Compromised PoE Accounts: Stolen Items and Hacked Accounts - Discussion and Leads

"

lucasbtu#4299 wrote:

"

Thuse#4258 wrote:

most likely ur 2 factor wont help.
im betting on that this is the issue : https://www.reddit.com/r/PathOfExile2/comments/1htp7nc/always_reset_your_session_id_on_trade_site_and/

probably an old issue that resurfaced and their "we have no security issues on our end" post is pure bs.

if they steal my items i don't really care, i just care about the games i payed for, i haven't played poe for one week and i logged in right now and my items are there so no one used my acc, my windows is new since i reinstalled 2 weeks ago, the only thing that i used was the poe overlay, but it feels more like a security issue with the site since no one tried to login in my email and this is happening only with poe players

"

ZETey#4631 wrote:

Here’s a clear and understandable English translation of your text:

---

Hello,
I recently saw news about hacks and "loot" theft, but I didn’t pay much attention to it until it affected some of my acquaintances.
Here’s what I’ve discovered:
1. GGG is not to blame for this. Their database, which could have enabled such actions, was not compromised.
2. I identified the vulnerabilities hackers are exploiting to gain access. These include Steam, Discord, and Xbox (Xbox Store).
3. The REAL addresses of some hackers have been identified, but they are mostly located in business centers:
[removed by Support]
In the USA, cybercrime enforcement agencies are already working on this.
(With citizens residing in the territory of the United States)

In Düsseldorf, amusingly enough, the hackers are using "free" Wi-Fi in cafes to carry out their activities.(Cybercrime enforcement in the process of Identification)
There are also operations in China and India, but the situation there is so chaotic it’s almost nerve-wracking.

We’re still tracking down the others!

Once again, these are the real addresses from which they are operating. *Path of Exile 2* is just one of the many games they are targeting!

This information is confirmed, but I can’t disclose the details of how they were identified.

"

ZETey#4631 wrote:

Here’s a clear and understandable English translation of your text:

---

Hello,
I recently saw news about hacks and "loot" theft, but I didn’t pay much attention to it until it affected some of my acquaintances.
Here’s what I’ve discovered:
1. GGG is not to blame for this. Their database, which could have enabled such actions, was not compromised.
2. I identified the vulnerabilities hackers are exploiting to gain access. These include Steam, Discord, and Xbox (Xbox Store).
3. The REAL addresses of some hackers have been identified, but they are mostly located in business centers:
[removed by Support]
In the USA, cybercrime enforcement agencies are already working on this.
(With citizens residing in the territory of the United States)

In Düsseldorf, amusingly enough, the hackers are using "free" Wi-Fi in cafes to carry out their activities.(Cybercrime enforcement in the process of Identification)
There are also operations in China and India, but the situation there is so chaotic it’s almost nerve-wracking.

We’re still tracking down the others!

Once again, these are the real addresses from which they are operating. *Path of Exile 2* is just one of the many games they are targeting!

This information is confirmed, but I can’t disclose the details of how they were identified.

"

ZETey#4631 wrote:

2. I identified the vulnerabilities hackers are exploiting to gain access. These include Steam, Discord, and Xbox (Xbox Store).

"

Crainus#7059 wrote:

of what text ? mine ?

"

Plantagenet#6994 wrote:

Hi GGG,

Is it possible to list the possible preventive measures that we can take for client side ?

"

ex_IllusionisT#8571 wrote:

"

Crainus#7059 wrote:

of what text ? mine ?

I believe the person used translation service or AI to translate their post. Hence why you see "Here is a clear and understandable English translation of your text:"

And it looks like its mostly false, I searched for the news but there is no reports.

You are all just way too happy to believe anything as long as it conforms with what you think is happening.

Nobody is getting their items back. It's never been done before, it won't be done now.

"

Plantagenet#6994 wrote:

Hi GGG,

Is it possible to list the possible preventive measures that we can take for client side ?

1. Don't install cracked things on your windows.
2. Don't use 3th party tools.
3. Regularly update your password.

You need to understand that even cracking a thing like Office can leave a virus in your computer that is exempt from scans, and can be activated whenever a trade game releases. Then they don't need passwords. They will just hijack your session, login from their end, and trade themselves the items.

If there is one pet peeve I have with GGG regarding this entire situation is, why can't they just collect the names of everyone here who got hacked, and look with whom they traded in game with. Then compare the login IP's of both people, and if they're the same, or the "hacked" one is different from the one that previously logged in to play the game, just straight up ban the party that received the items.

Furthermore, they need to examine closely the trades done by everyone here. Because I've seen people reporting they lost tons of mirrors which is extremely suspicious.

Come on GGG.

"

nigelf#2779 wrote:

hundreds or thousands of people are getting hacked is ridiculous.