People being hacked since the last Server Check.

Did anyone follow up on the theory about older accounts being vulnerable?
I remember reading someone suggesting that earlier in this thread. From the people I have asked, they all seem to have an account that is >3 years old.

My wife's account (which got hacked) was 2 years and 0-1 month old when it got hacked. Thanks to the changes in the login system (only need email to reset a password), I was able to access all 5 of my really old accounts (oldest: Aug 2004), some with the Mark of the Beta. None of them have been hacked.

Granted, I had to do a PIN (not PIC!) reset on them to even get into them... so it may be what protected them.

My wife's account (which got hacked) was 2 years and 0-1 month old when it got hacked. Thanks to the changes in the login system (only need email to reset a password), I was able to access all 5 of my really old accounts (oldest: Aug 2004), some with the Mark of the Beta. None of them have been hacked.

Granted, I had to do a PIN (not PIC!) reset on them to even get into them... so it may be what protected them.

but did those accounts hold valuables that would make cleaning it out worth their time?
and your wife's hacking does break my theory but so far that is the only case i have read about

or it could just be me wrapping myself up in my theory to comfort myself since my account is less than a year old

My account was made in 2006 and was not hacked. Same goes for my FM (F/P) and NL accounts.

but did those accounts hold valuables that would make cleaning it out worth their time?
and your wife's hacking does break my theory but so far that is the only case i have read about

or it could just be me wrapping myself up in my theory to comfort myself since my account is less than a year old

Considering some of my friends had no good tradeable items and just ~10 mil in mesos (which was 100% stolen), I would say "yes". Besides having more pure mesos than that (even when adjusting for Scania : Yellonde), they had quite a few collectible, tradeable event items (Pumpkin Basket, Maple Flag, Bandanas, etc.), and scrolls (60% GFAs, etc.). Even if they didn't steal the items, I believe they'd at least raid the pure mesos so that it wasn't a "total loss" of time and effort getting into the account.

*sigh* Two of my alliance members got hacked since the mysterious back-end files 12-hour maintenance.

Both had shared account info (one with his brother, the other with a longstanding training partner), so there is some slight hope they got robbed by these people rather than by the meso-sellers, but I'm no longer optimistic that Nexon actually did anything - or anything effective - to secure their login data/servers.

My DB was hacked this week. It was the last character I used on that account, which also has my Shadower on it. The Shadower was untouched. Most of the items on it were untradeable, except for a scrolled dagger, and a few clean blades with potential. I haven't logged on to MS since mid-July of this year.

Though I've have no plans on coming back, it still hurts a little to see the items you worked for be taken from you. Can't take away the good memories at least. It is only a matter of "when," not "if." So I'm still wondering, when will my other nine accounts be hacked. I guess there's another hundred+ ahead of me in line..

Not planning on changing my passwords; my items don't really matter to me anymore. No amount of new items, content, or skill changes would entice me to return.

A close friend of mine was hacked sometime in the past couple of weeks, they went *only* for the character that was his 'primary' as dictated by the website, as such, they only took his weapon and earrings--everything else as far as as mesos, or tradeable equips were on his alt (within the same account).

We didn't realize he'd been hacked since he sort of took a hiatus, but when he went to the website to check to see if he got invited to Tespia, he noticed that the character listed as his 'primary' had been changed. He had changed his password a couple of weeks before this happened, hadn't shared his info with anyone, and the only thing that he does/did that could be considered 'dodgy' is having signed up for that MSAdventures FB game from Nexon.

I was hacked last night.
I just patched and when I logged on I saw in guild my other char had been on.
All my chars were wiped clean. Lost unique earrings, 1 bil, 18 atk wg and other crap.
No one has my info. I regularly scan my computer. I wasn't even playing now really but yeah.
It's sad when you see stuff you put time & effort into get taken. x-x

Wife is getting Hacked as I type this way. This game is seriously no longer fun due to the constant fear of getting hacked -___-.

I was hacked, no other accounts were compromised at all, the hacker must be very picky. The only things that were taken were:

Unique, 3 lined, 7 attack PAC hammered twice with 0 slots.
My 2 effing big bang rings
My 3 lined epic pirate 100 shoes that I don't care about


The hacker did not dispose of my untradeables, and did not even touch my other chars, despite my mage having a PuAC and decent gloves..

