Possible Nexon Database Exploit?

Keyloggers are one of the most overused incorrect excuses for being hacked. As far as I've seen, most people are not stupid enough to download random sh`it.

That's why I never really considered it a possibility, although I checked anyway. The only "random" stuff I may have downloaded would have been from here, and because of that I doubt any of it is laced with viruses etc.

i am very sorry for your tragedy but i am happy you still have spirit to continue on in the game. Might I suggest from the future have only a computer/labtop just for maplestory and nothing else besides antivirus, etcs. Most pcs solely made for gaming and nothing else (aim,college,msn,etc) don't tend to get hacked often. I don't have further evidence to proof of this but it's IMO.

Sure hope this isn't Christmas 09 all over again.

Sure hope this isn't Christmas 09 all over again.

Oh it couldn't be. Cause that never happened. Ask Nexon, they'll tell you all about how it didn't happen, was entirely coincidental and every player is an absolute failure at security because they're pro!

Oh it couldn't be. Cause that never happened. Ask Nexon, they'll tell you all about how it didn't happen, was entirely coincidental and every player is an absolute failure at security because they're pro!

Don't forget revamping their security for no reason.

i am very sorry for your tragedy but i am happy you still have spirit to continue on in the game. Might I suggest from the future have only a computer/labtop just for maplestory and nothing else besides antivirus, etcs. Most pcs solely made for gaming and nothing else (aim,college,msn,etc) don't tend to get hacked often. I don't have further evidence to proof of this but it's IMO.

Thanks, that's a suggestion I'll keep in mind if I ever have the luxury of doing so.

Sure hope this isn't Christmas 09 all over again.

I talked to Locked (Danny, is it?), and he said that it's possibly just some aftermath of the 2009 incident. It's likely, but how do so many remain "safe", when hate runs rampant throughout the Maple community?

And the fact that someone would have to be extremely lucky just to get my ID in order to get the rest of my information.

I'd assume you changed your password back then, but they coulda got your login ID, and maybe kept a log of what characters were on the accounts, since the website has sporadic vulnerabilities...

I'd assume you changed your password back then, but they coulda got your login ID, which I believe is enough to figure out what characters are on the account...

Possibly. I wouldn't be able to say yes or no, though, since I can hardly remember what I had for breakfast most days.

One of my other accounts was hit during the whole '09 escapade, and if this is related to that then it would honestly just really blow.

I'd assume you changed your password back then, but they coulda got your login ID, and maybe kept a log of what characters were on the accounts, since the website has sporadic vulnerabilities...

Doesn't explain the fact of getting hacked.

YTMS (well know hacker in broa) said all my info in ch17 fm along with some other hackers (fm69, etc), he said in all chat, login ID, the email i have registered to my account, my bday, last name, my msn, and he said doexz(supposedly the dude that hacked floe) still have all my info (beside passwords), and yeah, nothing happened to my account. Sometimes i get a new PW on my e-mail, i just go to nexon website, use that new pw, and make a new password, log on my account, everything is fine.

Doesn't explain the fact of getting hacked.

YTMS (well know hacker in broa) said all my info in ch17 fm along with some other hackers (fm69, etc), he said in all chat, login ID, the email i have registered to my account, my bday, last name, my msn, and he said doexz(supposedly the dude that hacked floe) still have all my info (beside passwords), and yeah, nothing happened to my account. Sometimes i get a new PW on my e-mail, i just go to nexon website, use that new pw, and make a new password, log on my account, everything is fine.

Theres a big difference in your case and Floes. You were keylogged.

Theres a big difference in your case and Floes. You were keylogged.

i quoted stereo's post, if they could just hack you by having only the login ID, they could have hacked me hundred of times already.

they got me good on saturday as well... Hacked two of my accounts, none of them for account wise, just for mules. stole two vip spears. One of which was 2line 161att 1 star ehanced U/H. pomegranate is crazy and frustrating. Both passwords to the emails that were connected to the accounts were changed as well.. hopefully Nexon reads the ticket before its to late.

they got me good on saturday as well... Hacked two of my accounts, none of them for account wise, just for mules. stole two vip spears. One of which was 2line 161att 1 star ehanced U/H. pomegranate is crazy and frustrating. Both passwords to the emails that were connected to the accounts were changed as well.. hopefully Nexon reads the ticket before its to late.

if they changed your e-mail password, then you had something else on your computer, i can't see someone brute-forcing an e-mail account just for maple, and if it is a gmail account, you cannot brute-force it

Doesn't explain the fact of getting hacked.

YTMS (well know hacker in broa) said all my info in ch17 fm along with some other hackers (fm69, etc), he said in all chat, login ID, the email i have registered to my account, my bday, last name, my msn, and he said doexz(supposedly the dude that hacked floe) still have all my info (beside passwords), and yeah, nothing happened to my account. Sometimes i get a new PW on my e-mail, i just go to nexon website, use that new pw, and make a new password, log on my account, everything is fine.

Well, I'm not willing to take that risk. That's why I'm moving myself to another account.

if they changed your e-mail password, then you had something else on your computer, i can't see someone brute-forcing an e-mail account just for maple, and if it is a gmail account, you cannot brute-force it

I thought about this too when I came home that following night. But to my dismay, only Maplestory account related info were hacked and changed. Stupid me, i made everything idential to each other, in that, maple ID and PW was Hotmail ID and PW. anything related to my banks and creditcards however were not changed nor touched, i checked and changed everything related to them ASAP. Funny thing was that.. they didnt hacked my Current (newly created 2011 account) rather hack my old old 2006~ account, that i was using up until this year. It cut what i could have lost in half, and im lucky I didnt lose everything, but still a lost is a lost.

