factor280
|
|
March 07, 2018, 06:28:58 PM |
|
Primedice has been around forever, I dont think this is a huge issue. Should be back up soon.
|
Sig Space for Rent! PM Me.
|
|
|
|
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
stsms06
Newbie
Offline
Activity: 37
Merit: 0
|
|
March 07, 2018, 08:06:53 PM |
|
How high is the damage?
|
|
|
|
Coin Dropper
Member
Offline
Activity: 151
Merit: 10
|
|
March 07, 2018, 08:17:15 PM |
|
I think there's not much damage. Primedice will be back soon!
|
|
|
|
:wq
Copper Member
Member
Offline
Activity: 258
Merit: 49
|
|
March 07, 2018, 08:42:48 PM |
|
https://forum.primedice.comI have restored the forum. We are gradually restoring all services today, thank you everyone for your patience.
|
|
|
|
lite
Legendary
Offline
Activity: 1400
Merit: 1009
|
|
March 07, 2018, 08:45:01 PM |
|
How high is the damage?
I think the damage isn't high, people were quickly got to know about the phishing site and also reported it to cloudflare, so they they blacklisted the phishing version of PD and showed warnings when people visited PD. from phishing the attacker was only able to get around 0.054 BTC[1]. i'm not sure how much these scammer/attackers were able steal by emailing users impersonating as PD's support. [1] https://blockchain.info/address/1pFh3yqXKw9K45WHx5pvmt4bGnu4st8afhttps://forum.primedice.comI have restored the forum. We are gradually restoring all services today, thank you everyone for your patience. That's great!
|
|
|
|
xMossx
Newbie
Offline
Activity: 121
Merit: 0
|
|
March 07, 2018, 09:33:03 PM |
|
https://forum.primedice.comI have restored the forum. We are gradually restoring all services today, thank you everyone for your patience. Glad to hear it.
|
|
|
|
wtfjim
Newbie
Offline
Activity: 5
Merit: 0
|
|
March 07, 2018, 09:51:44 PM |
|
Awesome - thank god, I was going through Primedice withdrawal!
|
|
|
|
Quickseller
Copper Member
Legendary
Offline
Activity: 2870
Merit: 2298
|
|
March 07, 2018, 10:07:34 PM |
|
Now, when you enter primedice website, you receive this message: well it’s certainly good they are rushing things just to get reopened.
|
|
|
|
DarkoReborn
Newbie
Offline
Activity: 12
Merit: 12
|
|
March 07, 2018, 10:17:14 PM Last edit: March 08, 2018, 02:55:46 AM by DarkoReborn |
|
Thank you all for patience and faith in Primedice, it was a rough couple of days. Support staff misses you all as well. See you all soon in chat. Darko
|
|
|
|
adaseb
Legendary
Offline
Activity: 3752
Merit: 1710
|
|
March 07, 2018, 10:21:58 PM |
|
I think the damage was contained inside Primedice.
However I am pretty sure they are many people who reuse the same password on multiple sites and they are the ones who are most at risk.
Hence, never use the same password for more than 1 place.
|
|
|
|
Batwingoz
Jr. Member
Offline
Activity: 71
Merit: 5
|
|
March 07, 2018, 10:42:11 PM |
|
I think the damage was contained inside Primedice.
However I am pretty sure they are many people who reuse the same password on multiple sites and they are the ones who are most at risk.
Hence, never use the same password for more than 1 place.
thank you we will keep that in mind
|
|
|
|
bestdoggy11
Newbie
Offline
Activity: 4
Merit: 0
|
|
March 08, 2018, 12:24:06 AM |
|
Hi Can you please add some to my accnt my accnt bestdoggy1 has funds stuck on primedice for 2 days.. I registered at stake under same username as this "bestdoggy11" Thx. A lot micro Hello I want to message you in private but i cannot
I tried to login to PD with my username and password, didn't work and told me to create a new account, tried to make one with one of my emails.
Changing passwords now however, will the hacker be able to see my withdrawl/deposit history on the account i tried to login to ?
