Fortunejack is under investigation

[NorwegianNoob]

Hello

This is my story with fortunejack and why is under investigation by the police.

I got hacked the 2018-04-29 19:18:40 https://blockchain.info/address/17uqd7epvrYBxV6uES5sEYJ3JKXacgZERY

This transaction got out from my Binance account, you can see it is 25BTC
When this happened Binance went down from my pc https://gyazo.com/8c1e5c9f2621b0e243dbeaa066c2357d
I also got the same problem with outlook


I have a suspicion that it could be https://fortunejack.com/ That could have given me the virus from there support chat

My suspection is builded on the fact that on 10.04. the support shared a link:
https://gyazo.com/91c904d91bd2f8ed6519fb5ac3d96b05
https://gyazo.com/32af052983afae9863311219b60b1196
Link given to me by the support

Can contain virus DO NOT OPEN:
http://www.xn--screensht-sl7d.net/i/j5DkgThk.jpg

I pressed the link and it took me to a picture and when I pressed zoom it auto dowloaded a file to my computer. After I runned Malware antivirus that did not detect anything and I did not think more about it.

In later times I have found an try to log into my gmail account on the 11.04 that is not from me: I have a suspicion that the virus was then live on my computer and they had my password.

I have found an entery into my mail by athis IP 46.21.147.117 that seems to be a proxy
https://gyazo.com/ed8c6d15aef0548f0e33a69f24c4db0c


I didn’t have my Binance account verified so big withdrawls was not possible at the time and it seems like they have waited for it to get verified before doing the move. 

When confronting the support on discord with this, they just banned me. I have tried to send them emails aswell, but they don't replay to me anymore.

I have still 1.6BTC locked at there site for nearly 1 month: https://gyazo.com/4a19fc274083c7dbb10d8df6d0fb9056

I have been in contact with the police and they are going through all the files on my pc to confirming I got a virus downloaded from this link. If that is the case I am going to sue Fortunejack.

I will advice EVERYONE to stay off this site

I have more evidence that I can't share at this time, updates will come shortly

[game-protect]

Why does FortuneJack deny your 1.6 BTC withdrawal?

[NorwegianNoob]

Why does FortuneJack deny your 1.6 BTC withdrawal?

https://gyazo.com/b39f67d808dc3487690a73a9e9c8c608

So called "security reasons" they are not giving out any information about what security reasons they have. And supposedly they can close the ticket before actually doing anything with it.

[TMAN]

You sound a little bit crazy.

Would you please post the crime reference number and country, I will then highlight this thread to FJ so they can help the police immediately clear the brands name.

[iluvbitcoins]

So, support sent you a screenshot?
The image was downloaded and you think it was a virus?

I mean, you can send the file for analysis to some of the legit Antivirus labs and see what's up when they get back to you.

[RajeshKarwa]

Hello

This is my story with fortunejack and why is under investigation by the police.

I got hacked the 2018-04-29 19:18:40 https://blockchain.info/address/17uqd7epvrYBxV6uES5sEYJ3JKXacgZERY

This transaction got out from my Binance account, you can see it is 25BTC
When this happened Binance went down from my pc https://gyazo.com/8c1e5c9f2621b0e243dbeaa066c2357d
I also got the same problem with outlook


I have a suspicion that it could be https://fortunejack.com/ That could have given me the virus from there support chat

My suspection is builded on the fact that on 10.04. the support shared a link:
https://gyazo.com/91c904d91bd2f8ed6519fb5ac3d96b05
https://gyazo.com/32af052983afae9863311219b60b1196
Link given to me by the support

Can contain virus DO NOT OPEN:
http://www.xn--screensht-sl7d.net/i/j5DkgThk.jpg

I pressed the link and it took me to a picture and when I pressed zoom it auto dowloaded a file to my computer. After I runned Malware antivirus that did not detect anything and I did not think more about it.

In later times I have found an try to log into my gmail account on the 11.04 that is not from me: I have a suspicion that the virus was then live on my computer and they had my password.

I have found an entery into my mail by athis IP 46.21.147.117 that seems to be a proxy
https://gyazo.com/ed8c6d15aef0548f0e33a69f24c4db0c


I didn’t have my Binance account verified so big withdrawls was not possible at the time and it seems like they have waited for it to get verified before doing the move.  

