Page 1 of 4 1234 LastLast
Results 1 to 20 of 75
  1. #1
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,015
    Thanked 6,685 Times in 2,950 Posts

    Exclamation Current casino program hacking: luckycasinoslist.com

    Again thousands and thousands of websites are infected by a new hacking similar to verifiedcasinos.com, but this time the victims are hard to find in the Google search engines result pages.

    The hacking root used is luckycasinoslist.com - Look at the programs on the list!

    Don't forget the "s" after casino!

    In the coming days I will publish how the hack words, which Wordpress plugin will be used this time and how it can be fixed.

    I stay in contact with some German victims who are freed from the hack.

    On every victim page a javascript file (luckycasinoslist.com/boot.js) will be loaded.

    Leopold

  2. The Following 4 Users Say Thank You to Roulette Zeitung For This Useful Post:

    Anthony (8 January 2015), dfiocch (8 January 2015), LeadAffiliates (13 January 2015), MrBinaryAff (30 April 2015)

  3. #2
    thepogg's Avatar
    thepogg is offline Private Member
    Join Date
    August 2011
    Posts
    711
    Blog Entries
    8
    Thanks
    284
    Thanked 620 Times in 303 Posts

    Default

    What's interesting about this is that if this is a different individual from verifiedcasinos they're using EXACTLY the same programs on the site. To me this looks like another operation set up by the same person/group.
    Casino Reviews, Casino Complaints, Terms and Conditions Monitoring and the biggest Slots RTP resource on the web -
    thepogg.com - POGGWebmasters.com

    ThePOGG Auditing Service

    "I've got nothing left, It's kind of wonderful, 'Cause there's nothing they can take away"

    Broken Bells

  4. The Following 2 Users Say Thank You to thepogg For This Useful Post:

    dfiocch (8 January 2015), Roulette Zeitung (8 January 2015)

  5. #3
    -Shay- is offline Public Member
    Join Date
    November 2012
    Posts
    3,062
    Thanks
    12,211
    Thanked 3,133 Times in 1,686 Posts

    Default

    Quote Originally Posted by thepogg View Post
    What's interesting about this is that if this is a different individual from verifiedcasinos they're using EXACTLY the same programs on the site. To me this looks like another operation set up by the same person/group.
    Or the programs listed are the path of least resistance in terms of what groups are more friendly to shady and unethical practices.

  6. The Following 2 Users Say Thank You to -Shay- For This Useful Post:

    dfiocch (8 January 2015), Roulette Zeitung (8 January 2015)

  7. #4
    thepogg's Avatar
    thepogg is offline Private Member
    Join Date
    August 2011
    Posts
    711
    Blog Entries
    8
    Thanks
    284
    Thanked 620 Times in 303 Posts

    Default

    Quote Originally Posted by -Shay- View Post
    Or the programs listed are the path of least resistance in terms of what groups are more friendly to shady and unethical practices.
    That had occurred to me, but I don't think it's likely. That a second individual - with a clean sheet - wouldn't try ANY program that VC either hasn't tried working with or has been booted from already seems too coincidental to me.
    Casino Reviews, Casino Complaints, Terms and Conditions Monitoring and the biggest Slots RTP resource on the web -
    thepogg.com - POGGWebmasters.com

    ThePOGG Auditing Service

    "I've got nothing left, It's kind of wonderful, 'Cause there's nothing they can take away"

    Broken Bells

  8. The Following User Says Thank You to thepogg For This Useful Post:

    Roulette Zeitung (8 January 2015)

  9. #5
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,015
    Thanked 6,685 Times in 2,950 Posts

    Default

    Quote Originally Posted by Roulette Zeitung View Post
    Again thousands and thousands of websites are infected by a new hacking similar to verifiedcasinos.com, but this time the victims are hard to find in the Google search engines result pages.
    No matches?

    Here is an example of a victim.

    bensen-physio.de

    Mr. and Mrs. Bensen are physiotherapist in Germany.
    They have nothing to do with gambling.

