+- Southperry.net (https://www.southperry.net)
+-- Forum: Maplestory (https://www.southperry.net/forumdisplay.php?fid=15)
+--- Forum: Maplestory Discussion (https://www.southperry.net/forumdisplay.php?fid=31)
+--- Thread: Any other people getting hacked? (/showthread.php?tid=36491)
Any other people getting hacked? - TaliaNCo - 2011-01-19
Anyone who thinks hacking doesn't happen is wrong. I used to think the same way until my account was hacked almost exactly a year ago. I've never been to phishing sites. I'm a grown adult, I'm not that naive. My hotmail account was recently hacked but thankfully that account isn't associated with much of anything at all and it looks like it was merely used to spam whoever I had in my contacts list, advertisements for viagra lol. It's horrible that this is happening again a year later. I don't believe Nexon will ever make their games very secure. Hackers will always figure out another way to get the info they want.
Any other people getting hacked? - Retalion - 2011-01-19
This happened to me around half a year ago, where someone hacked into my email and tried to hack my maple account (which is connected to an email that no one knows). I was inclined to believe that someone adding you to msn and you accepting somehow gives them information that allows them to hack you and reset your info.
I've heard of people getting hacked this way quite a bit on and off lately, so you never know.
Any other people getting hacked? - Jamie_Kurosawa - 2011-01-19
Most of the hack problem comes from issues like malware and spyware. Using public computers or unprotected networks often results in this happening also.
This why I never use a public PC to log-in to any accounts, let other people use my computer, and store my passwords I do write down in a locked box. I also check my e-mails daily and never have them forward anything, anywhere. I also never use E-Mail Client Software like Thunderbird or Outlook.
Any other people getting hacked? - TaliaNCo - 2011-01-19
Jamie_Kurosawa Wrote:Most of the hack problem comes from issues like malware and spyware. Using public computers or unprotected networks often results in this happening also.
This why I never use a public PC to log-in to any accounts, let other people use my computer, and store my passwords I do write down in a locked box. I also check my e-mails daily and never have them forward anything, anywhere. I also never use E-Mail Client Software like Thunderbird or Outlook.
I don't have any of those issues either. Everything is protected and I'm the only one that uses this computer. I even have a password on my laptop so the kids can't use it. I don't have anything to forward. I use one email only, for the most part. The only reason I ever created a hotmail account was to make an alternate account on a game I haven't played in about 3 years. I don't have a need to ever use a public PC and have never used one. I've never played maple anywhere outside of my own house. Pretty sure Eos isn't naive to anything of the sort and he still got hacked too. That right there says a lot.
Any other people getting hacked? - LittlePrincess - 2011-01-19
Hi Matt!
I have not been hacked on any of my accounts from this outbreak yet. (Or else the hacker didn't find anything valuable to take which seems kinda unlikely as I tend to store mass equips, scrolls, books, etc on my mules.) The only time I ever got hacked was when nexon leaked their database info (which they denied until database refrence numbers were posted and after that they made no comment except that shortly after that they implimented PIC and required password changes on all accounts).
But I don't use facebook, myspace, or other social networking sites. I don't give out my e-mail for anything. I don't use my real name, DOB, or exact location in maple. And I keep a kinda low profile.
Also most of my accounts are not hotmail, gmail, or yahoo. I have about 17 accounts and I only have about 2 hotmail and 2 gmail e-mails. Two of my accounts use school e-mails which require a social security number (along with some other info) to reset the password. On most my e-mails I have completed an e-mail recovery option that lists unlikely items to guess or know (such as where was your mother born). Failure to answer the question would equate to failure to recover the e-mail. I made 10 additional accounts with nothing on them that use an e-mail that does not have a password (anyone who knows the e-mail can check it), but they offer alternate e-mail delivery addresses which I used when giving the e-mail to Nexon. With only the alternate address you may send e-mail there but you may not check it. Anymore that seems more secure than a regular e-mail. Although those are little fame mules with nothing on them, so I wouldn't be able to tell if they got hacked unless hacker dropped their worthless lvl 10 gear.
My e-mail passwords have never matched my maple passwords and are currently moderetly secure, I'm considering upping them to secure (but have to think of a pw). Currently my maple passwords are very secure and are different for every account. Since the GM was hacked with just username/pw, I figured PIC doesn't matter so I made them the same for every account.
Any other people getting hacked? - thinbear - 2011-01-19
it happened last year:
I got 5-6 accounts, setup in this way:
- user001
- user002
- user003
- ...
they had SAME password and pin, only user005 got hacked
which, user005 is quite inactive...
EDIT: sorry accidentally click [post] too early
Any other people getting hacked? - CrimsonJohnny - 2011-01-19
Item locked my most expensive stuff due to the hacking scare last year. Now, the locks JUST fall off, which I've been looking forward to. Then this happens. That's some powerful irony.
Still waiting to see more info on this though...
Any other people getting hacked? - octopusprime - 2011-01-19
Satellite Wrote:I've never been hacked during 4 years I've played MS.
