Any recent hacked accounts from Southperry users?

Mine was attacked at the beginning of december. Nobody has ever had my info, and I believe it was a keylogger. Avast antivirus found a trojan i-frame inf on the computer, probably from basil or sleepywood. They can hijack any link or photo/video's host and get it keylogged... I read that it is a serious issue for myspace/facebook users that are falling victim to attacks.

All I can say is that A: I got better stuff that I started with now... and B: The hacker can suck a fat one, because I have locked everything valuable to my characters from now on.

You have received a warning at Southperry.net.

Reason:
-------
This person hacks/trolls!

Pointing blame at specific people isn't necessary, even if you're 100% certain it's true.

This is how things works i guess... seems i step in one of those rules (do i?) : http://www.southperry.net/forums/showthr...ll=1#post1
-

next time even if i am 100% sure, i will refer to the person as "THE ONE". seems any kind of thread that involve hackers are BAD, at least hope this one dont get closed too.

I'm just gathering info from the victims and hopefully draw a conclusion, simple as that.

hurrr

Who are you, Professor Layton? What makes you think that every compromised account relate to one another? "HMM WELL, MYSELF AND FIVE OTHERS LOST OUR ACCOUNTS INBETWEEN DECEMBER 20TH AND DECEMBER 27TH... THEREFORE... A HACKER IS RESPONSIBLE FOR ALL OF THIS."

People don't just get hacked "randomly" or without explanation. You and everyone else in this thread were hacked because they weren't careful. No matter how safe and secure you thought you kept your account, something, at some point in time, whether it be last year or last week, slipped under your radar and screwed you over. People get hacked every day. What makes your account any more important than anyone else's? You're trying to make this thread seem like more than just an I GOT HACKED thread by trying to find some kind of solution, but you don't even have a start. What's the point?

There are only 4 ways to get hacked:

Phishing
Account Sharing
Social Engineering
Keylogger/Trojan

Keep in mind though, hacking is no more then exploiting the Human Error. If you give out information that is linked to your account, that can create a vulnerability for hackers to exploit. From what I see, the majority of people who are hacked are either hacked by Phishing or Account Sharing.

While you may have the best anti-virus, and your computer is clean. Do you give out information, willingly, unknowingly? Cyanne did in this thread so far, a few others did too.

The majority of people who do hack in Maplestory or are "hackers" are generally stupid script kiddies that don't know jackpomegranate. However, not everyone is a stupid script kiddie.

The best thing to do is create a "False" version of you, a duplication of yourself of your identity that can't really be broken by the means of Social Engineering, though, you yourself need to remember the other you. The other three forms are easy to avoid. Keep away from websites. If you want actually be secure (and paranoid), use another computer that has nothing linked to Maplestory to view the web. Trust no one. Even if they are trustable, wholeheartedly, are they able to be exploited for information that you don't want others to know? Maybe they don't know computers as well as you...

Social Engineering

I think this is something often overlooked by a majority of people.
Gave someone your real name? Your parents name? Your birthday?

Congratulations, they now know a considerable amount of your account info just from that alone. If they can somehow piece together the remaining info (you being unlucky, or them simply outsmarting you) then you've made your account vulnerable. Of course, that's not to say that it's easy for anyone to steal your account with this information alone. It's possible if they can somehow milk the information from you in a discrete manner that you didn't even realize, but by no means information that just anyone can use efficiently.

Sometimes you just let something slip. You may not remember the time that you compromised your account, but the person who stole it sure does.

I'm secure with my accounts. I've only ever lost one online account in my entire life, and that was on Neopets back when I was pretty young and gullible. I was shocked at first, and felt I lost a lot of work, but it served as a very important lesson to me. Never trust anyone, never give out account sensitive information (sign up with aliases if you have to), and to always be cautious of what you're doing online. Since then, I've yet to lose any online related account.


