Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Possible Nexon Database Exploit?
Panacea Wrote:No worries, Tepp. Thanks.

Sorry about your loss...I'm not too keen on responding to these kinds of things, but I feel I should chime in here and say a few things based on what I've seen.

I did some mini-research just now because this sparked some interest - mind you, computer security/hacking isn't what I'm normally interested in.

http://en.wikipedia.org/wiki/Keystroke_l...keyloggers
http://www.keylogger.org/

TL;DR version:

Don't count on any anti-virus/anti-malware software to detect a keylogger with much confidence - keyloggers can be very complex programs that go undetected if the implementation is unique and unthought of.

That being said, it is suffice to say that you should not rely on the fact that AVG or whateverAVsoftwareyouname not detecting anything to make your conclusion that your computer is clean. A guildie of mine was hacked a few months ago...at first he claimed that his computers were as clean as whistles...and then discovered a week later that he indeed had a keylogger.

Some things in computer science is not concrete and well-established - and computer security is one of them, mainly because earlier designs of software, hardware, and internet protocols did not have security in mind - so things are more or less being patched/researched on a regular basis - much like how the hackers of this game always go back and forth with Nexon.

You're a pretty cautious person from what I remember of you, so I won't say much in terms of social engineering. Your best bet is to wipe your computer clean and start off on a clean slate. Lastly, also be wary of the connections you make with people - both in game and in real life. I believe your guild (Villains, unless that's changed) does not have a very good reputation on our server (which is heavily hacker infested), if I may say. That gives more people more reason to hate you/your guild/making you a target - increasing your chances of such things. I don't mean to offend...but do be careful/wary of that. =\

Also, I should note here: if I were a hacker and were to hack people's MapleStory accounts through keylogging/exploiting email, I would not DARE to touch their sensitive personal information such as school, banking, etc. Why? Because those are CLEAR grounds of imprisonment and huge fines if caught...while what does the FBI/court/judge (or even the victim) care if someone lost their online-game account?

And of course, there is indeed the possibility of a database security-breach, in which case there's not much we as players can do...and even warning everyone of such a possibility isn't going to do us much good (except to those who buy equip locks). In the end, you gotta be able to either let it go and move on, accepting that this is a game after all, or be overwhelmed by the dc hacking/cyber-molesters/account hackers...

Take care, Kevin. =]
Reply
Uh, I'm not entirely sure how to re-format my computer without screwing something up.

And I know the reputation of my guild, but the bonds I've formed with the members are irreplaceable. People need to realize that a guild doesn't make the person, ie. Just because there are some people who can be asses, myself included, doesn't mean we're all that way. I'm generally one of the nicer ones.

And you're right, I'm sure they wouldn't touch any of our personal info other than Maplestory, but if I remember right we've had this happen before and I don't want to take any chances with my parents' assets.

I'm also perfectly fine letting go; the last bit of that paragraph sounded a little like an attack to my character, but I don't think you meant it that way.

If there are any programs you can suggest that I could scan my computer with to detect possible key loggers, or how exactly I go about "re-formatting," I'd appreciate it.

I should have looked at the links you provided. Ignore.
Reply
Panacea Wrote:Uh, I'm not entirely sure how to re-format my computer without screwing something up.

And I know the reputation of my guild, but the bonds I've formed with the members are irreplaceable. People need to realize that a guild doesn't make the person, ie. Just because there are some people who can be asses, myself included, doesn't mean we're all that way. I'm generally one of the nicer ones.

And you're right, I'm sure they would touch any of our personal info other than Maplestory, but if I remember right we've had this happen before and I don't want to take any chances with my parents' assets.

I'm also perfectly fine letting go; the last bit of that paragraph sounded a little like an attack to my character, but I don't think you meant it that way.

If there are any programs you can suggest that I could scan my computer with to detect possible key loggers, or how exactly I go about "re-formatting," I'd appreciate it.

If I ever mean to attack, I'd say it outright explicitly.

 Spoiler
Reply
Panacea Wrote:The Maplestory website is the only place I enter my Maplestory info, if I for some reason decide not to go through Gamelauncher.

Quote:Maplestory website is not exactly secure. In the instance you were to use the site, what browser are you running when you do sign on?

Sorry to hear Panacea, I lost some really good MS friends to the outbreak last summer. Hope this isn't a similiar situation =/

Just a question, how would I log w/o using the site?
Reply
Thanks, Guang. I'll look into it.

However I already went to the second site you linked and tried a program, but my current AV software detected what it says were trojans, while the program says they're not. So I think I'll just leave it as is and resort to formatting.

@Above,

Open your Maplestory folder and double-click on "Gamelauncher".
Reply
ah, that was easy. thanks for the tip!
Reply
Panacea Wrote:Thanks, Guang. I'll look into it.

However I already went to the second site you linked and tried a program, but my current AV software detected what it says were trojans, while the program says they're not. So I think I'll just leave it as is and resort to formatting.

@Above,

Open your Maplestory folder and double-click on "Gamelauncher".

No no no, the 2nd site I sent you are hosts of such key-loggers (for personal use). That was just to show you that there ARE professional programs out there designed to try to get by your regular antivirus softwares (I was trying to illustrate the point that people are constantly designing new keyloggers/spywares, and that your AV might not pick up on all of them as a result).
Reply
Oh. Haha, I feel dumb.
Reply
I learned that firewalls provide better security than antiviruses. The reason is ok sure if you get a virus it will mess your computer. But it will be done locally... only on your computer. Nothing will go out if you are smart enough to check "every" process which asks for internet acces. That way data cant leave your computer so not much can be harmed.
The inbuild windows firewall only detects incoming traffic (connection to your computer) but it doesnt check what connects outside. Little better firewalls (i use comodo - someone said it before already) lets you monitor all your traffic which runs on computer. And if any new program needs internet connection you will get popup. Even if some program changes other program you will get popup (normally happens during patches so you have option its a patch and it goes through nicley). Its little annoying to set everything at start but its not too bad.
Antiviruses are generally good even microsoft one is good. Just need to have regular updating and active scan + weekly scheduled scan.
And in my opinion getting keylogger is REALLY hard if you are half computer literate. You would have to run it on your computer since chrome has own sandbox for runing aplications.
About that theory of wireless packet sniffers. It actually is possible. From a ss crazymaikon posted few month ago you can see that there are quite a nice dollars from selling mesos/accounts/whatever. And all the student in complex needs is to have run laptop somewhere and let traffic through it. It really takes maybe 1 day to figure out what programs to use and how to set it. And then after you just wait. If you have few thousand students there is chance few will play maple. And since nexon website is complete poop when it comes to security they have easy acces to everything.
I would say this theory is more plausable than keylogger one.
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)