There are only a finite number of ways to hook into low-level keyboard input.
There are also a finite number of ways to rootkit the system to hide.

A remote access trojan is just a client-server app. They're not distinctive enough to be universally detectable.
The other two are, so even a keylogger using a root kit can be detected by a sufficiently sophisticated AV.
I can write a keylogger in ASM in minutes and a good AV will at the very least throw a warning because the code isn't signed by a trusted authority and is trying to do something suspicious.

All three require a delivery mechanism to execute & install.
Both capture methods would also require the victim to log in and use those credentials for them to be recorded.

Circumstances and evidence do not support the premise for the majority of the cases that are inexplicable.

Do you have any idea as to what might be going on? Even if you're not sure, what do you think is the most possible reason / combination of reasons for this?

I was hacked, no other accounts were compromised at all, the hacker must be very picky. The only things that were taken were:

Unique, 3 lined, 7 attack PAC hammered twice with 0 slots.
My 2 effing big bang rings
My 3 lined epic pirate 100 shoes that I don't care about


The hacker did not dispose of my untradeables, and did not even touch my other chars, despite my mage having a PuAC and decent gloves..

Was the char that was stripped the one that is listed as the main on the website? Or the one with the highest level? Or the only one equipped with cash items?

Do you have any idea as to what might be going on? Even if you're not sure, what do you think is the most possible reason / combination of reasons for this?

There are too many ways to bother speculating more than I've already done. A system can have any number of vulnerabilities and flaws.
Without knowing truly what the circumstances of each individual hacking are, in a degree of detail greater than any player can provide about their own experience, there is insufficient information to try weaving a true theory and pulling one out of the air runs the risk of blinding to other options.

Sigh. There goes my hope that hackings would stop after the last patch.

Sigh. There goes my hope that hackings would stop after the last patch.

Hime seems to believe the only Nexon-side cause of hackings was the MTS leak, and people are still feeling the fallout from that. In other words, that there is no other leak/bypass/vulnerability that they need to seek out and plug.
I sincerely hope she is simply ignorant, and their development/security team is actively at work on this issue, but who knows?

Was the char that was stripped the one that is listed as the main on the website? Or the one with the highest level? Or the only one equipped with cash items?

I can't say only one is true, it was my website character, it was the only one with cash items, and it was the highest level.



As for talk of the MTS, strangely enough, I did sell a useless phsyco claw for the minimum price like, right before said hacking(I can't say right before, but that phsyco claw has been in there for so long, I also sold a useless scroll), I don't want to point the finger at the MTS, but that was really the only ''weird'' thing that happened before I actually got hacked, I don't understand this at all....I even changed my password and everything...

just wondering if people got hacked had a password of over 12 characters or not.

I don't think it was hacked, but I don't know what's going on with my mule account. A friend and I were using it for the sidekick event, and it had some decent INT gear on it. Now whenever I try to choose a server on it, it crashes the client. Worked fine until the server check, and all of our other accounts are fine as well.

Out of curiosity, are there others who had submitted a ticket several weeks prior to the compensation that were not compensated? I may be reading too much into this, but it seems that everyone here who was hacked prior to that has received the batch compensation except for me and maybe two others. This still isn't satisfactory compensation, nor will I continue to play MS, but it feels offensive if they just say "that was it, we got everyone". Funny actually considering the compensation itself is offensive in several ways, yet being one of the few not to receive it is offensive in another way. Once I do get the compensation, I'm going to waste it anyway, then close the account (assuming a miracle doesn't happen). I'd rather have personal closure myself than let someone steal it from me and leave with excess resentment.

Out of curiosity, are there others who had submitted a ticket several weeks prior to the compensation that were not compensated? I may be reading too much into this, but it seems that everyone here who was hacked prior to that has received the batch compensation except for me and maybe two others. This still isn't satisfactory compensation, nor will I continue to play MS, but it feels offensive if they just say "that was it, we got everyone". Funny actually considering the compensation itself is offensive in several ways, yet being one of the few not to receive it is offensive in another way. Once I do get the compensation, I'm going to waste it anyway, then close the account (assuming a miracle doesn't happen). I'd rather have personal closure myself than let someone steal it from me and leave with excess resentment.

There are people before and after who claim to have not been compensated despite having sent multiple tickets.