    But now enter in your Google search box:

    site:bensen-physio.de casino

    This is what is coming on your screen: http://tinyurl.com/omv8sf6

    Click on any infected link. You see the luckycasinoslist content. Go to the left upper corner and click right for source code. You will find among others the following code:

    Code:
    <script type='text/javascript' src='http://luckycasinoslist.com/boot.js'></script>
    Now an example of a freed victim. I contacted the IT-Administrator. So we could stop the hack:

    hdr.de

    A care facility for old people!

    Harry up, because of Google updated results.

    Enter

    site:hdr.de casino

    This is what is coming on your screen: http://tinyurl.com/mfbobwj

    Click on any link! The site is freed now!

    Only two examples of thousands. Check your country.

    The hacker don't stop for old or ill people. He don't stop for school websites, also not for children. This criminal don't stop for people, who take care about other people with their medical education.

    What do you think, dear casino affiliate program?
    Yes you ... waving with a nice banner on the list!

    Is it a great reputation to work with a criminal, who is abusing children, old and ill people and their helpers?
    Is this the new brand slogan you are searching for?
    This new program logo can be yours shortly ===>

    Do you want that?
    Do you want to suffer the same fate as the "good guys" from AffEurope?
    This time ... no excuses ... no patience and no mercy.
    Of course, you can decide what you prefer.
    To be serious or to be the last dirt on Earth.
    But this time don't take too much time for your decision ... for earning some final bucks ... dirty bucks.

    ---

    How the hack works?
    That will be the story of another post.

    Leopold
    Last edited by Roulette Zeitung; 8 January 2015 at 11:00 am.

  10. The Following 5 Users Say Thank You to Roulette Zeitung For This Useful Post:

    -Shay- (8 January 2015), dfiocch (8 January 2015), sweetbet (8 January 2015), thepogg (8 January 2015), Zuga (9 January 2015)

  11. #6
    dfiocch's Avatar
    dfiocch is offline Private Member
    Join Date
    September 2006
    Posts
    878
    Thanks
    789
    Thanked 567 Times in 350 Posts

    Default

    Probably the same scumbag

  12. The Following User Says Thank You to dfiocch For This Useful Post:

    Roulette Zeitung (8 January 2015)

  13. #7
    thepogg's Avatar
    thepogg is offline Private Member
    Join Date
    August 2011
    Posts
    711
    Blog Entries
    8
    Thanks
    284
    Thanked 620 Times in 303 Posts

    Default

    Fantastic post RZ and spot on the money!
    Casino Reviews, Casino Complaints, Terms and Conditions Monitoring and the biggest Slots RTP resource on the web -
    thepogg.com - POGGWebmasters.com

    ThePOGG Auditing Service

    "I've got nothing left, It's kind of wonderful, 'Cause there's nothing they can take away"

    Broken Bells

  14. The Following User Says Thank You to thepogg For This Useful Post:

    Roulette Zeitung (8 January 2015)

  15. #8
    sweetbet's Avatar
    sweetbet is offline Public Member
    Join Date
    November 2012
    Posts
    2,819
    Blog Entries
    5
    Thanks
    898
    Thanked 1,576 Times in 1,087 Posts

    Default

    Excellent detective work Leopold.

  16. The Following User Says Thank You to sweetbet For This Useful Post:

    Roulette Zeitung (8 January 2015)

  17. #9
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,015
    Thanked 6,685 Times in 2,950 Posts

    Default

    Which critical security vulnerability is the open door for the hacker?

    The verifiedcasinos hack utilized a weakness of the Wordpress plugin Akismet, the same weakness the well known "Pharma-Hack" have based on in the past.

    The new
    luckycasinoslist.com hack utilize the following plugin:

    Events Calendar Pro

    Everyone should deactivate and delete this plugin immediately, also Akismet to prevent the verifiedcasinos hack. If you don't receive hundreds of comments every day, no one need Akismet in real life. It's only a
    decorative but dangerous accessory.


    You are a victim?

