...
I wonder if this script can send a withdrawal request or change the withdrawal address though. Since it has an access to the client side, it can do whatever it wants. (From your side)
Yes, it can do both. An unauthorised withdrawal was initiated on my account. And it was able to bypass my profile address.
Shiet. Now we all can panic.
TheQuin where the hell are you man your establishment has caught FIRE!
Absolutely!
If you have 2FA enabled you won't get a payment request confirmation email from freebitco.in
What you will get is a payment sent confirmation email.
The attackers targeted the bigger fish. This time...