Compromised PoE Accounts: Stolen Items and Hacked Accounts - Discussion and Leads

"

ex_IllusionisT#8571 wrote:

Don't install shit on your computers.

I've had 3 steam accounts hacked because I was dumb enough to install cracked office. They made off with my cs go skins, without even using my password.
They hijack the session. They don't need your password.

All we have here is your word that you didn't use any 3th party apps.

I don't think this is a GGG issue but a steam issue.
Even if they add more security to PoE, session hijacks won't care.

Enable family view on steam as extra security, and put all games behind that pin code. They wont be able to do anything even if they hijack your session without the pin to exit the session.

Unless GGG comes out and admits to a breach, and as a tech that's been working in IT for over 10y, I'm inclined to believe that its far more likely user stupidity than established security system.

Stop. Using. 3th party tools, and never disable anti-virus to install them. It detects them for a reason.

"

Malejas#1960 wrote:

You are the type we are talking about that is not fully reading the posts and just defending GGG.

My account uses an external password manager
My account has random 30+ chats
My account passwords are not shared between accounts
My account has 2fa on steam
No emails of external access to my steam account
No 3rd party apps
No 3rd party websites
No overlays
I was only trading using the official website
I was not even in a party when this happened.

This is 100% a GGG issue/exploit. We can make random excuses all you want but some of us don't fall into "change your password" idea. Many are in the same criteria as me, some use apps, some don't. The only thing in common is the game itself

"

WinterMaps#2257 wrote:

"

ex_IllusionisT#8571 wrote:

Don't install shit on your computers.

I've had 3 steam accounts hacked because I was dumb enough to install cracked office. They made off with my cs go skins, without even using my password.
They hijack the session. They don't need your password.

All we have here is your word that you didn't use any 3th party apps.

I don't think this is a GGG issue but a steam issue.
Even if they add more security to PoE, session hijacks won't care.

Enable family view on steam as extra security, and put all games behind that pin code. They wont be able to do anything even if they hijack your session without the pin to exit the session.

Unless GGG comes out and admits to a breach, and as a tech that's been working in IT for over 10y, I'm inclined to believe that its far more likely user stupidity than established security system.

Stop. Using. 3th party tools, and never disable anti-virus to install them. It detects them for a reason.

It's understandable to assume a malicious program/hack when only a few people report an issue, but we are far beyond that point. There are numerous cases now, involving a wide range of circumstances—players using third-party programs, players without any, and even players on consoles.

At this stage, it’s crucial to set aside any bias. This thread is approaching 20 pages of reports, and it’s reasonable to believe that many affected players are not even posting here—they’re simply quitting or moving on to other games out of frustration.

The problem is widespread, and dismissing the experiences shared here isn’t helpful. As a guild leader, I’ve seen two long-time POE1 players quit the game outright. Neither posted here, but both were deeply frustrated. One used Overwolf, the other didn’t use any third-party programs, yet neither received an email unlock code. Both scanned their systems thoroughly with no issues found.

We need clear action and guidance from GGG on how to address this situation and ensure players can protect themselves effectively.

"

ex_IllusionisT#8571 wrote:

"

WinterMaps#2257 wrote:

"

ex_IllusionisT#8571 wrote:

Don't install shit on your computers.

I've had 3 steam accounts hacked because I was dumb enough to install cracked office. They made off with my cs go skins, without even using my password.
They hijack the session. They don't need your password.

All we have here is your word that you didn't use any 3th party apps.

I don't think this is a GGG issue but a steam issue.
Even if they add more security to PoE, session hijacks won't care.

Enable family view on steam as extra security, and put all games behind that pin code. They wont be able to do anything even if they hijack your session without the pin to exit the session.

Unless GGG comes out and admits to a breach, and as a tech that's been working in IT for over 10y, I'm inclined to believe that its far more likely user stupidity than established security system.

Stop. Using. 3th party tools, and never disable anti-virus to install them. It detects them for a reason.

It's understandable to assume a malicious program/hack when only a few people report an issue, but we are far beyond that point. There are numerous cases now, involving a wide range of circumstances—players using third-party programs, players without any, and even players on consoles.

At this stage, it’s crucial to set aside any bias. This thread is approaching 20 pages of reports, and it’s reasonable to believe that many affected players are not even posting here—they’re simply quitting or moving on to other games out of frustration.

The problem is widespread, and dismissing the experiences shared here isn’t helpful. As a guild leader, I’ve seen two long-time POE1 players quit the game outright. Neither posted here, but both were deeply frustrated. One used Overwolf, the other didn’t use any third-party programs, yet neither received an email unlock code. Both scanned their systems thoroughly with no issues found.

We need clear action and guidance from GGG on how to address this situation and ensure players can protect themselves effectively.

I understand.
If it was data breach this wouldn't be 20 pages long. It would be tens of thousands of people. Not thousands. There are barely 30 unique users in this thread.

Also, it's so much easier to blame anyone. ANYONE but our own negligence.