    If your Wordpress Blog is infected, then you will find in the folder wp-content/upgrade/ a file with the name client.php. It's an encoded file, but in the decoded version are Russian fragments into it. Delete this file. But that's not enough. Check your .htaccess file. You will find 3 or 4 lines of strange code, that does not came from your hand. This code will be the engine for the malicious client.php. You can change or check your .htaccess file with the "WP Htaccess Editor" plugin (https://wordpress.org/plugins/wp-htaccess-editor/).

    A) Deactivate and delete "Events Calender Pro" Wordpress plugin.
    B) Delete client.php file in
    wp-content/upgrade/ folder.
    C) Make a backup of your .htaccess file.
    D) Delete all new additional code lines in your .htaccess file, everything, that is targeted to client.php.
    E) If your Wordpress is still working, then delete the .htaccess backup.
    F) Deactivate and delete "Akisment" Wordpress plugin.
    G) Delete all themes and plugins not beeing used to
    increase the chances of surviving the next hack.

    After these steps all casinos sites on your Wordpress should be gone and you can use your computer in a familiar and pleasant atmosphere without worries about your website.


    I try to publish the encoded and decoded version of client.php the next days.

    Leopold


  18. The Following User Says Thank You to Roulette Zeitung For This Useful Post:

    -Shay- (9 January 2015)

  19. #10
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,015
    Thanked 6,685 Times in 2,950 Posts

    Default

    Winner Casino on top position for visitors from Germany, UK and Sweden!

    Winner Casino = Winner Affiliates = GPWA Platinum (!) sponsor

    If the GPWA PLATINUM sponsorship is a free ticket to do everything -legal or not- and the GPWA seal only a Fata Morgana, then Winner Affiliates have to do nothing regarding my call to action.

    If the seal is worth the word and Winner Affiliates a serious program, then the deadline I gave them should not be exceeded:

    ===> https://www.gpwa.org/forum/winner-af...tml#post776383

    A GPWA sponsor is is obliged to read in the program area and to reply to issues.

    Or perhaps not?

    Leopold

  20. The Following 2 Users Say Thank You to Roulette Zeitung For This Useful Post:

    GCG (10 January 2015), Moonlight Cat (24 January 2015)

  21. #11
    GCG
    GCG is offline Public Member
    Join Date
    February 2009
    Location
    Not here
    Posts
    1,249
    Thanks
    291
    Thanked 759 Times in 418 Posts

    Default

    money is more important than reputation to them (Winner / GPWA)

    expect nothing will change as all is monetized

    the GPWA code of conduct is a guide line but not mandatory for programs so it seems

  22. #12
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,015
    Thanked 6,685 Times in 2,950 Posts

    Default



    I promised you full information. Here is the complete list of all casinos / programs who are involved -knowingly or unknowingly- in abuse of children, old and sick people and their helpers right now.

    It's up to GPWA staff to enable fast and effective intervention at least regarding the four GPWA sponsors.

    In the first line you will see the brand, in the second the affiliate program and if they are GPWA sponsor.
    The third line includes the promoted countries, the last line full advertising code.

    ----

    Winner Casino
    Winner Affiliates | GPWA Platinum sponsor
    Germany - Australia - Finland - UK - Sweden
    online.winner.com/promoRedirect?member=great1&campaign=DEFAULT&chann el=DEFAULT&zone=52806979&lp=0

    ---

    Euro Palace
    Fortune Affiliates | GPWA Gold sponsor
    Germany - Australia - Canada - Finland - Netherlands - Sweden - Spain
    de.europalace.com/btag-P36476-PR137-CM13492-TS43156

    Royal Vegas
    Fortune Affiliates | GPWA Gold sponsor
    Germany - Australia - Canada - Finland - Netherlands - Spain
    de.royalvegascasino.com/btag-P36476-PR119-CM14228-TS43156/

    ---

    Casino Titan
    AffActive | GPWA Silver sponsor
    USA
    casinotitan.im/aiddownload.php?affid=73383

    Grand Macao
    AffActive | GPWA Silver sponsor
    USA
    grandmacaocasino.com/?affid=31838