I don't believe in "hacking" at all.
No hacks are needed when people use weak passwords and share their info with others.
HAHAHAHAHAHA Nexon didn't all but admit to a database leak a while ago. I just shared my info with everyone listening because i'm a drama whore and love losing years of progress. i've never lost anything or had a security issue outside of that one isolated incedent in maplestory.
Any other people getting hacked? - ctblack - 2011-01-19
This might be the "left over" from the last massive hacking due to (from guessing) Nexon upgraded their servers, but didn't wipe the old server's hard drive. Those password and PIN info are now out of date, but the login ID and email would be mostly unchanged, since Nexon makes changing email a really pain to do and there is no way of changing login ID. The hacker(s) would probably wait till a cool down period when most people forgotten about what info was leaked (also give them time to look for exploits in various email services). From some of the posts looks like the hacker masquerade a email pretending its the victim requesting for a password/PIC reset, then try to login to the victim's email to get the new info, but wasn't fast enough.
Any other people getting hacked? - CrazyNomad - 2011-01-19
ctblack Wrote:This might be the "left over" from the last massive hacking due to (from guessing) Nexon upgraded their servers, but didn't wipe the old server's hard drive. Those password and PIN info are now out of date, but the login ID and email would be mostly unchanged, since Nexon makes changing email a really pain to do and there is no way of changing login ID. The hacker(s) would probably wait till a cool down period when most people forgotten about what info was leaked (also give them time to look for exploits in various email services). From some of the posts looks like the hacker masquerade a email pretending its the victim requesting for a password/PIC reset, then try to login to the victim's email to get the new info, but wasn't fast enough.
maybe?
http://www.snsgaming.com/forum/sns-maplestory/public-hack-releases/global-maplestory-releases/336-free-maplestory-accounts-over-17k-released.html
Any other people getting hacked? - Duelman - 2011-01-19
Just f'ucking great... I don't even want to look at the list because I'm pretty sure mine will be on it from last year.
GREAT...
Any other people getting hacked? - Random_Overlord - 2011-01-19
Them chinese hackers hate maplestory like no tommorow don't they?
Any other people getting hacked? - ChaosH - 2011-01-19
CrazyNomad Wrote:maybe?
<link>
What the... is this... Maple Hell?
Any other people getting hacked? - KhainiWest - 2011-01-19
I actually know exactly how they do it. I'm not sure if anyone remembers but my account got hacked a year ago in April, which resulted in an email change on my case, which was successful. I actually befriended the very player who hacked me (after he repaid all my pomegranate plus interest when I threatened an FBI report, had his IP/Zip/Address). Eventually I got out of him how to actually accomplish this, it's a long process and an annoying one but this is how they specifically do it for msn;
They Ip tag you, this would be from getting a message from msn, even a friend invite that you don't accept, from you opening an email from them, too going to a tinyurl link. If they find an email sent by you, they can look in the properties, get your full name, google your information for a facebook, or even find you on facebook. It's basic social engineering and exploitng password changes on the email addresses.
Though yahoo should be the safest, ISP's are unbreakable lol.
Any other people getting hacked? - Random_Overlord - 2011-01-19
DustBunny Wrote:I actually know exactly how they do it. I'm not sure if anyone remembers but my account got hacked a year ago in April, which resulted in an email change on my case, which was successful. I actually befriended the very player who hacked me (after he repaid all my pomegranate plus interest when I threatened an FBI report, had his IP/Zip/Address). Eventually I got out of him how to actually accomplish this, it's a long process and an annoying one but this is how they specifically do it for msn;
They Ip tag you, this would be from getting a message from msn, even a friend invite that you don't accept, from you opening an email from them, too going to a tinyurl link. If they find an email sent by you, they can look in the properties, get your full name, google your information for a facebook, or even find you on facebook. It's basic social engineering and exploitng password changes on the email addresses.
Though yahoo should be the safest, ISP's are unbreakable lol.
Luckly I have like a dozen emails.
Any other people getting hacked? - Jamie_Kurosawa - 2011-01-19
Most companies use low-level formatting tools like Active KillDisk Pro or the native Drive's SCSI Tools to completely erase the hard drives before disposal or recycling. One of the most thorough but time consuming wipes is the 35-pass Gutmann erase mode.
However, remember there are things also to be considered...
Things like Cookies, ActiveX Controls, and JavaScript from unlicensed and unauthorized sources can actually leak information back to a server or be packing a malware payload that could compromise your system. These attacks often target the HOSTS file to redirect people to fake servers and falsified websites.
This is why I've always used a tool like Spybot Search and Destroy to not only secure the HOSTS file and block out known malicious websites, but have an active scanner running in the background while the web browser is in use. Oddly even though MalwareBytes offers active scanning and Site Blocking, it doesn't secure the HOSTS file. Because most attacks now are Malware based and not viral based, people tend to think they are protected by a simple Anti-Virus.
