+- Southperry.net (https://www.southperry.net)
+-- Forum: Maplestory (https://www.southperry.net/forumdisplay.php?fid=15)
+--- Forum: Maplestory Discussion (https://www.southperry.net/forumdisplay.php?fid=31)
+--- Thread: Any recent hacked accounts from Southperry users? (/showthread.php?tid=20977)
Any recent hacked accounts from Southperry users? - Chirdaki - 2010-01-06
street Wrote:Check your blocked emails list. Nexon might be under the blocked list
Derf Derf lol cant believe I didn't check that. Removed both blocked addys and extracted all relevant emails from the address so I may retire it fully.
Bloody hacker even got into my ms ticket, saying "it was my fault I logged on a public computer and I will start fresh" ... my ass. Guess that is the silver lining of gm's not reviewing for 3 weeks. I responded accordingly saying the above post was a lie, and I was rehacked and my shad got deleted, quitting forever ect.
Guess I can post what was taken from me in its entirety sometime...Not like that information is even relevant anymore without a character.
Ticket - "Status Escalated" Sounds for a fancy title for not closed fpoc (first point of contact)
Any recent hacked accounts from Southperry users? - RoxStarzzz - 2010-01-06
King Wrote:I'd like to contribute that I never or know any one that got hacked before
IMO those "random" hax are total bs because no one can hack u unless u tell them ur acc info
There are two problems with this statement. One is the keylogging hacks that are going around. I was keylogged myself, and spent over a week educating myself and making sure the trojan was deleted from my computer getting hacked. All of my accounts and all of my mules got hacked. I don't know where I got the Trojan from, but I found it and know that is what happened. I wasn't using anti virus software though at the time, so I learned a good lesson.
The real fear that is currently spreading across the community is an apparent new hack that can get your account without keylogging you, or without any help from you at all. In the last week or so I have had three guild members hacked. Two of them are Professional Computer Programmers (both with college degrees), i.e. they know how to protect their computer and didn't find any virus after the hacking occurred. The one guy in all the time I have known him has been very careful with his account info, and I would assume the other guy wasn't careless either. And yet, they both got hacked in the last week and cleaned out.
In response to hacking the rich people. We don't know how people are being hacked, but it doesn't appear the hackers have a reliable way of targeting a particular character, else all of the rich people would be looted by now. But it does appear they have a steady, consistent way of continually hacking one account after another. Aside from Guild, buddy list and elsewhere I have heard and seen alot of people get hacked in the last couple weeks. Everyone is concerned. Concerned enough that several people, myself included, have stopped spending money on the game. One guy thats spent over 2k has said he isn't giving Nexon another dime unless/until the game becomes more secure.
Any recent hacked accounts from Southperry users? - Eos - 2010-01-06
RoxStarzzz Wrote:One guy thats spent over 2k has said he isn't giving Nexon another dime unless/until the game becomes more secure.
Unfortunately that's absolutely meaningless unless he's file a feedback ticket to Nexon telling them that's why he's no longer spending money on them and that he otherwise would be but no longer can feel safe doing so.
Nexon expects people to vanish all the time, their business model revolves around getting new people in the door and enticing them spend - If you've already spent, you're considered done and they don't really worry about you that much.
Any recent hacked accounts from Southperry users? - SunnySis - 2010-01-07
Chirdaki Wrote:Managed to get my email account back...again.
Since my shad was deleted I will never play ms again but I wanted to reclaim my account anyways. Went to the site to reset my password and it says it sent a new password to my email but it never shows up. Tried again for good measure but nope. Is it possible to change your ms account's email? If so I would have done it over 3 years ago.
My Aran is still on ranks so my account has not been deleted just my shad. I still have an open ticket as far as I know but if the email has been changed its like not possible to recover the account?