When confronting the support on discord with this, they just banned me. I have tried to send them emails aswell, but they don't replay to me anymore.

I have still 1.6BTC locked at there site for nearly 1 month: https://gyazo.com/4a19fc274083c7dbb10d8df6d0fb9056

I have been in contact with the police and they are going through all the files on my pc to confirming I got a virus downloaded from this link. If that is the case I am going to sue Fortunejack.

I will advice EVERYONE to stay off this site

I have more evidence that I can't share at this time, updates will come shortly

I wish you good luck. Hope you will get justice. Whatever matter is .. but fortunejack should not ban you from contacting them till this matter sort out. FJ is the biggest casino and this type of bans are not acceptable. They must hold your account for investigation but banning is not a good move. It makes suspicious.

[TMAN]

You sound a little bit crazy.

Would you please post the crime reference number and country, I will then highlight this thread to FJ so they can help the police immediately clear the brands name.

Hey I am trying to help you here OP, can you please post or PM me the police report details so this gets dealt with now.

[HCP]

Seems like that "screenshot" website is actually one of those Unicode fake domain "scams"... If you look REALLY closely at the screenshot of the chat window (https://gyazo.com/32af052983afae9863311219b60b1196) you can see the "o" in screenshot actually has a "dot" underneath it:


so the link is actually: http : //www.xn--screensht-sl7d.net/i/j5DkgThk.jpg

Which obviously attempts to download and install some sort of malware...

[TMAN]

Seems like that "screenshot" website is actually one of those Unicode fake domain "scams"... If you look REALLY closely at the screenshot of the chat window (https://gyazo.com/32af052983afae9863311219b60b1196) you can see the "o" in screenshot actually has a "dot" underneath it:


so the link is actually: http : //www.xn--screensht-sl7d.net/i/j5DkgThk.jpg

Which obviously attempts to download and install some sort of malware...

But the sites live support wasn't working then as I understand it.

[NorwegianNoob]

You sound a little bit crazy.

Would you please post the crime reference number and country, I will then highlight this thread to FJ so they can help the police immediately clear the brands name.

No, I will not share any information from the police with FJ staff as I don't see them trustworthy. But I think we all would like to now some more about the security breach on your servers, as I can't find any tweet or anything about this case other then the private msg you guys sent me: https://gyazo.com/f76354542d2f4a38fc1293d6131829b7

[NorwegianNoob]

I wish you good luck. Hope you will get justice. Whatever matter is .. but fortunejack should not ban you from contacting them till this matter sort out. FJ is the biggest casino and this type of bans are not acceptable. They must hold your account for investigation but banning is not a good move. It makes suspicious.

Thanks, so do I

[NorwegianNoob]

Seems like that "screenshot" website is actually one of those Unicode fake domain "scams"... If you look REALLY closely at the screenshot of the chat window (https://gyazo.com/32af052983afae9863311219b60b1196) you can see the "o" in screenshot actually has a "dot" underneath it:


so the link is actually: http : //www.xn--screensht-sl7d.net/i/j5DkgThk.jpg

Which obviously attempts to download and install some sort of malware...

Yes, I got downloaded a zipfile from this with the picture you can see screenshot with fortunejack picture( https://gyazo.com/91c904d91bd2f8ed6519fb5ac3d96b05 the on the bottom) , I suspect it can be a trojan so they have been able to control my pc for a long time. Police is going through the files as we speak to confirm this.

[NorwegianNoob]

Seems like that "screenshot" website is actually one of those Unicode fake domain "scams"... If you look REALLY closely at the screenshot of the chat window (https://gyazo.com/32af052983afae9863311219b60b1196) you can see the "o" in screenshot actually has a "dot" underneath it:


so the link is actually: http : //www.xn--screensht-sl7d.net/i/j5DkgThk.jpg

Which obviously attempts to download and install some sort of malware...

But the sites live support wasn't working then as I understand it.

I am sure they have a support record off all the chats so will be easy for FJ staff to see that this took place

[TMAN]

I am sure they have a support record off all the chats so will be easy for FJ staff to see that this took place

pretty sure you are a windup merchant or possibly the person who actually hacked the servers..

