Hacked Accounts

I made the horrible mistake of playing metal gear rising right when all this info was hitting the forums(somehow i just missed it, I think i even came here one day at work. Im definetly not skipping announcements now), so i didn't change my PW. I played 2 nights before the patch for about an hour. All my stuff was there. The night before the patch, i didn't play(was playing rising). Rising was quite short, so the day of the patch, I came back.....and all my orbs(minus transmutation) were gone.

My computer is definitely not compromised. I use kaspersky, It updates and runs a check every day. Plus, I wont even DL a picture from an email, let alone a 3rd party program. I don't purchase items for real money, and I've been playing online games since the city of heroes first launch without ever being hacked. I always used an authenticator with any game that had one, I seriously thought it would never happen to me.

The mistake I made was using the same PW I used in diablo I guess. So many big companies were hacked in the last year or so, they claim our info wasnt compromised, but Im now sure they are full of shit. The only reason it probably didn't happen in diablo or SWTOR is the authenticator I used.

Its a damn shame I didn't have the option to use one here. And im quite upset about losing my orbs, esp since the devs are not doing rollbacks. I understand they are a small company, but since they did not provide us with any security up front, I really feel that anyone who was hacked pre patch should be taken care of, since there is no way for people to pull the buddy switch they are so afraid of if they just take care of us that got hacked before.

I know it wont happen, so whatever, I made a new character(i just couldn't keep going with the ones I had, even though I only lost my orbs, it just took the wind out of me,(and all the white 5l gear i had stocked to help progress with them was useless without my orbs), and ive managed to get back maybe 1/4 of my orbs(most of the less exp ive gotten back, but ive got like 1 alch, and 2 chaos in 35 lvls). I didn't have that many compared to most people with multiple characters in cruel or higher, but its still crap, cause that was everything I had earned since the game launched.

The last thing id like to say, is I am sick of people acting like this is all our own fault. Sure, i used a PW i used for diablo, Ill take the blame on that one, but I already use about 10 different PW, Im not a damn robot. I have trouble remembering them. I did everything else in my power to protect myself(and have been successful for over 10 years), some blame has to be put on GGG for not having the countermeasures in as soon as open beta started. Assuming that we all must be cheaters using 3rd party programs, who DL tons of porn, have no safe surfing practices, and had to have bought stuff from real money sites its retarded. Im sure some people did just that, but don't assume we all did. Some of us just have shit luck, if you saw my loot, youd understand, im one of the ones with shit luck.

I think its a bot. Here is why.

1. It took all my orbs and all my equipped gear, even white offhand gear without gems in it.
2. It didn't take my which was right next to my orbs.
3. It even took alteration orbs.
4. It didn't take any orbs off my mule, which was cleverly named Mud_MuleOrbs
5. It didn't take any of the valuable uniques I had on Mud_Uniques

Perhaps a suggestion for everyone to do the follow.

Before you log out, unequip your gear into the stash somewhere, and make sure all your valuable orbs are on a mule account. It might protect your at least somewhat for now.


Lost over 40 gcps, 10+ exhalts, 60+chaos all my lvl 20 gems and my main characters gear. I haven't actually played PoE in like 5-6 days days. And, was hacked sometime 2 hours from now, from my own location.


I think I was pretty careful. I haven't actually had to manually log in since I first joined in December.

I have a unique pass for my email, and my PoE account. That email is specifically created for PoE, and I only use it for PoE.

Not so much angry that I lost all my orbs and gear... but, gems really piss me off. My main character might as well of been deleted.

Hopefully everyone learns something from this and always uses a unique password with symbols like these !@#$%^&* and has atleast 10 characters or more and they wont have to worry as much about loseing everything :) have a nice day...

"

jalford wrote:

My computer is definitely not compromised. I use kaspersky, It updates and runs a check every day.

Idiot...................

"

jalford wrote:

The mistake I made was using the same PW I used in diablo I guess. So many big companies were hacked in the last year or so, they claim our info wasnt compromised, but Im now sure they are full of shit. The only reason it probably didn't happen in diablo or SWTOR is the authenticator I used.

Idiot again.........

"

wonko33 wrote:

I don't understand how people are still getting hacked

People are fkn stupid.

New Java vulnerability is being exploited in the wild; disable the plugin or change your security settings

http://thenextweb.com/insider/2013/03/01/new-java-vulnerability-is-being-exploited-in-the-wild-disable-the-plugin-or-change-your-security-settings/


Can compromise your computer since last patch, 15th Feb.2013.
And no update availeble,so its a 0-day.

Disable asap

http://blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html


(Oracle,the Java producer,refuse to make a public statement on this so far.All info they have given out regarding this,is they are still investigating it)

"

xSleMMx wrote:

New Java vulnerability is being exploited in the wild; disable the plugin or change your security settings

http://thenextweb.com/insider/2013/03/01/new-java-vulnerability-is-being-exploited-in-the-wild-disable-the-plugin-or-change-your-security-settings/


Can compromise your computer since last patch, 15th Feb.2013.
And no update availeble,so its a 0-day.

Disable asap

http://blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html

It's nice informing others about such things but this is hardly related to the topic. People aren't getting hacked because of Java vulnerabilities (unless such vulnerability allowed hackers to get into GGG's database, which might be likely)

Yeah,most likely it isnt this Morgawr that couse the hackraids.
Though,they havent fully found the logger,s "quest" yet,so it might be oki to disable,just to be sure.

Here,s the log they made so far on the file:
( Detection ratio: 24 / 46 )
https://www.virustotal.com/nb/file/c5bdf8572d3fe3c110e3c56ebd2433169ea968818ec811faf72b322d9bcf94b8/analysis/

"

Morgawr wrote:

It's nice informing others about such things but this is hardly related to the topic. People aren't getting hacked because of Java vulnerabilities (unless such vulnerability allowed hackers to get into GGG's database, which might be likely)

This time.. not just an idiot.. but a fucking idiot...

"

Chris wrote:

I want to be completely clear - our security has not been breached. If our database had been compromised, the accounts that attackers would target first would be the most wealthy players, the high profile streamers or the developers. Imagine how much it'd be worth to compromise my account? Kripparrian's? The top people on the ladder? These people have not lost their passwords. There has been a 0% rate of developer accounts being accessed by overseas IPs. The accounts that are being targeted are generally mid-low playing accounts, typically associated with the usage of hack software. We often have users write into support complaining about side effects of their maphacks, only to later report the same day that their items have been stolen. It is worth pointing out that these hack programs are bannable, and while we haven't yet done a banwave, the thousands of people who use them will lose their accounts due to it if they are still running them as we turn on our countermeasures.

while i'm not saying that it's incorrect, but i don't think that's a good reason/proof. i mean, people should know to not kill the chicken with the golden eggs, right?

and even if it's because people reused the same passwords as some other games/sites or even due to some software security breach, then why don't they get hacked on all of those games/sites, instead of just their PoE account? PoE is still new, why would the hacker risk the user changing their passwords and all such, for an uncertain gain on a PoE account, while they might have much better loot on the user's other game accounts?

i've not been hacked myself, but comparing to other games the frequency in which people get hacked seems 'alarming', to say the least. just a gut feeling, but some of the ones getting hacked here actually seems knowledgeable enough and honest in that they didn't actually do those blatantly stupid things some people accused them of.

edit: also, compared to some other game communities, the community here seems to be overly hostile to them for some reason.

edit2: two different people, very unrelated to each other separated miles away on a different hemisphere, didn't share the same gaming circle/games/anything except PoE. both gets a hack attempt from "Shaoxing, Zhejiang, China". food for thought.