deposit window and none of the scripts that I had until now appear.
Developer tools: Sources - Top > freebitco.in > ?op=home
WHEN I REPORTED THE ISSUE:
SELECT A TAG TO VIEW ITS STATS
YESTERDAY (My deposit address was still fake):
SELECT A TAG TO VIEW ITS STATS
TODAY (My deposit address is the mine one again):
SELECT A TAG TO VIEW ITS STATS
No one from freebitco.in has contacted me or responded to any of my emails sent.
I don't know if Freebitco.in fixed it or if the hackers have removed the scripts to calm us down and can attack whenever they want again.
My trust in Freebitcoin = 0%
May 05, 2024, 04:37:20 AM
It seems to me the freebitco.in's backend works as it should but somebody found a way to inject a script on the front-end of the app and it manipulates the DOM and tricks you into doing the shit you shouldn't be doing.
Like: "You are hacked, send x amount of btc to this adress to get unhacked"
In reality, you weren't hacked at all. It is just what this script kiddie wants you to believe. Regardless of that, it should be handled asap.
Is it possible to solve this with manually putting some scripts in developers' console? Sorry if it's a dumb question, I am not a developer.Like: "You are hacked, send x amount of btc to this adress to get unhacked"
In reality, you weren't hacked at all. It is just what this script kiddie wants you to believe. Regardless of that, it should be handled asap.
No you can't do anything like that and it looks like my assumption was half-true half-wrong, the attacker is able send withdrawal requests to the server according to codergeek.
...
I wonder if this script can send a withdrawal request or change the withdrawal address though. Since it has an access to the client side, it can do whatever it wants. (From your side)
I wonder if this script can send a withdrawal request or change the withdrawal address though. Since it has an access to the client side, it can do whatever it wants. (From your side)
Yes, it can do both. An unauthorised withdrawal was initiated on my account. And it was able to bypass my profile address.
May 05, 2024, 04:23:01 AM
It seems to me the freebitco.in's backend works as it should but somebody found a way to inject a script on the front-end of the app and it manipulates the DOM and tricks you into doing the shit you shouldn't be doing.
Like: "You are hacked, send x amount of btc to this adress to get unhacked"
In reality, you weren't hacked at all. It is just what this script kiddie wants you to believe. Regardless of that, it should be handled asap.
Is it possible to solve this with manually putting some scripts in developers' console? Sorry if it's a dumb question, I am not a developer.Like: "You are hacked, send x amount of btc to this adress to get unhacked"
In reality, you weren't hacked at all. It is just what this script kiddie wants you to believe. Regardless of that, it should be handled asap.
TheQuin probably has a lot going on in his personal life. I have contacted him on Jan/24 and he replied to me on Jan/27. I had a delay with my deposit and my balance showed up a few seconds after I sent him a message. 3 days later he replied to me and said that the wallet software was updated and it works a bit slower than the old one.
Worst case scenario is, the feds are after this website.
This website didn’t do any kyc for more than 10 years and suddenly it was last year if remember right, it started to mention KYC in their ToS. That can’t be a coincidence.
This website might be the next victim of the gov.
I personally never had a problem with FreeBitco, I use their website since 2015. Bustabit doesn't ask for KYC documents and probably are as popular as Freebitco and they never had a problem, so I don't think that government is after this website. As far as I understood, crypto casinos that only offer in-house games, don't necessarily need a license.Worst case scenario is, the feds are after this website.
This website didn’t do any kyc for more than 10 years and suddenly it was last year if remember right, it started to mention KYC in their ToS. That can’t be a coincidence.
This website might be the next victim of the gov.
Update!!!:
After I posted the video with the substitution of the withdrawal address, an hour later I tried to withdraw funds again and surprisingly my address did not change and the withdrawal went to the correct address! Is it a coincidence??? Or are hackers monitoring this forum topic?
