[virtozo]

Hi all,
my mom BetFair account was hacked somehow and that person blew all the funds of 1000+ euro on the casino.
Betfair suspended the account and started 'investigating', after a month they concluded that the account was not compromised!?! However they cannot provide the IP address used to login on the day of the intrusion because they admited a software bug that displayed the address 10.10.10.200 as login IP. They said that this IP is not real; after I insisted on providing an IP they changed their mind and said that the IP was real and they cannot conclude if the account was compromised or not!
They clearly deny -of course- any liability and refused to reimburse the funds.

Did anybody notice that login bug around end of november 2009 where all logins IP where like 10.10.10.200 ( the last 3 digits may vary)?

Any idea how to deal with this kind of situation?
Thanks.

[vanman]

The easiest way to deal with this is to stop logging in to your moms account and blowing all her money,then claiming that someone hacked her account.

[virtozo]

The easiest way to deal with this is to stop logging in to your moms account and blowing all her money,then claiming that someone hacked her account.

that was funny vanman, in fact it was my money, I gave her the money to bet and really the situation is real! (Or maybe she wasted all the funds and claimed a hack )
She barely knows computers and doesn't even speak english, not to mention she doesn't even know what a hacker is!
I am surprised by Betfair attitude witch also suspected this and their so-called investigation was absolutely nothing...this was just a 'fun' hack, all the money went to Betfair, they are just glad to receive it!!
What amazed me most is the IP situation, claiming that was real, I have check it online, and it is not real as they said the first time.

[pjesnik24]

they must have logs of the games so ask for it

[Stumpage]

The easiest way to deal with this is to stop logging in to your moms account and blowing all her money,then claiming that someone hacked her account.

That was a good Monday morning chuckle.....

[noyb]

even if your account was somehow hacked (altough stories concerning the account of someone's mother, father, brother, nephew, girlfriend, etc. are usually false), how is betfair liable? it's your own (or better: your mum's) responsibility protecting your login data.

[virtozo]

I didn't say it is Betfair fault! I only said i was surprised by their attitude (and most of you here) that it was not true!
They could not say for sure the IP used to login from that day, which seems strange. I only wish you non-believers to experience this hacking thing and you won't be such experts in verdicts!

anyway i open this thread to get some advice - if any - from people who were in similar circumstances and had their account compromised, so to know in the future how to protect from this incidents.

For example on my account which I use only for betting I blocked access to all other Betfair products (poker, games, casino, arcade, etc.). I was only aware I could do this after this experience!

If you don't believe that this things happens just ignore this subject.

[spartangreen]

IP Information for 10.10.10.200

IP Location: Private Ip Address Lan
IP Address: 10.10.10.200
Blacklist Status: Clear
OrgName: Internet Assigned Numbers Authority
OrgID: IANA
Address: 4676 Admiralty Way, Suite 330
City: Marina del Rey
StateProv: CA
PostalCode: 90292-6695
Country: US

NetRange: 10.0.0.0 - 10.255.255.255
CIDR: 10.0.0.0/8
NetName: RESERVED-10
NetHandle: NET-10-0-0-0-1
Parent:
NetType: IANA Special Use
NameServer: BLACKHOLE-1.IANA.ORG
NameServer: BLACKHOLE-2.IANA.ORG
Comment: This block is reserved for special purposes.
Comment: Please see RFC 1918 for additional information:
Comment: http://www.arin.net/reference/rfc/rfc1918.txt
RegDate:
Updated: 2007-11-27

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone: +1-310-301-5820
OrgAbuseEmail:

OrgTechHandle: IANA-IP-ARIN
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone: +1-310-301-5820
OrgTechEmail:

[virtozo]

as stated above, betfair said first that this IP is a bug they had from the new download casino software, it is not a real ISP!
Don't make me post their email - coz I heard it is not allowed...and the 'investigation' it's not over yet I think...
Anyone with advanced computer knowledge can confirm this? not just use whois.

[Stumpage]

I can only add that I find spartangreen's post interesting, as years ago my IP was showing up as coming out of Marina Del Ray, California for many months. Fortunately, it didn't lead to any problems but I had no idea how that occurred in the first place (And still don't).....

[virtozo]

TraceRoute to 10.10.10.200
Hop(ms)(ms)(ms)
IP AddressHost name124246

-2Destination network unreachableDestination network unreachableDestination network unreachable

-3Timed outTimed outTimed out

-4Timed outTimed outTimed out

-5Timed outTimed outTimed out

-Trace aborted.


Ping 10.10.10.200
Timed out
Timed out
Timed out
Timed out
Timed out
Timed out
Timed out
Timed out
Destination network unreachable
Destination network unreachable

Average time over 10 pings: 0 ms