    Slots Jungle
    AffActive | GPWA Silver sponsor
    USA
    slotsjungle.im/aiddownload.asp?affid=59907

    Winpalace Play
    AffActive | GPWA Silver sponsor
    USA
    winpalaceplay.com/?affid=151200

    ---

    21 Grand Casino
    Best Pay Partners | GPWA Silver sponsor
    Spain - France - Italy
    21gc-011.com/?21gc-011com&page=/get/a/4059189

    Play2Win
    Best Pay Partners | GPWA Silver sponsor
    Spain - France - Italy
    p2w-011.com/?P2w-011com&page=/get/a/4059188

    Supreme Play
    Best Pay Partners | GPWA Silver sponsor
    Spain - France - Italy
    sp-011.com/?sp-011com&page=/get/a/4059190

    ---

    Cosmik Casino
    AffPower
    UK - Spain - France - Italy
    affiliates.affpower.com/processing/clickthrgh.asp?btag=a_3599b_1061&aid=

    Deuce Club
    AffPower
    UK
    affiliates.affpower.com/processing/clickthrgh.asp?btag=a_3599b_1072&aid=

    Osiris Casino
    AffPower
    Spain - France - Italy
    affiliates.affpower.com/processing/clickthrgh.asp?btag=a_3938b_1614&aid=

    ---

    Casino Fiz
    AffCoins
    Spain - France - Italy
    cf-002.com/?cf-002com&page=/get/a/4059450

    Tradition Casino
    AffCoins
    Spain - France - Italy
    td-002.com/?td-002com&page=/get/a/4059451

    Vegas Days
    AffCoins
    France - Italy
    vd-002.com/?vd-002com&page=/get/a/4059446

    ---

    Casino Las Vegas
    AffClub (owned by bwin party)
    Germany - Australia - Canada - Netherlands - UK - Sweden
    banner.casinolasvegas.com/cgi-bin/redir.cgi?id=N&member=24000000&profile=132180

    Club Dice
    AffClub (owned by bwin party)
    Finland
    banner.clubdicecasino.com/cgi-bin/redir.cgi?id=N&member=19100000&profile=22767

    SCasino
    AffClub (owned by bwin party)
    Germany - Australia - Canada - Netherlands - UK
    banner.scasino.com/cgi-bin/redir.cgi?member=27000000&profile=130353

    ---

    Grand Parker
    Revenue Jet
    USA
    grandparker.me/r.php?a=27788

    Loco Panda
    Revenue Jet
    USA
    locopanda.me/r.php?a=55203

    Ruby Royal
    Revenue Jet
    USA
    rubyroyal.com/r.php?a=2545976

    ---

    888 Casino
    888Affiliates
    Germany - Canada - Finland - Netherlands - UK - Italy
    de.888casino.com/exclusive/freeplay.htm?sr=1064403

    ---

    Jackpot City
    Buffalo Partners
    Germany - Australia - Canada - Finland - Netherlands - Sweden
    jackpotcitycasino.com/?a=1233314023532130

    Ruby Fortune
    Buffalo Partners
    Germany - Australia - Canada - Finland - - Netherlands
    rubyfortune.com/?a=1188583645437992

    Spin Palace
    Buffalo Partners
    Germany - Australia - Canada - Finland - Netherlands - Sweden
    spinpalace.com/?a=1233314023532129



    "Just because you're paranoid don't mean they're not after you."
    [Henry Kissinger]

    Leopold

  23. The Following 6 Users Say Thank You to Roulette Zeitung For This Useful Post:

    -Shay- (11 January 2015), Anthony (12 January 2015), BestPay Partners (12 January 2015), NickyV (10 January 2016), TheGooner (11 January 2015), thepogg (12 January 2015)

  24. #13
    thepogg's Avatar
    thepogg is offline Private Member
    Join Date
    August 2011
    Posts
    711
    Blog Entries
    8
    Thanks
    284
    Thanked 620 Times in 303 Posts

    Default

    Quote Originally Posted by Roulette Zeitung View Post
    Casino Fiz
    AffCoins
    Spain - France - Italy
    cf-002.com/?cf-002com&page=/get/a/4059450

