Data Leak and Stolen Accounts

"

Esukho#3565 wrote:

"

overt1me#0812 wrote:

Just came back to game and saw all my Divines were gone. This game will lose players extraordinarily fast if they can't fix this.

Sorry for you :/ I'm about 125 Divines worth of gear gone. Support hasn't contacted me yet either. I wrote a ticket 7 days ago

Yeah I also lost a couple greater jewelers. They didn't see the King of the Mists invites in another tab though...

"

arknath#4740 wrote:

Stop RMT-ing and don't download third party programs. The last one especially goes for a "new popular game".

And no, session IDs don't work like that. Your session ID is for access to the Trade-API. They would need your login and password OR have full remote control over your computer to clean you out.

There is another potential attack vector: how is stash access handled. Maybe it is possible to access another player's stash from your account. Doubt there is full-scale login verification repeating every time a bunch of players spam click stash in town or in hideout. This is where simplified verification should be, who knows how it works.

If it ends up being an issue with folks accessing your stash via hideout somehow I bet the patch note will just say something vague instead. That would be huge fuel for an auction house system.

"

FruitLord#0833 wrote:

That would be huge fuel for an auction house system.

Yup. 11 years too late.

"

Esukho#3565 wrote:

"

overt1me#0812 wrote:

Just came back to game and saw all my Divines were gone. This game will lose players extraordinarily fast if they can't fix this.

Sorry for you :/ I'm about 125 Divines worth of gear gone. Support hasn't contacted me yet either. I wrote a ticket 7 days ago

Incredible. Support took 4-5 days to reply to me when EA started (so they'd had to have more mails coming in back then). They were of no help when they finally replied.

Dont click on shady website, dont RMT, dont trade with Shady Sam for Skooma.
I'm playing since 2014 and i have never been hacked and never will be.
I dont believe anyone saying they are just hacked by trading someone.
They just dont admit they did some shady business with some shady characters because playing the victim and blame everything on GGG is easier.

"

zsirfoka#3193 wrote:

Dont click on shady website, dont RMT, dont trade with Shady Sam for Skooma.
I'm playing since 2014 and i have never been hacked and never will be.
I dont believe anyone saying they are just hacked by trading someone.
They just dont admit they did some shady business with some shady characters because playing the victim and blame everything on GGG is easier.

GGG literally said it was because of a social engineering breach. An old Steam GGG-admin account was recovered by a bad actor through STEAMS own support and the bad actor used it to gain access to the accounts. They didn't specify how but probably using the good old, malicious link through DM and because it was from an official GGG steam admin account people clicked the link. The initial reports of lost accounts probably being lies and part of the social engineering, making people want to change passwords.