external image

How did someone get my password at 3dice?

rma20

Dormant account
Joined
Mar 9, 2006
Location
Earth
Hey everyone, I have a account at 3dice. I usually just like to play in tournaments there for free. But I was checking out my account information today and someone multiple times from my IP address tried to make deposits through okpay and it has happened quite a few times over the last two months! They just said open not executed or anything. I never deposit hardly so I never noticed to look at the transaction history on real play. The problem is no one else uses my computer! I have it password locked! There is literally no way for anyone to use my computer and log in there on my IP address.

So can someone who is computer savvy tell me what went on? 3dice was very helpful and is looking into it. But I want to know how this happened? They said to just change my password.

I have Norton virus and all of that. I am just confused how this happened and how to prevent it in the furutre? I cleared all my browser history. I am going to uninstall and reinstall 3dice on my computer. Honestly, I am nervous to play there. And what if I had made a withdrawal? Would someone have gotten all that information too?
 


Are you on a wireless home network?
Does anyone else live with you, or visit regularly, who is not SUPPOSED to know your password, but might somehow have obtained it?

The first line of defence is to immediately change your password, and then keep a close eye on your account. You can ask 3Dice to monitor whether there are further login attempts using what would now be your old password.

The fact that this has come from your own IP address suggests that if it hasn't been done through your computer, it has at least been done through your internet connection, which would be possible if you were on a wireless network which had been hacked into.
 
I am on wireless but it is password protected. So someone could have hacked into that? I know 100% it is not the other person who lives here with me. They weren't here when it happened! They said it was from my IP and literally came from my computer. So it wasn't anyone else here.

I am worried what else they stole? Like was it just 3dice? I am doing a computer security scan now but I am not sure what to really even look for..
 
if you have a failed atempt at depositeing or timed out the charge will stay as open then you delete it yourself its happened to me numorus times , if you got hacked then money would have changed hands and i dont think that happened
4 now R C
 
The thing is though I haven't used okpay. And it whoever it was tried to use okpay today to deposit 23.00. And there are multiple dating all the way back to start of February! So that doesn't make sense that it was just a failed attempt? Or am I not understanding?

Thanks for all the help too! : )
 
Sounds pretty odd. If the logins are from "your" ip address, how does that have anything to do with 3Dice? Would seem it's a security issue from your side.

Changing passwords and checking the security of your internet connection definitely a major.

Seriously wouldn't be looking at 3Dice for your issue, I'd be looking closer to home...
 
Nope! 3dice said it looked like someone got my password from getting into my IP address somehow.

Do you know if your using WEP ? WEP and WPA1 can be easily hacked right enough.

xxx.esecurityplanet.com/views/article.php/3924726/Upgrading-WiFi-Security-from-WEP-to-WPA2.htm
 
Could you clarify a couple of things, please.

Someone hacked or has your password to 3 Dice?

Someone hacked or has your password to OKPay, also? Ok pay requires a password right?

Also I thought OK pay wasn't working anymore, right?
 
Someone that somehow got into my 3dice account by stealing my password. Then they tried to make okpay deposits. I have no clue what they did with the okpay. I don't even have a account with okpay. They said all they could see was someone from my computer tried to deposit using okpay.

That is why I was asking what you guys thought. Because I really am nervous about something being wrong with my whole computer or just the 3dice account.

I have changed my password and all of that. Did a virus scan and it found nothing wrong!
 
You need to check your computer for trojans. I don't know if Norton does a good job at that now or not. I quit using Norton years ago.
Maybe someone else can recommend something that will check specifically for trojans.
 
Someone that somehow got into my 3dice account by stealing my password. Then they tried to make okpay deposits. I have no clue what they did with the okpay. I don't even have a account with okpay. They said all they could see was someone from my computer tried to deposit using okpay.

That is why I was asking what you guys thought. Because I really am nervous about something being wrong with my whole computer or just the 3dice account.

I have changed my password and all of that. Did a virus scan and it found nothing wrong!

Did someone set up a OKpay account in YOUR name?
 
Firstly, download a keylogger locater software, this is very good and simple to use
You do not have permission to view link Log in or register now.
, seems like someone hacked into your PC and used it from your end = the only possible explanation.

As far as beating your password goes have you set up a password for an administrator also?, if not, it is this easy, start PC in safe mode, log on as administrator, go to user accounts open your user account and change password, you do not need the old one.
 