Can the hacker see my IP address ?
thx.. i am worried
Stake.com is still intact you can send a support ticket on there and reference Primedice. Alternatively you can message the Primedice facebook page. I will be providing a new email soon for support related matters. I'm encouraging everyone to chill on the Stake.com chat for more rapid information while we wait for our registrar to sort this out. You can email Primedice support on support@stake.com too.
|
|
|
|
EnF0Rc3r
Full Member
Offline
Activity: 128
Merit: 100
M. PD&S
|
|
March 08, 2018, 12:36:18 AM |
|
Hi
Can you please add some to my accnt my accnt bestdoggy1 has funds stuck on primedice for 2 days..
I registered at stake under same username as this "bestdoggy11"
Thx. A lot micro
C'mon man, stop trying to abuse this. You're clearly creating new accounts to get some tips. It's lame.
|
|
|
|
bestdoggy11
Newbie
Offline
Activity: 4
Merit: 0
|
|
March 08, 2018, 12:54:40 AM |
|
Micro can check my balance with the same username on primedice, plus he would not deposit if it was 0 i wpuld think. And not like he will give 0.1 . Something to roll thrlugh which goes right back into the system anyway Hi
Can you please add some to my accnt my accnt bestdoggy1 has funds stuck on primedice for 2 days..
I registered at stake under same username as this "bestdoggy11"
Thx. A lot micro
C'mon man, stop trying to abuse this. You're clearly creating new accounts to get some tips. It's lame.
|
|
|
|
Stunna (OP)
Legendary
Offline
Activity: 3192
Merit: 1278
Primedice.com, Stake.com
|
|
March 08, 2018, 01:48:17 AM Last edit: March 08, 2018, 03:35:10 AM by Stunna |
|
We're working on getting the site back live. In the end we got lucky the attacker chose to put up a basic phishing site instead of launching a more sophisticated attack.
Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.
Here's what the attacker was able to do through his phishing site: -Collect Usernames/Passwords for users who logged in to his phishing site during the brief period of time it was up. -Display an obviously erroneous deposit address offering a 10% deposit bonus.
What attacker wasn't able to do -Grab user tokens/sessions (local storage isn't shared between http & https versions) -Access our DB, accounts, balances
We're taking our time to complete investigation and put things back up in a secure way. Currently we are unable to transfer the domain out of our registrar due to issues with them but given the way the account was targeted it shouldn't be possible for the hacker to regain access anymore (more on this later).
If you logged into "primedice.com" over the past 72h you should contact support and let them know. We will be disabling logins temporarily and prompting for password changes when we re-launch as a pre-caution.
|
|
|
|
athena2007
Newbie
Offline
Activity: 14
Merit: 0
|
|
March 08, 2018, 05:35:18 AM |
|
Ty for update.micro please confirm and if you cud tip me too... Ty We're working on getting the site back live. In the end we got lucky the attacker chose to put up a basic phishing site instead of launching a more sophisticated attack.
Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.
Here's what the attacker was able to do through his phishing site: -Send Usernames/Passwords for users who logged in during the brief period of time it was up. -Display an obviously erroneous deposit address offering a 10% deposit bonus.
What attacker wasn't able to do -Grab user tokens/sessions (local storage isn't shared between http & https versions) -Access our DB, accounts, balances
We're taking our time to complete investigation and put things back up in a secure way. Currently we are unable to transfer the domain out of our registrar due to issues with them but given the way the account was targeted it shouldn't be possible for the hacker to regain access anymore (more on this later).
We're working on getting the site back live. In the end we got lucky the attacker chose to put up a basic phishing site instead of launching a more sophisticated attack.
Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.
Here's what the attacker was able to do through his phishing site: -Send Usernames/Passwords for users who logged in during the brief period of time it was up. -Display an obviously erroneous deposit address offering a 10% deposit bonus.
What attacker wasn't able to do -Grab user tokens/sessions (local storage isn't shared between http & https versions) -Access our DB, accounts, balances
We're taking our time to complete investigation and put things back up in a secure way. Currently we are unable to transfer the domain out of our registrar due to issues with them but given the way the account was targeted it shouldn't be possible for the hacker to regain access anymore (more on this later).