If someone wants to use this exploit to hack me and prove me wrong, then I welcome you to do so. I invite you to take the challenge of simply getting into my account without knowing any information but my ign.
Show me this security exploit first hand. Make me bow my head in defeat and respect. Come now, prove me wrong, oh great hacker almighty. Great hacker of Maplestory accounts, teach me a lesson. Make it known to me that I cannot trust my own safety measures, for I will get hacked anyway. Open my eyes to the fact that I will always be at the mercy of some random stranger online, and must live the rest of my life in fear. Show me that I will not only lose my Maplestory account, but my bank account as well. Hack my paypal and steal all of my funds. Surely, a hacker of your caliber would have no problem doing such things.

i love how those threads bring out the most briliant minds in the world we know. is such amazing talent and knowledge of how to be safe, oh god if i knew that before i could avoid so many bad thngs in life. if i knew everything i ever create in life should use fake information, that i never should talk to anyone, never socialize and of course maybe never play games online i am sure i wouldnt never ever be hacked...
-

but serious true story here, theres no safe, theres no hiding information, you can try hide your info the max you can and if you are really that paranoid to even gave fake name at school you are still not safe if someone leak that info. recently here in forum a user came with a new IGN checker, since the thread was closed REALLY fast and the ign check tool was taken off theres no much info on it anymore but the thread is still here -> http://www.southperry.net/forums/showthr...GN-Checker.

now let me quote the good part:

there's I guess an "exploit" where I can grab user emails and full name right through the nexon site. Works based off their forums, like how random user Ids were present through http headers back then. Of course I won't go into detail but let's just say their forums are extremly flawed
oh and I've never even heard of mapletip lol...

what means some kind of information related to our accounts could be retrieved directly from Nexon. and who can affirm someone is not using it right now?, maybe is a fairy tale, maybe is real.
-
i really dont think this thread can help about the hacking situation but is always good discuss about a subject, that is what forums are made to, to discuss. and the hacking wave we are seeing is not normal, unless all those ppl that are hacked decided to go dumb, everyone is trying to gain free nx in nexon.tk, or maybe ppl are just stupid giving their info in FM. but then i ask, why now? if everyone is so pathetic to hide imformation and the accounts arent safe in any moment, why is getting hacked just now and not before? why i read forums like sw, basil and here, and theres dozens of accounts hacked everyday in diff worlds.why every thread has to be locked? why ppl cant doubt theres a exploit out there? should we all close our eyes and pretend nothing is happening?

if i knew everything i ever create in life should use fake information, that i never should talk to anyone, never socialize and of course maybe never play games online i am sure i wouldnt never ever be hacked...
-

but serious true story here, theres no safe, theres no hiding information, you can try hide your info the max you can and if you are really that paranoid to even gave fake name at school you are still not safe if someone leak that info. recently here in forum a user came with a new IGN checker, since the thread was closed REALLY fast and the ign check tool was taken off theres no much info on it anymore but the thread is still here -> http://www.southperry.net/forums/showthr...GN-Checker.

No, more like use fake info to sign up with (that you'd remember) and never speak of it. Never hint as to what it is. I know of the IGN checker, but as I said before it isn't enough to hack anyone. They need to milk out a little more information, or be extremely lucky with guessing.

If it was as simply as searching through Nexon's database for accounts, the top100 of every world would be stripped naked of everything they own. A few isolated cases occurring around the same time doesn't mean anything. You were unlucky, that's all. Nobody magically woke up one morning knowing your account information. Somehow, someone got it. Most likely from you, in one way or another. You may not remember it, or it may have been so subtle that you didn't realize it, but your information was leaked one way or another.

Inb4 rumors of people logging into their own accounts and magically having access to other characters and etc.

If there's an exploit that can hack anyone's info, and the person using said exploit is trying to be smart about it and only hacking small accounts here and there, then prove it to me. Hack me, whoever you are. I am by no means a popular character, and my being hacked surely won't be a big enough deal that Nexon employees would catch on to your exploit and patch it.

Come, show me.

I'll even give you a hint: My Nexon info isn't my real life info. Have fun.

-
i really dont think this thread can help about the hacking situation but is always good discuss about a subject, that is what forums are made to, to discuss. and the hacking wave we are seeing is not normal, unless all those ppl that are hacked decided to go dumb, everyone is trying to gain free nx in nexon.tk, or maybe ppl are just stupid giving their info in FM. but then i ask, why now? if everyone is so pathetic to hide imformation and the accounts arent safe in any moment, why is getting hacked just now and not before? why i read forums like sw, basil and here, and theres dozens of accounts hacked everyday in diff worlds.why every thread has to be locked? why ppl cant doubt theres a exploit out there? should we all close our eyes and pretend nothing is happening?

From what I see, there's always a "huge hacking wave". No, I'm being serious here. Hacking threads are made often, and in every one of them people claim there's a "spree of recent hackings greater in number than previously recorded in all of Maple history!" or something like that.

I think that there's some sort of way to abuse a glitch on the Nexon site involving your email address.

Anyway, I can't believe there's people who'd hack/delete peoples' account. So much money and hard work put into the characters... no guilt at all?

