Curse

crazybanshee · Feb 23, 2009, 04:11 AM // 04:11

Ok, I guess I got hacked somehow. Was playing the game a few hours ago, got disconnected in the middle of a mission and couldn't reconnect. It happens frequently. Went for dinner, came back, logged in. Instead of coming up on the character I was playing, the selection came up on my main character, who was not in Kamadan where I ALWAYS leave it, but in great temple of baltazar. Huh? Everything looked ok, but I realized after a second look that the zkeys I had on my character, maybe 40 or 50 of em, were gone and a mini whiptail devourer was there in their place.

I'm not QQing because I got hacked, although I've done absolutely NOTHING to get hacked. Never bought anything with real money, never even visited those sites, don't give my account info to anyone including the people I live with, don't play on any other computers except my own etc. I guess I've had the same password forever instead of changing it, which is bad, although that's all I could think of.

It could be worse - none of my characters were deleted, especially my main (who finally has GWAMM) They all still had their armor, including fow. None of my main's weapons was gone (although they were all customized, even the tormented ones) Nothing else appeared to be missing, so I think I may have interrupted the person. Not that I had a lot else at the moment, only maybe 50k in my xunlai plus a bunch of booze and some items I was gonna sell. So I immediately opened a ticket with support (not that I'll get anything back, but I want that thief banned) changed my gw password and my plaync password. As I type this I'm running every virus/spyware/malware scan I have, which is quite a few tho I dunno how something could get past my firewall (comodo). So now I'm worried that the hacker will somehow get back into my account and delete my char. Anything else, even losing my armor and stuff, I could live with, but seeing the work I put into my main gone would probably make me quit gw.

Do hackers ever stop at that? I mean, I dunno how they'd get back into my account but is it possible they'd just take my zkeys and not delete my toon or salvage my fow? And literally, all I could find missing was the zkeys. They didn't take anything out of my storage, including the 50k or 9 ecto I had, and nothing was missing off any of my other characters. Did I just get really lucky?

Dakka Dakka · Feb 23, 2009, 04:16 AM // 04:16

this happened to my cousin a few years back but his chars were deleted. You got off lucky.

My suggestion is to change you password IMMEDIATELY! as you never know when the hacker may decide to be really maliciuos and delete all of your chars.

also do you know anyone who knows your account name/password? check with them to see if they had anything to do with it.

shoyon456 · Feb 23, 2009, 04:24 AM // 04:24

Like the guy above, change your pass ASAP. With a firewall and since you sound like a smart player, I don't know how it could've happened.

Sounds like a brute-force macro style though, because it seems to have targetted specifics like the zkeys. Makes sense because of their popular usage now.

50 zkeys is bad, but considering had you been hacked by a actual person you prolly would have lost much more, its not that bad.

Side Note: Paranoia of this is part of why I don't have my ign displayed on guru. Other games have more safeguards and locking mechanisms aswell.

Lishy · Feb 23, 2009, 04:25 AM // 04:25

It's probably where the scam sites even those things they offer to "trade" in the first place :P

Which reminds me. Anyone else get a scam pm?

{IceFire} · Feb 23, 2009, 04:33 AM // 04:33

The EXACT SAME type of thing happened to me today, this is very suspicious

Everything was fine yesterday

I went out today and logged in tonight. Everything on my characters is fine (fow warrior+tormented str shield), but on my monk, i was moved to gtob(place to pass off the stuff obviously), my brand new tormented prot staff is gone (voltaic spear is still there), and a golden rin relic is in its place? Also the inventory has been rummaged around and moved around. Finally, 100k+35ectos are gone out of my storage

Needless to say I'm pissed. Never gave my pass out, etc, but it's very odd that not everything is gone?

Changed my pass etc, but wtf, i feel violated, and now i am basically broke.

obsidian ectoplasm · Feb 23, 2009, 04:36 AM // 04:36

I will give you a two thumbs up mate, I like your attitude about this, you just lost shit, but your looking at the posative way.

I had my account hacked, never retreved it, but thats a long time ago.

I don't know how I got hacked, I just assume I was on a site like this and maybe got a keylogger.

change your password asap if you haven't alredy. and I would advise each month you continue changing it. and make it something random

check your virus scanning as much as you can, and you should be fine.

Do answer yes I do think there could be hackers on guru or other forums, I other forums being hacked before * game amp if I remeber* and I got 20 trojans lol

kainmodious · Feb 23, 2009, 04:55 AM // 04:55

Quote:

Originally Posted by Kain Fz

Which reminds me. Anyone else get a scam pm?

I did not sure how ......but yeah

Adult · Feb 23, 2009, 05:07 AM // 05:07

I swear to god...this jsut happened to me like 30 mins ago...

Logged in from a error7 after maybe 20 mins to find my main in temple of balth...not toa where i left her. Missing 330 ectos.... q9 VS....2 zkeys....100ishk....everlasting autotonic.... and a grail of might was in my invo...

I put a thingy in in the accnt support but is that the right place? I havent traded with anyone at all all day so can that be tracked? Any ideas here?

