Hacked Accounts

today my bro received an email with text:

Your Path of Exile account has been locked because someone attempted to log in from a location that you don't typically play from - "Jiaocheng, Fujian, China".

we are from europe so obviously he immediately looked to his account and what a fucking surprise all of his items were wiped out ...

i read few topics around and i see you wont bring his lost items back, so if you can comfirm me this, i can comfirm that both of us wont be playing this game ever again..

we are not stupid, we dont use same passwords for things that are important to us as for things that are not important to us.. this password must have been brute forced.. and tell me why the hell you did not noticed thousands of attempts of login on a single account in a very short time?? thats the fuckin basics of security countermeasures.. we learn this in a school in every programming-like subject every year (im 25 yr old, not english native and pissed off, so it can look like i am 13yr old, sorry for that)

thats really sad, i dont know where is the problem with rollbacking the account from database, maybe you can clear this for me, but it wont help at all anyway..
"
Lejma wrote:
today my bro received an email with text:



thats really sad, i dont know where is the problem with rollbacking the account from database, maybe you can clear this for me, but it wont help at all anyway..


read first post on first page of this thread---

I think it is not much to ask to read at least the first post of the first page of any threads you post in, just sayin'
Last edited by wonko33#2809 on Apr 12, 2013, 6:26:21 PM
participate in the event but my name does not appear in the list. why does this happen?
Rainha BRFORCe
To wit, what happens when you don't take security seriously: http://www.smh.com.au/it-pro/security-it/cybercrime-ring-attacks-video-game-companies-20130412-2hpfw.html
"
GozoShioda wrote:
So how do you guys get hacked if it locks the account when someone tries to log in from a new location?


Not all attack vectors trigger the lock/email warning, which means the hackers use a different entry point to the server than the user client.
Seems like I'm not the only one that got hacked, first time in years of playing mmo's and RPG's though. I'll wait and see what the security mesures will be like before coming back to PoE, that's too bad because I really like what's been made so far in the game.

Good luck to the team to eradicate this plague.
Got hacked yesterday for the first time as well.

Your Path of Exile account has been locked because someone attempted to log in from a location that you don't typically play from - "Ningde, Fujian, China".

In my case I know it was due to a compromised email because I was online at the time and received the email account locked or in use message when checking for new emails.

Created a new email address specifically for PoE yesterday and updated my PoE account so should all be good going forward.

Thing is though, a secondary form of login authentication for the game could've prevented this.

Would be nice if something could be put in place before the official game release later this year.
OB: BazzVone - 83 Dual Spork Totem Templar /w CI and minions
CB: BazzVfourteen - 80 Dual Spork Totem Templar /w CI
CB: BazzVtwo - 73 Dual Spork Totem/LS Templar
CB: BazzVseven - 76 Lightning Strike Mara
CB: BazzVfive - 78 Lightning Strike Mara
dat hack account -.-

http://www.smh.com.au/it-pro/security-it/cybercrime-ring-attacks-video-game-companies-20130412-2hpfw.html
Perhaps GGG should auto-lock accounts that are being accessed from another country? Make it a requirement to inform GGG ahead of time that we plan to travel to China...and play POE there. Not sure of a great unlocking method, but a simple e-mail code isn't working. Please GGG do something for your customers. People are still getting hacked...no good.
Last edited by Barzhal#5703 on Apr 13, 2013, 6:34:53 PM
"
randrew wrote:
"
GozoShioda wrote:
So how do you guys get hacked if it locks the account when someone tries to log in from a new location?


Not all attack vectors trigger the lock/email warning, which means the hackers use a different entry point to the server than the user client.


Or they have access to email account, use the code then delete email. Could be many things

Report Forum Post

Report Account:

Report Type

Additional Info