Warnings! A new wave of attacks on renowned casinos.

[hd49728]

Within recent days, I read some posts/ threads that mentioned about attacks on renowned casinos: BitVest, PrimeDice.

BitVest
Hackers tried to scam others with fake BitVest give aways:
⚠️ How Scammer tried to Hack my Bitcointalk and how to Protect yourself?⚠️
Appreciated findings and warnings of dkbit98

Thanks.

One more thing I noticed, after I entered fake account information with password FU.K YOUXXX
is that it redirects me to regular Bitvest Plinko Signature Campaign after it takes my 'login details'
https://bitcointalk.org/index.php?topic=5088858.0

Maybe lightlord, creator of this topic, should be contacted regarding this,
just that he is aware of the situation.
They are probably using other random links, with malicious attachments.

One more way to super protect is to install browser extension called NoScript, but it is a bit complex.

PrimeDice
Attackers use fake domain name.

Someone's selling a domain, primedice.net, watch our for phishers: https://bitcointalk.org/index.php?topic=5173150.0

He also posted about making his own dice site, it'd be interesting to know if he's managed to start one: https://archive.is/pXbFI

Maybe more accounts from same owners might do this in coming days, to attack BitVest, PrimeDice, and other casinos that have high traffic and huge users.

[1715390236]

1715390236

[1715390236]

1715390236

[1715390236]

1715390236

[1715390236]

1715390236

[adaseb]

I looked into the Primedice.net domain whois and that domain was registered shortly after Primedice.com was registered (about 6 years ago).

Without paying a premium to look-up the whois info, its hard to tell if its the original owner. But I am assuming somebody back in 2013 was simply registering a bunch of domain names just in case a casino site became popular and eventually decided to do some phishing attacks on it.

So I am guessing that more and more of these domain will eventually become available for sale and I don't think Primedice.net is the only one out there.

[Flagship11]

Just make certain you check the URL before opening a account and depositing.

[imstillthebest]

Just make certain you check the URL before opening a account and depositing.

yes this is the best thing to do to avoid phishers   . make sure to double check the domain name if they are correctly spelled but if your not sure you can do a quick research on this site and also on google as well  .  fake sites are also obvious because their sites design was bad and seems to be pretty cheap  but why they will built a good and expensive one if they will going to shut it down later on  ?

[Haunebu]

Thanks for the heads up op. I usually play on Primedice now and then which is why this is news to me. I have heard of these kinds of scams before(Bittrex fake site etc) where the biggest error is not checking the website name and security properly.

This is why I always check these things whenever I deposit my money on these websites just to make sure everything is fine and I urge others to do the same.

[joniboini]

why they will built a good and expensive one if they will going to shut it down later on  ?

A pro liar will make everything looks great to scam people. And it's not that hard to make a website with a beautiful page. You can do a really nice design with free web builder such as Elementor, Envato, and so on. They're free to use even though it comes with a premium package. So, it's not that costly actually.

[drwhobox]

Hackers tried to scam others with fake BitVest give aways:
⚠️ How Scammer tried to Hack my Bitcointalk and how to Protect yourself?⚠️

This kind of giveaway scammers are very active in twitter. Often you will see giveaway to comment and retweet the post then deposit x amount of BTC to get 2x or 3x in return

Scammers are always very active.

[DaveF]

If you take a look here https://whoisrequest.com/history/ you can see that primedice.net name expired 23-June-2016 and was then re-registered by someone in October. The timing works as the domain was 1st registered in May 2013 so if they bought it for 3 years and they did not renew 3 years and 1 month later it drops.

Someone then picked it up in October 2016 and it's been active since.
It's now at namecheap. Drop them a line and let them know about the scamming:

Registrar: NAMECHEAP INC
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107

-Dave

[darklus123]

The first one is actually the dangerous one because of using the click bait link. Tho, that was sent via pmed.  I think it has nothing to do with the gambling site names. It just happens maybe because this topics are getting a lot of attention from the targeted rank accounts of the hacker.

The 2nd one is actually just hilarious and to be very honest it can be really too dumb to even think that it was legit.

[kryptqnick]

Just make certain you check the URL before opening a account and depositing.

And this is something one should do every time, even if phishing websites are not frequent. I usually use the links that I already used (when browser already knows it) or bookmarks. This can help to avoid suspicious websites, but of course, there's no protection from hackers that attack the original websites. Not having much money in a casino or on an exchange website for a long period of time seems to be one of the main rules, though. There's less chance of having problems with a good wallet than an intermediary like casino/exchange, who often even warn people not to store their money there.

[DoublerHunter]

So essentially a phishing attempt with a really good looking site, you just need to remember the correct domain. I suggest you use a password manager that fills in your user names and password. This would not auto fill or prompt on a phishing site, this gives you a heads up and if it's generated let site you'd have to go into your manager to grab it.