Firstly, download a keylogger locater software, this is very good and simple to use
You do not have permission to view link Log in or register now.
, seems like someone hacked into your PC and used it from your end = the only possible explanation.

As far as beating your password goes have you set up a password for an administrator also?, if not, it is this easy, start PC in safe mode, log on as administrator, go to user accounts open your user account and change password, you do not need the old one.

You are real smart guy, What bad info you pass out.

Dont visit that site, It will attempt to install a trojon on your computer.

Norton Safe Web has analyzed dewasoft.com for safety and security problems. Below is a sample of the threats that were found.

dewasoft.com
Threat Report

Total threats found: 2

Small-whitebg-red Viruses (what's this?)

Threats found: 2
Here is a complete list: (for more information about a specific threat, click on the Threat Name below)
Threat Name: Backdoor.Trojan
Location: h**p://dewasoft.com/Software/CrazyTyping/crazytyping20.zip <<<< dont click


Threat Name: Direct link to Backdoor.Trojan
Location: h**p://dewasoft.com/Software/CrazyTyping/CrazyTyping.htm <<<< dont click


And that file will be a keylogger, Instead of removing the logger, It will install one.

Norton is rather good these days at catching things. I use the lastest Norton Internet Security 2012.
 
Last edited:

Okay, i`m going to put this down to the excitement that is caused by you learning to write in sentences, I just downloaded that keylogger software and scanned it with malwarebytes....

mb.webp

I have used this software many times, now go use a decent virus scanner and do some research on what a false positive is, don`t worry about apologising i`m not in the mood.
 
Okay, i`m going to put this down to the excitement that is caused by you learning to write in sentences, I just downloaded that keylogger software and scanned it with malwarebytes....

View attachment 32080

I have used this software many times, now go use a decent virus scanner and do some research on what a false positive is, don`t worry about apologising i`m not in the mood.

I know what a false positive is. Dont try and get smart with me. That site has a trojon, Simple as that. This guy needs proper help, Not someone pointing him to use outdated software. With questionable contents.
 
I know what a false positive is. Dont try and get smart with me. That site has a trojon, Simple as that. This guy needs proper help, Not someone pointing him to use outdated software. With questionable contents.

Why in the world are you so rude HadEnouth?
If you know so much more than Seventh, then I think you should try to help the OP instead.
I think he knows what he is doing.
 
I know what a false positive is. Dont try and get smart with me. That site has a trojon, Simple as that. This guy needs proper help, Not someone pointing him to use outdated software. With questionable contents.

Right hotshot, the link I gave is for kldetector 13, now prepare yourself for this the link you gave is a direct link to malware entitled crazytyping20 so in your ill prepared all guns blazing attack on me, for, and I quote `Giving a link for a trojan` you have posted direct links to a virus that had nothing to do with with the link I posted whatsoever...

NOTE TO MODS REMOVE THE LINKS HE POSTED THEY ARE A DIRECT DOWNLOAD FOR THIS - DESCRIBED IN FULL DETAIL CRAZYTYPING20.

Other people may take this opportunity to read about kldetector13 as it is depicted here.................

You do not have permission to view link Log in or register now.


Now take a long deep breath and read what is said about kldetector13 on that site.

Priceless, absolutely priceless, pmsl.
 
Why in the world are you so rude HadEnouth?
If you know so much more than Seventh, then I think you should try to help the OP instead.
I think he knows what he is doing.

He accused me of giving a link to a virus and included a so called link stating it was a virus, which in turn, turned out to be, wait for it.... a hot link to some malware ;).
 
None of this has anything to do with someone trying to make deposits into Rma's account with an okpay account he doesn't even have.

If it were me I'd be asking okpay who's account was trying to make deposits into mine. Maybe that will shed a little light on the subject.
 
He accused me of giving a link to a virus and included a so called link stating it was a virus, which in turn, turned out to be, wait for it.... a hot link to some malware ;).

That malware link is what came from the report visiting that website, I was making the point that when you visit that website, It will attempt to run and install those malware trojon on your computer, It was my Norton Internet Security Safe Web feature that caught it.

So you infact did post the link to the virus, Only diffirents is I warned people. Those maleware come from your link. Maybe you did not realise those links was imbedded in the html code of that site, but it auto runs those links when you visit the site you posted. So people without proper protection wont know it is running that stuff in the background.
 
He accused me of giving a link to a virus and included a so called link stating it was a virus, which in turn, turned out to be, wait for it.... a hot link to some malware ;).