The only thing that i think could have keylogged me is textmod but im 2/3 continents and ive had it for a long time now. And yes i closed it and changed my pw

Dakka Dakka · Feb 23, 2009, 05:08 AM // 05:08

awww geez i haven't gotten on GW in awhile and now I am worried about my chars. Gotta check on that

kainmodious · Feb 23, 2009, 05:11 AM // 05:11

this is kind of strange where have you guys visited in like the last few days (websites) maybe if you all you guys have visited the same ones we could narrow it down to a site that is grabbing your pass?

your lucky i · Feb 23, 2009, 05:19 AM // 05:19

so today i went on gw and realized my main was in great temple of balthazar. cuz last time i remembered i was in kaineg helping my friend... i get on my main and see all my weapons, ectos (60), and my zkeys (100) all gone. all replaced with some stupid quest items and red iris flowers...

like wtf... im pretty sure i dont give my info to somebody else and idk what to do anymore. i changed my pw after that. anyone know whats happening? other than the fact my account got hacked into?

EDIT:
i just saw the other persons thread on getting hacked... same person?>

Neo Nugget · Feb 23, 2009, 05:21 AM // 05:21

Happen to download any suspicious programs lately?

{IceFire} · Feb 23, 2009, 05:30 AM // 05:30

I've not downloaded anything suspicious, I am not mentally damaged and clearly there is a trend here. What is happening? Oh Gods, is the sky falling?

edit=finished virus scan, nothing detected

crazybanshee · Feb 23, 2009, 05:30 AM // 05:30

I've been out of state for a couple days, just came back late saturday. Played a little saturday, played a little today, then that happened. Nobody uses my computer when I'm gone either, unless my cats figured out how to turn it on and log into gw without me. Also I'm the only one in my house that plays gw. Now I'm afraid to log out of gw cause the hacker might come back

Edit to say - holy cow I just got that spam message on guru to buy gold and crap, I deleted it as fast as possible. How the heck could I have been hacked first before I even received the message?

Nomme Moon · Feb 23, 2009, 05:36 AM // 05:36

Something is definitely up, I haven't seen this many hacks of people who aren't prone to click special links/etc in awhile. I wonder if it has anything to do with the spam PM myself and a few others received. Didn't click the link, just replied with hate

Jensy · Feb 23, 2009, 05:40 AM // 05:40

Yikes. Need to change my password ASAP.

O__o

Esp with all the recent err7 I've seen everywhere.

Shayne Hawke · Feb 23, 2009, 05:42 AM // 05:42

You can blame the fact that I've never felt insecure about my security of anything I've done on the internet for this little predicament that's been cooked up.

Logged in tonight, thinking I would check and see if Shayne hit his birthday and got his gift. Opened up my inventory, and I saw something strange. I usually keep an ID kit and Salvage kit as my first two items, but for some reason, there was a Grail of Might and 4 Armors of Salvation instead. I checked my Xunlai account. All of my money was gone. In fact, all the money on Shayne was gone. My undedicated Greased was also gone, and after looking at the situation more, I realized I was out ~192 Z-keys. Switching through my characters, nothing else seems to be out of place. Whatever unintentional changes that happened to my account occured between Saturday afternoon and Sunday night, tonight.

Not really too miffed by this, as I still had my dedicated Greased from two years back, I decided that my account really wasn't secure any more. I needed to change my password. However, to do that, I felt I was going to have to go through PlayNC, who has been less than friendly to deal with in the past. Here's where my predicament lies:

- My account name for GW is to an e-mail that I never use. Upon attempting to access it tonight for the first time in two or so years, I couldn't produce the right password.
- I can't remember what my account name is for PlayNC, much less what the password is. I could have a pretty good guess at the password, but I'm sure that if I changed my account e-mail's password in the past, I may have changed my PlayNC password at some point.
- I can't do a "Forgot my password" maneuver, because I can't correctly answer the questions to what I believe may be my PlayNC account name.

At this point, the only thing that I feel can tie me to owning my account is the fact that I've been using it for the past two and a half years, although that alone now looks pretty weak. I'm confused now on what action I should take, what action I possibly can take, and how I can get my password changed for my Guild Wars account.

Neo Nugget · Feb 23, 2009, 05:44 AM // 05:44

Quote:

Originally Posted by Nomme Moon

Something is definitely up, I haven't seen this many hacks of people who aren't prone to click special links/etc in awhile. I wonder if it has anything to do with the spam PM myself and a few others received. Didn't click the link, just replied with hate

That the gold ad PM? Got that too, just laughed

_____
Edit:Ah no, just checked it,that wasn't anything having to do with GW, just other video games. No link either.

*shrug*

mrvrod · Feb 23, 2009, 05:46 AM // 05:46

I'm not sure why so many people are getting hit by this. They need your login (email) and your password to get into your acct don't they, or are other countries different that the US? Login is the email address you registered with, password you choose.

Changing your password is a good start, but unless you're going to use a completely random mix of numbers, letters & symbols, you could still be brute forced because they still know your login name. You can and should change that at PlayNC as well. There are many free webmail accounts you can open, I would suggest gmail since you can do aliases and still have your mail go to the same inbox.

P.S. Yes a random pw can still be brute forced, but if you use a minimum of 8 characters and a random mix of numbers, letters and symbols, unless the govt is after you, it would take a single pc months if not years to hack it.

Sir Skullcrasher · Feb 23, 2009, 05:52 AM // 05:52

My advice is to change your email and password. The first rule, never ever click on any links given to you or do anything that seems out of place. Not saying that you guys done that to get hacked but it's a general guideline to prevent being hacked.