People being hacked since the last Server Check.

My mule account that i was planning on world transfering when they came back out was hacked 2 days before legend.
Had a clean VIP dagger, VIP katara, and a VIP 1h Axe on it.
I hadnt logged in on it for around 3 weeks or so (bought the items right before world xfers left) and when i saw that they were returning in legend, i logged on it to check, and the character was in fm(previously was in sleepywood sauna) with all 3 of the items missing.
Not that bummed though, since i basically forgot about the account since i had given up any hope of world transfers coming back after 3 months of them being gone.

Time to increase the length of my PIC; if it's one of the holding buffers, might as well max it out.

I'm fairly certain they don't even need your PIC.
Mine was nine digits long when my NX got jacked, doubt that was forced.

I was hacked today too (took my fking sword AGAIN. bye bye full marx von set). Or within the last week. Found out about it today. Had to reset my password and pin but I think the password might of been my mistyping. But agreeing with the guy above me I don't think they need your PIC. They can just reset it somehow. or change it to what they want.

My mule account that i was planning on world transfering when they came back out was hacked 2 days before legend.
Had a clean VIP dagger, VIP katara, and a VIP 1h Axe on it.
I hadnt logged in on it for around 3 weeks or so (bought the items right before world xfers left) and when i saw that they were returning in legend, i logged on it to check, and the character was in fm(previously was in sleepywood sauna) with all 3 of the items missing.
Not that bummed though, since i basically forgot about the account since i had given up any hope of world transfers coming back after 3 months of them being gone.

I'm fairly certain they don't even need your PIC.
Mine was nine digits long when my NX got jacked, doubt that was forced.

I was hacked today too (took my fking sword AGAIN. bye bye full marx von set). Or within the last week. Found out about it today. Had to reset my password and pin but I think the password might of been my mistyping. But agreeing with the guy above me I don't think they need your PIC. They can just reset it somehow. or change it to what they want.

How long had it been since you changed the info on those accounts?

How long had it been since you changed the info on those accounts?

Around 3 months.
Ever since it happened, I've been changing my main account's password once a week.

Around 3 months.
Ever since it happened, I've been changing my main account's password once a week.

Thats your best course of action, rather after every servercheck lol

I admit to not changing my password as often as I probably should, but it was within the past two or three months at least.
In any case though, no one else knew my login id, let alone my password or PIN.

Around 3 months.
Ever since it happened, I've been changing my main account's password once a week.

I admit to not changing my password as often as I probably should, but it was within the past two or three months at least.
In any case though, no one else knew my login id, let alone my password or PIN.

Hm because so far it seems like everyone being hacked hasn't changed their passwords often. Thus back to my theory, people with passwords who did not change them at all, back when the breach happened, are the ones getting hacked. That's not to say you can't just get hacked because it happens. A bout 3 months ago before I changed my password someone was trying to get into my e-mail. I'm happy gmail enabled the double log in thing though. Anyway so far the only ones I see getting hacked around here, my bl, and my guild are the ones who've been gone for a while and haven't changed their passwords. That's just my theory from the evidence here.

Hm because so far it seems like everyone being hacked hasn't changed their passwords often. Thus back to my theory, people with passwords who did not change them at all, back when the breach happened, are the ones getting hacked. That's not to say you can't just get hacked because it happens. A bout 3 months ago before I changed my password someone was trying to get into my e-mail. I'm happy gmail enabled the double log in thing though. Anyway so far the only ones I see getting hacked around here, my bl, and my guild are the ones who've been gone for a while and haven't changed their passwords. That's just my theory from the evidence here.

This does seem reasonable to explain some of the hackings, especially those where the player has found their account hacked after a long break.
Nexon's admitted leak in April (and maybe later undisclosed or unknown leaks) plus advanced password hash cracking techniques:
http://www.pcpro.co.uk/blogs/2011/06/01/...-a-second/
are making people with previously good-enough passwords who rarely change them vulnerable.

yeah found out they hacked my email. Found the change password request in the trash dated december 13th. which i did I did make one (there were 2 though) then but also a PIC one which I did NOT make....

I'm fairly certain they don't even need your PIC.
Mine was nine digits long when my NX got jacked, doubt that was forced.

9 digits can be done in under an hour on a crappy PC, under a minute on a high end one.

9 digits can be done in under an hour on a crappy PC, under a minute on a high end one.

And this is why Nexon should make PIC cooldowns.
If you get it wrong 5 times in a row, can't try for 10 minutes (and disconnected from login server for good measure).

And this is why Nexon should make PIC cooldowns.
If you get it wrong 5 times in a row, can't try for 10 minutes (and disconnected from login server for good measure).

I find it hard to believe this hasn't been implemented ever since PICs were introduced. I swear that has to be mandatory for every game.

Mule account just got an email change request.

So did they got rid of the weird symbol thing for account lock? I can't seem to do it anymore and now I'm scare to log off. and I keep getting disconnect ( the site) when I try to change my password ( with that weird symbol)

EDIT: Nvm they did really removed it :'(

And this is why Nexon should make PIC cooldowns.

I was under the assumption we already had that.
Godammit, Nexon. >_>

they could also make it so that you don't use the PIC for absolutely everything. Like deleting characters, logging in to characters, gifting in the CS, etc.

Mule account just got an email change request.

Same. This happened a few days ago.

Too bad for them, I don't have anything on that one anyways.

I'd be more worried if I got one on my main, which I still haven't, luckily.

Same. This happened a few days ago.

Too bad for them, I don't have anything on that one anyways.

I'd be more worried if I got one on my main, which I still haven't, luckily.

Just happened to me as well, not a main account, haven't touched it in months. Still it's fucking pissing me off, I shouldn't have to worry about this pomegranate unless I'm being stupid and sharing my account, if my main gets hacked again, honestly I'm quitting.

Still waiting on a response from a ticket I sent after my main got hacked, 2 months later still a bunch of auto, we didn't forget about youshiz.

Ok so as far as I can tell from reading this and getting 1st hand accounts of people hacked that i know in Khaini, it seems there is atleast 2 very different methods going on. One method, requires them to change your information and them hack your password to your email, which means they got your USER ID somehow. The second and much more scary method is them getting into accounts while changing NO INFORMATION.It seems most people havent changed their information in awhile who get hacked via the second method. My question is has anyone been attacked, received an email requesting password change, after REMOVING their USER ID and changing to EMAIL log in?