^ That is an easy way to heads up that always remember the domain name or much better to bookmark the website. Nowadays there are a lot of scammers waiting to a noob one that the target to be fooled by them. Always check the URL when clicking a website even a casino that lure people by having giveaways to click you a bait website as OP said. Nevertheless, we should be careful about those PM'ed links that look suspicious.

[Artemis3]

So essentially a phishing attempt with a really good looking site, you just need to remember the correct domain. I suggest you use a password manager that fills in your user names and password. This would not auto fill or prompt on a phishing site, this gives you a heads up and if it's generated let site you'd have to go into your manager to grab it.

^ That is an easy way to heads up that always remember the domain name or much better to bookmark the website. Nowadays there are a lot of scammers waiting to a noob one that the target to be fooled by them. Always check the URL when clicking a website even a casino that lure people by having giveaways to click you a bait website as OP said. Nevertheless, we should be careful about those PM'ed links that look suspicious.

Indeed, with most passwords managers you get the chance to store the url as well, so you can actually open the site FROM the password manager (which simply passes the argument to your browser).

Phishing attacks are on the wild, and people should be double careful. Also, never, ever repeat passwords, one more reason to use a password manager with a very good password to open it, preferably from a secured os/pc. Can't stress that enough, windows won't cut it. Go linux or bsd, that and the usual browser (ie. chrome) works for 90% of internet users out there.

A good password manager is not paid, and is NOT an online service, but a free and open source program you download, such as: KeepassXC.

Do NOT use anything that requires you to login to an online site as password manager, much less something that demands a subscription fee.

[dothebeats]

So essentially a phishing attempt with a really good looking site, you just need to remember the correct domain. I suggest you use a password manager that fills in your user names and password. This would not auto fill or prompt on a phishing site, this gives you a heads up and if it's generated let site you'd have to go into your manager to grab it.

I commend this suggestion. I have LastPass as my password manager on certain sites and applications and it works like a charm. If the domain is completely off from the record LastPass has, it wouldn't autofill the password and will, at most cases, tell you that this isn't the same site you're use to log in. They are a bit pricey but given that I have used the said service in most of my important web accounts--related to work, bank, etc--it's a steal and would surely help me in times of phishing attempts.

[carlfebz2]

I looked into the Primedice.net domain whois and that domain was registered shortly after Primedice.com was registered (about 6 years ago).

Without paying a premium to look-up the whois info, its hard to tell if its the original owner. But I am assuming somebody back in 2013 was simply registering a bunch of domain names just in case a casino site became popular and eventually decided to do some phishing attacks on it.

So I am guessing that more and more of these domain will eventually become available for sale and I don't think Primedice.net is the only one out there.

Does make sense yet these 2 things you had said is the nearest probable thing or reason why these links do exist which neither used for phishing or just simply buying out alternative domain names of possible popular sites that they do see that has potential and might give them some money soon.This isn't new anymore but most of the time this do talks about phishing attempts everytime we do see sites do copy other sites as well.

[shield132]

Another good way to check some story about website is to search on google bitcointalk and then type website's adress. Since bitcointalk's pages are indexed quickly, user can find what is posted about that domain and if it's real or not after viewing some posts around it. If there is nothing about url on bitcointalk, better to avoid it or at least ask here, no one will blame you for that.
Primedice really need to take care of that domain primedice.net
Btw at first users have to be careful but sadly they aren't.

[Oceat]

So essentially a phishing attempt with a really good looking site, you just need to remember the correct domain. I suggest you use a password manager that fills in your user names and password. This would not auto fill or prompt on a phishing site, this gives you a heads up and if it's generated let site you'd have to go into your manager to grab it.

If i was that person, i am saving it in a bookmark already and no one could phish me unless the website itself is being compromised. And to those who haven't save the site yet and they don't know which or what is the right one, just simply search it on BTT or in google if in doubt.

[peter0425]

Just make certain you check the URL before opening a account and depositing.

Easier said that done. I'm sure there are a lot of beginners in crypto and it's possible that they can fall from this new waves of attacks. Specially criminal know that there are a lot of gullible individual who lacks the proper education on how to secure their accounts.

[Twinkledoe]

Just make certain you check the URL before opening a account and depositing.

Easier said that done. I'm sure there are a lot of beginners in crypto and it's possible that they can fall from this new waves of attacks. Specially criminal know that there are a lot of gullible individual who lacks the proper education on how to secure their accounts.

They are targeting those gullible users and to those who don't care about the sites that they are opening. Even if you are an old-timer, sometimes these scammers know how to lure their potential victims because the sites are sometimes too good that you don't even know the difference from legit one.

[Moonmanmun]

I use avg antivirus so I dont have these types of problems

[hd49728]

I use avg antivirus so I dont have these types of problems

If you totally depends on antivirus softwares, you will be unsafe. Being careful with links, and always check site address before clicking and logging in your accounts. Bookmarking site address is helpful but there are risks of tampering too. So, it is better if you are more careful, and remember site address, then type exactly sure what you want to use. Try not to search using Google because phising sites might appear at top of search results.