I think that there's some sort of way to abuse a glitch on the Nexon site involving your email address.

Or it maybe overhyped more now, now that alot of the ingame hackers, such as NoDelayers, are gone.

That's great, I see you're confident in security on Nexon's part. Then prove me wrong, tell me for those who were victimized sometime after the server upgrade (Dec. 2) that you have changed your password recently but still got hacked. And you cannot fall under the category that your password and email have been compromised or changed as well. Pin changed or not does not matter since they can pin crack and change it easily anyway.

I agree this thread is merely collecting data and trying to put up preventive measures in case of catastrophic event. Nothing is impossible, especially in the branch of electronic theft. Data is managed by real people, people who are in charge of data handling can have access to your data. Even if you're 99% sure you're safe, or you're firm on 99% of hacked incidents are player's fault, you cannot seclude the remaining 1%. If you were giving a chance of eternal wealth at a game of Russian Roulette with 1 bullet loaded in an imaginary 100 casing revolver, you wouldn't do it I guarantee. Just because it didn't happen to you doesn't mean it's not existent. I will say this again this is based on speculation, laugh and mock all you want. It doesn't hurt to change your password now but if you're warmly challenging the hacker, then be my guest and do whatever you want. But since you probably have nothing much to lose, why would hackers even spend their time on you? Empty threat.

There are endless possibilities to how something like this happens. People claim I don't have a basis or a start to anything. Well by cases of elimination, since I strongly believe in my theory, it should be easy to debunk this farce should it be the case. It is hard to prove something but rather easy to disprove, and this is the route I'm taking. I understand there will be trolls and false positive responses, but what I want is just raw data and see if the road is even clear based on first sampling. You can have your own judgment, I will have mine.

Hypothesis: Those who were hacked had not changed their password in the past 6 months or longer.

Your conclusion: You got keylogged, phished, social engineered, shared your account (so stolen), stolen by someone who seen you typed in your info at home/work/public

My own pending conclusion (if data supports):
List of leaked Nexon account info exists
(I suspect only ID and passwords (or possibly pins) are obtained, characters may be linked to different database and was not part of the list, hence it's harder to pinpoint specific 'golden' targets)

I had a friend log on recently. One who never got very far in the game (about 4x), but is normally very talkative and very friendly to me. However, I know he had quit maple more than 2 years ago, so I was surprised when I saw one of his characters log on recently. I talked to him several times, but he never responded. Haven't seen him since. I can't really prove it, but I'm pretty sure he got hacked. He would definitely fall under your category of not having changed his password in a while.

I'm inclined to believe that the hackers have no idea who they're hacking until they actually log into the account, though. I would think there'd be more higher-ups hacked if they could.

People claim I don't have a basis or a start to anything.

You don't. There's no way to prove that any data that you might collect is meaningful at all. Even if, by some impossible stroke of luck, you find a solid lead on how your account was compromised, what then? Nothing can be proved; it's all a hunch driven by your "BAWWW I GOT HACKED" dilemma. Every hacking incident brought into this thread is nothing more than an unfortunate coincidence when put in comparison to yours, and there's no way you can prove otherwise.

That's why these threads suck. Go ahead and respond with "If you don't agree with what this thread is working toward, then leave", but I won't. I've got a problem with these threads because they scared everybody shitless for no good reason. I've invested so much NX into my Shadower. I've spent thousands of hours mindlessy grinding him, and constantly dread the thought of losing all of that hard work. I get this kind of paranoia without garbage threads like these, but not everyone thinks like I do. They shouldn't have to click into a thread like this and go "FUCK FUCK FUCK, MY ACCOUNT IS IN DANGER BUT I HAVE NO IDEA HOW. WHAT DO I DO?" They sit there and shit their pants over a thread that makes zero progress and dies the next week.

The "no one cares if you want to stick out for w/e reason" type of guy is giving me an inkling.

I'm personally marking down this string of "hacking" as a glitch or an exploit from upgrading hardware. But irrespective of that opinion, while it's true that correlation and leads do not give you proof of something, people use them a lot to progress through an investigation or research to prove that "if that sign points to Toledo and those other thousand signs to Toledo on the map, that point must be Toledo": it must be likely that the conclusion formed is just that and not something radically different. One thing of interest that has caught my attention in this incident of "hacking spree" is the unusual patterns of missing items and mesos. That is definitely something you don't see every week, and I doubt many people (including me) would have known otherwise if such threads as this one weren't created.


Greg, I suppose you also disapprove of the media for constantly writing articles on dead people? I'm not interested in a philosophical debate, I just want a yes or no answer.

