People being hacked since the last Server Check.

Printable View

Show 100 post(s) from this thread on one page

2011-12-15, 11:38 AM
SwordStaker

Quote:

Originally Posted by Blades4hire

My mule account that i was planning on world transfering when they came back out was hacked 2 days before legend.
Had a clean VIP dagger, VIP katara, and a VIP 1h Axe on it.
I hadnt logged in on it for around 3 weeks or so (bought the items right before world xfers left) and when i saw that they were returning in legend, i logged on it to check, and the character was in fm(previously was in sleepywood sauna) with all 3 of the items missing.
Not that bummed though, since i basically forgot about the account since i had given up any hope of world transfers coming back after 3 months of them being gone.

Quote:

Originally Posted by Daakun

I'm fairly certain they don't even need your PIC.
Mine was nine digits long when my NX got jacked, doubt that was forced.

Quote:

Originally Posted by valhala556

I was hacked today too (took my fking sword AGAIN. bye bye full marx von set). Or within the last week. Found out about it today. Had to reset my password and pin but I think the password might of been my mistyping. But agreeing with the guy above me I don't think they need your PIC. They can just reset it somehow. or change it to what they want.

How long had it been since you changed the info on those accounts?
2011-12-15, 11:42 AM
Blades4hire

Quote:

Originally Posted by SwordStaker

How long had it been since you changed the info on those accounts?

Around 3 months.
Ever since it happened, I've been changing my main account's password once a week.
2011-12-15, 11:43 AM
KhainiWest

Quote:

Originally Posted by Blades4hire

Around 3 months.
Ever since it happened, I've been changing my main account's password once a week.

Thats your best course of action, rather after every servercheck lol
2011-12-15, 11:50 AM
Daakun

I admit to not changing my password as often as I probably should, but it was within the past two or three months at least.
In any case though, no one else knew my login id, let alone my password or PIN.
2011-12-15, 11:56 AM
SwordStaker

Quote:

Originally Posted by Blades4hire

Around 3 months.
Ever since it happened, I've been changing my main account's password once a week.

Quote:

Originally Posted by Daakun

I admit to not changing my password as often as I probably should, but it was within the past two or three months at least.
In any case though, no one else knew my login id, let alone my password or PIN.

Hm because so far it seems like everyone being hacked hasn't changed their passwords often. Thus back to my theory, people with passwords who did not change them at all, back when the breach happened, are the ones getting hacked. That's not to say you can't just get hacked because it happens. A bout 3 months ago before I changed my password someone was trying to get into my e-mail. I'm happy gmail enabled the double log in thing though. Anyway so far the only ones I see getting hacked around here, my bl, and my guild are the ones who've been gone for a while and haven't changed their passwords. That's just my theory from the evidence here.
2011-12-15, 01:01 PM
MissingLink

Quote:

Originally Posted by SwordStaker

Hm because so far it seems like everyone being hacked hasn't changed their passwords often. Thus back to my theory, people with passwords who did not change them at all, back when the breach happened, are the ones getting hacked. That's not to say you can't just get hacked because it happens. A bout 3 months ago before I changed my password someone was trying to get into my e-mail. I'm happy gmail enabled the double log in thing though. Anyway so far the only ones I see getting hacked around here, my bl, and my guild are the ones who've been gone for a while and haven't changed their passwords. That's just my theory from the evidence here.

This does seem reasonable to explain some of the hackings, especially those where the player has found their account hacked after a long break.
Nexon's admitted leak in April (and maybe later undisclosed or unknown leaks) plus advanced password hash cracking techniques:
http://www.pcpro.co.uk/blogs/2011/06...nder-a-second/
are making people with previously good-enough passwords who rarely change them vulnerable.
2011-12-15, 05:08 PM
valhala556

yeah found out they hacked my email. Found the change password request in the trash dated december 13th. which i did I did make one (there were 2 though) then but also a PIC one which I did NOT make....
2011-12-15, 07:35 PM
Flonne

Quote:

Originally Posted by Daakun

I'm fairly certain they don't even need your PIC.
Mine was nine digits long when my NX got jacked, doubt that was forced.