This happened to me in april of this year to about 6 of my accounts. Nexon called me a lier and told me i had just forgot my email address and refused to help me. I even tried to make a new account with the email linked to the hacked maple account and Nexon.net said that email was ok to use and was not already registered. After 5 tickets with nexon and them treatening to restrict my ability to make tickets, i lost hope and moved on. I truely think there IS a hack that allows hackers to change your registered email that is linked to a nexon account. I had not heard of anyone being affected by this again until v.80 when one of my long time friends who really sets an example for how safe he is had it happen to him.
disclaimer :
YES i am sure that is the right email address, i even have the account validation email in my saved emails.
YES i checked my blocked senders and my junk mail
YES i have done everything i can possibly think of to convince nexon that the email was actually CHANGED.
NO nexon does not think its possible for someone to change the email linked to an account.
NO NOTHING WAS TAKEN FROM MY ACCOUNT its still fully equiped on ranks and still is wearing the expired NX.
NO i don't think this was random, my ex in game gave out my personal info to a hacker and wanted to get them to make it so i can not use that char anymore.
Yes i checked over and over an NEVER found any viruses or anything and i have not had any issues with any accounts since.
NO i am not an idiot most of the time and don't forget my emails,
Yes this scares the fk out of me for everyone and i wish that nexon would actually talk to us like people. i mean FFS i am lvl 200 and think i probobly know more about maplestory than 75% of the monkeys working at nexon.
Any recent hacked accounts from Southperry users? - Chirdaki - 2010-01-07
There defiantly something bizarre going on with my account. God knows why I keep trying, cause I don't.
Reset password, receive fine.
Login with new password fine.
Try to change pw, says invalid old pw.
Try to log out and log back in, old and new password invalid.
Back to square one. If you try and reset twice a day, it wont let you change it due to the "2 times max allowance per day" to change your password. 3rd day in a row this happened.
The system is broken.
Further reports from Khaini include people still being hacked at random. Over the last 4.5 years Nexon's response to hacked chars always amused me (mostly cause people gave out their info) Now when something real is actually happening their response time seems to have gotten worse of all things. Like man...
I am pretty sure this company has the worst customer I have ever faced and god willing, will ever face in my life.
Any recent hacked accounts from Southperry users? - 2147483647 - 2010-01-07
You're still trying? Not trying to be offensive, but I highly doubt Nexon's going to replace your shadower...
Any recent hacked accounts from Southperry users? - Kawji - 2010-01-07
Just logged on today after a few weeks of being on hiatus, only logging on around 3 times before, when I logged on today, every character of mine was stripped, i've never been to any other sites about free mmo's or any biased maplestory site, only southperry, youtube, google, normal trustworthy sites, i've never been hacked in my life, so this is kind of .. new? I can only say something is happening with nexon's security , cause I just don't understand it, Never had anything really worth much, besides my 8 att wg and my zhelm, which btw the hacker delightly dropped XD. Just wanted to share my little experience.. <_<
Any recent hacked accounts from Southperry users? - Chirdaki - 2010-01-07
2147483647 Wrote:You're still trying? Not trying to be offensive, but I highly doubt Nexon's going to replace your shadower...
They aren't obviously.
I just want my account with my own password.
Any recent hacked accounts from Southperry users? - Jellyflower - 2010-01-07
When you try to change your password on the website, if you copy and paste from the email, I think even if you highlight it correctly, it'll always attach an extra space letterholder at the end for some reason. Maybe it's the bolded font it comes with I dunno. Actually, it won't even let you use special functions like ctrl and alt on the site. Password changes work fine for me.
Sorry I really have no more insights as to what's occurring. For those that 'know' and 'believe' something's going on, like myself, I highly suspect SQL injection, tied to MSEA's hackings. The motive is clear, hackers are raiding mesos and items of value, meaning they are in it for the 'money'. In majority, characters aren't deleted, emails aren't compromised, they leave the characters in their guilds, skill points and ability points untouched, which clearly highlight their intention. Many of which don't involve themselves in conversations; if it was social engineering, there should be cases of which where they'll try to steal off victim's friends by imposing their identities. Some might argue, hackers of this degree should be hacking banks or major institutions. I beg to differ; it is easier to 'get away' from stealing virtual items as supposed to 'digital data' representing securities and funds of individuals and financial institutions. Even if to say the former is just as risky as the latter, you'll be surprised how much credit (of numeric value) a maple account has as opposed to a credit card. A higher reward in a less riskier manner, unless you're a pure risk seeker that holds monetary value as no value or an idiot, you would not be enticed to try the latter procedure.
