Compromised PoE Accounts: Stolen Items and Hacked Accounts - Discussion and Leads

hey everyone keep adding info to this Post lets see if we find some common denominator between the hacked accounts.

on my browser i use Better PathOfExile Trading to help me bookmark things i wanna buy, did you guys steam also get acessed ? and from where ?

"

AlvinL_#4492 wrote:

I'd be curious to know what 3rd party apps the victims are running. Damn shame either way. Silver lining it be happening during ea.

for PoE 2 only overwolfs PoE2 companion, for PoE1 Exilence CE, Awakened Poe Trade and PoB

Standalone client, also got hacked.
No info via email that someone was logging in from a different location.
Email was not compromised, no logins from aynwhere but my home.

Different password on POE than for any other accounts, frequently changed passwords - so not part of a leakage somewhere in the past.

Divs & Gear were taken, all the other stuff remained.

I have my account linked to both Steam and Email, but was only playing via Steam.
Steam login history did not show any other access (I also have MFA on steam). I did not receive any emails and my mailbox was not compromised.

I did use Overwolfs PoE 2 Trade Overlay and the Better Trading Chrome extension.

I did have a mirror listed on trade the day before, maybe that made me a target. The account that sold all of my stuff still has 230+ items listed on trade, oldest listing is from 2 days ago, newest from an hour ago.

e: That account just went offline. I was hacked during EU night/early morning, so maybe he is sleeping now.

My account was looted yesterday, about 250 div worth of stuff. I think it was executed on the standalone?

I only play on steam but downloaded standalone since it allowed preinstall faster than steam for launch..

I never got an email, I did get an alert from my 2fa on steam saying someone attempted to log in earlier in the day, but didn't think much of it and obviously didn't approve it, I checked that site you referenced and nothing looks suspicious.

I've looked for very unique items I had, ideal quivers for poison concoction and haven't seen them relisted on trade yet, I'm guessing it was worth 50 div in today's market.

No clue how they were able to log into my account, totally sucks, and I fear the work you are doing for GGG is going to be to deaf ears.. My impression is historically they don't care about stuff like this. Pretty sure operations like this are ran by cartels and syndicates of crime.

I used Overwolf and TFT trade extension to save item searches...

"

kebap#3699 wrote:

They won't.

Well, they at least have to investigate if its on their side, because if it is its becoming a legal issue or them.

"

lolepple#7866 wrote:

Standalone client, also got hacked.
No info via email that someone was logging in from a different location.
Email was not compromised, no logins from aynwhere but my home.

Different password on POE than for any other accounts, frequently changed passwords - so not part of a leakage somewhere in the past.

Divs & Gear were taken, all the other stuff remained.

in my case i even changed my password on steam 5 days before getting hacked ...

This isn’t an isolated issue meaning they have to care, it could be something serious since more and more people are getting hacked.

In my case, they accessed my Steam account for two hours, and I didn’t receive any notification emails (though you got one).

Many posts mention 3rd-party software, but some victims weren’t using any, raising questions about a possible client vulnerability allowing unauthorized access.

Snoobae85 was also a recent victim without using any 3rd-party software for PoE2 so there's also a chance this could be related to some PoE1 app ?

-

My account was hacked yesterday, and my gear was worth around 400-700D :(

I’m grateful to some friends who’ve lent me a few Exalts so I don’t have to start completely from scratch.

I submitted my ticket yesterday, but I haven’t received any response. I really hope they’re not hiring support agents who just say, “sorry, we won’t do anything,” because it would be far more efficient to post an announcement on the main page or Twitter and send an automated reply to any emails regarding hacks.

I also think it’s important for GGG to communicate what they plan to do to prevent these situations from happening again, or at least inform players that they are considering or defining actions.

It’s nearly impossible to find equivalent gear on the market, and I’m in a tough situation. I haven’t received an official response regarding whether the stolen items can be recovered. If not, it’s truly disappointing because, in my case, it feels like my account has been hijacked, and I’m left with the following dilemma:

1.Buy stolen gear equivalent to mine for real money:
This is terrible because GGG would be encouraging RMT by creating a black market for a service that they either can’t or refuse to provide.

2.Consider the affected character as lost and start from scratch:
With no currency in an economy that is no longer fresh. But this is POE. if starting over in situations like this were even remotely fun or motivating, leagues wouldn’t exist. (This may not apply to hardcore players, but I believe most people play trade.)

3.Stop playing the game

(I’m choosing the 2nd option, but I have no idea how I’ll feel about this game in the next 48 hours.)

These are the thoughts running through my mind, and they may not reflect everyone’s opinion, but I’m sure I’m not the only one playing this game who shares these concerns.