Primedice.com | Since 2013 | Longest Running Crypto Casino | 113 BTC Jackpot! - page 234.

iluvbitcoins

legendary

Activity: 2198

Merit: 1150

Freedom&Honor

Quote from: LuanX3 on March 09, 2018, 02:25:14 AM

Congrats to Primedice for getting back the site pretty quick and it did not result to too much problems for their gamblers.

Also kudos to them for issuing a refund to those people that were scammed by the phasing site. However, how will you guys give refunds to people that deposited using addresses that they cannot sign from, i.e. from exchanges and other such things.

They can probably request proof of withdrawal from the exchange aka. screenshots, txids etc.

LuanX3

hero member

Activity: 756

Merit: 505

Congrats to Primedice for getting back the site pretty quick and it did not result to too much problems for their gamblers.

Also kudos to them for issuing a refund to those people that were scammed by the phasing site. However, how will you guys give refunds to people that deposited using addresses that they cannot sign from, i.e. from exchanges and other such things.

Thirdspace

hero member

Activity: 1232

Merit: 738

Mixing reinvented for your privacy | chipmixer.com

Quote from: Stunna on March 07, 2018, 08:48:17 PM

Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.

wow, very nice... primedice's prompt action made this happen
the perp must be disappointed Cheesy

getting only 0.05 BTC off this ruse

Quote from: Stunna on March 07, 2018, 08:48:17 PM

Here's what the attacker was able to do through his phishing site:
-Collect Usernames/Passwords for users who logged in to his phishing site during the brief period of time it was up.
-Display an obviously erroneous deposit address offering a 10% deposit bonus.

pretty slick hacker eh? offering 10% bonus Tongue

is there a possibility they collected email addresses too? as I remember we can set this optionally, right?
they could try email phishing soon or later, so heads-up guys... be cautious

dolphinpuke

member

Activity: 85

Merit: 10

You guys handled this with full transparency, which is why people will continue to play here and respect you guys. Kudos to getting things in check , maintaining composure and managing this bad situation very well. Awaiting Stunnas recap.

MICRO

legendary

Activity: 2464

Merit: 1037

CEO @ Stake.com and Primedice.com

Quote from: adaseb on March 08, 2018, 05:18:34 PM

Quote from: Xylber on March 08, 2018, 04:03:39 PM

Quote from: adaseb on March 08, 2018, 03:21:53 PM

Quote from: MICRO on March 08, 2018, 12:33:30 PM

Hey guys,

As many of you are probably already aware we are back up and running! Yeeey!

On your login you will be asked to reset your password, you can do that in one of two ways.

1. You can change password from any device that is still logged into your account.
2. You can contact our support team. ( Please note that support will be slower than usual due to huge amount of tickets we are getting at this moment.

Also for users safety all withdrawals are currently on manual.

I think what is really scary about this incident is imagine what could of happebed if the hackers weren't lazy.

They would at an unsuspecting time ( when PD dev are sleeping ) commit the hack and make the phishing site look for authentic.

When someone tried to login, they would go to the real PD and perform a withdraw.

The way the registrar handled this situation was very dangerous. Hopefully many Bitcoin sites and services can learn from this incident.

In this case, Primedice can't be reached via IP: if they change the DNS, they can't find the authentic website.
Of course, your idea is valid and can be used in some websites.

Yes but this is not what happened is it?

Basically the registrar redirected the traffic to a different IP.

The old site was still accessible by the old IP.

The hacker would simply record the usernames and passwords and then go to the real Primedice website by the IP address.

Plus, it takes a few hours for DNS to update. It's not instant but bottle necked by the ISP

Well it would be hard to pull off we have 24/7 support which is also always monitoring the site so we would take quick actions at any time. They can always reach me if not all devs and admins.

Thats why having 24/7 support proved to be very important and useful and we are one of the few sites that have it.

Stunna will post more details on how it happened.

It was not even remotely our fault and you will know why soon.

I hope we handled it well in the best way possible for all of our users and even though this was not our fault all the transactions sent to the phishing address will be refunded.