And wait for it, You claimed the site was safe, It was a false postive, That I should learn what what a false postive is, Like I am stupid. And now you know they are not false postive. Yet where did I get that hot link from. From the web site that you posted h**p://dewasoft.com <<< dont click.

I know you gived the link for kldetector 13, Now you prepare yourself, For when someone visits your link, The site auto runs the links entitled crazytyping20 in the background. It was only becasue of my security I knew it was doing it. How else did I get those hot links, From the Safe Web report after My security caught it, Which let me know what it was and were it came from. I never ever typed that hot link in, I clicked on your link and my security said those two hot links that I posted were trying to run. Now do you understand.
 
None of this has anything to do with someone trying to make deposits into Rma's account with an okpay account he doesn't even have.

If it were me I'd be asking okpay who's account was trying to make deposits into mine. Maybe that will shed a little light on the subject.

I asked that earlier but the question wasn't answered.

OP?????
 

From the link I provided, the downloaded zip file, and what is inside the zip file, I get no executables running until I click your link, and it automatically downloads a zip file called crazytyping20, I don`t know where you got that link from, but it wasn`t from mine.........


KL12.webp
 
So, I just visited the home page of Dewasoft.com, and lo and behold, the so called backdoor trojan that Norton has labelled as a threat, and I quote.......


Is nothing more than a prank set up by the guy that owns the site.......

ct20.webp

Once again, outstanding work done by Norton security, false positive, as I stated earlier.

The reason I mentioned keyloggers btw was the OP mentioned passwords had been broken and, as much as this could be an embarrassing situation for him, you have to go way back when keyloggers were 1st introduced and their main purpose which was security measures taken by office personal to spy on the staff at work, now, he stated that no-one uses his PC because they do not know his password, there are not many answers for this situation, but, they all point to one direction, a close friend for some bizarre reason, or a hijacked PC, both cases would still require a way of locating and logging your passwords etc - keyloggers.
 

Fair enough. Even thou I never visited the main page Dewasoft.com, I got the links warnings from when I clicked your link. For some reason, Norton claimed the site was a threat. And for the most part Norton has been good and not gived me any false postives in a long time. I assumed it was right and decided to let people know to be carefull. Maybe I tend to be too trusting of my Security Software, but it is better to be safe than sorry.
 
I do not use aol.

I had a friend look and as far and they could tell they saw no keylogger and Norton picked up no trojans.

So I am at a loss on how it happened!

3dice has been very helpful but I obviously picked something up. It just doesn't make sense!
 
I do not use aol.

I had a friend look and as far and they could tell they saw no keylogger and Norton picked up no trojans.

So I am at a loss on how it happened!

3dice has been very helpful but I obviously picked something up. It just doesn't make sense!

Seems odd, if your system is secure then I'd do as many have suggested change all your passwords.

Use upper and lower case letters and numbers within the password to make it more difficult to hack.

Before going crazy looking for the problem I'd confirm again that it was in fact your IP address logging in each time.

I recently had someone hack one of my smatermail accounts just for the purpose of sending spam email. I'm sure a bot cracked it and this is why I stress the fact that email isn't secure unless encrypted.

Hopefully a few password changes and you'll be fine. :thumbsup:
 
And I hope I clarified that I didn't get anything from 3dice! It seems to be on my end. Just wanted to make sure no one thought I was bashing 3dice or saying it was thier fault! They are a awesome casino! :thumbsup:
 
And I hope I clarified that I didn't get anything from 3dice! It seems to be on my end. Just wanted to make sure no one thought I was bashing 3dice or saying it was thier fault! They are a awesome casino! :thumbsup:

I understand you're not bashing, just looking for help with a problem. :D

Change all passwords and especially check your wireless connection as VWM suggested below.


Are you on a wireless home network?

The fact that this has come from your own IP address suggests that if it hasn't been done through your computer, it has at least been done through your internet connection, which would be possible if you were on a wireless network which had been hacked into.
 
Last edited:
Fair enough. Even thou I never visited the main page Dewasoft.com, I got the links warnings from when I clicked your link. For some reason, Norton claimed the site was a threat. And for the most part Norton has been good and not gived me any false postives in a long time. I assumed it was right and decided to let people know to be carefull. Maybe I tend to be too trusting of my Security Software, but it is better to be safe than sorry.