Gosh does the begging ever stop.. leave admin to fix more important issues at hand,,, get a grip.
|
|
|
|
bestdoggy11
Newbie
Offline
Activity: 4
Merit: 0
|
|
March 08, 2018, 05:58:00 AM Last edit: March 08, 2018, 06:17:59 AM by bestdoggy11 |
|
No one is begging, since micro did mention he would be doing such for playrrs which he did and hats off to him, just asking that. There is no begging here and kindly folks leave your 2 cents to yourself. If micro does nor want to tip me since its just fair he tipped those effected then he will just say it himself, hey i cannot tip you. Get onto a different topic. Ty for update.micro please confirm and if you cud tip me too... Ty We're working on getting the site back live. In the end we got lucky the attacker chose to put up a basic phishing site instead of launching a more sophisticated attack.
Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.
Here's what the attacker was able to do through his phishing site: -Send Usernames/Passwords for users who logged in during the brief period of time it was up. -Display an obviously erroneous deposit address offering a 10% deposit bonus.
What attacker wasn't able to do -Grab user tokens/sessions (local storage isn't shared between http & https versions) -Access our DB, accounts, balances
We're taking our time to complete investigation and put things back up in a secure way. Currently we are unable to transfer the domain out of our registrar due to issues with them but given the way the account was targeted it shouldn't be possible for the hacker to regain access anymore (more on this later).
We're working on getting the site back live. In the end we got lucky the attacker chose to put up a basic phishing site instead of launching a more sophisticated attack.
Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.
Here's what the attacker was able to do through his phishing site: -Send Usernames/Passwords for users who logged in during the brief period of time it was up. -Display an obviously erroneous deposit address offering a 10% deposit bonus.
What attacker wasn't able to do -Grab user tokens/sessions (local storage isn't shared between http & https versions) -Access our DB, accounts, balances
We're taking our time to complete investigation and put things back up in a secure way. Currently we are unable to transfer the domain out of our registrar due to issues with them but given the way the account was targeted it shouldn't be possible for the hacker to regain access anymore (more on this later).
Gosh does the begging ever stop.. leave admin to fix more important issues at hand,,, get a grip.
|
|
|
|
Stunna (OP)
Legendary
Offline
Activity: 3192
Merit: 1278
Primedice.com, Stake.com
|
|
March 08, 2018, 08:27:50 AM |
|
We're back. We're waiting to move the domain off the registrar but we've put the site back. We do not believe the attackers can recover the domain back again but we will be keeping a careful eye on things. If you have a password set as a pre-caution we'll be requiring you to quickly swap it out when reloading https://primedice.com . You will be able to login again once you've changed your password. Welcome back guys! thanks for your incredible patience. Losing access to the domain felt like losing our first child, it was a rough last few days but we'll be getting things steady again and will be briefing you with the full story soon. If you experience any issues please contact live support. Verifying our SSL certificate: 8E:CA:D4:5A:48:0A:5C:F0:30:0B:40:29:E2:FB:2A:5C:D3:81:88:C6 SHA1 Back to working on PD5
|
|
|
|
Octoberian17
Newbie
Offline
Activity: 4
Merit: 0
|
|
March 08, 2018, 08:42:49 AM |
|
We're back. We're waiting to move the domain off the registrar but we've put the site back. We do not believe the attackers can recover the domain back again but we will be keeping a careful eye on things. If you have a password set as a pre-caution we'll be requiring you to quickly swap it out when reloading https://primedice.com . You will be able to login again once you've changed your password. Welcome back guys! thanks for your incredible patience. Losing access to the domain felt like losing our first child, it was a rough last few days but we'll be getting things steady again and will be briefing you with the full story soon. If you experience any issues please contact live support. Verifying our SSL certificate: 8E:CA:D4:5A:48:0A:5C:F0:30:0B:40:29:E2:FB:2A:5C:D3:81:88:C6 SHA1 Back to working on PD5 http://image.ibb.co/hUGwOS/Poster.pngThank you Stunna.. Welcome PD
|
|
|
|
BreachOfEuphoria
Newbie
Offline
Activity: 39
Merit: 0
|
|
March 08, 2018, 09:27:57 AM Last edit: March 08, 2018, 09:41:06 AM by BreachOfEuphoria |
|
Good job on getting the site back I wanted to log in to change my password. I'm getting a "Please contact support to recover your account" Edit:I got the message when trying to recover my password, I wrote you an e-mail. Can i recover my account by contacting you using this forum?
|
|
|
|
|