9 digits can be done in under an hour on a crappy PC, under a minute on a high end one.
2011-12-15, 07:43 PM
Raul

Quote:

Originally Posted by Flonne

9 digits can be done in under an hour on a crappy PC, under a minute on a high end one.

And this is why Nexon should make PIC cooldowns.
If you get it wrong 5 times in a row, can't try for 10 minutes (and disconnected from login server for good measure).
2011-12-15, 08:10 PM
Globin

Quote:

Originally Posted by Raul

And this is why Nexon should make PIC cooldowns.
If you get it wrong 5 times in a row, can't try for 10 minutes (and disconnected from login server for good measure).

I find it hard to believe this hasn't been implemented ever since PICs were introduced. I swear that has to be mandatory for every game.
2011-12-15, 08:33 PM
Marksman Bryan

Mule account just got an email change request.
2011-12-15, 09:24 PM
WubYou4ever

So did they got rid of the weird symbol thing for account lock? I can't seem to do it anymore and now I'm scare to log off. and I keep getting disconnect ( the site) when I try to change my password ( with that weird symbol)

EDIT: Nvm they did really removed it :'(
2011-12-16, 12:04 AM
Daakun

Quote:

Originally Posted by Raul

And this is why Nexon should make PIC cooldowns.

I was under the assumption we already had that.
Godammit, Nexon. >_>
2011-12-16, 12:28 AM
Worthyness

they could also make it so that you don't use the PIC for absolutely everything. Like deleting characters, logging in to characters, gifting in the CS, etc.
2011-12-16, 01:37 AM
Combattente

Quote:

Originally Posted by Marksman Bryan

Mule account just got an email change request.

Same. This happened a few days ago.

Too bad for them, I don't have anything on that one anyways.

I'd be more worried if I got one on my main, which I still haven't, luckily.
2011-12-16, 02:40 PM
donovan

Quote:

Originally Posted by Combattente

Same. This happened a few days ago.

Too bad for them, I don't have anything on that one anyways.

I'd be more worried if I got one on my main, which I still haven't, luckily.

Just happened to me as well, not a main account, haven't touched it in months. Still it's pineappleing pissing me off, I shouldn't have to worry about this pomegranate unless I'm being stupid and sharing my account, if my main gets hacked again, honestly I'm quitting.

Still waiting on a response from a ticket I sent after my main got hacked, 2 months later still a bunch of auto, we didn't forget about youshiz.
2011-12-16, 06:52 PM
moore4me

Ok so as far as I can tell from reading this and getting 1st hand accounts of people hacked that i know in Khaini, it seems there is atleast 2 very different methods going on. One method, requires them to change your information and them hack your password to your email, which means they got your USER ID somehow. The second and much more scary method is them getting into accounts while changing NO INFORMATION.It seems most people havent changed their information in awhile who get hacked via the second method. My question is has anyone been attacked, received an email requesting password change, after REMOVING their USER ID and changing to EMAIL log in?
2011-12-16, 07:48 PM
Liteness

what about the idea of changing pass TOO much haha gets you hacked more often (: in my 6 years i've only changed pass 3 times, 2 forced pass change 1 maplestory/1 DFO, and one after MTS crap, never been hacked
2011-12-16, 07:58 PM
YennoX

Hi, I registered to reply to this thread.

I was hacked just yesterday; the hacker went on my account and bought some crossbow arrows for 30k NX in the MTS. I received an email in my inbox saying that someone wanted to change my account's email address. Luckily for me, I use different passwords for anything I sign up to on the internet (which means my Maple password is strictly unique to Nexon only), so the Hacker was unable to log on to my email and successfully change my account's linked email address. Neither my password nor my PIC were changed when I logged on. Apart from the missing NX, I don't believe anything else is missing�which is weird because taking my items/money would have been a piece of cake.

And as you've stated, I haven't changed my password/PIC in quite a while, or otherwise, pretty much never.
2011-12-16, 08:01 PM
Stereo

Hurr ducking fur.
http://i.imgur.com/a3ZiX.png

None of them are for my main accounts yet but it's pretty obnoxious (yes that's 8 different mule accounts, all presently inactive. Of note: the emails and account IDs are sequential)

On Nov. 15th, 5 of these accounts got reactivation emails as well.

Show 100 post(s) from this thread on one page