Compromised PoE Accounts: Stolen Items and Hacked Accounts - Discussion and Leads

"

Esukho#3565 wrote:

"

medicated03#7220 wrote:

"

Malejas#1960 wrote:

This exploit is catastrophic enough to a game to where you think it would have been addressed day 1....2....3....12..."vacation" or not. Not only has it not been address but not even a single word about it from GGG. Maybe disable trading? Maybe release a statement that they are even looking into it.

Nope nothing... Let's let the general public keep blaming the victims instead meanwhile people have proof of their stolen items on the official trade market.

I don't want to hear any blizzard slander from a Poe player that's for sure. The lack of care from devs regarding this is insane

There is no exploit though?

Comprimised accounts yes, no proof of any GGG related issues, in fact they have asserted its not on their end.

Stop this shit.
i am not a Comprimised account.
Strong Passwort, Clean system, no Third Party , no Infectet PDF downloaded 8 month ago, no RMT.

And only use Steam 2FA for Poe and Poe Trade Website.

The most absurd thing is that one of these hackers was identified as selling all the stolen items from many of those affected here on his profile. And what does GGG do about it? They censor the perpetrator's name every time someone posts it and he continues to sell our stuff.

The sad part is, they continue selling our items while the victims have been locked out for weeks, with no updates provided until now.

Had suspicious "trade" today.

After "Direct Whisper" and accepting party request, guy instantly runs into my hideout(which is already odd) and offers trade. I accept and put my currency, he cancels trade, disbands party and stays in my hideout for a long time.

I post in a week if I ended up hacked (even if i have to make another account for that) and what i did to prevent that (if I wouldn't get hacked).

Save some of the currency/stuff on a friends account. And let's see what happens.

Shouldn't take too long if someone going in.

Edit:
Sounds familiar.. other guy on the video gets literally accessed his account on video lol.

Quote from @mongehamholdings8721:
This hacking issue happened in POE 1 around 6 yrs ago. It happens from trading with the hacker, they get a snapshot of your 'Session Key' [?] which they then use to access your account which bypasses passwords and steams two factor authentication. It has been note by some of those that got hacked that the other person in the trade window canceled the trade and left, indicating that a trade doesn't have to be complete to get your info just the linking of the trade window makes you vulnerable.

https://www.youtube.com/watch?v=e540Xe4Gp-I

Does anyone who get hacked got acess back? answer here pls if you do. GGG kept silent since dec 6.

"

derilzdota#2658 wrote:

Does anyone who get hacked got acess back? answer here pls if you do. GGG kept silent since dec 6.

No.. They locked my account to prevent "futher damage" for hacker.
They asked me to change my Steam password, and then they would unlock it for me. It doesn’t make any sense, but I still did it.

It has been three weeks since I informed support that I changed my password.

"

FessBF#2918 wrote:

Had suspicious "trade" today.

After "Direct Whisper" and accepting party request, guy instantly runs into my hideout(which is already odd) and offers trade. I accept and put my currency, he cancels trade, disbands party and stays in my hideout for a long time.

I post in a week if I ended up hacked (even if i have to make another account for that) and what i did to prevent that (if I wouldn't get hacked).

This is an interesting point (but I'm not sure). Before I got hacked, there was someone who offered a trade and stayed in my hideout for a long time as well.

"

kahamanex#9784 wrote:

"

derilzdota#2658 wrote:

Does anyone who get hacked got acess back? answer here pls if you do. GGG kept silent since dec 6.

No.. They locked my account to prevent "futher damage" for hacker.
They asked me to change my Steam password, and then they would unlock it for me. It doesn’t make any sense, but I still did it.

It has been three weeks since I informed support that I changed my password.

I can confirm that my account has not been unlocked either, and it's been almost 3 weeks now. All my friends who I know from the hacking incident are in the same situation.

Hey, GGG finally responded to my email.

My email after reporting the hack:

Please don't proceed with locking my account to prevent further damage. Both steam and email have MFA activated and the login history shows that no account was compromised besides the PoE account. I have already changed my password for the PoE account, although I just linked it two weeks ago.
[...]
Again, I assume you wont do anything about my stolen items - but please also skip the part of banning my account so I have to send another 20 Emails to get it unlocked again.

--

Their response after 3 weeks:

Thank you for the message and I am really sorry to hear about this. If your account has been compromised it means that your email address or Steam account may have been compromised as well.
I have locked your account to prevent any further damage, please let us know when you have completed a malware scan of your computer and changed your email and Steam password and we can go ahead and look into restoring access to the account.



So yeah - dont contact support if you need help. They dont even read the emails and I dont think they will look into this at all. Thanks again for preventing further damage 3 weeks after getting hacked, verifying connected accounts and changing my password. 10/10 support.