Compromised PoE Accounts: Stolen Items and Hacked Accounts - Discussion and Leads

My case happened just 12 hours ago.

My Loss:
1 Divine Orb (ONLY 1 F Divine Orb), which I farmed in Act 3 Normal.

My Status:
- Playing the game.
- Using the trade site.
- No overlays.
- No filters.
- No RMT (Real Money Trading)

I don't understand why they took it from someone who only had 1 Divine Orb. :(

Made a video to showcase the happenings of this hacking issue.

https://www.youtube.com/watch?v=X_s3uN6JOc8

The goal of this video is to showcase what's happening to the community and hopefully continue to shed light on this issue, motivating a response and action from GGG.

You can add me to the list of people that got hacked, lost over 600 divines worth of currency + gear, safe to say i'm done. Played online games for over 20 years, always had insane amount of gear + currency on all of them, this is the first time someone else logged into my account.

"

rods03#0554 wrote:

You can add me to the list of people that got hacked, lost over 600 divines worth of currency + gear, safe to say i'm done. Played online games for over 20 years, always had insane amount of gear + currency on all of them, this is the first time someone else logged into my account.

Did you have any recent trades or friend invites that seemed strange?

"

waitingforunlock#4272 wrote:

"

rods03#0554 wrote:

You can add me to the list of people that got hacked, lost over 600 divines worth of currency + gear, safe to say i'm done. Played online games for over 20 years, always had insane amount of gear + currency on all of them, this is the first time someone else logged into my account.

Did you have any recent trades or friend invites that seemed strange?

First, pardon me, english is not my first langue but yes, i kept getting booted out of my session yesterday, but i always logged back in immediately, and i kept getting a party invite from a random chinese dude at least 3 times that i can remember yesterday it was probably more, but i didn't think anything of it, people always kept spamming that they want to buy stuff from me and before waiting for a reply they send party invite, but this chinese name never had i want to buy message from trade chat, the invite just came randomly.

Honestly, i'm a solo player, not part of any community and i don't keep up with the news, so i had no clue that this was even happening.
What i don't get is how i didn't get anything from ggg on my e-mail, the usual requests to unlock because you are logging in from a different place or something similar, i got nothing, hacker just got in, stole stuff and got out.

Only chance i come back is if they find in themselves to put in the work, to restore the players items, honestly like i said it's the first time in over 20 years that something like this happened to me and i feel violated, felt the same way when i got robbed both times, at least there isn't the physical aspect of it.

Its pretty obvious that its not a GGG problem - otherwise there would be way more problems on a way larger scale.

Its probably a mix of pishing, generic passwords and in some very rare cases maybe a virus etc. that collects data.


Just one thing - the most important thing about a Password is its length.
Also never ever use the same password for Accounts and the Mail they are linked to.

Last but not least dont use the same password on every site - it makes sense to for example have a password for important things and a different one for not that important things.

One last tip:
If your account got hacked - consider that password unsafe and public. Change it wherever you use it and never use it again.




And yes the support is a huge problem/joke at the moment. Im also waiting since 28 Days - i cant even imagine how bad that must be when your account got hacked.

"

_N0ctus_#6387 wrote:

Its pretty obvious that its not a GGG problem - otherwise there would be way more problems on a way larger scale.

Its probably a mix of pishing, generic passwords and in some very rare cases maybe a virus etc. that collects data.


Just one thing - the most important thing about a Password is its length.
Also never ever use the same password for Accounts and the Mail they are linked to.

Last but not least dont use the same password on every site - it makes sense to for example have a password for important things and a different one for not that important things.

One last tip:
If your account got hacked - consider that password unsafe and public. Change it wherever you use it and never use it again.




And yes the support is a huge problem/joke at the moment. Im also waiting since 28 Days - i cant even imagine how bad that must be when your account got hacked.

we have several content creators and users in this post clarifying no use of third party apps, only playing trough steam and having refreshed passwords recently.

it's hard to even argue that it is likely a "Its probably a mix of phishing, generic passwords and in some very rare cases maybe a virus etc. that collects data." More than likely there is an unfound exploit that people are abusing. to hijack a existing session. as one of the more recent posts also mentioned being booted constantly and seeing a random person in their party without any verification process triggering.

"

_N0ctus_#6387 wrote:

Its pretty obvious that its not a GGG problem - otherwise there would be way more problems on a way larger scale.

Its probably a mix of pishing, generic passwords and in some very rare cases maybe a virus etc. that collects data.


Just one thing - the most important thing about a Password is its length.
Also never ever use the same password for Accounts and the Mail they are linked to.

Last but not least dont use the same password on every site - it makes sense to for example have a password for important things and a different one for not that important things.

One last tip:
If your account got hacked - consider that password unsafe and public. Change it wherever you use it and never use it again.




And yes the support is a huge problem/joke at the moment. Im also waiting since 28 Days - i cant even imagine how bad that must be when your account got hacked.

I guarantee you, you'll see it differently when you get robbed out of your stuff.
Many people have been playing games for tens of years without ever being hacked, so I would assume they know how to take care of phising attempts & ensure safe passwords.

GGG messed up with sessionIds or whatever - I am so waiting for the day that we get confirmation.
Hope this will silence all those "jUsT uSe a sAfE pAsSwoRd".... so sick of it.

"

_N0ctus_#6387 wrote:

Its pretty obvious that its not a GGG problem - otherwise there would be way more problems on a way larger scale.

Its probably a mix of pishing, generic passwords and in some very rare cases maybe a virus etc. that collects data.


Just one thing - the most important thing about a Password is its length.
Also never ever use the same password for Accounts and the Mail they are linked to.

Last but not least dont use the same password on every site - it makes sense to for example have a password for important things and a different one for not that important things.

One last tip:
If your account got hacked - consider that password unsafe and public. Change it wherever you use it and never use it again.




And yes the support is a huge problem/joke at the moment. Im also waiting since 28 Days - i cant even imagine how bad that must be when your account got hacked.

Why would the people doing this turn into a large scale issue?
With a quick google search, you can see how valuable a divine is (2$).

You hit about 10-20 people a day, you make sure you keep a list of all the famous people so you don't end up cleaning them out and bringing it more attention than you want.
So let's say you get about 200 divines per average on each person you hit (low estimate by the way), that's about 2000-4000 divines per day, they'd get 5000$ per day or more doing this, that's 150000$ a month, why would you want to risk this type of money by turning this into a big deal.

So instead of having widespread panic, you fuck over about 500 people per average in a month and with PoE 2 having millions of players, GGG doesn't have to put too many resources into this, and players like you end up becoming the support these hackers need to keep this going for as long as possible.