bitcoin.org hacked.

[gredinger]

scam site is scam.

[1713420827]

1713420827

[1713420827]

1713420827

[1713420827]

1713420827

[1713420827]

1713420827

[noorman0]

Looks like you're right, the start page pops up offering a bitcoin doubler. I believe the site has been compromised.


So far, the address of the scammer has collected 0.4 bitcoin
https://www.blockchain.com/es/btc/address/1NgoFwgsfZ19RrCUhTmmuLpmdek45nRd5N

https://twitter.com/ErichGarciaCruz/status/1440872885363478536

[nullama]

Here's the whois data, just updated now, when the hack happened:

Domain Name: BITCOIN.ORG
Updated Date: 2021-09-23T02:10:17Z
Creation Date: 2008-08-18T13:19:55Z

[lucky80]

Here's the whois data, just updated now, when the hack happened:

Domain Name: BITCOIN.ORG
Updated Date: 2021-09-23T02:10:17Z
Creation Date: 2008-08-18T13:19:55Z

Crazy. I got panic and open a new thread. I just closed it. Please guys make this thread active so people are aware of what happened.

Hacker wallet

[Foxpup]

TLS certificate updated too, on 2021-09-23T02:21:13Z. Definitely a hack.

[Darker45]

My goodness! The site appears compromised indeed. Information should be disseminated across various social media platforms so that people will be given a heads up that the official website of Bitcoin is hacked.

Although double-your-money is clearly an offer from scammers, people might think this is legitimate as the site has been deemed trustworthy. They might send money to the hackers.

I suspect the culprit has some connections or might be an avid supporter of CSW.

[ranochigo]

The site doesn't work at all, only that page is showing up. Any other individual pages cannot be loaded, only the page with the doubler message is working.

[_Miracle]

*bump
bitcoin.org still down @ 9:45 pm PST

[leea-1334]

Confirming still down for me also even with various VPNs,,, does anyone know if there is any other place for anyone from there to make announcements? Their Twitter has been inactive almost a year from what I can see,,, hope not too many people fell for that scam, this is really a hit in the stomach for them.

[achow101]

Namecheap (their registrar) took it down for now via removing the nameserver entries.

does anyone know if there is any other place for anyone from there to make announcements? Their Twitter has been inactive almost a year from what I can see,,, hope not too many people fell for that scam, this is really a hit in the stomach for them.

Bitcoin.org is owned by Cobra, his twitter is https://twitter.com/CobraBitcoin/

There will probably be something in the github repo. I opened an issue when I noticed this, so at least that will be closed when this is resolved: https://github.com/bitcoin-dot-org/Bitcoin.org/issues/3743


Looks like Cobra is aware: https://twitter.com/CobraBitcoin/status/1440903346991337472

[BD Crypto]

Confirming still down for me also even with various VPNs,,, does anyone know if there is any other place for anyone from there to make announcements? Their Twitter has been inactive almost a year from what I can see,,, hope not too many people fell for that scam, this is really a hit in the stomach for them.

You can visit my post in Scam Accusations board to know more about the scam.Thay already scammed a huge amount from here.

Scammed : 0.40571238 BTC till now.

I just tried to visit and now showing down but I already shared details here https://bitcointalk.org/index.php?topic=5361408.msg58002016#msg58002016

[dkbit98]

I think that Cøbra started using using Cloudflare few months ago on his bitcoin.org website and hack happened after that because of some DNS flaws.

I never trusted Cloudflare and my question is should Bitcointalk forum continue using Cloudflare or start using some alternative option to avoid something like this happening?

Here is Cloudflare CEO Matthew Prince statement bragging how cryptocurrency exchanges are also using Cloudflare:
https://www.cnbc.com/2021/09/13/cloudflare-ceo-says-crypto-exchanges-are-a-popular-target-for-cyber-attackers.html

With regret, I am (for now) admitting defeat on the DDoS front, and we will soon be using using Cloudflare to protect against DDoS attacks.