Greg, I suppose you also disapprove of the media for constantly writing articles on dead people? I'm not interested in a philosophical debate, I just want a yes or no answer.

Are you trying to be the slick guy that compares MMO account hacking paranoia to human life? Not that your comparison makes sense or is relative at all. Do you wake up every day thinking "AW SHIT, THE GUY WHO MURDERED JOHN SMITH LAST MONTH MIGHT MURDER ME NEXT"?

hurrrr

Are you trying to be the slick guy that compares MMO account hacking paranoia to human life? Not that your comparison makes sense or is relative at all.

That is for you to decide. Everything is relative. Just like Megan Meier. Use imagination =P

I agree this thread is merely collecting data and trying to put up preventive measures in case of catastrophic event. Nothing is impossible, especially in the branch of electronic theft. Data is managed by real people, people who are in charge of data handling can have access to your data. Even if you're 99% sure you're safe, or you're firm on 99% of hacked incidents are player's fault, you cannot seclude the remaining 1%. If you were giving a chance of eternal wealth at a game of Russian Roulette with 1 bullet loaded in an imaginary 100 casing revolver, you wouldn't do it I guarantee.

I'll continue reading the rest after I respond to this.

A 1 out of 100 chance of me dying? 99 empty slots on a revolver, 99 chances of receiving eternal wealth, and only 1 chance of death? You're damn right I'll take those odds. Unless the game is rigged, and the person purposely set the next shot to be the one bullet, or actually put more than 1, I won't be getting that bullet. The comparison isn't very valid though, because you don't know exactly what % chance there is of this existing. For all you know, it could be .001%, in which case your odds would be 1 bullet and 100,000 empty slots.

Hey, guess what, I also have less than a 1% chance of winning the lotto if I go out and play right now. Does this mean that if I go out and buy a ticket, that small chance of me winning will come true? Is it possible? Sure, the possibility may be there. However, the chance of it happening is so insignificant that it might as well never exist at all.

I'd have a better chance of getting hit by lightning while on the beach during a shark attack than winning the lotto from 1 ticket alone.

But since you probably have nothing much to lose, why would hackers even spend their time on you? Empty threat.

From what I understand, this "hacker" is targeting whoever he or she wants, regardless of how much is on the character itself. As for "nothing to lose", of course I wouldn't want to lose my Corsair. It's not as if I'm so poor either, I certainly have a nice collection of valuable items. I don't have billions in raw mesos, but you could fetch a pretty penny if you sold off everything I had. I'm sure someone who goes around taking accounts gets personal enjoyment just from the thought of destroying everything someone has worked for.

Who are you to decide my accounts worth? If we're playing by your logic, you've no idea what I have in my account. For all you know, I could be the actual owner of Fangblade, and I've been playing on other characters in secret. The chance is certainly there, right? You don't know for sure, but just because the chance exists then it may just be true. Can you prove that I'm not Fangblade?

I'm inviting this hacker to show me what they're made of. It won't happen, and this is something I'm certain of. This "hacker" can take me head on if they want. I'd piss my pants if I lost all my hard work on my account, but I'd give my respect to the person for taking my challenge and proving me wrong. For teaching me that I am never safe no matter what I do.

Hypothesis: Those who were hacked had not changed their password in the past 6 months or longer.

Your conclusion: You got keylogged, phished, social engineered, shared your account (so stolen), stolen by someone who seen you typed in your info at home/work/public

My own pending conclusion (if data supports):
List of leaked Nexon account info exists
(I suspect only ID and passwords (or possibly pins) are obtained, characters may be linked to different database and was not part of the list, hence it's harder to pinpoint specific 'golden' targets)

Even more reason to come at me then. The last time I changed my password was in about 2007 or so. If your hypothesis is correct, then I'm simply a fish in a barrel, waiting for my eventual demise. Your personal conclusion has been something brought up countless times. It's not something hard to think up of, nor a unique idea. Lots of people reach that conclusion, that a list of accounts was simply leaked. It's impossible to prove such a thing exists, but also impossible to prove such a thing doesn't exist. It's a debate with no end, that's why these hack threads are pointless. They do nothing but arouse paranoia, and bring up walls that cannot be torn down. Because we're just going to be playing with your logic, that if there's even a 0.00000000000000001% chance of such an occurrence, because that chance exists then it cannot be denied.

Probatio diabolica.

I haven't change my passwords in .. forever (my passwords are all numbers and symbols anyways, have fun with that). But I remember changing the PIN before I quit MS. My characters are all outdated anyways, meh. Truthfully, most hackers on MapleStory is nothing more than ScriptKiddies. These are the typical kiddies I see up in my college's computer lab, using pre-built scripts. Ok, so all you're doing is making use of someone's work. You're not intelligent. You're just copy-pasta'ing. Anyone can do that. I don't really call hackers on MS as 'hackers'. They're more like little kids that has nothing better to do with their time except to steal pre-built sh't and implement it.

Ex: Ecko.

PS: Supposedly, he's back. I was on MS the other day, and it spreaded all over my BL.


----
I'm no expert on hacking on 'an MMO'. But hacking on other things such as a router's ID + password requires brute-forcing. A concept that means you're just manuallly pushing through the defenses, or using a software to do so. Brute-forcing through anything takes a while. Hacking in an MMO means you have to be able to have access to the game's database. Because there has to be a 'hole' or a start to be able to dive in. No genius can just make a gap out of nowhere and randomly hack. Hacking doesn't even work like that.

Bruce Force Attacks

Then there's this:

Dictionary Attacks

Truthfully, even a unskilled person that has no knowledge of 'hacking' can get anybody's information. Want to know how? Social Engineering.

I recently got back on to Maplestory since a few weeks away. I believe I haven't played since that server change. I patched the latest patch, and logged on my OLDER account that I only got on to transfer some things. Both my lvl 80 Polearm DK and 1st job Thief were stripped, save for untradables and 4 sets of scrolls. My current account with a 2nd job Warrior is perfectly fine. I was thinking something was very weird here. Looking around, I found some thread on lolbasil about the surge of hackings.

Though, I really don't care about the loss, I've already sent a ticket in hopes it gets enough attention.

"if that sign points to Toledo and those other thousand signs to Toledo on the map, that point must be Toledo".

In this case, it's paranoia and not concrete evidence leading to that Toledo. It goes something like this;

1. Tons of people get accounts stolen before
2. Slight suspicious arouses, but most people don't pay mind to it
3. Some new event happens that visibly brings forth glitches into the game
4. All stolen accounts after this event gets acknowledged, since 1 person points this possibility out and others decide to jump onto this train of thought. It could very well be the same exact amount of people losing their information as in phase 1, but nobody cared about it before. It's only now that people decide to look at every stolen account and think "oh, this must be for Nexon's messup at that last event!~"


This same thing happens a lot. There are plenty of times in the past where people notice a "spree of account hacking" and relate it to some recent problem in game, creating theories as to how the account thefts could occur in a way related to this game problem.

You can look into it if you want, but this certainly isn't the way to do so.

"So, how many of you got your accounts hacked this patch?" isn't collecting answers. All it's doing is making a placebo effect."Oh yeah, I got my account stolen recently! Now that you bring it up, this may have happened to me as well!!!!"

They may not have even thought anything of it at first, and would probably believe they had bad luck. They might be trying hard to think back on how their account got lost. Or perhaps they're too embarrassed to accept how their account got taken from them. In either case, once they read such a theory they'll stop any thought process they had relating to the cause of their account loss, and simply place the blame on this "exploit". It becomes a scapegoat, and as more people place the blame on this scapegoat it provides more fuel to a fire. The one rumor that some kid on Basil started because he didn't want to admit that he was sharing accounts leads to an outbreak of people stepping up to the plate and holding one another in support for each other.

"Don't worry, it wasn't your fault at all. It was Nexon. Let the anxiety release from you. You'll be more at ease knowing that your account loss could not have been prevented no matter what you did. Come, let's all forget our troubles."

I was hacked afew weeks ago, made a topic just like this about it and got locked by 4 posts...
I'll take the time to restate what was posted in my previous topic.

Noone has my information, I know better then to download anything contaminated, I know not to open emails about my account and that stuff.

There was no way for anyone to have my information, also the time I was hacked it seems they could only get into my was my highest level character, my mules plainly had gear on them woth some mesos, however nothing was taken off them, my hero however was stripped and the hacker even dropped my mount/chairs.

Oh, and I just got a message from nexon, here is what is says. (in the ticket I was stating that the it was a security hole dealing with the SC before aran since thts when it happend last.)

Greetings,

Thank you for contacting Nexon America's Customer Support team.

We appreciate you reporting this information. I will forward this information to the proper department for further investigation. We ask that you please be patient as it will take time.

Thank you and your patience is treasured.

Sincerely,

GM Diatia
Nexon America, Inc.