    Tradition Casino
    AffCoins
    Spain - France - Italy
    td-002.com/?td-002com&page=/get/a/4059451

    Vegas Days
    AffCoins
    France - Italy
    vd-002.com/?vd-002com&page=/get/a/4059446
    It should be noted that AffCoins are owned by the same group as BestPay Partners now.
    Casino Reviews, Casino Complaints, Terms and Conditions Monitoring and the biggest Slots RTP resource on the web -
    thepogg.com - POGGWebmasters.com

    ThePOGG Auditing Service

    "I've got nothing left, It's kind of wonderful, 'Cause there's nothing they can take away"

    Broken Bells

  25. The Following 2 Users Say Thank You to thepogg For This Useful Post:

    -Shay- (11 January 2015), Roulette Zeitung (11 January 2015)

  26. #14
    BestPay Partners is offline Non-sponsor Affiliate Program
    Join Date
    November 2012
    Location
    Israel
    Posts
    45
    Thanks
    27
    Thanked 45 Times in 16 Posts

    Default

    Hey friends - Roulette Zeitung - special thanks for that helpful post, since you provided us with the btag links of that affiliate we managed to locate this affiliate btag, hiding as sub affiliate of some master account. BestPay Partners closed that related affiliate account with immediate effect since we from BestPay Partners don't provide ground for affiliates/partners with a negative impact on our industry.

    ===========
    Make sure you have a look at our Newsletter section for latest updates from BestPay Partners in 2015:
    http://news.bestpaypartners.com/news_update

    Looking forward to see you all at London LAC very soon.

    Best, John

  27. The Following User Says Thank You to BestPay Partners For This Useful Post:

    Roulette Zeitung (12 January 2015)

  28. #15
    thepogg's Avatar
    thepogg is offline Private Member
    Join Date
    August 2011
    Posts
    711
    Blog Entries
    8
    Thanks
    284
    Thanked 620 Times in 303 Posts

    Default

    Hey John,

    That's great news I'll make the necessary adjustments to remove the BBP casinos from the Blacklist
    Casino Reviews, Casino Complaints, Terms and Conditions Monitoring and the biggest Slots RTP resource on the web -
    thepogg.com - POGGWebmasters.com

    ThePOGG Auditing Service

    "I've got nothing left, It's kind of wonderful, 'Cause there's nothing they can take away"

    Broken Bells

  29. The Following 2 Users Say Thank You to thepogg For This Useful Post:

    BestPay Partners (12 January 2015), Roulette Zeitung (12 January 2015)

  30. #16
    Anthony's Avatar
    Anthony is offline Affiliate Services
    Join Date
    June 2003
    Location
    Everywhere
    Posts
    7,063
    Blog Entries
    67
    Thanks
    2,031
    Thanked 3,350 Times in 1,758 Posts

    Default

    I have now contacted everyone on the list Leopold posted.

    Thank you John for taking action.
    Last edited by Anthony; 12 January 2015 at 10:15 am. Reason: everyone contacted
    I am here to help if you have any issues with an affiliate program.
    Become involved in GPWA to truly make the association your own:
    Apply for Private Membership | Apply for the GPWA Seal | Partner with a GPWA Sponsor | Volunteer as a Moderator


  31. The Following 4 Users Say Thank You to Anthony For This Useful Post:

    -Shay- (12 January 2015), coreen.starpartner (20 January 2015), Roulette Zeitung (12 January 2015), thepogg (12 January 2015)

  32. #17
    Roulette Zeitung is offline Public Member
    Join Date
    July 2012
    Location
    Germany
    Posts
    4,446
    Blog Entries
    5
    Thanks
    6,015
    Thanked 6,685 Times in 2,950 Posts

    Default

    "BestPay Partners closed that related affiliate account with immediate effect since we from BestPay Partners don't provide ground for affiliates/partners with a negative impact on our industry."

    Dear reader,

    you see? Acting as a real model -as John did- is as easy as opening a full saliva producing jam jar.

