Friendly hacker or "good" luck? - Page 2 - Guild Wars Forums

fusa · Sep 24, 2008, 11:32 AM // 11:32

Quote:

Originally Posted by Haxor

Sounds like it was a gold farming company that got in to the accounts. They probably had a bot(/poor hired asian guy) farm stuff on the permasin/ele - which is where a good chunk of the money most likely came from. The actual money in storage was (in my opinion) probably a fluke due to forgetting to change the password, catching them whilst they were still "processing" your account, or merely chalked up to "acceptable loss" so you wouldn't report the hack.

Did you by any chance sign up for anything promising, say, a GW lottery? Someone "leaving" the game who set up a website to give out his stuff? Perhaps a more shady (bot, hack, possibly even a spoof/phishing) site, that required an email address and a password to join?

I have to agree with this, quit buying online gold and you'll be safe. Either they didn't have time to transfer the gold to another account, or they kept it on your account until they had someone make a purchase. With so many people being banned for transferring 100k of gold it might be their way of trying to avoid having their surplus taken.

smilingscar · Sep 24, 2008, 01:30 PM // 13:30

Quote:

Originally Posted by Haxor

Did you by any chance sign up for anything promising, say, a GW lottery? Someone "leaving" the game who set up a website to give out his stuff? Perhaps a more shady (bot, hack, possibly even a spoof/phishing) site, that required an email address and a password to join?

The last thing I signed up for was the GW anniversary sweepstakes

.

I'm trying to look on the bright side of this. At least I have some gold to soften the blow, weapons are replaceable, and this does give me an excuse to give each character a different set of elite armor for the HoM. The only things that really get me down are that two characters never got their armor stored at HoM, and I lost all those collectibles I'd been saving (alcohol, destroyer cores, etc.). But hey, it's just a game.

Not that I need it, but with the holiday season coming up it seems like there should be some sort of fund for the victims of scams/hacks. Perhaps a little window (with a santa and a bell) that pops up every time you trade or merch asking for a donation to the needy...

Lykan · Sep 24, 2008, 01:43 PM // 13:43

Did you have loads of ectos missing or expensive weapons or minipets. Maybe the offender sold all your stuff with the intention of trading the money to another account but didnt get around to it.

hurdlebeast · Sep 24, 2008, 03:19 PM // 15:19

thing i miss the most (probably more than the primeval warrior armor) is the 40ish lockpicks i had....that sucks. BUT, it's nothing, to be honest, than what it could have been: i invested alot of my money into my guild hall when i sold all my z-keys from the last tourney, so it's not a complete loss. plus, i now have a full perma sin, which is what i was gonna make my level 1 guy eventually anyways. and he came five ectos, so it's not all bad, i guess. the armor kinda ticks me off though, weapons are all replaceable, but i wish i still had my q12 inscribable shinobi blade or my golden phoenix blade

w00t! · Sep 24, 2008, 03:54 PM // 15:54

99.9% of the time this is a:

1) Friend (who obtained your PW through social engineering)
2) Keylogger obtained from too much pr0n browsing
3) Friend
4) A GW "mod" you installed from a non-trusted source
5) Friend

Hanma l · Sep 24, 2008, 04:17 PM // 16:17

To be on the safe side i recommend not having the same email/password for your accs either on guru or the game itself i myself have at least a dozen diff email accs all with diff passwords same goes for my bank acc which i regularly check online. Now don't give me that i will forget BS because buying a notebook and writing all those emails/passwords down will only cost you $1.99. Dnt ever download 3rd party programs, bots to be more specific. And make sure that you perform a virus scan on your comp at least once a week to make sure everything is in good shape. That's the advice i can give you guys and so far it has worked for me.

pamelf · Sep 24, 2008, 09:06 PM // 21:06

Is it at all possible it was a family member of friend who knows your password? If this was a 'hack' attempt they certainly wouldn't have put your money in storage for you to find. They would have kept it on character and transferred it immediately.

I don't know for sure, but the way this has gone down it certainly seems to me like it's someone you know trying to play a practical joke...

BuD · Sep 24, 2008, 09:34 PM // 21:34

Quote:

Originally Posted by smilingscar

to find 638k in my storage. I'm pretty sure I had around 18K on Saturday.

...or did he leave that for me?

