Topic: Primedice.com | Since 2013 | Longest Running Crypto Casino | 113 BTC Jackpot! - page 186. (Read 1990087 times)

When did you send the BTC deposit? Because the hosting hijacking was only for a short period of time so many people weren't affected.

Stunna already said that only 0.02BTC was sent to the hackers address so your 0.09BTC seems to be something else.

How did you send your BTC over to PD? Do you use a Bitcoin Core wallet? Did you copy the deposit address to the clipboard and then send it over? Because there is a clipboard hack which basically changes any QR/BTC address from any websites you visit to the hackers, and it appears legit until you send your BTC and it never appears.

In the future, since BTC fees are low just send a small deposit, if it appears send a larger one to the exact same address, this prevents these issues from ever occuring.

Woah!
From 0.2 to 197.8 Ethereum!
We couldn't believe our eyes when this lucky player took home an absolute fortune with this single bet!

i was playing and having account at pd not the hosting providers . i came here on pd due there trust .i even don't know the name of hosting provider .so actually and practically pd have to give back my btc .i reported same day on there live chat but the person said its my mistake or some kind of clipboard virus .later i got to know the pd have been hacked and this was the issue .i'm having zero trust on pd now .Nothing is secure .its 2nd time when there domain hacked .i'm having very bad experience with pd every time .lets see what happened .

Its weird you say you got 0.09BTC stolen due to the security breach when Stunna said that only a total of 0.02BTC was sent to the hackers address.

Unfortunately its up to the PD admins whether they decide to credit you this amount or not, since it would be a loss for them.

This is a tough decision because its actually not PD security breach but it was the hostings fault due to social engineering. If anything the hosting provider should pay you back those 0.09BTC since they probably have liability insurance for these hacks.

thank you .its feels bad when you got scammed .i lost many btc in dice but got scammed is a real fuck and bad feeling .

I have forward your complain to Primedice's Superiors and they should answer you back as soon as they can.

hi i have been scammed on the day when your domain hacked . i send btc nothing credited i contacted the support they said its my mistake .still waiting for btc .I'm on primedice from years but its very bad .its not my mistake but yours as yours security breach .its only 0.0899btc i request stuna and micaro to help me .i can share all screenshots as well .

Part of this being only 0.02BTC is thanks to all Primedice users who were on guard and alert, like @Haze4days who wrote about it here. Thanks.

It is important to notice that Primedice Promos are ALWAYS on the social media, Bitcointalk, Twitter, Facebook, Instagram, or even email for those players who have "email alerts" activated.

Glad that only 0.02BTC could of been possibly stolen and not a larger amount.

Basically you can keep all your servers, coding, funds, personal info under tight security but the weak link in this is usually poor judgement by the hosting service personnel due to social engineering attacks.

This is no different than those people that got funds stolen from their exchange even if they used 2FA since it was very easy to call a cell provider and get a cell number to redirect texts to another device.

Crypto is booming which is a good thing but the rise and complexity of the thefts is also rising which is concerning.

Update: Our front-end provider was social engineered. An administrator that works for this major company granted a random person's account access, something we did not even think was a possibility (google, facebook amongst others use our provider to some extent).

This individual delivered a rogue front-end of the website last night for a brief period of time. Luckily our team was instantly made aware of this and after just a few minutes we were able to take it down and secure the account, withdrawals were immediately set to manual.

If you were on at a specific time you might have seen a page asked you to deposit money to an address to get 3x their deposit of any amount  and also included a very poorly made login modal. Most users saw past this login modal as a fraud but a few did login, we were able to restrict withdrawals before damage could be done and have reached out to those effected users with instructions to secure their account. We have access to all the code from that rogue deployment. 0.02BTC was sent to the address, it is unknown at this time whether or not this was just the offender's funds. We reviewed this code and it was not anything sophisticated, we will post it later.

We're investigating further and will give you all the details soon. We are using a more reliable company for FE deployment going forward. I must stress that our database/back-end were not effected and that funds are secure. We are fully operational, however some withdrawals will be manually processed while we complete our investigation over the course of the day. We feel extremely lucky that we have teams in multiple timezones and could react to this instantly before harm was done. Thank you for your understanding, and please accept my apologies if you had to wait hours to receive your withdrawal.


EDIT: All systems are go, withdrawals are auto

Hey, its not domain hijacking and yes our database and backend are safe.

Netifly which hosts our frontend got compromised so only frontend affected.

Its phishing attempt. With very bad login page. So it looks like not many people fell for it. But we are investigating everybody who did fall for it and we will sort it out.

To hijack a domain they need some personal info about PD's registar, info for the hosting services isn't much different, if this info is out on the streets and it's already the 2nd time it's hijacked within a year I don't trust anything involving my personal data on primedice's site.

IMPORTANT:

UPDATE: Everything fixed. Withdrawals are on auto again.

You are safe if you have not logged, as it was a PISHING attempt.


Server's Machine is different from Domain.

They could only get access to the database if somehow they got Server's Credentials (FTP or any other forms to log into the machine)

So there's no way for them to get into database just by hacking the domain.


EDIT: Official Information at https://forum.stake.com/topic/17857-attention/

Hello,

Due to a small security breach, the withdrawals are put on hold and are being manually processed for the time being. Everything should be back to normal within next several hours.

We are working on solving the issue. Sorry for any inconvenience caused by this and thank you for the patience!

If a person is not acquainted with primedice after all these years there is a big chance they are quite new to the crypto scene, I have never heard of someone playing at other places for a long time without even checking primedice, all those promotions are done to just keep up with the competition and not lose the market share instead of attracting new players, its more like keeping the current ones.

Specially there are some promotions that require you to spend 0.1+ which means neither poor people nor initiated people will play there, only the current happy customers would go that way and most of the promotions make the house edge even smaller so gamblers love it.

New people have faucets to test but faucets are so small that it would take about 10 minutes to lose all of your money very quickly and neither gambler could understand anything in 10 minutes nor Primedice could offer more since its literally free money.

I haven't heard from primedice themselves, I would change my password anyway if I were you, if the hackers could hijack the domain for a 2nd time it means the site owners and/or devs haven't learned from the last time and to much personal info needed to hijack a domain seems to be available for hackers.

For all we know they could have had access to the database and back-end of the site....

It's back to normal, as far as I can see. I just used the bookmarked page of PD and found myself on the site without  having to log in even. This issue is currently discussed on PD forum here:

https://forum.primedice.com/topic/34851-new-login-page-primedice/

I'm wondering whether I should change my password though, after seeing the post quoted below?


I think I shouldn't, since I haven't provided the hackers with my login credentials, right?

Primedice domain got hijacked again?