Recent fraudulent email targeting deposits

[Guard Dog]

We received this email:

Dear affiliate,

We’ve recently been made aware of a promotional email circulating from us with the subject line “Receive Free Bitcoin and Ethereum With Bitcasino” with fraudulent purposes, so-called Social Engineering.

It’s important for you to know that the email contained fraudulent Bitcoin and Ethereum wallet addresses where you were asked to deposit funds to receive future interest. These are not Bitcasino wallet addresses, please do not transfer any funds.

The email was not an official Bitcasino email, we never sent it out, and furthermore, our security team have confirmed this email was sent out after our promotional email software was hacked.

We are currently working with them to ensure this issue is resolved.

We will never ask you to send funds to a specific address within any communication, only to the address displayed in Bitcasino's cashier.

If you would like any further information or have any questions, please don’t hesitate to contact us.

We would like to know how did they get access?
How Bitcasino.io Affiliates are securing our details?

 

[Guard Dog]

We received an update:


Our investigations have confirmed that our third-party email software Customer.io was compromised, resulting in a fraudulent email being sent out to a pre-defined group of players.

Currently, we have observed that in 24 hours three transactions were made to the fraudulent wallet addresses, totalling 0.00037299 BTC and 2.0665 ETH. We will continue to monitor the situation and wallet address.

How will this affect you?

• Customer.io only had access to a set of email addresses and language preferences, no other personal player information such as KYC documents, passwords or any other sensitive data was available to this third-party.
• We can confirm that your account on Bitcasino.io is not at risk from this incident.
• Bitcasino will never ask you to deposit to a wallet address in any communication. You should only ever deposit to the address displayed in your account cashier.

More info: https://lcb.org/onlinecasinobonusfo...ns-about-fraudulent-emails-targeting-deposits

 

[Guard Dog]

We have contacted Bitcasino.io and they replied:

Hi,

On 28th of September our team became aware of a security incident involving a third-party email service provider (customer.io) and Bitcasino.io. An unauthorised person was able to improperly access the email newsletter software and via a set of predefined segments, which included email and user’s country, they were able to send a fraudulent email newsletter to some Bitcasino.io users.

Bitcasino.io's security team immediately reacted, locking down the third-party service, suspending all outgoing emails and access to the software. We then compiled and sent an informative email to our user base warning them of this fraudulent newsletter.

We are continuing our investigations with customer.io as well as auditing and evaluating our internal policies for even better, tighter security. We take this incident with the utmost seriousness and will continue to strengthen our security with the help and suggestions by the community and our in-house specialists.

As previously stated we will also continue to monitor the fraudulent wallet addresses.

There is however, no excuse for letting this happen and we would like to sincerely apologise to those affected once again. Our support team is on hand should you have any further concerns.