Again thank you all for support on this and for helping us get that phishing waring so fast.

adaseb

legendary

Activity: 3808

Merit: 1723

Quote from: Xylber on March 08, 2018, 04:03:39 PM

Quote from: adaseb on March 08, 2018, 03:21:53 PM

Quote from: MICRO on March 08, 2018, 12:33:30 PM

Hey guys,

As many of you are probably already aware we are back up and running! Yeeey!

On your login you will be asked to reset your password, you can do that in one of two ways.

1. You can change password from any device that is still logged into your account.
2. You can contact our support team. ( Please note that support will be slower than usual due to huge amount of tickets we are getting at this moment.

Also for users safety all withdrawals are currently on manual.

I think what is really scary about this incident is imagine what could of happebed if the hackers weren't lazy.

They would at an unsuspecting time ( when PD dev are sleeping ) commit the hack and make the phishing site look for authentic.

When someone tried to login, they would go to the real PD and perform a withdraw.

The way the registrar handled this situation was very dangerous. Hopefully many Bitcoin sites and services can learn from this incident.

In this case, Primedice can't be reached via IP: if they change the DNS, they can't find the authentic website.
Of course, your idea is valid and can be used in some websites.

Yes but this is not what happened is it?

Basically the registrar redirected the traffic to a different IP.

The old site was still accessible by the old IP.

The hacker would simply record the usernames and passwords and then go to the real Primedice website by the IP address.

Plus, it takes a few hours for DNS to update. It's not instant but bottle necked by the ISP

shield132

hero member

Activity: 2450

Merit: 948

Metawin.com - Truly the best casino ever

Congrats guys, to be fair one of the biggest dice website was stopped because of that reason. Hope this won't happen anymore.
Wish you all the best, it won't affect you a,much but wonder who was against you, who did this shit job.
Do you plan to make serious legal actions against him?

Xylber

full member

Activity: 615

Merit: 124

Quote from: adaseb on March 08, 2018, 03:21:53 PM

Quote from: MICRO on March 08, 2018, 12:33:30 PM

Hey guys,

As many of you are probably already aware we are back up and running! Yeeey!

On your login you will be asked to reset your password, you can do that in one of two ways.

1. You can change password from any device that is still logged into your account.
2. You can contact our support team. ( Please note that support will be slower than usual due to huge amount of tickets we are getting at this moment.

Also for users safety all withdrawals are currently on manual.

I think what is really scary about this incident is imagine what could of happebed if the hackers weren't lazy.

They would at an unsuspecting time ( when PD dev are sleeping ) commit the hack and make the phishing site look for authentic.

When someone tried to login, they would go to the real PD and perform a withdraw.

The way the registrar handled this situation was very dangerous. Hopefully many Bitcoin sites and services can learn from this incident.

In this case, Primedice can't be reached via IP: if they change the DNS, they can't find the authentic website.
Of course, your idea is valid and can be used in some websites.

adaseb

legendary

Activity: 3808

Merit: 1723

Quote from: MICRO on March 08, 2018, 12:33:30 PM

Hey guys,

As many of you are probably already aware we are back up and running! Yeeey!

On your login you will be asked to reset your password, you can do that in one of two ways.

1. You can change password from any device that is still logged into your account.
2. You can contact our support team. ( Please note that support will be slower than usual due to huge amount of tickets we are getting at this moment.

Also for users safety all withdrawals are currently on manual.

I think what is really scary about this incident is imagine what could of happebed if the hackers weren't lazy.

They would at an unsuspecting time ( when PD dev are sleeping ) commit the hack and make the phishing site look for authentic.

When someone tried to login, they would go to the real PD and perform a withdraw.

The way the registrar handled this situation was very dangerous. Hopefully many Bitcoin sites and services can learn from this incident.

xMossx

newbie

Activity: 121

Merit: 0

Great news! Guess I'll go change my password.

MICRO

legendary

Activity: 2464

Merit: 1037

CEO @ Stake.com and Primedice.com

Hey guys,

As many of you are probably already aware we are back up and running! Yeeey!

On your login you will be asked to reset your password, you can do that in one of two ways.

