Primedice.com | Since 2013 | Longest Running Crypto Casino | 113 BTC Jackpot!

[factor280]

Primedice has been around forever, I dont think this is a huge issue. Should be back up soon.

[1714125612]

1714125612

[1714125612]

1714125612

[stsms06]

How high is the damage?

[Coin Dropper]

I think there's not much damage. Primedice will be back soon!

[:wq]

https://forum.primedice.com

I have restored the forum. We are gradually restoring all services today, thank you everyone for your patience.

[lite]

How high is the damage?

I think the damage isn't high, people were quickly got to know about the phishing site and also reported it to cloudflare, so they they blacklisted the phishing version of PD and showed warnings when people visited PD. from phishing the attacker was only able to get around 0.054 BTC[1]. i'm not sure how much these scammer/attackers were able steal by emailing users impersonating as PD's support.

[1] https://blockchain.info/address/1pFh3yqXKw9K45WHx5pvmt4bGnu4st8af

https://forum.primedice.com

I have restored the forum. We are gradually restoring all services today, thank you everyone for your patience.

That's great!

[xMossx]

https://forum.primedice.com

I have restored the forum. We are gradually restoring all services today, thank you everyone for your patience.

Glad to hear it.

[wtfjim]

Awesome - thank god, I was going through Primedice withdrawal!

[Quickseller]

Now, when you enter primedice website, you receive this message:

well it’s certainly good they are rushing things just to get reopened.

[DarkoReborn]

Thank you all for patience and faith in Primedice, it was a rough couple of days.

Support staff misses you all as well.

See you all soon in chat.

Darko

[adaseb]

I think the damage was contained inside Primedice.

However I am pretty sure they are many people who reuse the same password on multiple sites and they are the ones who are most at risk.

Hence, never use the same password for more than 1 place.

[Batwingoz]

I think the damage was contained inside Primedice.

However I am pretty sure they are many people who reuse the same password on multiple sites and they are the ones who are most at risk.

Hence, never use the same password for more than 1 place.

thank you we will keep that in mind

[bestdoggy11]

Hi

Can you please add some to my accnt my accnt bestdoggy1 has funds stuck on primedice for 2 days..

I registered at stake under same username as this "bestdoggy11"

Thx. A lot micro

Hello I want to message you in private but i cannot

I tried to login to PD with my username and password, didn't work and told me to create a new account, tried to make one with one of my emails.

Changing passwords now however, will the hacker be able to see my withdrawl/deposit history on the account i tried to login to ?

Can the hacker see my IP address ?

thx.. i am worried

Stake.com is still intact you can send a support ticket on there and reference Primedice. Alternatively you can message the Primedice facebook page.

I will be providing a new email soon for support related matters.

I'm encouraging everyone to chill on the Stake.com chat for more rapid information while we wait for our registrar to sort this out.

You can email Primedice support on support@stake.com too.

[EnF0Rc3r]

Hi

Can you please add some to my accnt my accnt bestdoggy1 has funds stuck on primedice for 2 days..

I registered at stake under same username as this "bestdoggy11"

Thx. A lot micro

C'mon man, stop trying to abuse this. You're clearly creating new accounts to get some tips. It's lame.

[bestdoggy11]

Micro can check my balance with the same username on primedice, plus he would not deposit if it was 0 i wpuld think. And not like he will give 0.1 . Something to roll thrlugh which goes right back into the system anyway

Hi

Can you please add some to my accnt my accnt bestdoggy1 has funds stuck on primedice for 2 days..

I registered at stake under same username as this "bestdoggy11"

Thx. A lot micro

C'mon man, stop trying to abuse this. You're clearly creating new accounts to get some tips. It's lame.

[Stunna]

We're working on getting the site back live. In the end we got lucky the attacker chose to put up a basic phishing site instead of launching a more sophisticated attack.

Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.


Here's what the attacker was able to do through his phishing site:
-Collect Usernames/Passwords for users who logged in to his phishing site during the brief period of time it was up.
-Display an obviously erroneous deposit address offering a 10% deposit bonus.

What attacker wasn't able to do
-Grab user tokens/sessions (local storage isn't shared between http & https versions)
-Access our DB, accounts, balances


We're taking our time to complete investigation and put things back up in a secure way. Currently we are unable to transfer the domain out of our registrar due to issues with them but given the way the account was targeted it shouldn't be possible for the hacker to regain access anymore (more on this later).

If you logged into "primedice.com" over the past 72h you should contact support and let them know. We will be disabling logins temporarily and prompting for password changes when we re-launch as a pre-caution.

[athena2007]

Ty for update.micro please confirm and if you cud tip me too...

Ty

We're working on getting the site back live. In the end we got lucky the attacker chose to put up a basic phishing site instead of launching a more sophisticated attack.

Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.


Here's what the attacker was able to do through his phishing site:
-Send Usernames/Passwords for users who logged in during the brief period of time it was up.
-Display an obviously erroneous deposit address offering a 10% deposit bonus.