This is really strange, I already requested an instant withdrawal of my funds from Freebitco and I received them. Btw thanks for sharing your info, I think that it's not a good time to deposit and play on Freebitco. I hope everyone who deposited Bitcoin to get 4% APY will withdraw soon because the situation is really terrible.After I posted the video with the substitution of the withdrawal address, an hour later I tried to withdraw funds again and surprisingly my address did not change and the withdrawal went to the correct address! Is it a coincidence??? Or are hackers monitoring this forum topic?
@wetsuit and @TheQueen, please come here and solve this problem, this is urgent! Or many people like me will withdraw from your casino.
May 05, 2024, 04:18:28 AM
Worst case scenario is, the feds are after this website.
This website didn’t do any kyc for more than 10 years and suddenly it was last year if remember right, it started to mention KYC in their ToS. That can’t be a coincidence.
This website might be the next victim of the gov.
Every website is dropping like flies suddenly. I wonder why.This website didn’t do any kyc for more than 10 years and suddenly it was last year if remember right, it started to mention KYC in their ToS. That can’t be a coincidence.
This website might be the next victim of the gov.
I recall the other day, two very well known mixers went offline within a short interval, a few days (go to the Altcoinstalks forum for more information)
And now this happens.
Never in my history of using this site since 2019 have I heard of this sort of mass hack happening.
He went online today.
Another worrying thing is, till January he was making posts non-stop. Then zero posts made in February and one post was made in March and one in April. This strengthens my theory but let's hear his explanation first.
May 05, 2024, 03:23:34 AM
Worst case scenario is, the feds are after this website.
This website didn’t do any kyc for more than 10 years and suddenly it was last year if remember right, it started to mention KYC in their ToS. That can’t be a coincidence.
This website might be the next victim of the gov.
This website didn’t do any kyc for more than 10 years and suddenly it was last year if remember right, it started to mention KYC in their ToS. That can’t be a coincidence.
This website might be the next victim of the gov.
Every website is dropping like flies suddenly. I wonder why.
I recall the other day, two very well known mixers went offline within a short interval, a few days (go to the Altcoinstalks forum for more information)
And now this happens.
Never in my history of using this site since 2019 have I heard of this sort of mass hack happening.
May 04, 2024, 09:52:43 PM
OK, so that people no longer have doubts about how the address is being changed when withdrawing funds. At the end of the video, watch carefully how my output address was changed!!! I hope no one else will say that we are deceiving you and the site is not hacked!
https://dropmefiles.com/56V5d
Update!!!:
After I posted the video with the substitution of the withdrawal address, an hour later I tried to withdraw funds again and surprisingly my address did not change and the withdrawal went to the correct address! Is it a coincidence??? Or are hackers monitoring this forum topic?
https://dropmefiles.com/56V5d
Update!!!:
After I posted the video with the substitution of the withdrawal address, an hour later I tried to withdraw funds again and surprisingly my address did not change and the withdrawal went to the correct address! Is it a coincidence??? Or are hackers monitoring this forum topic?
May 04, 2024, 08:22:37 PM
I'm getting lists of referrals for lawyers as we speak
Who were the lawyers prosecuting the Sam Bankman-Fried (FTX) and Changpeng Zhao (Binance) cases?
Just sayin'
May 04, 2024, 02:04:49 PM
But I insist on 2 things:
- First, we should all ask Freebitco.in to investigate because there is a problem and it can affect us all, everyone (tomorrow can affect you or you or all) and veteran users may have more strength than newbies.
- Second, I myself lend my account to freebitco.in to investigate. After 36 hours I still see the wrong deposit address (I cannot change it) and the damn cashtravel script. It happens to me on 2 PCs and 1 mobile phone while another person on those same PCs with his account, sees his correct deposit address and does not see the script in the developer tools...
Both of your requests sound reasonable. I would also like to see that freebitco.in investigate this issue thoroughly. A glitch affecting deposit addresses and scripts could be a serious problem.
...but Freebitco.in doesn't want to investigate.
Unfortunately, there's not much we can do at this point other than wait for TheQuin to come in and clarify their side.
May 04, 2024, 11:52:02 AM
Seriously though. Wetsuit and Quinn, you guys really f*** things up for me.