If someone wants to try to put together a petition to have this issue be looked at, please by all means do so. I simply don't have the energy or motivation to take on such a task anymore. My network is limited, reputation debatable at best, and insufficient information in execution of this matter would just further complicate problems and attract unnecessary attention. In short, there's nothing we as players can do, except to notify the personnel of interest (Nexon's staff) as soon as possible, and in their own words, try to 'escalate' the matter. Send tickets, post on their official forum (not spam), get friends to reply, but most of all, be prepared to brave for the worst. I wish you all the best, should you decide to stay or not, restart, or take the game in a different light.
Any recent hacked accounts from Southperry users? - KaidaTan - 2010-01-08
We miss you Steve! <3
Any recent hacked accounts from Southperry users? - egoflux - 2010-01-08
Hi everyone, I registered on this site just because of this topic. My wife had her account hijacked somewhere between the 3rd and the 5th of January 2010. I'm a computer programmer also and I keep our systems locked down tight. I was just floored when she exclaimed she lost all her stuff. I scanned her system immediately for malware, keyloggers, reviewed firewall entries, the network connection information, pretty much everything. Her system was 100% clean. There is absolutely no way someone could have guessed her account name, it was 12 characters long, with mixed numbers and letters and not the name of any of her players. On top of that, her password was also fairly long and mixed numbers and letters (from what I was told anyways).
We also don't follow ANY links mentioned in maplestory for anything (obvious scam is obvious), look at private server anything, and basically practice very safe computing practices.
I've read several posts about the recent hackings on this board and others and noticed a somewhat common thread... the people involved have accounts about 2 years or older and likely have not changed their passwords. According to some people on my buddy list, the nexon database WAS compromised around 2 years ago... however, that doesn't really explain why all of the sudden so many people are getting hacked recently. Regardless, I've pretty much ruled out any sort of hack or really any way that my wife's account and information was shared in any way (heck, *I* don't even know her pin and password and she wouldn't want to give it to me anyways, nor do I let her use my account)... leaving some sort of leak on Nexon's end as really the only feasible answer.
To dispel some of the information here, neither of us use MSN (not even installed), though we both have gmail accounts... she does not have any emails in there about anything related to maplestory.
Like others, she lost basically only stuff that was worth some cash -- weapons, above average scrolled stuff, skillbooks (maple warrior 20...)... and they even spent her 20k nx on gach on the 5th according to the transaction logs.
And the hacker was kind enough to leave her with 11 mesos on her 13x mage and 1111 mesos on her 7x sniper... which he/she also looted her expensive gear also... I'd say all in all, she lost about 1.2b in stuff and the aforementioned 20k nx. Thankfully, all untradeable stuff was not dropped... unfortunately now she wants to quit since she basically has nothing and has done nothing wrong.
I'm really at a loss for words and knowledge since this seems to have been completely out of our control. I'm curious to see if other people with KNOWN CLEAN SYSTEMS (no loggers, kthx) that have 2 years+ old accounts and HAVE CHANGED THEIR PASSWORDS somewhat recently have also been hacked.
I fear that if there are people in that category I asked about... that someone has current and ACTIVE access to the database for maplestory. If not, then it seems like they are still going off of the old information and only people that haven't changed their passwords are in trouble... and yes, it seems completely random with who's getting victimized.
