People being hacked since the last Server Check.

[Justin]

I agree.
It was downright mean and stupid to ban him for trying to help the community against the account hackers.
Meanwhile the actual account hackers may be reading this thread and lolling merrily.
Go ahead and ban me for saying this if you want, because frankly, if this kind of indiscriminate, thoughtless moderating is the new norm, I want no more to do with this site.

Except for the fact he wasn't helping anyone with anything? The moderator team isn't here to play babysitter and inspect every single user as to their being legitimate or not. If you admit to hacking, you're gone. Get over it.

[Eos]

Except for the fact he wasn't helping anyone with anything?

I know I would certainly be interested in knowing how spreading fear and panic with no means to protect yourself from what at best might be an opening but couldn't actually be used in the example given qualifies as "help" any more than standing up and screaming "FIRE! FIRE! THE BATHROOM MIGHT BE ON FIRE" in a crowded theater.

That's the problem with invoking the robin hood defense; You need an awful lot of proof what you did was righer than it was wrong. I'd have hanged the real Robin Hood. Popular Support is not Right.

[MissingLink]

I know I would certainly be interested in knowing how spreading fear and panic with no means to protect yourself from what at best might be an opening but couldn't actually be used in the example given qualifies as "help" any more than standing up and screaming "FIRE! FIRE! THE BATHROOM MIGHT BE ON FIRE" in a crowded theater.

That's the problem with invoking the robin hood defense; You need an awful lot of proof what you did was righer than it was wrong. I'd have hanged the real Robin Hood. Popular Support is not Right.

So I take it that you think the video showing the account hack method was somehow faked?
Or did you even bother looking for it before declaring it as FUD?
I'm sure you would be capable of testing it out if there was any doubt. Just don't say so or you would have to ban yourself.

If it is real, then exposing the method as much as possible is the only possible way Nexon will notice and perhaps attempt to block the method.
How is that not helping the community?

[Eos]

So I take it that you think the video showing the account hack method was somehow faked?

It doesnt matter if it was fake or not, /* which we can't ever be sure of without trying for ourselves, which is absolutely the last thing we want to encourage, since it could've easily been done on a private server or otherwise manipulated */ , because in Blades4Hire's very own admission he couldn't touch the characters, could only see them. That makes this only marginally more of a threat than the rankings.

I couldnt log in to any one of them however because it said something about "PIC must be created, please create PIC and try again."

That'd be security right there, recognizing that the accounts don't match therefore no PIC could be retrieved or set.

Did you even read the details before deciding this was some great secret of the universe he was sharing for the benefit of all and I was somehow repressing him?

[Mazz]

Wondering about the latter comment as well. How would it work if the hacker got onto your account while it's locked for "suspicious activity", banned or even when you were still on it? All of those checks seem to happen at the initial login screen. *hopes that Nexon has additional authentication thoroughout the login process*

Pretty sure they check again at the channel select screen too, if you're on a banned account and you use the website to log in you get to the channel select screen before getting 'You have been disconnected from the server.', whereas if you use GameLauncher it doesn't let you get past the ID/pass screen.

I was thinking, maybe the method that was shown is how certain accounts are targeted (i.e. look for characters worth looting), and then the hackers are able to retrieve the log in and password since they are technically already connected to the account. Kind of like how when you're in-game and you hover over the level/job/IGN area on the bottom left it tells you your log in ID. Seems like it'd work, but that wouldn't be able to explain how they bypass the PIC system (or even get the login details).

Also RE: Blades4hire, he's on a mult account called Revamp now anyway.

This whole situation sucks.

[MisterA]

Everytime I click Basil, I see 5 Threads daily about getting hacked. Everyone says its a Keylogger which obviously is not.

There is a Database Leak going on right now and we cant do anything about it.


Atleast Nexon will lose Customers !

[Kalemora]

Brother just got hacked last night. They took anything he had of worth besides his Evolving Ring IIIs. Dunno whether he got keylogged or what. :/

[Rexy]

Everytime I click Basil, I see 5 Threads daily about getting hacked. Everyone says its a Keylogger which obviously is not.

There is a Database Leak going on right now and we cant do anything about it.


Atleast Nexon will lose Customers !

While your thoughts about the data base leak might be true, I don't think that's the problem with so many people getting hacked recently.

The way that a lot of people I know, including myself got hacked is pretty weird. No one knows how or why it happened, since we all take care of our computers well, to avoid any kind of virus. Once you get hit, you're off for good. They somehow have a method of changing your email address, bypassing even Google's 2-step-verification(Don't really know how secure this is, but it's kept me safe for a long time until my mule got hacked the other day :)), and changing the email to your account completely, without you knowing about it until you try log onto your account.

