Cyber Extortion Group Whitearmor Demands $15 Million Bitcoin Ransom from Crypto Casino Gamdom

TechFlow reported on October 27 that, according to Bitcoin.com News, cyber extortion group Whitearmor claimed on October 26 to have stolen 15,420,003 account records from crypto casino Gamdom, each containing 146 data fields, and demanded $15 million in Bitcoin, threatening to publish sensitive customer information otherwise. The group has posted an approximately 437KB JSON sample containing about 100 records on its extortion website as purported evidence, and said the cumulative profit value associated with these accounts exceeds $1 billion, but did not explain the calculation method. The attackers reportedly exploited an internal machine account whose credentials had not been rotated for an extended period and still retained administrator privileges.

Previously, Gamdom suffered a hot wallet attack on October 13. Founder Felix Römer acknowledged losses exceeding $3 million, while blockchain researcher vxdb estimated the stolen amount across multiple networks at approximately $4.2 million. The platform suspended operations and resumed on October 16, stating that user balances were unaffected. Gamdom disputed the scale of 15.4 million accounts, but acknowledged that usernames, email addresses, and gambling activity information may have been exposed, while stating that identity verification documents were not affected.

Source: TechFlow