This is also why people tell you to use web browsers that are more secure like FireFox. IE has always used ActiveX Controls and it's a major security flaw no matter how many revisions and talks of added security are done. ActiveX allows any software from a website that uses ActiveX to have full access to your system resources and often can carry dangerous payloads of malware. JavaScript isn't flawless as well, but it can be sandboxed to limit the compromised amount of the system down to the sandbox.
So realistically you may have a problem and not realize it until after the hack has been done.
One good tool I'd recommend for anyone...
If you need to access a website with password usage... get FireFox and use it's Private Browsing mode. Your passwords, cookies, and other temporary files will be deleted after you close the browser. You also should run tools like CCleaner on a weekly basis to delete these files as well using it's Secure wipe mode.
And if you use Spybot S&D, update it daily and keep it fully Immunized. Update your Anti-Virus software daily too.
Any other people getting hacked? - Combattente - 2011-01-19
DustBunny Wrote:I actually know exactly how they do it. I'm not sure if anyone remembers but my account got hacked a year ago in April, which resulted in an email change on my case, which was successful. I actually befriended the very player who hacked me (after he repaid all my pomegranate plus interest when I threatened an FBI report, had his IP/Zip/Address). Eventually I got out of him how to actually accomplish this, it's a long process and an annoying one but this is how they specifically do it for msn;
They Ip tag you, this would be from getting a message from msn, even a friend invite that you don't accept, from you opening an email from them, too going to a tinyurl link. If they find an email sent by you, they can look in the properties, get your full name, google your information for a facebook, or even find you on facebook. It's basic social engineering and exploitng password changes on the email addresses.
Though yahoo should be the safest, ISP's are unbreakable lol.
Social engineering.
I knew it must've been that. There was really no other possible reason. Nexon's security obviously isn't so weak that someone, even the most experienced hacker, can access their databases or anything like that. I'm almost sure of that. In fact, I never even thought it might have been their fault. It's just that hackers are always finding more and more complex ways of finding out useful informations to be able to get their hands on your accounts.
.. I've never been hacked, but.. I'll lock my items just to make sure.
Any other people getting hacked? - Duelman - 2011-01-19
I'm more on the side of "when they changed servers over they probably threw out old harddrives in the trash" theory. I believe they mishandled sensitive information when changing their system last year (or anytime it was almost exclusively old accounts).
If you read what the guy was talking about on that thread that nomad provided you can see him say it was directly from wizet themselves.
Sure there are people that get hacked via msn and all that other junk, but that is NOT what caused the outbreak from last year.
You don't get database reference numbers from msn, you get them from harddrives that were improperly disposed of or from an inside source at nexon.
edit: here are some quotes from that site.
Evan: "lol i got some good accounts i facebook'd their email adress found their first last name and their birthday on my own 0-0
all i need is their email passwords "
Linosal: "This has been discussed, it was not a rat/keylogger.. contrary to popular belief there ARE other ways to get account info."
From the man himself .Murder. "There were no trainers, bots, auto-login features, etc. when these were obtained.
These accounts aren't only from hackers, but from legit players, as well.
I will only say this... It came directly from Wizet. "
vibrat0r: "Good on him (Y). He said exploited not really hacking nexon's databases "
the list goes on I am still reading... -_-
Any other people getting hacked? - Excogitate - 2011-01-19
Combattente Wrote:They Ip tag you, this would be from getting a message from msn, even a friend invite that you don't accept, from you opening an email from them, too going to a tinyurl link. If they find an email sent by you, they can look in the properties, get your full name, google your information for a facebook, or even find you on facebook. It's basic social engineering and exploitng password changes on the email addresses.
Though yahoo should be the safest, ISP's are unbreakable lol.
That's somewhat odd, since the name on my email actually isn't my name, so no one would be able to get to my facebook that way. I use Yahoo AND I never use it to send emails. Ever.
Any other people getting hacked? - MissingLink - 2011-01-19
Combattente Wrote:Social engineering.
I knew it must've been that. There was really no other possible reason. Nexon's security obviously isn't so weak that someone, even the most experienced hacker, can access their databases or anything like that. I'm almost sure of that. In fact, I never even thought it might have been their fault. It's just that hackers are always finding more and more complex ways of finding out useful informations to be able to get their hands on your accounts.
.. I've never been hacked, but.. I'll lock my items just to make sure.
That method would be way too slow to explain the major account hack epidemic a year ago.
Besides, not everyone uses msn, or facebook, has static ip, uses main email for ms email, which this method would seem to require (unless I misunderstood something)
Plus, they still need the maplestory user id. Unless you are silly enough to post that on facebook or something, or never delete your 'Welcome to Maplestory, you id, pw is' email from Nexon, how do they get that?
Edit:
Just remembered: When you charge NX, you get a 'Purchase Confirmation' email, which also has your ID in it. Best to delete those immediately.
That may explain why some people get hacked immediately after charging NX. The hacker already had their email and was just waiting to find out their ID.