Yeah it was just a measly 500 bucks but I needed that 500 bucks
This situation has had a severe impact on my mental health. I feel like I was so close to finally having something good happen to me, and now it's been taken away. My confidence is shot, and I'm feeling extremely overwhelmed and sad.
The loss of $500 for me has been a devastating blow. I'm a single father with three young children, and I was hoping to use this money to get a much-needed upgrade for our old car. I've been working so hard to make ends meet, and it feels like everything is against me. This was my one ray of hope, and now it's gone.
I've been struggling for so long, and I thought I finally had this one thing that would make a difference in our lives. I thought I could finally provide my children with some much-needed joy and enjoyment. But now it's gone, and I feel like I let them down again.
It's been really hard, and I'm struggling to keep it together. I don't know where to turn or what to do. I just want a better life for my children and myself, and this situation is destroying any hope I had left. I feel lost and frustrated and terrified.
I might just throw in the towel this time I'm done
Unfortunatelly there isn't anything else most members of this community can do for now, because all the expected procedures were already taken by you when creating a Scam Accusation thread at the respective section of this forum. You filled the complaint, and now what we can do is to wait for a statement from the platform. It's not the first time we are facing a scam accusation against freebitco.in lately. Last time, it took several weeks, but at some point they finally replied and solved the issue.Yeah it was just a measly 500 bucks but I needed that 500 bucks
This situation has had a severe impact on my mental health. I feel like I was so close to finally having something good happen to me, and now it's been taken away. My confidence is shot, and I'm feeling extremely overwhelmed and sad.
The loss of $500 for me has been a devastating blow. I'm a single father with three young children, and I was hoping to use this money to get a much-needed upgrade for our old car. I've been working so hard to make ends meet, and it feels like everything is against me. This was my one ray of hope, and now it's gone.
I've been struggling for so long, and I thought I finally had this one thing that would make a difference in our lives. I thought I could finally provide my children with some much-needed joy and enjoyment. But now it's gone, and I feel like I let them down again.
It's been really hard, and I'm struggling to keep it together. I don't know where to turn or what to do. I just want a better life for my children and myself, and this situation is destroying any hope I had left. I feel lost and frustrated and terrified.
I might just throw in the towel this time I'm done
It's true now the problem is much more complicated than last time, it seems, but to get anxious, frustrated and stressed for that reason won't help you in anyways. It will just make your situation worse, for you and your children. First of all, if you are having financial difficulties to make ends meet, you shouldn't be gambling at all, because as we know, it brings long term losses, directly impacting our personal finances.
500$ is a decent amount of money, and you must be really missing it a lot right now, but keep in mind you can still continue working, saving money and managing your finances properly, avoiding gambling for now, since you don't seem like being able to afford losing funds. Although 500$ means a lot, it doesn't mean the end of the world too, anyway. It's retrievable and you can indeed do that by remaining calm and getting your head together.
Meanwhile, let's wait for a reply from freebitco.in's team.
May 04, 2024, 10:30:27 AM
Even I am having no issue with my withdrawal and deposit all working as normal but still few are talking about issues which could be not baseless need update so please team came here and give something positive.
Can you provide screenshots of your withdrawal? This will help to clear problem as an isolated case only for those users that using some sort of script on their account. A simple screenshot of your successful recent withdrawal is enough.
Oh, that's new!
@Drazen2003
Attackers in your case injected another script - it's under new location and for sure code is different.
Script source code is obfuscated, so it's not easy to decode.
We can try to obfuscate using https://deobfuscate.io/ but it's still not easy to understand.
Try to block this script https://cdn.jsdelivr.net/gh/feleryunfbc/js/jquery.min.js, delete cookies or clear your browser history than log into fbc and check again.
My case was different - there was only 'cashtravel' script.
Link to my case if somebody missed it - https://bitcointalksearch.org/topic/warning-attack-on-freebitcoin-account-5492456
@Drazen2003
Attackers in your case injected another script - it's under new location and for sure code is different.
Script source code is obfuscated, so it's not easy to decode.
We can try to obfuscate using https://deobfuscate.io/ but it's still not easy to understand.