You know...that Burger King Dude has been running around lately stuffing money in peoples pockets. Maybe it was him. lol

hurdlebeast · Sep 25, 2008, 12:27 AM // 00:27

Quote:

Originally Posted by Edgar The Crosseyed

They do mean something, because most players use the same data to login to guildwars as they do to login to guru. Thats what those guys are hoping for! So if they have your guru info they might also have luck that that is gw login as well

Seems someone did try to hack into guru a while back. My guess that either a) guru isn't as secure as people think or b) xunlai house on the GW site (which requires you to enter username/pwrd) isn't as secure as people think. either way, someone out there is getting into people's account and getting into their games

fusa · Sep 25, 2008, 01:35 AM // 01:35

Quote:

Originally Posted by hurdlebeast

Seems someone did try to hack into guru a while back. My guess that either a) guru isn't as secure as people think or b) xunlai house on the GW site (which requires you to enter username/pwrd) isn't as secure as people think. either way, someone out there is getting into people's account and getting into their games

If either of those were true there would be a hell of a lot more people being hacked than the 10-20 that have complained about it here.

Showtime · Sep 25, 2008, 01:41 AM // 01:41

MAYBE HE RAN OUT OF SPACE/reach his gold limit. I'm surprised he didn't just buy up ectos from trader.

Dj Naomi · Sep 25, 2008, 01:58 AM // 01:58

Something kind of like this happend to me about a month ago but none of my stuff was gone. I remember going thru nf on my necro and I stopped after the first two missions. Then I log on about two days later and I find my necro in Kodash Bazaar with about 18k and a full inventory on him. Thought it was pretty cool

hurdlebeast · Sep 25, 2008, 03:10 AM // 03:10

Quote:

Originally Posted by fusa

If either of those were true there would be a hell of a lot more people being hacked than the 10-20 that have complained about it here.

Depends. This guy doesn't seem too smart, which is surprising. If he was trying to legitimately get gold from other accounts, wouldn't he change the passwords on the accounts? you know, lock the actual owners out of the accounts. Seems right now he's content with stripping and salvaging all the gear off of certain characters (my primeval warrior armor and my geomancers and dwarven ele armor are all salvaged (mostly) but my mesmer and assassin's armor is untouched), creating and using permasins to farm for ectos (which he did on mine), and selling market value weapons.

My account got code 045'd last night, but issue was resolved (after i sent anet an email) less than an hour later after i explained to them what happened, so i think Anet knows that something is going on with a hacker, but not quite sure yet where he is attacking from (both geographic location and how he is getting into accounts). The last support ticket i sent in took a couple days to clear.

Also, this is a single thread on a very large forum. how many people have actually stumble across this thread, and what how many of them were actually hacked?

This guy could be jumping from account to account, running two or three at a time until he gets found out and then "accessing" new ones. And obviously only people that have/had both their guru/xunlai/however this hacker is getting in password and their game passwords the same could be hacked.

I'm thinking (as someone previously posted) that this guy is a tool for something larger, possibly a gold farming site, and that this guy is either Korean or wants to appear to be korean. he changed all the active districts to korea, BUT did not change the actual fonts used to any form of asian. he kept them in english. So, i think it is an english speaking person who got "learned" how to hack by some bigger fish, and is trying to be cool by hacking into people's accounts and failing at being a good hacker. bigger company gives him a pat on the back and a few bucks, they keep their noses clean by jumping the gold from char to char, and keep the user accounts expendable. The OP's account could have been a collection point for the gold if you will, where as mine and others were strictly used to smash and grab.

it took them less than 5 days to do this to my account.

fusa · Sep 25, 2008, 12:01 PM // 12:01

The 10-20 I mentioned also included the larger thread in riverside. Even that one that had lots of people scarred only had about 8 people saying they were hacked. The Xunlai House accounts must be many many thousands of accounts, and Guru has several thousand accounts. That's an extremely small fraction of the total accounts you are saying he has access too.

Lycan Nibbler · Sep 25, 2008, 01:14 PM // 13:14

Quote:

Originally Posted by fusa

The 10-20 I mentioned also included the larger thread in riverside. Even that one that had lots of people scarred only had about 8 people saying they were hacked. The Xunlai House accounts must be many many thousands of accounts, and Guru has several thousand accounts. That's an extremely small fraction of the total accounts you are saying he has access too.

If I were a betting man, I would put my money on 10-20 people d/l loggers/hacks or just BSing etc rather than guru/xunlai etc being the target.

Divinus Stella · Sep 25, 2008, 01:21 PM // 13:21

Happens to me all the time, i log on and find a stack of ecto missing from storage and all my characters are in the american roleplaying district in GTB.

