Hacked Accounts

my account was also hacked apparently.

"

phlegyas12 wrote:

My account was put on lockdown, I got warned of the suspicious login by email and prompted to input the code so I could log back in. I logged in to find all my orbs were gone, the rest was untouched. All of that in the same day. The email I use has a unique password, so does PoE.

did you change your password before unlocking it?

if so, then i think they should really put some more explanation on the mail about the whole situation when the account is getting locked. they have your password, and they still have it the moment you unlock the account using the code, so yes they will instantly log in that account (split second, especially since it was a bot). you don't need to unlock it to access your account and/or change the password on the website.

"

Wesgile wrote:

"

phlegyas12 wrote:

My account was put on lockdown, I got warned of the suspicious login by email and prompted to input the code so I could log back in. I logged in to find all my orbs were gone, the rest was untouched. All of that in the same day. The email I use has a unique password, so does PoE.

did you change your password before unlocking it?

if so, then i think they should really put some more explanation on the mail about the whole situation when the account is getting locked. they have your password, and they still have it the moment you unlock the account using the code, so yes they will instantly log in that account (split second, especially since it was a bot). you don't need to unlock it to access your account and/or change the password on the website.

I unlocked it and instantly logged onto my main(So that split second was actually me!) to check my inventory. The orbs were gone, and my character was also taken from the Sarn encampment in act3 where I had left it to Lioneye's in act1.

edit: I understand the point you're trying to make but as you can see from my own experience, that reasoning is as flawed as the locking system. Someone somehow logged in freely, walked my main and teleported and traded all my orbs away.

The main problem is the lack of support from GGG restoration is a simple matter the policy needs to change.

Pissing off paying customers never a smart idea

"

Koxk wrote:

"

madbrahmin wrote:

The majority of the population is infected with at least one piece of malware.

Yes, this includes you.

The majority of the population don't know how people can get their account hacked.

Yes, this includes you.


It has happened before(d3, Rift) SQL injections.. The hackers doesn't even need to know your god damn login name. What made this possible this time was the unstable servers they had a while back.


Stop thinking it's our fault, when you don't know jack shit

Yeah I'd be happy to back up this claim that it's the users faults but I find the rate that accounts are being compromised is alarming. I love PoE and I'm a gold supporter to prove it. Here's an interesting article that shows that compromises happen and even the developers didn't know until a player of the game showed them the problem and they admitted there was a hole in their code. Ironically they blamed external fansites etc from the start but had the balls to admit to it finally.

Worth a read before you go slamming everyone as it's your fault, I know for a majority it is but I've got some spidey senses that there is something deeper here. Anyways tinfoil hat off and have a read.

Source Article

This game is the only game I've ever been 'hacked' on, and the new ass-backwards security feature is exactly that. What is the point of locking my account when a foreign login is detected if you only do it after its occurrence? My email isn't even compromised and I hadn't gone to any new sites.

Anyway, I'm washing my hands of this game because I don't want to deal with starting over upon starting over until a date comes in which the hacked rate isn't at such a staggering point. At least then all of the blame could rightfully be dumped on the players.

I did full scans just to be on the safe side, but all of them told me what I already knew: that there was nothing compromised nor anything even remotely questionable on my PC. See you around.

I am not sure if I got hacked or not. Today I couldn't log in before I entered a code that was sent to me by email.

The message ingame said it was a security check because I had logged in on a different location/PC then usual. After entering the code I could log in again and anything was like before (no missing items etc...).

Strange is that only because I have never logged in to PoE (neither the website nor the game) anywhere else than on my PC, also I have not changed any hardware in my PC or changed the internet provider. Maybe just a bug (?)...

Is sad that the only option is to do nothing, i've been playing wow for 6 years and never hacked, now a chinese stole the most valuable orbs from my account and your response is "we can't do nothing? well, game dropped.

"

Eninya wrote:

This game is the only game I've ever been 'hacked' on, and the new ass-backwards security feature is exactly that. What is the point of locking my account when a foreign login is detected if you only do it after its occurrence? My email isn't even compromised and I hadn't gone to any new sites.

Anyway, I'm washing my hands of this game because I don't want to deal with starting over upon starting over until a date comes in which the hacked rate isn't at such a staggering point. At least then all of the blame could rightfully be dumped on the players.

I did full scans just to be on the safe side, but all of them told me what I already knew: that there was nothing compromised nor anything even remotely questionable on my PC. See you around.

This is completely not how it works.

When my IP switches, I cannot login without entering my activation code first.

In every single case where people are still getting hacked right now, YOUR EMAIL ADDRESS THAT YOU USE FKR THIS GAME HAS BEEN COMPROMISED.

Cry all you want that you think your email is safe, I don't believe that anyone that was hacked bothered to create a new email account and password just for this game, and if you did then you've already been typing it all over the internet or onto gold seller websites and stuff.

Look for an email provider with a seperate authenticator for maximum security.

That's not true. My account was hacked and they never got into my Email. Gmail keeps logs that you can view of the IPs and locations of the recent history of logins into your account, so that is easy to check. On top of that, the "hackers" never actually got into my account because they never managed to get the authentication code from my email for trying to log in from a different location.

This tells ME, that the hackers are getting information from GGG, from the game somehow, since they had my game password, but not my email password.

So yes, it's unfortunate that some people use the same password for their email as they do for the game, but it seems to me the hackers are using game account information to get into the emails, not the other way around.