I'm sorry Fiel, despite how much you like hacked spam threads, let me reassure you I'm not here to cause panic and general fear. I just want to warn others and hopefully let Nexon be aware there might be huge security flaws on their side. I'm sure most are aware of the recent 'random' unexplained hackings. Most say their accounts are very secured in a way where emails are almost untraceable, passwords inhumane enough to be guessed, no keylogs or malware and extreme firewall or high computer knowledge to avoid the general traps like the plague. But if, for some reason, the database on the game server is compromised, how secured is your account info? I've posted this on SW, and I just want to ask for those that were hacked recently, presumably at or after the release day of the Aran patch. Have you been using that same password for the affected account for a long time? Several people I know haven't changed their passwords in more than years, myself included as I don't see why it'll be compromised on my part, I guess I do now. There's also speculation on info being retrieved for those that logged on with the wrong prepatcher for aran (someone did it to spoof those that use prepatching?), so any information that could help suggest leakage or shine light onto this matter will be most appreciable. And if you haven't done so, change your password(s) now.
Here's a link to the previous thread suggesting similar situations, but rather this takes time during the huge server upgrade.
http://www.southperry.net/forums/sho...ghlight=hacked
-----------------------------------------------------
Update:
Since the thread has been ongoing for quite awhile now. From my personal gathering (lots of statements unconfirmed or speculation with basic assumptions and proofs), this is what going on:
First of all, if your email password has been changed, hijacked, or has unauthorized logins other than yourself, we cannot include you into the same pool as your cases may be separate. (It could very well be affected by the same widespread hack, but chances are minimal in my personal opinion that it should not be catered) You're welcome to provide information, since there may be separate attacks that hinder compromised and non-compromised accounts.
As of Jan 17, 2010, I believe Nexon database is being compromised. At first there were hints suggesting leaked database info but this notion was somewhat rejected as there are cases where people have changed their passwords a few days prior of their accounts fell into victims. Further analysis is now pointing to the possibility of leaked password being released as MD5 hashes, since this was what Brazilian MS was using at the time when server files were leaked. Of course we have no way to confirm this other than the programmers themselves at Nexon. So now a few involved people are asking those who were hacked if their responding passwords hashes are logged somewhere in the internet database. Detail is covered in subsequent pages (page 17 onwards I believe) and on other thread in this forum section as well. Bottom line is, use a 'strong' password to protect yourself. 12-character long combined with lower,upper-case, numbers, and symbols is ideal. If you're affected, make sure you submit a ticket through the ticketing system. There's a lot to read on so if you're an active player of any Nexon games, you may want to periodically change your password(s), lock items and equipment, and store unnecessary NX with a non-suspicious character on the same account and put up something for that amount of NX in the WANTED section. This is just some precautionary measures we can take since we don't exactly know what is going on out there.
Reply With Quote
Originally Posted by Cyanne