"

ex_IllusionisT#8571 wrote:

"

Malejas#1960 wrote:

You are the type we are talking about that is not fully reading the posts and just defending GGG.

My account uses an external password manager
My account has random 30+ chats
My account passwords are not shared between accounts
My account has 2fa on steam
No emails of external access to my steam account
No 3rd party apps
No 3rd party websites
No overlays
I was only trading using the official website
I was not even in a party when this happened.

This is 100% a GGG issue/exploit. We can make random excuses all you want but some of us don't fall into "change your password" idea. Many are in the same criteria as me, some use apps, some don't. The only thing in common is the game itself

And I don't believe you.
It doesn't need to be a 3th party app.

It can be anything recently downloaded that was cracked. Repacked. Or modified in any way.

You can have all the passwords you want, all the 2fa's, and they won't amount to anything. If the password was used during this, then you'd have gotten a notification that someone is trying to log into your account.

You kind sir, got session hijacked. They don't need passwords.

Have you read when I said it was cracked Office that got me lose 3 steam accounts and all skins in CS GO? Cracked Office. I had nothing else on the computer just plain old windows, and steam.

I didn't go to complain on Steam.

These people that send these stuff in these programs that randoms download because we're poor and we can't buy them, they don't just target PoE. They target ANY AND ALL GAMES that have ANY VALUE WITH TRADABLE ITEMS.

PoE is just the recent addition.

If you played CS GO, and had skins, you'd lose them too, not just PoE.

"

You kind sir, got session hijacked. They don't need passwords.

Have you read when I said it was cracked Office that got me lose 3 steam accounts and all skins in CS GO? Cracked Office. I had nothing else on the computer just plain old windows, and steam.

I didn't go to complain on Steam.

These people that send these stuff in these programs that randoms download because we're poor and we can't buy them, they don't just target PoE. They target ANY AND ALL GAMES that have ANY VALUE WITH TRADABLE ITEMS.

PoE is just the recent addition.

"

Krematorial#3777 wrote:

"

You kind sir, got session hijacked. They don't need passwords.

Have you read when I said it was cracked Office that got me lose 3 steam accounts and all skins in CS GO? Cracked Office. I had nothing else on the computer just plain old windows, and steam.

I didn't go to complain on Steam.

These people that send these stuff in these programs that randoms download because we're poor and we can't buy them, they don't just target PoE. They target ANY AND ALL GAMES that have ANY VALUE WITH TRADABLE ITEMS.

PoE is just the recent addition.

If it is some ominous "session hijacking" (could u explain what that is and how people can protect them) and "They target ANY AND ALL GAMES that have ANY VALUE WITH TRADABLE ITEMS" why is it only peoples PoE2 account that has been hacked?

Why dont people report their other game accounts, bank accounts or emails got hacked too? From every post i've read it is only PoE2 accounts that got hacked.

"

ex_IllusionisT#8571 wrote:

Don't install shit on your computers.

I've had 3 steam accounts hacked because I was dumb enough to install cracked office. They made off with my cs go skins, without even using my password.
They hijack the session. They don't need your password.

All we have here is your word that you didn't use any 3th party apps.

I don't think this is a GGG issue but a steam issue.
Even if they add more security to PoE, session hijacks won't care.

Enable family view on steam as extra security, and put all games behind that pin code. They wont be able to do anything even if they hijack your session without the pin to exit the session.

Unless GGG comes out and admits to a breach, and as a tech that's been working in IT for over 10y, I'm inclined to believe that its far more likely user stupidity than established security system.

Stop. Using. 3th party tools, and never disable anti-virus to install them. It detects them for a reason.

"

ex_IllusionisT#8571 wrote:

"

Malejas#1960 wrote:

You are the type we are talking about that is not fully reading the posts and just defending GGG.

My account uses an external password manager
My account has random 30+ chats
My account passwords are not shared between accounts
My account has 2fa on steam
No emails of external access to my steam account
No 3rd party apps
No 3rd party websites
No overlays
I was only trading using the official website
I was not even in a party when this happened.

This is 100% a GGG issue/exploit. We can make random excuses all you want but some of us don't fall into "change your password" idea. Many are in the same criteria as me, some use apps, some don't. The only thing in common is the game itself

And I don't believe you.
It doesn't need to be a 3th party app.

It can be anything recently downloaded that was cracked. Repacked. Or modified in any way.

You can have all the passwords you want, all the 2fa's, and they won't amount to anything. If the password was used during this, then you'd have gotten a notification that someone is trying to log into your account.

You kind sir, got session hijacked. They don't need passwords.

Have you read when I said it was cracked Office that got me lose 3 steam accounts and all skins in CS GO? Cracked Office. I had nothing else on the computer just plain old windows, and steam.

I didn't go to complain on Steam.

These people that send these stuff in these programs that randoms download because we're poor and we can't buy them, they don't just target PoE. They target ANY AND ALL GAMES that have ANY VALUE WITH TRADABLE ITEMS.

PoE is just the recent addition.

If you played CS GO, and had skins, you'd lose them too, not just PoE.