PS email domain was hotmail.

if they changed your e-mail password, then you had something else on your computer, i can't see someone brute-forcing an e-mail account just for maple, and if it is a gmail account, you cannot brute-force it

I've read this happening with hackings in other games, and I'm pretty sure people have posted about it happening with Maple accounts too. It's not that big of a stretch to think someone would do that.

One thing that I believe can help. On the website click Start Game without typing anything in. Then type in your info on the account page. From then on everytime you hit "Start game" it registers the info you had in before. Thats what I do and I haven't been hacked. Panacea was ANY of your info close or the same as your maple info? If so that makes it very easy to hack someone, My gf was hacked a while back because her info was the same, once she changed it the hacker whispered her why her passwords were different there was, and I quote: "stuff I still wanted to take." Long story short he eventually gave up due to being unable to crack it XD. If you want I have a VERY strong password orientation my friend and I made up years ago. If you want to know what it is PM me.

One thing that I believe can help. On the website click Start Game without typing anything in. Then type in your info on the account page. From then on everytime you hit "Start game" it registers the info you had in before. Thats what I do and I haven't been hacked. Panacea was ANY of your info close or the same as your maple info? If so that makes it very easy to hack someone, My gf was hacked a while back because her info was the same, once she changed it the hacker whispered her why her passwords were different there was, and I quote: "stuff I still wanted to take." Long story short he eventually gave up due to being unable to crack it XD. If you want I have a VERY strong password orientation my friend and I made up years ago. If you want to know what it is PM me.

Rarely does a hacker actually have your password. Most of the exploits is forcing a password reset and somehow getting control of the email.

And making a good password is easy. Take a medium size word, Alakazam, than for every keystroke move it up one and to the left so:

Alakazam
Qiquqaj

Then cap some
qiqUqAj

Then add some numbers at the end, viola, pretty beast pass.

EDIT:

Read back a few pages, this facebook thing could be a problem. Is it set private? If so has anyone added you? What isn't private? B-day? Stuff like that. As for hotmail address' those are even more dangerous because there are programs out there built specifically for snagging your IP either from an email you sent, or from just receiving an invitation from an MSN game such as bowling. Once they have your IP they just need to know your b-day/name, and bam, hotmail account is breached 24 hours later.

I'm aware that your email wasn't cracked though, and it does show some similiataries to my hacking, to that regard. However my hacking only allowed one account to get hacked, while yours were multiple, so he was able to reaccess while mine couldn't, so the methods are differen't I'm just not sure in what way.

One thing that I believe can help. On the website click Start Game without typing anything in. Then type in your info on the account page. From then on everytime you hit "Start game" it registers the info you had in before. Thats what I do and I haven't been hacked. Panacea was ANY of your info close or the same as your maple info? If so that makes it very easy to hack someone, My gf was hacked a while back because her info was the same, once she changed it the hacker whispered her why her passwords were different there was, and I quote: "stuff I still wanted to take." Long story short he eventually gave up due to being unable to crack it XD. If you want I have a VERY strong password orientation my friend and I made up years ago. If you want to know what it is PM me.

I already do that on the rare occasions that I sign in through the site. And when you say info, what are you referring to? Each my ID, password, and PIC were all completely unrelated and it would have been pretty hard to guess one just from knowing the other.

Rarely does a hacker actually have your password. Most of the exploits is forcing a password reset and somehow getting control of the email.

And making a good password is easy. Take a medium size word, Alakazam, than for every keystroke move it up one and to the left so:

Alakazam
Qiquqaj

Then cap some
qiqUqAj

Then add some numbers at the end, viola, pretty beast pass.

EDIT:

Read back a few pages, this facebook thing could be a problem. Is it set private? If so has anyone added you? What isn't private? B-day? Stuff like that. As for hotmail address' those are even more dangerous because there are programs out there built specifically for snagging your IP either from an email you sent, or from just receiving an invitation from an MSN game such as bowling. Once they have your IP they just need to know your b-day/name, and bam, hotmail account is breached 24 hours later.

I'm aware that your email wasn't cracked though, and it does show some similiataries to my hacking, to that regard. However my hacking only allowed one account to get hacked, while yours were multiple, so he was able to reaccess while mine couldn't, so the methods are differen't I'm just not sure in what way.

I use a password generator for mine, so password security isn't an issue. And I think you might be confused as to how many times I was hacked. The first hacking, which might or might not be related, was during the '09 incident and happened on an alternate account. My main account, the one hacked this time, was also only hacked once, granted he went through most of my characters taking whatever was worth something. Once we reset the password he wasn't able to get back in, assuming that he wanted to take anything else.

My friends that were hacked reacently had their e-mail pw the same as their old maple story pw. That list (that nexon denies existance of) is still out and hackers are now trying the passwords on e-mails. If it works then they just reset maple story pw & pin and strip the account. The good hackers then delete the e-mails for the pw reset (burn the evidence) and only take anything really valuable. Then they see if the person didn't notice and try the same stunt a couple weeks later. My friend told me, "I wasn't hacked there were only a couple items missing and I had that PIC glitch." I told him there was no PIC glitch, he was hacked and to go change his e-mail pw and ms pw. After that no more trouble. But hacker was changing his MS pic every few days before he changed his e-mail pw.