{"id":12442,"date":"2021-09-23T12:54:03","date_gmt":"2021-09-23T12:54:03","guid":{"rendered":"https:\/\/www.buyucoin.com\/crypto-labs\/hackers-compromise-web-portal-bitcoin-org-dns-hijack-replaces-site-with-btc-doubler-scam\/"},"modified":"2021-09-23T12:54:03","modified_gmt":"2021-09-23T12:54:03","slug":"hackers-compromise-web-portal-bitcoin-org-dns-hijack-replaces-site-with-btc-doubler-scam","status":"publish","type":"post","link":"https:\/\/www.buyucoin.com\/crypto-labs\/hackers-compromise-web-portal-bitcoin-org-dns-hijack-replaces-site-with-btc-doubler-scam\/","title":{"rendered":"Hackers Compromise Web Portal Bitcoin.org \u2014 DNS Hijack Replaces Site With BTC Doubler Scam"},"content":{"rendered":"<p><strong>On Thursday, the pseudonymous operator of Bitcoin.org told the public on Twitter that the web portal has been \u201ccompromised.\u201d The operator, Cobra, explained that the hackers were able to implement a bitcoin doubler scam model and stressed that the site would be down for a \u201cfew days.\u201d<\/strong><\/p>\n<h2>Website Operator Cobra Warns Bitcoin.org Has Been Compromised<\/h2>\n<p>The mysterious operator of the web portal Bitcoin.org, Cobra, is once again surrounded by controversy. According to the pseudonymous operator of the website, Bitcoin.org has been attacked. \u201cBitcoin.org has been compromised,\u201d Cobra <a href=\"https:\/\/twitter.com\/cobrabitcoin\/status\/1440905892543832064?s=21\">tweeted<\/a> early Thursday morning (EST). \u201c[I am] currently looking into how the hackers put up the scam model on the site. May be down for a few days.\u201d<\/p>\n<p>The scam model Cobra speaks of is <a href=\"https:\/\/twitter.com\/vxunderground\/status\/1440875093593231360?s=20\">a doubler scam<\/a> that attempts to entice people to deposit a fraction of bitcoin with the promise of doubling the deposit. Of course, victims who deposit funds into the doubler scam never get the double reward, as the hackers simply take all the funds after they have accumulated to something worthwhile.<\/p>\n<p><a href=\"https:\/\/twitter.com\/vxunderground\/status\/1440875093593231360?s=20\">According<\/a> to one account, the scammers were able to get $17,000 in bitcoin (<a class=\"lar-automated-link\" href=\"https:\/\/markets.bitcoin.com\/crypto\/BTC\">BTC<\/a>) while the phony page was online. Some have said that the scam wallet did not make as much money as the website displayed.<\/p>\n<p>\u201cFor context, 3 people have sent $100, 1 person has sent around $200, the rest(0.4 <a class=\"lar-automated-link\" href=\"https:\/\/markets.bitcoin.com\/crypto\/BTC\">BTC<\/a>) seems to have been sent as a way to make the \u2018giveaway\u2019 seem legitimate, so likely [a] scammer\u2019s own coins,\u201d one individual <a href=\"https:\/\/twitter.com\/SadFrogFacts\/status\/1440880174883647490?s=20\">mentioned<\/a>.<\/p>\n<h2>Attack Seems to Be DNS Hijack, Cobra Complains to Cloudflare<\/h2>\n<p>The operator behind the website <a href=\"https:\/\/nuke.asia\/\">nuke.asia<\/a> said that the takeover was most likely \u201csocial engineering.\u201d<\/p>\n<p>\u201cIt appears the domain was taken over,\u201d Charles from nuke.asia <a href=\"https:\/\/twitter.com\/nukedotasia\/status\/1440885800707575813?s=20\">said<\/a>. \u201cThe WHOIS info was updated at the time of the hack, the nameservers + DNS changed, and if you try to visit any of the actual pages other than the index you\u2019ll get a 404. It\u2019s a completely different website save for the domain name.\u201d<\/p>\n<p>Meanwhile, Cobra has also been <a href=\"https:\/\/twitter.com\/CobraBitcoin\/status\/1440912752151867397?s=20\">tweeting<\/a> to the company Cloudflare for assistance. \u201cBitcoin.org hasn\u2019t been hacked, ever. And then we move to Cloudflare, and two months later we get hacked. Can you explain where you were routing my traffic too? Because my actual server didn\u2019t get any traffic during [the] hack. @Cloudflare @eastdakota,\u201d Cobra said. Then someone asked Cobra if his accounts were compromised. Cobra <a href=\"https:\/\/twitter.com\/CobraBitcoin\/status\/1440918129165602817?s=20\">stressed<\/a>:<\/p>\n<p>Nope, nothing. None of my accounts seem compromised. Server is fine too (it wasn\u2019t even getting traffic during the hack). The attackers just seem to have exploited some flaw in the DNS.<\/p>\n<p><em><strong>What do you think about Bitcoin.org getting compromised by hackers who replaced the site\u2019s main page with a doubler scam? Let us know what you think about this subject in the comments section below.<\/strong><\/em><\/p>\n<p>Bitcoin News<br \/>\nNews, accounts, Attacked, attackers, Bitcoin.org, Bitcoin.org Owner, BTC doubler scam, Cloudflare, Cobra, Compromised, DNS, DNS Hijack, doubler, Doubler Scam, Exploit, hacked, Hackers, Scam, Server, Web Portal<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On Thursday, the pseudonymous operator of Bitcoin.org told the public on Twitter that the web portal has been \u201ccompromised.\u201d The operator, Cobra, explained that the hackers were able to implement a bitcoin doubler scam model and stressed that the site would be down for a \u201cfew days.\u201d Website Operator Cobra Warns Bitcoin.org Has Been Compromised&hellip;<\/p>\n","protected":false},"author":0,"featured_media":12443,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[53,3],"tags":[],"class_list":["post-12442","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blockchain-news","category-coin-news"],"_links":{"self":[{"href":"https:\/\/www.buyucoin.com\/crypto-labs\/wp-json\/wp\/v2\/posts\/12442"}],"collection":[{"href":"https:\/\/www.buyucoin.com\/crypto-labs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.buyucoin.com\/crypto-labs\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/www.buyucoin.com\/crypto-labs\/wp-json\/wp\/v2\/comments?post=12442"}],"version-history":[{"count":0,"href":"https:\/\/www.buyucoin.com\/crypto-labs\/wp-json\/wp\/v2\/posts\/12442\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.buyucoin.com\/crypto-labs\/wp-json\/wp\/v2\/media\/12443"}],"wp:attachment":[{"href":"https:\/\/www.buyucoin.com\/crypto-labs\/wp-json\/wp\/v2\/media?parent=12442"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.buyucoin.com\/crypto-labs\/wp-json\/wp\/v2\/categories?post=12442"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.buyucoin.com\/crypto-labs\/wp-json\/wp\/v2\/tags?post=12442"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}