Summary:
Completely clean systems, no keyloggers or viruses
Never been to ANY URL advertised in maple
No MSN installed
PIN / password were unchanged by hacker
Victim HAD NOT changed password since account creation 2+ years ago
We practice safer computer/internet practices (except changing password frequency obviously)
Account name and password would have been incredibly difficult to guess/hack
Hacker left untradeable things on, but left strange low end gear and etc stuff in inventory
Spent all remaining NX on the account on gach
Took all mesos
Any recent hacked accounts from Southperry users? - Chirdaki - 2010-01-08
To answer the question previous, Ive known several people who when they were hacked, had changed their passwords recently. Yes most people do not change regularity, my account itself had the same pass for like 2 years. The second time I was obviously targeted with a new pass whatever. I generally scan the khani section on sw many times a day for such threads (usually a new victim every few days, obviously not everyone uses maple boards), it seems there is no safeguard for this, new or old pass. Although you may be correct that only older players are affected. Seems most people hit are long time players like they use that to narrow down potentially richer players. This would also explain why inactive for many years players getting hacked but newer people who log on every day are not.
Not that this question was posted on sw khani but it could, my motivation to solve this has been steamrolled. I generally don't post on this topic anymore on sw, due to the last time attracting Detox who paid the hacker to rehack and delete my shadower. Don't need my stuff hacked a 3rd time, no matter how piss useless it is now.
Any recent hacked accounts from Southperry users? - sicnarf - 2010-01-08
My mule account that got hacked is pretty old (although I can't pull up a date on it at the moment) and I last changed the password on it about 13 months ago. My system is definitely clean.
Any recent hacked accounts from Southperry users? - Kyenrei - 2010-01-08
"Thank you for contacting Nexon America’s Customer Support team.
Thank you for the report. At this point, I ask that you please be patient while we investigate the information that you have provided.
We apologize for the inconvenience. Thank you for your understanding.
Sincerely,
GM Jascol
Nexon America, Inc."
Well, I feel a bit better about the situation. Now to just wait.
Any recent hacked accounts from Southperry users? - ctblack - 2010-01-08
Some one that is close to just recently gotten hacked, basically the same as what happened to egoflux's wife. The password has been changed about 2 weeks ago and the hack happened yesterday. The only thing changed on the login info was the pin. This makes me thinks its a keylogger that is too new for the current batch of anti-virus/malware/spyware to detect.
Any recent hacked accounts from Southperry users? - egoflux - 2010-01-08
I would like to reinforce the idea that WE HAD NOT CHANGED our passwords in the last 1.5+ years and she was hacked for no obvious reason.
I spent several hours researching her system, my network configuration and monitored ALL network traffic in and out of her system to detect any rogue connections -- if there was ANY keylogger on her system, I would have seen the suspicious BEHAVIOR simply by the fact that I can watch any and all network connections whenever they happen and to where both in her system and through my router.
I gaurantee that her system is clean of any sort of spying software. The only thing she uses the computer for is to play maple, check her email, and write school papers. Everything else she's too paranoid to check out because she thinks she'll get hacked (not to mention I have a fairly oppressive blacklist hosts files of ips and domains blocking a huge amount of questionable material). I do random security MANUAL audits on my systems and network without the aid of anti virus and anti-malware because simply put, I don't need them... I know enough about windows to know what's wrong and when to fix it.
If this isn't enough to convince you this isn't a keylogger, how about this -- I myself have used her computer to log in and play maple on several accounts.. almost all of them have substantially more gear, money, and loot that would be more useful -- and some that have quite a bit less (fame mules, etc). If her system was keylogged, why was her account the ONLY one to get nailed?
As a last resort, I used one of my linux systems to change all our passwords on all our accounts since her incident. If any of my accounts are hijacked I will know 100% for fact that it is neither my systems nor my network connection giving away my account information.
Some tools you guys might be interested to check your own systems:
Cain and Abel (packet sniffer)
Process explorer (mandatory)
Check your router logs
netstat -ano
Those are pretty standard tools to use to figure out if your system is compromised. Watching your router (or any system outside a suspected compromised system) will give you insight if the system in question is completely borked -- ie, hacks have replaced critical files and reporting bogus information.
Hope this helps, I'm completely unconvinced this was the work of any keylogger and again, we do NOT share our account information -- not even with each other.
Any recent hacked accounts from Southperry users? - Kawji - 2010-01-08
ctblack Wrote:Some one that is close to just recently gotten hacked, basically the same as what happened to egoflux's wife. The password has been changed about 2 weeks ago and the hack happened yesterday. The only thing changed on the login info was the pin. This makes me thinks its a keylogger that is too new for the current batch of anti-virus/malware/spyware to detect.
If that the was true that would mean everyone who was hacked with the same situation would have all gone to the same site to even get this keylogger on our computer, there is nothing whatsoever on my computer, and i've never been hacked in the 4+ years i've played this game, or on ANY online games i've played. This is obviously nexon's fault.
Any recent hacked accounts from Southperry users? - SumDingWong - 2010-01-10
omg Steve... I know I'm late but
miss you man. My account is newer than 3 years... like2 years i think, i just recently changed password.
Any recent hacked accounts from Southperry users? - Raffy♥ - 2010-01-10
[SIZE="1"]I was hacked yesterday morning. I probably lost about 5-6b in equips.
I'd just like to add that it doesn't matter how old the Hotmail account is, because mine was made around August (and was used purely for my MapleStory account). Another thing I found interesting was that one of my close friends was hacked around the same time as me, and our e-mails were made at around the same time in August. He's been inactive for a few months now and he didn't even notice he was hacked until I told him that my account was compromised. Both of our systems are absolutely clean, we don't know eachother's infos anymore, and I'm not stupid enough to visit malicious sites--I'm sure of that because my Bishop and my Marksman, who are both on different accounts, are completely untouched. My friend's Bowmaster is untouched as well.
Edit: Forgot to mention that I changed my accounts' passwords less than a month ago and I changed my e-mail's password in November. Luke changed his account's password over a month ago and his e-mail's password was unchanged since creation.[/SIZE]
Any recent hacked accounts from Southperry users? - MysticHLE - 2010-01-10
Hope4 Wrote:This happened to me in april of this year to about 6 of my accounts. Nexon called me a lier and told me i had just forgot my email address and refused to help me. I even tried to make a new account with the email linked to the hacked maple account and Nexon.net said that email was ok to use and was not already registered. After 5 tickets with nexon and them treatening to restrict my ability to make tickets, i lost hope and moved on. I truely think there IS a hack that allows hackers to change your registered email that is linked to a nexon account. I had not heard of anyone being affected by this again until v.80 when one of my long time friends who really sets an example for how safe he is had it happen to him.
disclaimer :
YES i am sure that is the right email address, i even have the account validation email in my saved emails.
YES i checked my blocked senders and my junk mail
YES i have done everything i can possibly think of to convince nexon that the email was actually CHANGED.
NO nexon does not think its possible for someone to change the email linked to an account.
NO NOTHING WAS TAKEN FROM MY ACCOUNT its still fully equiped on ranks and still is wearing the expired NX.
NO i don't think this was random, my ex in game gave out my personal info to a hacker and wanted to get them to make it so i can not use that char anymore.
Yes i checked over and over an NEVER found any viruses or anything and i have not had any issues with any accounts since.
NO i am not an idiot most of the time and don't forget my emails,
Yes this scares the fk out of me for everyone and i wish that nexon would actually talk to us like people. i mean FFS i am lvl 200 and think i probobly know more about maplestory than 75% of the monkeys working at nexon.
You aren't the only one that this has happened to. One of my friends had this occur to her back in March-April as well. She lost her 131 Shadower (LeftBower). It's on rankings and fully equipped and everything, but her attempts at password reset will simply not send the password to her email. To get around that, she tried "Forgot ID," and the email that she got (to supposedly her Shadower account) showed that her login ID somehow had a "3" concatenated to the original ID! In other words, her Shadower account's ID now has a 3 after it, and the email is now tied to this account_name3 ID...and the original account_name ID and email address somehow seem to have been lost forever.
I really think something funky is going on with Nexon's database management...if this hits me you can bet I'll file every legal thing I can get my hands on.
EDIT: Had some information wrong...corrected now.