1. You can change password from any device that is still logged into your account.
2. You can contact our support team. ( Please note that support will be slower than usual due to huge amount of tickets we are getting at this moment.

Also for users safety all withdrawals are currently on manual.

BreachOfEuphoria

newbie

Activity: 39

Merit: 0

Primedice support, Katarina and Vladimir has been very good at helping me recover my account today.
Katarina replied within 15 minutes.

I'm in again.

Thank you so much for your help

JanpriX

hero member

Activity: 1708

Merit: 606

Buy The F*cking Dip

Quote from: MICRO on March 08, 2018, 06:38:02 AM

Quote from: Betwrong on March 08, 2018, 05:51:10 AM

"Password successfully changed"

You've definitely done the right compelling lazy people like me to reset their passwords before they can make any bets. I wouldn't do that almost for sure otherwise.

Great to see our favorite dice site is back. Good job, PD team! Good luck to all the rollers!

Hey,

Yeah we didn't have to do that and create a LOT of exstra work for us and for support but we want to make sure all our users are safe so that is done to protect you guys.

Atm we are changing it a bit so users with 2fa will be able to login normally. But we STRONGLY recommend you to change your password right after you login with 2fa and old password.

Also withdrawals are set to manual atm so if you have logged into phising site and got your password compromised and attacker somehow manages to login your balance will be safe and we will cancel the withdrawal he made after you contact support.

Please remember that we have millions of accounts on primedice and at this moment all support staff is in the office and working but we are getting huge amounts of new tickets so support will be a lot slower than normal.

I know you all got used to our super fast support with less than 60 seconds first reply time

.
But at this moment we cant keep up to that standard.

Please be patient.

edit: One more thing if you did not have any balance on your account feel free to register NEW account and use that in the meantime.

We definitely understand it Micro. Wink

We all know that many users are still registering to Primedice and most of them open new tickets every now and then. This is much expected because many people just got introduced to BTC and many of them got hooked to dice sites like PD. I've been changing my passwords every 3 months lately due to increased cases of hacked/phished accounts. Especially on those accounts that contain significant amount of BTC.

Kargai

jr. member

Activity: 131

Merit: 1

Quote from: MICRO on March 08, 2018, 06:38:02 AM

Quote from: Betwrong on March 08, 2018, 05:51:10 AM

"Password successfully changed"

You've definitely done the right compelling lazy people like me to reset their passwords before they can make any bets. I wouldn't do that almost for sure otherwise.

Great to see our favorite dice site is back. Good job, PD team! Good luck to all the rollers!

Hey,

Yeah we didn't have to do that and create a LOT of exstra work for us and for support but we want to make sure all our users are safe so that is done to protect you guys.

Atm we are changing it a bit so users with 2fa will be able to login normally. But we STRONGLY recommend you to change your password right after you login with 2fa and old password.

Also withdrawals are set to manual atm so if you have logged into phising site and got your password compromised and attacker somehow manages to login your balance will be safe and we will cancel the withdrawal he made after you contact support.

Please remember that we have millions of accounts on primedice and at this moment all support staff is in the office and working but we are getting huge amounts of new tickets so support will be a lot slower than normal.

I know you all got used to our super fast support with less than 60 seconds first reply time

.
But at this moment we cant keep up to that standard.

Please be patient.

edit: One more thing if you did not have any balance on your account feel free to register NEW account and use that in the meantime.

Thanks for all the hard work and the security.

Good luck to all the Support team for managing everything

MICRO

legendary

Activity: 2464

Merit: 1037

CEO @ Stake.com and Primedice.com

Quote from: Betwrong on March 08, 2018, 05:51:10 AM

"Password successfully changed"

You've definitely done the right compelling lazy people like me to reset their passwords before they can make any bets. I wouldn't do that almost for sure otherwise.

Great to see our favorite dice site is back. Good job, PD team! Good luck to all the rollers!

Hey,

Yeah we didn't have to do that and create a LOT of exstra work for us and for support but we want to make sure all our users are safe so that is done to protect you guys.