    ---

    "I have now contacted everyone on the list Leopold posted."

    Thank you so much Anthony. As a little present, I have a very interesting information for you. Some cases are really exciting, and I love to find the important details. It's my passion.

    AffPower is also on the list. That should not be a surprising event, because some people don't stop at nothing. In this case not only children, old and ill people will be abused. No, also GPWA!

    AffPower -Thank heaven!- is no longer sponsor of GPWA. So they are not allowed to use the GPWA seal on any (!) sites of their brands.

    Right?

    If you look at the normal brand sites, then you will not see your seal. But this case brings the daylight. AffPower is still using your seal to promote some special pages, not created for the normal visitor, who is only checking the root domain content like you would do that.

    You need proof?

    Here is the screenshot of the content from AffPowers Osiris Casino, the content from the criminal list, loaded by the affiliate link:

    affiliates.affpower.com/processing/clickthrgh.asp?btag=a_3938b_1614&aid=



    Now scroll down to the button and little bit to the right.



    Convinced?

    And now let us celebrate together the grand final of AffPower!

    Sir, my need is sore.
    Spirits that I've cited
    My commands ignore.


    (From "The Sorcerer's Apprentice" by famous German poet Johann Wolfgang von Goethe)

    Search in Google for "affpower"!



    This will be your result:



    "This site may be hacked"



    Leopold

  33. The Following 4 Users Say Thank You to Roulette Zeitung For This Useful Post:

    -Shay- (12 January 2015), Anthony (12 January 2015), ocreditor (13 January 2015), thepogg (12 January 2015)

  34. #18
    Anthony's Avatar
    Anthony is offline Affiliate Services
    Join Date
    June 2003
    Location
    Everywhere
    Posts
    7,063
    Blog Entries
    67
    Thanks
    2,031
    Thanked 3,350 Times in 1,758 Posts

    Default

    Thank you for pointing out AffPower's unauthorized use of the GPWA logo. We have notified them to remove immediately.
    I am here to help if you have any issues with an affiliate program.
    Become involved in GPWA to truly make the association your own:
    Apply for Private Membership | Apply for the GPWA Seal | Partner with a GPWA Sponsor | Volunteer as a Moderator


  35. The Following 2 Users Say Thank You to Anthony For This Useful Post:

    -Shay- (12 January 2015), Roulette Zeitung (13 January 2015)

  36. #19
    thepogg's Avatar
    thepogg is offline Private Member
    Join Date
    August 2011
    Posts
    711
    Blog Entries
    8
    Thanks
    284
    Thanked 620 Times in 303 Posts

    Default

    I would also point out that as this is Osiris, which is pretty much hot off the press, this hasn't been an accidental leftover from the days they were authorised to use the seal.
    Casino Reviews, Casino Complaints, Terms and Conditions Monitoring and the biggest Slots RTP resource on the web -
    thepogg.com - POGGWebmasters.com

    ThePOGG Auditing Service

    "I've got nothing left, It's kind of wonderful, 'Cause there's nothing they can take away"

    Broken Bells

  37. The Following 2 Users Say Thank You to thepogg For This Useful Post:

    -Shay- (12 January 2015), Roulette Zeitung (13 January 2015)

  38. #20
    ElaineGardiner's Avatar
    ElaineGardiner is offline Non-sponsor Affiliate Program
    Join Date
    January 2010
    Location
    Malta
    Posts
    710
    Thanks
    421
    Thanked 463 Times in 240 Posts

    Default

    Hi guys,

    I'm not sure if this is the same guy or not but I found this page today:

    xxx.asaub.edu.bd/?kbfjijyfqp=scandinavia/automater-p-nett.php which is a Bangladesh University.

    The affiliate programs seem to be similar as to ones Leopold mentioned.

    /Elaine
    Head of Client Services | TAG Media

  39. The Following 4 Users Say Thank You to ElaineGardiner For This Useful Post:

    -Shay- (13 January 2015), Anthony (13 January 2015), Roulette Zeitung (13 January 2015), thepogg (13 January 2015)

Page 1 of 4 1234 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •