2010-02-03, 03:09 PM
Eosian Wrote:One report is inconclusive, and since this is a secondhand report we can't really assume it's a separate incident. It's not impossible that it's an unrelated coincidence, or that the two events aren't entirely related.
What we really need is for everyone who hasn't been hacked yet to change their passes so we can determine if that actually makes any impact. If Nexon had actually encouraged this as they were asked to we'd be in a better position to determine what's happening.
I changed all my passwords after loosing one account Dec 22nd.
I changed all my passwords again in mid January (hours after patch completed) to use a unique password for every account.
I think I have 18 accounts (unless I missed a couple), one comprimised Dec 22.
I leave 3 main accounts & 2 stores logged in 24/7 except patches and SC.
I leave some mule accounts logged in most of the time, 3-4 more accounts for a total of 8-9 accounts for probably 20/24 hours a day.
Everyday I have at least 9 accounts not logged in (available to be hacked).
I do not bother protecting the already comprimised account (I cleaned out everything the hackers forgot and leave it logged out).
I have not had anything missing or any PIN changes on anything missing from any account from the first occurance until today.
It is true that many of my mules hold items for quests that hackers may not percieve as valuable, but many people have reported being cleaned out of the nonvaluable items as well lately.
My e-mail was not comprimised nor my pw changed on compromised account.
So there's one sample for you.
Chirdaki Wrote:My information is limited to all 40 pages in this thread and the khani section on sw.
We know they can rebreak into previously targeted accounts via email with new complex passwords, like myself.
Clericromeo was rebroken into after rebuilding from being hacked, but he didn't mention if the hackers used email or just cracked the ms pw.
If the above posts are sound that brand new passwords on previously untouched accounts are game for being stripped, it is a sad day indeed.
This is only true for when the e-mail is compromised. It's pretty clear there is a minimum of two types of account theft occuring.