Its usually something to do with my two little brothers who like fissure armour but dont like farming and enjoy the company of other 15 year old roleplayers in american servers.

imnotyourmother · Sep 25, 2008, 01:30 PM // 13:30

Well, an interesting thing. My Account name is the Same name as my FIRST characture that I ever made. I notices that the other day. So I deleted my first characture because I could not change my account name.

This is a FLAW. If I am running around al and writing down everyone's name. I can then run a systematic bot to get your password. not that hard actually in text mod let me tell you. A little script reading and BOOM. I got your password.

match that with your "name of your first toon and there you go". So if someone asks you what you first names your first toon DO NOT TELL THEM as they have half of the work done so far.

Remember that there is a 12 year old in England can Hack VISA, guild wars is no match.

Inde · Sep 25, 2008, 01:30 PM // 13:30

Everyone, I have stated and will state again that NO ONE IS GETTING YOUR INFORMATION FROM GURU. This includes your email and passwords. I appreciate the conspiracy that people like to generate, and even me typing this will have doubters. I have stated time and time again that we have been thoroughly through our databases and servers and no one is gathering your info. Not to mention that ALL PASSWORDS ARE ENCRYPTED. Not even I have access to these.

I will not entertain anymore conspiracy posts that Guru is somehow divulging or has been compromised in this manner. I am not saying that Guru can not be hacked, we have clear evidence of that... but the forums and the databases on this site have multiple security measures in place with only 2 people having access to the information. We have server logs and forum logs and logs of every type that would show if anyone accessed this information.

Any further "conspiracy" posts that have no merit and are false speculation will be deleted.

Fril Estelin · Sep 25, 2008, 01:48 PM // 13:48

Quote:

Originally Posted by Inde

Not to mention that ALL PASSWORDS ARE ENCRYPTED.

You mean "HASHED", not encrypted, don't you Inde? The difference being of importance: if you get the hash value, you can't get back to the original password that was hashed. If it's encrypted, the software has to protect the encryption key and this totally prevents decryption.

fusa · Sep 25, 2008, 01:54 PM // 13:54

Quote:

Originally Posted by imnotyourmother

Well, an interesting thing. My Account name is the Same name as my FIRST characture that I ever made. I notices that the other day. So I deleted my first characture because I could not change my account name.

This is a FLAW. If I am running around al and writing down everyone's name. I can then run a systematic bot to get your password. not that hard actually in text mod let me tell you. A little script reading and BOOM. I got your password.

match that with your "name of your first toon and there you go". So if someone asks you what you first names your first toon DO NOT TELL THEM as they have half of the work done so far.

Remember that there is a 12 year old in England can Hack VISA, guild wars is no match.

Are you a crackhead or just mentally ill? This is the absolutely dumbest idea I've seen posted on Guru. Your login is your email, your password is NOT your "first toon" unless you are dumb enough to name your characters after your password. There's no way to get textmod to run a script grabbing people's passwords. You don't even know what textmod is. It changes textures, only. It does not interact with server or other people's clients, the idea that it does is moronic. When interacting with anet, they dont ask your "first toon" name, they want the names of ALL toons and all keys. So even social engineering isn't going to get you anywhere with your "first toon" information.

Sep 24, 2008, 01:43 PM // 13:43	#23
Lykan Forge Runner Join Date: May 2005 Guild: StP Profession: R/	Did you have loads of ectos missing or expensive weapons or minipets. Maybe the offender sold all your stuff with the intention of trading the money to another account but didnt get around to it.

Sep 24, 2008, 03:19 PM // 15:19	#24
hurdlebeast Krytan Explorer Join Date: Jan 2007 Guild: W/Mo-Smashing Beast; Mo-Monk Beast Profession: E/Me	thing i miss the most (probably more than the primeval warrior armor) is the 40ish lockpicks i had....that sucks. BUT, it's nothing, to be honest, than what it could have been: i invested alot of my money into my guild hall when i sold all my z-keys from the last tourney, so it's not a complete loss. plus, i now have a full perma sin, which is what i was gonna make my level 1 guy eventually anyways. and he came five ectos, so it's not all bad, i guess. the armor kinda ticks me off though, weapons are all replaceable, but i wish i still had my q12 inscribable shinobi blade or my golden phoenix blade

Sep 24, 2008, 03:54 PM // 15:54	#25
w00t! Wilds Pathfinder Join Date: Aug 2005 Location: Sorrow's Furnace Hot Tub Guild: RoS Profession: Mo/Me	99.9% of the time this is a: 1) Friend (who obtained your PW through social engineering) 2) Keylogger obtained from too much pr0n browsing 3) Friend 4) A GW "mod" you installed from a non-trusted source 5) Friend