I especially dislike Cloudflare, which I'm almost certain is basically owned by US intelligence agencies.

PS
I really don't understand people who are still sending BTC to scammers like this   0.4 BTC gone with the wind, in scammers pocket.

[davis196]

Damn.I'm glad I've never used bitcoin.org in my life before.
We have to track all the outgoing transactions of this scammers wallet.Perhaps this is the only way to catch the scammer,unless he tries to use a Bitcoin mixer.Why he isn't moving the BTC away from this wallet?
Blacklisting this Bitcoin wallet address is also necessary.
Why do people keep falling for this "double your Bitcoin" shit?
4 transactions with a total value of more than 17K USD?WTF?

 

[jcojci]

Confirming still down for me also even with various VPNs,,, does anyone know if there is any other place for anyone from there to make announcements? Their Twitter has been inactive almost a year from what I can see,,, hope not too many people fell for that scam, this is really a hit in the stomach for them.

You can visit my post in Scam Accusations board to know more about the scam.Thay already scammed a huge amount from here.

Scammed : 0.40571238 BTC till now.

I just tried to visit and now showing down but I already shared details here https://bitcointalk.org/index.php?topic=5361408.msg58002016#msg58002016

Wow, that hacker/scammer already got 0.40571238 BTC. I can not imagine how many people are being tricked by that and send the money to them.

It is an old trick that still works until now and maybe that will exist in the future as many new people are not aware of it.

[Leviathan.007]

That's correct, a few minutes ago I saw u.today reporting about it: https://u.today/breaking-bitcoinorg-hacked-by-scammers
Bitcoin.Org is one of the oldest or actually the oldest bitcoin domain, years ago, registered by Satoshi Nakamoto himself, and a few years ago after things happened with fake satoshi he made the website to remove bitcoin whitepaper from the official webpage. But, the whole point about this attack is the method they use, they are using the same method to scam people just like a few months ago some scammers were hacking the Twitter accounts of popular people and they tried to scam people by promising them high returns.

[Magicalking]

More people will fall for the scam thinking everything is legit, they believe the site is maintained by Satoshi Nakamoto which is false information. Someone posted the news on Reddit and called Bitcoin.org the "Bitcoin foundation". This is how much false information is on the internet. DYOR is the best way to survive in crypto

[DapanasFruit]

My goodness! The site appears compromised indeed. Information should be disseminated across various social media platforms so that people will be given a heads up that the official website of Bitcoin is hacked. Although double-your-money is clearly an offer from scammers, people might think this is legitimate as the site has been deemed trustworthy. They might send money to the hackers. I suspect the culprit has some connections or might be an avid supporter of CSW.

This is another sad day and one more reasons why there should be a solid and unhackable infrastructure to be provided to whole of cryptocurrency industry but this is more of a pipedream for now. The enticing offer to double one's Bitcoin is already a very popular scam and may not be victimizing those who are already here for months and years but obviously the offer can be effective to newbies as it is appealing to human's greediness. Hope nobody else can be a victim of the scam. I am expecting a full story of this soon.

[NeuroticFish]

Yeah, I just got some minutes ago a strange error in my browser too:

Secure Connection Failed

An error occurred during a connection to bitcoin.org. Cannot communicate securely with peer: no common encryption algorithm(s).

Error code: SSL_ERROR_NO_CYPHER_OVERLAP

At first didn't know what it means. Now I understand. Thanks OP.

[bL4nkcode]

More people will fall for the scam thinking everything is legit, they believe the site is maintained by Satoshi Nakamoto which is false information.

Only greedy people/newbies will believe such offer, either it was posted in any reputed website. Coz people with enough knowledge can easily differentiate a legit and have a doubt even it was posted on popular twitter/facebook personality, or any popular websites.

[boyptc]

It was hacked.

Been following a certain page named ExploitWarelabs, that are posting hack updates from different websites and as well as in deep/dark web.