Okay, we will leave it there :), an afterthought - all security software must be regularly updated as new viruses and stuff are released every day, when you update from your respective security data base that data contains complex details of the latest bad stuff out there, which in turn has been thoroughly researched by virus analysis experts and has the respective scripting/codes for the viruses, now Norton picked up on this site and stated it was a threat that carried embedded script in the url, did they research this thoroughly?, i`ll break it down, I am neither an IT guy or an internet security software analyser, it took me one visit to the respective site to solve this, a visit I would have done sooner if I had the time, but a single visit nonetheless.

Norton employ people to do research like this, how did these researchers come to the conclusion that a site run by a guy whose freeware is openly available to all, and is a none profit organisation and has software that will trace the hardest to locate security risk viruses out there, and the ones that do the most harm, for free, as a security threat, when it is blatantly plain to see that the (detailed by them as a Trojan) is nothing more than a harmless prank internet type toy, a piss poor analogy from a piss poor security software imo.
 
Why would someone hack into his computer or use any of a variety of ways to crack or get his password and use it to log into 3dice and then try to deposit?

How would the culprit withdraw if he or she won?

Surely someone smart enough to gain access to someone else's account would know he or she couldn't withdraw any money back to their own account. I know if I win money I can't withdraw it back to someone else's ewallet or cc.

If someone was going to deposit and play why not just create or use their own account?

I'm pretty sure 3dice can find out who owns the okpay account that was used to try to make the deposits. Once that little mystery is solved things will probably make more sense.
 

They must have had a plan, else why do it.

If the OKPay account were also hacked, it would not be about winning, but stealing the money from the OKPay account.

Also remember that 3Dice has "gifting" among other unique features, and such features CAN be used to get money from one 3Dice account to another, which is how the hacker probably planned to withdraw it. The attempts to scam OKPay didn't work, so the hacker was unable to get hold of any money, but did manage to leave a trail.

Now that this has been busted, the hacker will probably keep a low profile in order not to leave any more evidence lying around. Finding out how this was done is important, as it allows preventative measures to be put in place.
 

This is why my money is on the OP`s PC was hijacked rather than his network being hacked, if the hacker had simply broke his network password he would still have a lot of work to do in finding out his 3Dice password etc, as we all know - basically any casino we have installed on our PC`s has auto log in enabled.

Good analogy regarding their plan to get cash, pretty similar to `Chip dumping` strategy ;).
 

nifty to answer your question if and i say if it was a actual event it would be played out like this , the hacker would gift the money to a friend or him self , but of course it would be traceable very easy ,

but it was and is still a security threat in in poker rooms as they can go to a table and dump the money to a gnome player
 
this is a add on to the above does the 3 dice client leave a finger print of the actual client installed on a players pc along with the isp adress if it does than its a fail safe method any one chime in here if you know
 
Hi ma20,

Your security audit log shows no irregularities. This means we can positively guarantee that all logins on your account were
made from your computer, using the same 3Dice install as you use all the time, and logged in as the same user in windows.
We also see no evidence of password guessing attempts (apart from a couple of mistyped passwords this morning - probably
because you changed your password ?).

In short, this means your computer security has been compromised and someone other than you is capable of running 3Dice
on your machine, from your windows account. There are only two possible ways for that - the most likely one is still that
someone with physical access to your computer has somehow gotten hold of your passwords and has logged in. The alternative
is malware, with the added note that most remote-control malware out there would not be capable of displaying the openGL
based 3Dice client correctly.

It looks like yesterday's okpay transaction is not a real deposit attempt but rather just this person clicking
around. (they never did anything on the okpay page that pops up - resulting in no traces of this on the okpay backend.).

To resolve the situation I would strongly advice you to :
- make sure you scan your computer with latest AV and anti-spyware tools.
- change not only your 3Dice password but also your windows user password.
- if you store your passwords anywhere - either electronically or physically - make sure they are safe and unreachable.

Regards,

Enzo
 

I was pretty sure that if someone logged into your 3Dice account it had to have been from your own computer. Even if a keylogger was used to record your password the person who used it would have to have your account number too. I don't think most people retype that every time they log in.

I agree with Enzo, the best thing is to change your windows password and shut your computer off when you're not around. That way people can't be mucking around with it when you're gone.

Now on a side note if there is a hacker out there attempting to make deposits into other people's accounts let me know. I'll take all the help I can get. :p
 


Write your reply...

Users who are viewing this thread

Accredited Casinos

Read about our rating system and how it's done.
Back
Top