Atm we are changing it a bit so users with 2fa will be able to login normally. But we STRONGLY recommend you to change your password right after you login with 2fa and old password.

Also withdrawals are set to manual atm so if you have logged into phising site and got your password compromised and attacker somehow manages to login your balance will be safe and we will cancel the withdrawal he made after you contact support.

Please remember that we have millions of accounts on primedice and at this moment all support staff is in the office and working but we are getting huge amounts of new tickets so support will be a lot slower than normal.

I know you all got used to our super fast support with less than 60 seconds first reply time

.
But at this moment we cant keep up to that standard.

Please be patient.

edit: One more thing if you did not have any balance on your account feel free to register NEW account and use that in the meantime.

lay666

newbie

Activity: 6

Merit: 0

Quote from: Betwrong on March 08, 2018, 05:51:10 AM

"Password successfully changed"

You've definitely done the right compelling lazy people like me to reset their passwords before they can make any bets. I wouldn't do that almost for sure otherwise.

Great to see our favorite dice site is back. Good job, PD team! Good luck to all the rollers!

I have 2fa and password, but I cant log in
I contacted support, informed my email IP etc, dont know how much time need to check
))

Betwrong

legendary

Activity: 3514

Merit: 2246

🌀 Cosmic Casino

"Password successfully changed"

You've definitely done the right compelling lazy people like me to reset their passwords before they can make any bets. I wouldn't do that almost for sure otherwise.

Great to see our favorite dice site is back. Good job, PD team! Good luck to all the rollers!

Juggy777

hero member

Activity: 2646

Merit: 686

Quote from: Stunna on March 08, 2018, 03:27:50 AM

We're back. We're waiting to move the domain off the registrar but we've put the site back. We do not believe the attackers can recover the domain back again but we will be keeping a careful eye on things.

If you have a password set as a pre-caution we'll be requiring you to quickly swap it out when reloading https://primedice.com . You will be able to login again once you've changed your password.

Welcome back guys! thanks for your incredible patience. Losing access to the domain felt like losing our first child, it was a rough last few days but we'll be getting things steady again and will be briefing you with the full story soon. If you experience any issues please contact live support.

Verifying our SSL certificate: 8E:CA:D4:5A:48:0A:5C:F0:30:0B:40:29:E2:FB:2A:5C:D3:81:88:C6 SHA1

Back to working on PD5 Cool

I can understand what you'll must have gon through it's a shame that people do such kind of stuff, I'm sure PD bounce back stronger and faster.

It goes without saying people need to calm their horses before sending support tickets to them, they already have their hands full no point in rushing.

The good thing is PD database was not effected and I'm sure each matter will be resolved, good luck and wish the staff of PD strength to get over this mess.

MICRO

legendary

Activity: 2464

Merit: 1037

CEO @ Stake.com and Primedice.com

Please be patient with support at this moment.

We are getting huge amount of tickets and for the first time answer time can be very slow.

adaseb

legendary

Activity: 3808

Merit: 1723

Quote from: Stunna on March 08, 2018, 03:27:50 AM

We're back. We're waiting to move the domain off the registrar but we've put the site back. We do not believe the attackers can recover the domain back again but we will be keeping a careful eye on things.

If you have a password set as a pre-caution we'll be requiring you to quickly swap it out when reloading https://primedice.com . You will be able to login again once you've changed your password.

Welcome back guys! thanks for your incredible patience. Losing access to the domain felt like losing our first child, it was a rough last few days but we'll be getting things steady again and will be briefing you with the full story soon. If you experience any issues please contact live support.

Verifying our SSL certificate: 8E:CA:D4:5A:48:0A:5C:F0:30:0B:40:29:E2:FB:2A:5C:D3:81:88:C6 SHA1

Back to working on PD5 Cool

Are you guys going to take any legal action against the hacker?

Even though not much was stolen, there was downtime which lead to profit loss.

Pretty sure the profit loss was much greater than 1 BTC.

Topic: Primedice.com | Since 2013 | Longest Running Crypto Casino | 113 BTC Jackpot! - page 234. (Read 1990087 times)