Welcome Guest
Log In | Register )
You last visited December 4, 2020, 11:42 pm
All times shown are
Eastern Time (GMT-5:00)

NJ Lottery mistakenly printed malicious website address on lottery tickets

Aug 28, 2020, 12:26 pm

Share this news story on Facebook
Tweet this news story on Twitter
New Jersey LotteryNew Jersey Lottery: NJ Lottery mistakenly printed malicious website address on lottery ticketsRating:

By Kate Northrop

The New Jersey Lottery misspelled the address of their second-chance website on lottery tickets, leading players to visit a malicious website with the potential to install malware on their computer.

According to the Lottery, a state vendor programmed store registers to print an incorrect web address on tickets for playing "Collect 'N Win," a second-chance promotion that has been running for about three weeks.

Bill Bauer, a former software engineer from Edison, said he encountered the error while trying to take advantage of the promotion with the Pick 3 lottery ticket he purchased at the Quick Buy Convenience Store in Edison on NJ-27.

After visiting the website printed on the bottom of the ticket, he instantly knew something was amiss.

"A message came up on the screen, saying 'Your computer has been hacked,'" Bauer recalled. "And it started doing some counting down, and it said you have so many minutes to click 'here' to correct the problem. I knew that it was a malicious website."

Those who visited it may have faced other sneaky attacks such as pop-ups and messages that might prompt an unsuspecting user to click on something they shouldn't. A scammy website like this one might also attempt to load malware or malicious code automatically, even without the visitor clicking on anything.

"I'm sure that other people are not as sophisticated, especially if they go to a New Jersey Lottery-sanctioned site and then are told 'you've been hacked,'" Bauer added. "That almost adds a power of magnitude of authenticity."

After the Lottery was informed of the printing error, New Jersey Lottery Communications Manager Missy Gillespie said that the website should have read "njcollectandwin.com." Instead, the word "and" had been replaced with the letter "n." It is possible that a scammer noticed the misprint and bought the domain to host the fake website.

In an e-mail, Gillespie stated that the Lottery had received 700,000 entries in the past three weeks for the Collect N' Win promotion but had not received any calls or emails regarding the problem. The printing error has since been fixed.

The Lottery is currently trying to identify who created the look-alike website and is investigating what can be done to get it removed. The Lottery also encourages those who have questions or concerns to call 800-222-0996 or email publicinfo@lottery.nj.gov.

As of the time of this writing, the fake website is still in operation. Lottery Post visited the website using a "sandboxed" session that prevents infection of the computer, and a screenshot is included below.

The website is intended to mimic the look of common McAfee anti-malware software, stating (wrongly) that the person's computer is infected.  The website also plays a loud error tone that is designed to sound like an important alert. If a person were to click the buttons on the fake warning messages, the website would proceed to actually infect the person's computer with malware.

Anyone seeing malicious websites like this should immediately close the browser tab that is showing the page, and be careful to not click any of the buttons on the page before closing it.

News story photo(Click to display full-size in gallery)

Lottery Post Staff

We'd love to see your comments here!  Register for a FREE membership — it takes just a few moments — and you'll be able to post comments here and on any of our forums. If you're already a member, you can Log In to post a comment.

6 comments. Last comment 3 months ago by music*.
Page 1 of 1
Raven62's avatar - binary
25
New Jersey
United States
Member #17842
June 28, 2005
134733 Posts
Offline

Is it possible the NJ Lottery knew about the bogus website?

When the NJ Lottery attempted to create njcollectnwin.com they discovered that it was already taken.

So, they did the next best thing: They created njcollectandwin.com.

A mind once stretched by a new idea never returns to its original dimensions!

Catch-22: A dilemma or difficult circumstance from which there is no escape because of mutually conflicting or dependent conditions.

Corruptissima re publica plurimae leges: When the republic is at its most corrupt the laws are most numerous.

    Avatar

    United States
    Member #205225
    March 19, 2020
    19 Posts
    Offline

    According to the Lottery, a state vendor programmed store registers to print an incorrect web address on tickets for playing "Collect 'N Win," a second-chance promotion that has been running for about three weeks.

    My assumption ... someone connected to that 'State Vendor' who did the programming knew exactly what they were doing and is involved with this scam.

      music*'s avatar - DiscoBallGlowing
      USN United States Navy
      Fresno, California
      United States
      Member #157851
      August 2, 2014
      3959 Posts
      Offline

      Thank You Kate Northrop  for this alert for New Jersey Lottery players. It is being seen throughout the Country and World. 

       The print on the photo is a bit blurry. US Flag

       "We are all in this together!" 

        Avatar
        Chasing $ Millions.
        White Shores- California
        United States
        Member #136473
        December 12, 2012
        6398 Posts
        Offline

        When it comes to money, you can almost always count on someone causing mischief.

         

        hocus pocus film GIF

         * Voice of Reason *   

         

        People who say it cannot be done should not interrupt those who are doing it- George Bernard Shaw.

          Todd's avatar - Cylon 200.jpg
          50
          Chief Bottle Washer
          New Jersey
          United States
          Member #1
          May 31, 2000
          25929 Posts
          Offline

          Thank You Kate Northrop  for this alert for New Jersey Lottery players. It is being seen throughout the Country and World. 

           The print on the photo is a bit blurry. US Flag

          If you cannot clearly see the photo, then click/tap on it and you will see it full-size.  (It states these instructions right below the photo.)

           

          Check the State Lottery Report Card
          What grade did your lottery earn?

           

          Sign the Petition for True Lottery Drawings
          Help eliminate computerized drawings!

            music*'s avatar - DiscoBallGlowing
            USN United States Navy
            Fresno, California
            United States
            Member #157851
            August 2, 2014
            3959 Posts
            Offline

            If you cannot clearly see the photo, then click/tap on it and you will see it full-size.  (It states these instructions right below the photo.)

            Thank You Todd. I followed the instructions and saw the photo clearly.

             "We are all in this together!"