Try to block this script https://cdn.jsdelivr.net/gh/feleryunfbc/js/jquery.min.js, delete cookies or clear your browser history than log into fbc and check again.
My case was different - there was only 'cashtravel' script.
Link to my case if somebody missed it - https://bitcointalksearch.org/topic/warning-attack-on-freebitcoin-account-5492456
I’m curious regarding out of many players on this casino why you guys experienced this kind of script attack. Maybe there’s something common with you guys that you are doing on your account.
The hackers targeted high rollers and i was among them. I took the top 7 in the weekly contest and became a victim the next day after receiving the $1000 prize. I have the same hacking scenario as the others. The address of the hackers' deposit is implanted in my profile and funds are automatically withdrawn to this address when you try to withdraw them yourself, regardless of what address you entered manually.
May 04, 2024, 10:01:02 AM
I’m curious regarding out of many players on this casino why you guys experienced this kind of script attack. Maybe there’s something common with you guys that you are doing on your account.
It was already mentioned, but there is quite a mess in posts.
Only small group of users where targeted - mainly high rollers.
So most of us are users whose IDs where published on leaderboard of daily jackpot, monthly wagering or referral contest.
May 04, 2024, 09:55:25 AM
Even I am having no issue with my withdrawal and deposit all working as normal but still few are talking about issues which could be not baseless need update so please team came here and give something positive.
Can you provide screenshots of your withdrawal? This will help to clear problem as an isolated case only for those users that using some sort of script on their account. A simple screenshot of your successful recent withdrawal is enough.
Oh, that's new!
@Drazen2003
Attackers in your case injected another script - it's under new location and for sure code is different.
Script source code is obfuscated, so it's not easy to decode.
We can try to obfuscate using https://deobfuscate.io/ but it's still not easy to understand.
Try to block this script https://cdn.jsdelivr.net/gh/feleryunfbc/js/jquery.min.js, delete cookies or clear your browser history than log into fbc and check again.
My case was different - there was only 'cashtravel' script.
Link to my case if somebody missed it - https://bitcointalksearch.org/topic/warning-attack-on-freebitcoin-account-5492456
@Drazen2003
Attackers in your case injected another script - it's under new location and for sure code is different.
Script source code is obfuscated, so it's not easy to decode.
We can try to obfuscate using https://deobfuscate.io/ but it's still not easy to understand.
Try to block this script https://cdn.jsdelivr.net/gh/feleryunfbc/js/jquery.min.js, delete cookies or clear your browser history than log into fbc and check again.
My case was different - there was only 'cashtravel' script.
Link to my case if somebody missed it - https://bitcointalksearch.org/topic/warning-attack-on-freebitcoin-account-5492456
I’m curious regarding out of many players on this casino why you guys experienced this kind of script attack. Maybe there’s something common with you guys that you are doing on your account.
May 04, 2024, 09:46:33 AM
Oh, that's new!
@Drazen2003
Attackers in your case injected another script - it's under new location and for sure code is different.
Script source code is obfuscated, so it's not easy to decode.
We can try to obfuscate using https://deobfuscate.io/ but it's still not easy to understand.
Try to block this script https://cdn.jsdelivr.net/gh/feleryunfbc/js/jquery.min.js, delete cookies or clear your browser history than log into fbc and check again.
My case was different - there was only 'cashtravel' script.
Link to my case if somebody missed it - https://bitcointalksearch.org/topic/warning-attack-on-freebitcoin-account-5492456
@Drazen2003
Attackers in your case injected another script - it's under new location and for sure code is different.
Script source code is obfuscated, so it's not easy to decode.
We can try to obfuscate using https://deobfuscate.io/ but it's still not easy to understand.
Try to block this script https://cdn.jsdelivr.net/gh/feleryunfbc/js/jquery.min.js, delete cookies or clear your browser history than log into fbc and check again.
My case was different - there was only 'cashtravel' script.
Link to my case if somebody missed it - https://bitcointalksearch.org/topic/warning-attack-on-freebitcoin-account-5492456
Jump to: