FreeBitco.in-$200 FreeBTC⭐Win Lambo🔥0.2BTC DailyJackpot🏆$32,500 Wager Contest

[ixi1234]

Ok, thx. Ill waiting...

@Hhampuz can you help me with my problem of not credited deposit?

Since few weeks several people have talked about a malicious script they've got from a plugin or something else. It replaces the actual deposit address provided by a fake one on their screen . They said they managed to easily block the evil script with Adblock but IMO it's better to double check with another device (a smartphone or another computer). Maybe you've been victim of this malicious script.

In logs I saw loading a strange js sript so I blocked it with browser plugin and then I managed to withdraw my funds.

+

Now everything works as usual, so I guess I will never know what happened.

- You are unable to understand the "js sript" that you have sucessfully "blocked"? Around here there are people who can help you.

Hey guys I have found the malicious js script on my end I'll paste in on pastebin

this is how its loaded in..... when I check under network in chrome screen shot is as below

https://i.ibb.co/YLBMyvq/Screenshot-2024-04-10-01-24-48.png

This is the pastebin of it https://pastebin.ai/eo0q78pbuj

I checked on two smartphones and this deposit address is available on all my devices. I checked this malicious script in my browser's log and it was not detected. Obviously, the money went to the fbc address, but for some reason they do not credit it to my balance. My account balance is still not credited and support continues to be unresponsive.
I took two screenshots from two of my smartphones.
I am waiting for a response from the support...
https://ibb.co/FKZzGZB
https://ibb.co/BcvdGqs

[blackmtl308]

Same here, I was playing HI/LO, and suddenly my balance went to 0.
I checked my emails, and I received this withdrawal confirmation, which I did not make, and to an unknown address:
https://ibb.co/0YCRT5h


Since I did not confirm, the payment was canceled and returned to my balance:
https://ibb.co/sP6Ccph

I changed my password, and enabled 2FA.

One day later, I decided to withdraw my entire balance, with the Instant option, using the address on my profile.
I did not receive a confirmation email, and the withdrawal was made direct, again to the unknown address, this is where I lost everything:
https://ibb.co/rsZmqDX


The strange thing is that this unknown address also appears in my deposit address:
https://ibb.co/9qJBZL2


ID: 51895659

[ixi1234]

Same here, I was playing HI/LO, and suddenly my balance went to 0.
I checked my emails, and I received this withdrawal confirmation, which I did not make, and to an unknown address:
https://ibb.co/0YCRT5h


Since I did not confirm, the payment was canceled and returned to my balance:
https://ibb.co/sP6Ccph

I changed my password, and enabled 2FA.

One day later, I decided to withdraw my entire balance, with the Instant option, using the address on my profile.
I did not receive a confirmation email, and the withdrawal was made direct, again to the unknown address, this is where I lost everything:
https://ibb.co/rsZmqDX


The strange thing is that this unknown address also appears in my deposit address:
https://ibb.co/9qJBZL2


ID: 51895659

It looks like fbc has been hacked or it's their serious internal site error. The saddest thing is that support is not responding in all sources

[codergeek]

...AFAIK when the 2FA option is enabled you don't receive email links to confirm your withdrawal requests...

If what you are saying is true then my freebitco.in account could be more vulnerable to an attack with 2FA enabled.

When 2FA was NOT enabled I was simply able to ignore the unauthorised payment request confirmation email and the bitcoin was refunded back to my account after an hour.

It's important to keep in mind that I had NOT made a payment request, so the attackers were able to trigger a payment request without any action on my part.

This happened immediately after I received an email notification that I had won tenth place in the referral wagering contest. I believe the attackers may have been using the wagering contest results to target contest winners.

Only after changing my password and enabling 2FA did I attempt a withdrawal. The attackers somehow managed not only to change the destination Bitcoin address, but also the withdrawal amount. Additionally, it seems they were able to hide the pending withdrawal notification on the freebitco.in site.

In summary, the attackers can hijack or trigger a payment request with or without any user interaction. They can set or change the destination Bitcoin address and the withdrawal amount with or without any user interaction. With 2FA enabled we do not receive a payment request confirmation email.

Note that if the attackers can change a withdrawal destination address then it is likely that they can also change a deposit destination address too.

Given the current situation, it is no longer safe to deposit or withdraw from freebitco.in

It may seem that my account could be less vulnerable with 2FA disabled as long as I do not attempt a withdrawal or confirm any unauthorised payment requests.

Without any further advice from support I am tempted to consider that my account may be more secure with 2FA disabled. However, this may allow the attackers to change my email or other personal info on my profile.

I'm damned if I do and damned if I don't.

The same thing that happened to @BayAreaCoins also happened to me. I responded to the situation exactly as he did

Until this situation is resolved and in light of other forum topics talking about the possibility that the freebitco.in html code has been infected with a malicious JavaScript (cash travel) I think my only option at this stage is to go to site settings and block JavaScript.

Unfortunately, with JavaScript disabled, i am unable to do anything with the site. The site menu doesn't work. The faucet doesn't work. Nothing works.

I don't have the tools, knowledge or skills to sniff packets, but I'm sure there are members and developers on this forum that do

[Pissedoff@u]

We could report it to the Federal Trade Commission (FTC) at www.reportfraud.ftc.gov. They specialize in investigating allegations related to consumer fraud, including fraud involving cryptocurrency exchanges or financial servicces we may also file a complaint with  local or state Consumer Protection Agency to bring the issue to their attention. Local or state law enforcement may also be interested in this type of matter, so we could report our concerns to their fraud or cybercrime units.

Actually I'm gonna do just that if I don't get my wager prize, hardware wallet, or reward points back in no more than 2 days this is absolutely ridiculous and if Quinn has to sit in prison for awhile so be it im tired of trying to track this man down  I'm serious Quinn you know what's going on and your hiding in the shadows but the light of justice will expose this darkness you chose to allow. 2 days Quinn.

USER ID 53314860

And I want my funds sent to this address


bc1q6rj7z0h5h7vnylk3t6k0hptlh69cqqdkrepfnn

[ixi1234]

We could report it to the Federal Trade Commission (FTC) at www.reportfraud.ftc.gov. They specialize in investigating allegations related to consumer fraud, including fraud involving cryptocurrency exchanges or financial servicces we may also file a complaint with  local or state Consumer Protection Agency to bring the issue to their attention. Local or state law enforcement may also be interested in this type of matter, so we could report our concerns to their fraud or cybercrime units.

Actually I'm gonna do just that if I don't get my wager prize, hardware wallet, or reward points back in no more than 2 days this is absolutely ridiculous and if Quinn has to sit in prison for awhile so be it im tired of trying to track this man down  I'm serious Quinn you know what's going on and your hiding in the shadows but the light of justice will expose this darkness you chose to allow. 2 days Quinn.

USER ID 53314860

And I want my funds sent to this address


bc1q6rj7z0h5h7vnylk3t6k0hptlh69cqqdkrepfnn

I'm joining you.
Send my funds to
bc1qncasm898lfrjmzks4aa69nv5td5khp4ek3jf6c
User ID 4548360

[slaman29]

I can confirm if you don't use 2FA you won't get a confirmation email, your withdraw gets right into the line and you wait. Usually around 15 minutes or faster if you choose instant like I always do.

And if you think this makes it easier to hack, bear in mind that my account had an unauthorized withdrawal several years ago WITHOUT 2FA, and WITHOUT email confirmation.

I use different password on email, and I saw it was never accessed, never got the email, so I never clicked confirm.

So trust me you want to use 2FA.

Also can all you guys please stop quoting the whole chat when you quote? Especially Stake guys you should know better

[Obanplanet]

Fair donation? Sorry, thank you!

Bitcoin: bc1qry0a98az7xlm452z36p8xxzzwmwp785w5hrjmj

Legacy bitcoin address: 19WMiXxQtBNaEYdPj97teDu9YfbxGs9aK8

Peace and love for community.

[codergeek]

I can confirm if you don't use 2FA you won't get a confirmation email...

What?

You are contradicting what Saint-loup, BayAreaCoins and myself have said.

Either you are wrong or we're all wrong.

Alternatively, 2FA on freebitco.in works differently for different users.

I always receive a payment request confirmation email when 2FA is NOT enabled.

I did NOT receive a payment request confirmation email when 2FA was enabled.

So does your account work differently to mine

[freebitco.in PR]

3-4-5 SUPER BONANZA is LIVE for 48 hours!

Get 3x Golden Tickets, 4x Lottery Tickets, and 5x Reward Points for your wagers!

3X GOLDEN TICKETS: Get 3 times the Golden Tickets every time you wager or bet a total of 500,000 satoshi (0.005 BTC)

4X LOTTERY TICKETS: Earn 4 Lottery Tickets for every single one you earn through Multiply BTC or Betting and Win $7,500 this Sunday

5X REWARD POINTS: Get 5 Reward Points for Each Earned via Multiply BTC or Betting. Choose between Exciting Prizes or BTC Conversion

[NABiT]

I can confirm if you don't use 2FA you won't get a confirmation email...

I always receive a payment request confirmation email when 2FA is NOT enabled.

I did NOT receive a payment request confirmation email when 2FA was enabled.

Same here, I tried a couple of withdrawals recently using 2fa and just got the notification at the top of several Freebitco pages of a pending withdrawal

I used the slow option so I was wondering if that makes a difference, doubt it though.

[Saint-loup]

I can confirm if you don't use 2FA you won't get a confirmation email...

What?

You are contradicting what Saint-loup, BayAreaCoins and myself have said.

Either you are wrong or we're all wrong.

Alternatively, 2FA on freebitco.in works differently for different users.

I always receive a payment request confirmation email when 2FA is NOT enabled.

I did NOT receive a payment request confirmation email when 2FA was enabled.

So does your account work differently to mine

I'm surprised too, but maybe he made a mistake when he wrote his message and he wanted to say the opposite instead? It works in the same way as you, for me. Except I receive a "payment" email once the withdrawal has been processed including a link towards the transaction, even when the 2FA option is enabled. So if a hacker manages to withdraw my funds to any address I would see it in my email box at least, even if it's too late to do something against it (if the system is still working normally though).

[Fivestar4everMVP]

I can confirm if you don't use 2FA you won't get a confirmation email...

I always receive a payment request confirmation email when 2FA is NOT enabled.

I did NOT receive a payment request confirmation email when 2FA was enabled.

Same here, I tried a couple of withdrawals recently using 2fa and just got the notification at the top of several Freebitco pages of a pending withdrawal

I used the slow option so I was wondering if that makes a difference, doubt it though.

If what exactly makes a difference? You using a slow withdrawal option or that you receive a payment request confirmation?

Anyways, sorry if I misunderstood you though, but if what you are asking is if you using a slow option in your withdrawal request makes a any difference, then you should be rest assured that it does definitely, the slow option simply means that you will be charged less bitcoins as withdrawal fees, which is used to settle the bitcoin miners for a confirmation of your transaction, but also on the other hand, it also means that you transaction will stay on the blockchain a bit longer before it gets confirmed; which is as a result of the low fees you paid for a confirmation.
So, in other words, we can say that, the higher the fees you pay, the faster your transaction get confirmed on the blockchain as soon as when the site processes and sends the transaction, and then, the lower the fees, the more time it will take to get the transaction confirmed after the site processes and sends the transaction.
Hope this makes sense though.

[NABiT]

I can confirm if you don't use 2FA you won't get a confirmation email...

I always receive a payment request confirmation email when 2FA is NOT enabled.

I did NOT receive a payment request confirmation email when 2FA was enabled.

Same here, I tried a couple of withdrawals recently using 2fa and just got the notification at the top of several Freebitco pages of a pending withdrawal

I used the slow option so I was wondering if that makes a difference, doubt it though.

If what exactly makes a difference? You using a slow withdrawal option or that you receive a payment request confirmation?

Thanks, I was just wondering about slaman29 saying "I can confirm if you don't use 2FA you won't get a confirmation email..." but I'm now thinking it's probably as Saint-loup suggests that "maybe he made a mistake when he wrote his message and he wanted to say the opposite instead?"

[codergeek]

I can confirm if you don't use 2FA you won't get a confirmation email...

I always receive a payment request confirmation email when 2FA is NOT enabled.

I did NOT receive a payment request confirmation email when 2FA was enabled.

Same here, I tried a couple of withdrawals recently using 2fa and just got the notification at the top of several Freebitco pages of a pending withdrawal

I used the slow option so I was wondering if that makes a difference, doubt it though.

The payment request confirmation email provides an additional layer of security to accounts that have not opted to enable 2FA.

I don't understand why this layer is removed for accounts that have 2FA enabled.

[codergeek]

I can confirm if you don't use 2FA you won't get a confirmation email...

What?

You are contradicting what Saint-loup, BayAreaCoins and myself have said.

Either you are wrong or we're all wrong.

Alternatively, 2FA on freebitco.in works differently for different users.

I always receive a payment request confirmation email when 2FA is NOT enabled.

I did NOT receive a payment request confirmation email when 2FA was enabled.

So does your account work differently to mine

I'm surprised too, but maybe he made a mistake when he wrote his message and he wanted to say the opposite instead? It works in the same way as you, for me. Except I receive a "payment" email once the withdrawal has been processed including a link towards the transaction, even when the 2FA option is enabled. So if a hacker manages to withdraw my funds to any address I would see it in my email box at least, even if it's too late to do something against it (if the system is still working normally though).

Yes. I always receive a payment sent confirmation email with or without 2FA.

I think the payment request confirmation email should be sent regardless whether 2FA is enabled or not.

[ixi1234]

I guess the support won't help me. It turns out that fbc has problems with depositing and withdrawing funds on its side and does not want to correct its mistakes. I guess my money went to them forever. The moderator should change this project as a scam

[Saint-loup]

Yes. I always receive a payment sent confirmation email with or without 2FA.

I think the payment request confirmation email should be sent regardless whether 2FA is enabled or not.

Maybe they wanted to avoid people being locked out if they've lost their email box password or if their email account has been closed for inactivity or something else. I don't know. On some exchanges you can cumulate up to 3 confirmation options : 2FA code, link through email and code through SMS or Telegram. Unfortunately, if you've enabled the 3 options together and you've lost access to one of them, you won't be able to withdraw your funds anymore. They maybe wanted to avoid that. Anyway, now we've seen that hackers are attacking users' deposits and withdrawals through malicious scripts or through other ways, they should at least add an option allowing it IMO.

[tranthidung]

On some exchanges you can cumulate up to 3 confirmation options : 2FA code, link through email and code through SMS or Telegram. Unfortunately, if you've enabled the 3 options together and you've lost access to one of them, you won't be able to withdraw your funds anymore.

I did not know exchanges that allow to set up 3 confirmations together for account security and withdrawals, what I know is you can choose confirmation code through: emails and 2FA.

2FA itself can be a code from an authentication application or SMS code/ Telegram.

Did I miss something like three layers of protections, not 2 layers?

[Drazen2003]

It should be a mandatory measure to receive an email before making a withdrawal to confirm.

Freebitcoin MFA doesn't work.

This morning I was robbed (like other users) after manually filling the amount of funds to withdraw, my kraken address and 2FA.
After clicking the Withdraw button, but all the funds (all) were sent to another address and I couldn't longer do anything.

Some users are being hacked and freebinco.in does nothing, nor does it respond to emails. All is documented here: https://bitcointalk.org/index.php?topic=5492456.0

My deposit address has "changed" suddenly and i cannot recover the mine one. This address is the one the hacker has sent all my funds.

And i have tested on PC Chrome, PC Brave, PC Edge, Mobile Chrome, Mobile Samsung and in all cases my account have been hached although I have 2FA and making logout and login but it is easy hacked.
Another test has been using the same PC and navigator with a friend and he has not been hacked. He sees all his adresses correct then it is not a PC or virus problem, it is a security freebitco.in issue.