Flag against user: broke_tradah
Service thread: https://bitcointalk.org/index.php?topic=3876292.0
Website: freebitcobot.dynu.net
After running his freebitco.exe, his bot goes to https://freebitcobot.dynu.net/update.txt after that, his bot opens https://freebitcobot.dynu.net/safe.php (he forgot to add < ? php tag originally, code below) this script downloads vncserver.exe and looks for *. DAT bitcoin wallet files in parallel he is collecting usernames, passwords and cookie files he is trying to wager user btc by reusing their cookie files to increase his referral commission.
Flag against user: broke_tradah
Service thread: https://bitcointalk.org/index.php?topic=3876292.0
Website: freebitcobot.dynu.net
After running his freebitco.exe, his bot goes to https://freebitcobot.dynu.net/update.txt after that, his bot opens https://freebitcobot.dynu.net/safe.php (he forgot to add < ? php tag originally, code below) this script downloads vncserver.exe and looks for *. DAT bitcoin wallet files in parallel he is collecting usernames, passwords and cookie files he is trying to wager user btc by reusing their cookie files to increase his referral commission.
* For some reason I can't post the code below.
edit: Code at https://pastebin.com/QmTdh12p