What attacker wasn't able to do
-Grab user tokens/sessions (local storage isn't shared between http & https versions)
-Access our DB, accounts, balances


We're taking our time to complete investigation and put things back up in a secure way. Currently we are unable to transfer the domain out of our registrar due to issues with them but given the way the account was targeted it shouldn't be possible for the hacker to regain access anymore (more on this later).

We're working on getting the site back live. In the end we got lucky the attacker chose to put up a basic phishing site instead of launching a more sophisticated attack.

Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.


Here's what the attacker was able to do through his phishing site:
-Send Usernames/Passwords for users who logged in during the brief period of time it was up.
-Display an obviously erroneous deposit address offering a 10% deposit bonus.

What attacker wasn't able to do
-Grab user tokens/sessions (local storage isn't shared between http & https versions)
-Access our DB, accounts, balances


We're taking our time to complete investigation and put things back up in a secure way. Currently we are unable to transfer the domain out of our registrar due to issues with them but given the way the account was targeted it shouldn't be possible for the hacker to regain access anymore (more on this later).

Gosh does the begging ever stop.. leave admin to fix more important issues at hand,,, get a grip.

[bestdoggy11]

No one is begging, since micro did mention he would be doing such for playrrs which he did and hats off to him, just asking that. There is no begging here and kindly folks leave your 2 cents to yourself. If micro does nor want to tip me since its just fair he tipped those effected then he will just say it himself, hey i cannot tip you.

Get onto a different topic.

Ty for update.micro please confirm and if you cud tip me too...

Ty

We're working on getting the site back live. In the end we got lucky the attacker chose to put up a basic phishing site instead of launching a more sophisticated attack.

Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.


Here's what the attacker was able to do through his phishing site:
-Send Usernames/Passwords for users who logged in during the brief period of time it was up.
-Display an obviously erroneous deposit address offering a 10% deposit bonus.

What attacker wasn't able to do
-Grab user tokens/sessions (local storage isn't shared between http & https versions)
-Access our DB, accounts, balances


We're taking our time to complete investigation and put things back up in a secure way. Currently we are unable to transfer the domain out of our registrar due to issues with them but given the way the account was targeted it shouldn't be possible for the hacker to regain access anymore (more on this later).

We're working on getting the site back live. In the end we got lucky the attacker chose to put up a basic phishing site instead of launching a more sophisticated attack.

Players only lost 0.05 BTC as a result of this. If you made a deposit to the phishing site you must sign the address you sent from to claim a refund from us.


Here's what the attacker was able to do through his phishing site:
-Send Usernames/Passwords for users who logged in during the brief period of time it was up.
-Display an obviously erroneous deposit address offering a 10% deposit bonus.

What attacker wasn't able to do
-Grab user tokens/sessions (local storage isn't shared between http & https versions)
-Access our DB, accounts, balances


We're taking our time to complete investigation and put things back up in a secure way. Currently we are unable to transfer the domain out of our registrar due to issues with them but given the way the account was targeted it shouldn't be possible for the hacker to regain access anymore (more on this later).

Gosh does the begging ever stop.. leave admin to fix more important issues at hand,,, get a grip.

[Stunna]

We're back. We're waiting to move the domain off the registrar but we've put the site back. We do not believe the attackers can recover the domain back again but we will be keeping a careful eye on things.

If you have a password set as a pre-caution we'll be requiring you to quickly swap it out when reloading https://primedice.com . You will be able to login again once you've changed your password.


Welcome back guys! thanks for your incredible patience. Losing access to the domain felt like losing our first child, it was a rough last few days but we'll be getting things steady again and will be briefing you with the full story soon. If you experience any issues please contact live support.


Verifying our SSL certificate: 8E:CA:D4:5A:48:0A:5C:F0:30:0B:40:29:E2:FB:2A:5C:D3:81:88:C6   SHA1


Back to working on PD5  

[Octoberian17]

We're back. We're waiting to move the domain off the registrar but we've put the site back. We do not believe the attackers can recover the domain back again but we will be keeping a careful eye on things.

If you have a password set as a pre-caution we'll be requiring you to quickly swap it out when reloading https://primedice.com . You will be able to login again once you've changed your password.


Welcome back guys! thanks for your incredible patience. Losing access to the domain felt like losing our first child, it was a rough last few days but we'll be getting things steady again and will be briefing you with the full story soon. If you experience any issues please contact live support.


Verifying our SSL certificate: 8E:CA:D4:5A:48:0A:5C:F0:30:0B:40:29:E2:FB:2A:5C:D3:81:88:C6   SHA1


Back to working on PD5  
http://image.ibb.co/hUGwOS/Poster.png

Thank you Stunna.. Welcome PD

[BreachOfEuphoria]

Good job on getting the site back  

I wanted to log in to change my password.
I'm getting a "Please contact support to recover your account"

Edit:I got the message when trying to recover my password, I wrote you an e-mail.

Can i recover my account by contacting you using this forum?