Either way your noise is not likely to convince people here.

[HCP]

Honestly, I'm beginning to wonder if NorweiganNoob got phished? Fake FJ site, with fake "live chat" providing the malware...

In any case, their claim that the malware was on the FJ site is obviously incorrect, as the malware is hosted elsewhere.

Can't comment on the legitimacy of any of the other claims... As we're not privy to the server/chat logs and IPs etc...

Curious as to what jurisdiction they're in where the police actually care about imaginery internet money?

[NorwegianNoob]

Honestly, I'm beginning to wonder if NorweiganNoob got phished? Fake FJ site, with fake "live chat" providing the malware...

In any case, their claim that the malware was on the FJ site is obviously incorrect, as the malware is hosted elsewhere.

Can't comment on the legitimacy of any of the other claims... As we're not privy to the server/chat logs and IPs etc...

Curious as to what jurisdiction they're in where the police actually care about imaginery internet money?

I have bookmarked the sites I use often so the link should have taken me to the correct site.

[LinuxETC]

I am sure they have a support record off all the chats so will be easy for FJ staff to see that this took place

pretty sure you are a windup merchant or possibly the person who actually hacked the servers..

Either way your noise is not likely to convince people here.

Knowing the individual ("NorwegianNoob") posting here, that is not the case of being neither a merchant or hacker, and I will vouch accordingly.  This individual has a proper and positive reputation in the MasterNode Discord community as do I.

That said, most proper support/ITSM systems do have and keep records of support incidents in full.  So if the FortuneJack staff does not want to actually review said records/case accordingly and just spew FUD with no backing, that just blemishes FortuneJack as an entity as a whole.

For reference, I am not a customer/vendor of FortuneJack.  I am just a crypto/MasterNode investor as well as tech minded type (reference my past posting on "StarMiner" from when Scrypt ASICs first came to light) who is a Linux and Open Source enthusiast.

FWIW.

[LinuxETC]

Seems like that "screenshot" website is actually one of those Unicode fake domain "scams"... If you look REALLY closely at the screenshot of the chat window (https://gyazo.com/32af052983afae9863311219b60b1196) you can see the "o" in screenshot actually has a "dot" underneath it:


so the link is actually: http : //www.xn--screensht-sl7d.net/i/j5DkgThk.jpg

Which obviously attempts to download and install some sort of malware...

@HCP: Nice find on the Unicode spoof!  Kudos!  

@FortuneJack staff:
Care to explain such perhaps in all fairness since it seems your LiveChat was functioning?  If it was "offline" (I believe noted elsewhere), then care to explain how your network and infrastructure was compromised including the LiveChat for a third party to perform such?

Then again, we can also let proper law enforcement agency forensics do their job as well.  

[Hhampuz]

First of all. FJ has a signature campaign here on the forum, this does not mean that people that have the FJ Avatar or Signature work directly at fortunjack, we help out marketing it.

@OP, when you reached out to me as soon as this had happened I quickly went to FJ and could see that there were no options to open the livechat. Not to mention that prior to this there had been an announcement in discord that live chat was down (You were there, you should of seen it).

I really can't take this seriously as of now as I can't even confirm that the screenshot you've shared of the live support is legit.

[NorwegianNoob]

First of all. FJ has a signature campaign here on the forum, this does not mean that people that have the FJ Avatar or Signature work directly at fortunjack, we help out marketing it.

@OP, when you reached out to me as soon as this had happened I quickly went to FJ and could see that there were no options to open the livechat. Not to mention that prior to this there had been an announcement in discord that live chat was down (You were there, you should of seen it).

I really can't take this seriously as of now as I can't even confirm that the screenshot you've shared of the live support is legit.

Please show me the announcement that the chat was down.

https://gyazo.com/ae158f9603b34fdc2592438b09cc17d9 Care to explain this ? I can't access live chat from my IP but I can from TOR-web

Referring to LinuxETC post:

@FortuneJack staff:
Care to explain such perhaps in all fairness since it seems your LiveChat was functioning?  If it was "offline" (I believe noted elsewhere), then care to explain how your network and infrastructure was compromised including the LiveChat for a third party to perform such?