Sep 24, 2008, 04:17 PM // 16:17	#26
Hanma l Frost Gate Guardian Join Date: Jun 2008 Location: WPB, Fl Profession: W/	To be on the safe side i recommend not having the same email/password for your accs either on guru or the game itself i myself have at least a dozen diff email accs all with diff passwords same goes for my bank acc which i regularly check online. Now don't give me that i will forget BS because buying a notebook and writing all those emails/passwords down will only cost you $1.99. Dnt ever download 3rd party programs, bots to be more specific. And make sure that you perform a virus scan on your comp at least once a week to make sure everything is in good shape. That's the advice i can give you guys and so far it has worked for me.

Sep 24, 2008, 09:06 PM // 21:06	#27
pamelf Forge Runner Join Date: Aug 2006 Location: Australia Guild: Lost Templars [LoTe] Profession: Me/Mo	Is it at all possible it was a family member of friend who knows your password? If this was a 'hack' attempt they certainly wouldn't have put your money in storage for you to find. They would have kept it on character and transferred it immediately. I don't know for sure, but the way this has gone down it certainly seems to me like it's someone you know trying to play a practical joke...

Sep 25, 2008, 01:41 AM // 01:41	#31
Showtime Forge Runner Join Date: Sep 2005 Guild: WTB Q9+5e Bows/Q8 14^50 Weapons Profession: R/P	MAYBE HE RAN OUT OF SPACE/reach his gold limit. I'm surprised he didn't just buy up ectos from trader.

Sep 25, 2008, 01:58 AM // 01:58	#32
Dj Naomi Lion's Arch Merchant Join Date: Jan 2008 Location: Here Guild: X Legion Of Doom X Profession: W/	Something kind of like this happend to me about a month ago but none of my stuff was gone. I remember going thru nf on my necro and I stopped after the first two missions. Then I log on about two days later and I find my necro in Kodash Bazaar with about 18k and a full inventory on him. Thought it was pretty cool

Sep 25, 2008, 12:01 PM // 12:01	#34
fusa Krytan Explorer Join Date: Mar 2007	The 10-20 I mentioned also included the larger thread in riverside. Even that one that had lots of people scarred only had about 8 people saying they were hacked. The Xunlai House accounts must be many many thousands of accounts, and Guru has several thousand accounts. That's an extremely small fraction of the total accounts you are saying he has access too.

Sep 25, 2008, 01:21 PM // 13:21	#36
Divinus Stella Desert Nomad Join Date: Nov 2005 Location: Wales Guild: Steel Phoenix	Happens to me all the time, i log on and find a stack of ecto missing from storage and all my characters are in the american roleplaying district in GTB. Its usually something to do with my two little brothers who like fissure armour but dont like farming and enjoy the company of other 15 year old roleplayers in american servers.

Sep 25, 2008, 01:30 PM // 13:30	#37
imnotyourmother Desert Nomad Join Date: Mar 2008 Location: in a house Guild: The Knitters Guild Profession: W/R	Well, an interesting thing. My Account name is the Same name as my FIRST characture that I ever made. I notices that the other day. So I deleted my first characture because I could not change my account name. This is a FLAW. If I am running around al and writing down everyone's name. I can then run a systematic bot to get your password. not that hard actually in text mod let me tell you. A little script reading and BOOM. I got your password. match that with your "name of your first toon and there you go". So if someone asks you what you first names your first toon DO NOT TELL THEM as they have half of the work done so far. Remember that there is a 12 year old in England can Hack VISA, guild wars is no match.

Sep 25, 2008, 01:30 PM // 13:30	#38
Inde Site Contributor Join Date: Dec 2004	Everyone, I have stated and will state again that NO ONE IS GETTING YOUR INFORMATION FROM GURU. This includes your email and passwords. I appreciate the conspiracy that people like to generate, and even me typing this will have doubters. I have stated time and time again that we have been thoroughly through our databases and servers and no one is gathering your info. Not to mention that ALL PASSWORDS ARE ENCRYPTED. Not even I have access to these. I will not entertain anymore conspiracy posts that Guru is somehow divulging or has been compromised in this manner. I am not saying that Guru can not be hacked, we have clear evidence of that... but the forums and the databases on this site have multiple security measures in place with only 2 people having access to the information. We have server logs and forum logs and logs of every type that would show if anyone accessed this information. Any further "conspiracy" posts that have no merit and are false speculation will be deleted.