Sadly, at this point I don't think there's a way to avoid it other than afking on your character. We are all just sitting ducks waiting to get owned :(.

[MisterA]

a question, can a keylogger get ur pic? Isnt it impossible?

[Raul]

a question, can a keylogger get ur pic? Isnt it impossible?

No, it's very possible.
Some keyloggers log the images on your screen, specifically to bypass on-screen keyboards.
Also, PIC's are irrelevant, it's pretty widely known that they're bypassable.
They're irrelevant, as are username and password, if what the late Blades4hire told us was true (link)

[Zelkova]

a question, can a keylogger get ur pic? Isnt it impossible?

I believe that is why PIC's and PIN's first came into existence. You could not keylog the input with your average keylogger. However, I am not saying that there might not be a program that was written specifically to capture such data.

[MisterA]

im really curios how these farmers hacks accounts without keylogger... I talked with someone , he was saying its his job he have no time

Database leak is the most plausible

But we are not safe

[Raul]

im really curios how these farmers hacks accounts without keylogger... I talked with someone , he was saying its his job he have no time

Database leak is the most plausible

But we are not safe

No, it's very possible.
Some keyloggers log the images on your screen, specifically to bypass on-screen keyboards.
Also, PIC's are irrelevant, it's pretty widely known that they're bypassable.
They're irrelevant, as are username and password, if what the late Blades4hire told us was true (link)

They're irrelevant, as are username and password, if what the late Blades4hire told us was true (link)

if what the late Blades4hire told us was true (link)

(link)

link

[MisterA]

how we change user id to email id?

[Justin]

how we change user id to email id?

I don't believe you can anymore.

[Spadow]

Not too long ago my account was compromised. I have no idea how this person could've gotten access to my account.
I take safety and security very seriously, never shared my information nor saved it on my PC. It's all saved in my head. Nor do I have any malicious software installed on my computer or any viruses. My PC is clean and has been for a very long time.

I never thought this would happen to me. This has been the first time ever that an account of mine has been compromised.
Last year in December, the strangest thing happened. Most of my staff members from EllinForest were hacked and yet they didn't know how. One by one their account got compromised.
For a few members not only once, but twice after changing their account information. Fortunately, Nexon Korea allows us to change our Maple ID but even that doesn't help since I changed my Maple ID and password after I heard about the massive leak.

A staff member got hacked. Got his DABR, HTP and Agares polearm taken away from him. His friend managed to find the items in a shop and bought them. However, that friend got hacked as well and how? I don't know.
Korean users get hacked even with an authenticator (One Time Password) that requires a cellphone.

The person who accessed my account took away most of my chairs, money, load of potions. I'm really lucky.
Most of my items are locked and most of them are untradeable.
But my staff members lost more than I did: Nexon Cash, valuable % items and whatnot.

I'm upset because right now even if I change my Maple ID and password, I don't think I'll be safe.
By the way, everyone is forced to create a secondary password that can only be entered through mouse-clicks.

I vote for locks being sold from NPC shops instead of the Cash Shop. Don't think it'll happen but a man can dream, right?

[Daakun]

Honestly, I begin to believe them when they say my support ticket about being hacked can't be looked yet at because they have so many tickets at the time.
Probably all for people getting hacked. >_>

[MisterA]

Honestly, I begin to believe them when they say my support ticket about being hacked can't be looked yet at because they have so many tickets at the time.
Probably all for people getting hacked. >_>

im 100%sure theres a database leak, no there must be a leak

[xManuz]

Wow that sucks @Spadow :(. Fortunately, you didn't get EVERYTHING stealed though. And yes, I agree with you. They should sell the locks from NPC's or ATLEAST make a sale like 360 days 1k NX or something.

Also, two of my friends got hacked not too long ago :/. It seems that it's only matter of time till we get hit.

To be honest, i've been thinking of an idea to get rid of all hackings: Nexon should release "Character lock" and this way, they can't delete our characters if our items are locked. Also i've heard that even with locked items they can still blow up your equips, well... then they should fix that too. And to be honest, this idea wouldn't be THAT hard to do.

[Judgment]

Korean users get hacked even with an authenticator (One Time Password) that requires a cellphone.

This is what really concerns me. Either the hackers have caught on to man-in-the-middle exploits to bypass authenticators already, or their authenticator system is complete junk.