Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Thread For Discussion of Phishing Emails & Account Security Matters

2

Comments

  • NotoriousXNotoriousX Member UncommonPosts: 197
    Originally posted by Nephaerius
    I had a password reset attempt not from me within 5 minutes of launch.  I've since had at least one a day.  No success on their part.

    same here...just delete email and everything OK

    Tormented echoes of a fallen Eden
    I longed for her beauty
    Yet from dust, she returned
    The dream, an enigma.... silent

    image

  • GamerUntouchGamerUntouch Member Posts: 488

    There is no limit on login attempts using the client or website.

    People are being "brute forced" with bots since they can keep trying to login.

     

    Big letters so you read this, it should be impossible with the new email authentication, but arenanet needs to see this.

  • waynejr2waynejr2 Member EpicPosts: 7,769

    I highly recommend anytime you need to setup a password, you use this tool.

    http://www.thebitmill.com/tools/password.html

     

    That way you will not be tempted to repeat passwords.

    http://www.youhaventlived.com/qblog/2010/QBlog190810A.html  

    Epic Music:   https://www.youtube.com/watch?v=vAigCvelkhQ&list=PLo9FRw1AkDuQLEz7Gvvaz3ideB2NpFtT1

    https://archive.org/details/softwarelibrary_msdos?&sort=-downloads&page=1

    Kyleran:  "Now there's the real trick, learning to accept and enjoy a game for what it offers rather than pass on what might be a great playing experience because it lacks a few features you prefer."

    John Henry Newman: "A man would do nothing if he waited until he could do it so well that no one could find fault."

    FreddyNoNose:  "A good game needs no defense; a bad game has no defense." "Easily digested content is just as easily forgotten."

    LacedOpium: "So the question that begs to be asked is, if you are not interested in the game mechanics that define the MMORPG genre, then why are you playing an MMORPG?"




  • bcbullybcbully Member EpicPosts: 11,838
    Originally posted by Nadia
    Originally posted by itgrowls
    Here's a question: I've tried to figure out how to activate that email protection. Anet's instructions are vague (trie their account login page and the game launcher) nowhere have i seen t he option they speak of to turn on email authentications. Does anyone have any idea what they are talking about and how to turn this feature on?

    its been turned on by default

    http://www.reddit.com/r/Guildwars2/comments/z3qqm/guild_wars_2_status_thursday_august_30/

    We now have email authentication turned on for all players with verified email addresses. With this feature, even if someone guesses your password, when he tries to login from a location that you've never logged in from before, you'll have an opportunity to approve or disapprove of the login through an email check.

    Yeah about 5 hours too late for me.

    "We see fundamentals and we ape in"
  • velluccivellucci Member Posts: 23
    Originally posted by Albred

    This video sums it all up.

     

    http://www.youtube.com/watch?v=7eyon0gtM5w&feature=em-uploademail

    I was searching frantically, praying that he was just acting. There is a god.

  • bcbullybcbully Member EpicPosts: 11,838
    Originally posted by vellucci
    Originally posted by Albred

    This video sums it all up.

     

    http://www.youtube.com/watch?v=7eyon0gtM5w&feature=em-uploademail

    I was searching frantically, praying that he was just acting. There is a god.

    "When you have online accounts sometimes you have trouble with hackers, sometimes you have trouble with f*^king hackers! It's neeews! Well atleast it is to arenanett!"

     

    lmfao yeah I feel like him.

     

    Damn they got me.. grrr... let me give them a call and fix this.  NO F'n PHONE NUMBER!!!!!!  see above quote from video...

    "We see fundamentals and we ape in"
  • XzenXzen Member UncommonPosts: 2,607
    Even though getting your account compromised is not NCSoft's fault it would have made a lot of since to sell authenticators to their customers.
  • aesperusaesperus Member UncommonPosts: 5,135
    Originally posted by Xzen
    Even though getting your account compromised is not NCSoft's fault it would have made a lot of since to sell authenticators to their customers.


    Getting your account hacked may not be NCSoft's fault, but how they are handling it, is.

    I've been a fan from Anet since the announcement of GW1, but their customer service hasn't gotten any better since the launch of GW1. When you do get helped, it tends to be pretty good, however they are SEVERELY lacking on both response times (some people have been waiting as much as a week just to hear an actual response), as well as communication (no online forums, problems with emails, no phone number, severely limited live chat times).

    I like Anet, but they really need to step up their game in the customer service department if they expect to be a player in the AAA MMO market. It would be a shame to see them lose fans for something as stupid as not bothering to keep updated with their account security & support. They've made a great game, but it's built off of a solid community.

    They're #1 priority right now should be with getting better communication to the players having issues, and fixing the mass amounts of bans handed out to players who were just innocently playing the game. I think it goes without saying that it puts an extremely BAD taste in someone's mouth when they just start to play a game that the put 60-150$ into, only to have their account banned within the first week for no good reason.

    People have a right to be angry. The victims need to stop being blamed for this, and the focus should be more heavily on how to resolve this issue as soon as possible, rather than pointing fingers.

    Btw, thanks China.

  • SatariousSatarious Member UncommonPosts: 1,073
    Originally posted by Xzen
    Even though getting your account compromised is not NCSoft's fault it would have made a lot of since to sell authenticators to their customers.

    Can you explain to me exactly how it's not NCSoft's fault when gaming companies like Blizzard and EA don't have nearly the amount of widespread account hacks that are occuring right now with GW2?  It seems a little disingenuous on ArenaNet's part to push the blame on its "careless customers' when Blizzard and EA didn't have nearly the massive hacking problem with those same customers.  It's MORE likely that NCSoft put together some third rate security system held together by chewing gum and string that could easily be hacked into.  I don't know if these apologists posting on these boards are NCSoft employees or just ignorant fanboys.

  • mf16mf16 Member UncommonPosts: 65
    It's always the user's fault because corp. are so rich and powerful and are un hackable duh just like sony when they got hacked that was the users fault..... wake up people anyone can be hacked and not even know it and if they even find out a business might not even say they been hacked if they don't think that "personal information" was leaked. I believe they have a problem on their end because someone hacked my GW1 account when GW2 released I didn't buy GW2 I played in BWE3 thats all i was gana buy it now im waiting. My GW1 password is ooolllldddd and it was the only account ever made with it and i haven't played it in a couple of years so i find it hard to believe that there is a trojan on my computer or they stole my pass/email combo from another game and its an insult that A-net even blames other game companies for their OWN accts being hacked. I love GW2 and it sucks that I'm probably waiting another month or 2 now to buy it until i feel this problem has ben sorted out completely. 
  • TeknoBugTeknoBug Member UncommonPosts: 2,156

    There are several ways to prevent your accounts from getting hacked.


    Things that can get your accounts hacked are:
    -surfing porn sites
    -buying gold from goldsellers
    -buying powerlevel service
    -using the same login and/or password on forums and such elsewhere on the internet
    -sharing accounts with someone else, yeah blame your little brother
    ... and so on.


    Having your browser clear cookies on exit (and not accepting third-party cookies) and an anti-virus scanner run daily helps. There are cookie protector plugins for Chrome and Firefox that can keep the cookies you want/need (for banking, remembering page settings, logins, etc). Also use a noscript (java/flash disabler) plugin if you wish, but only if you go to alot of unfamiliar websites that you like to randomly click on in IRC or WoW or SWTOR forums.


    I'm disappointed that ArenaNet didn't add security question and athenticators yet, or will they ever? And also a non-working email verification. I have never had any of my accounts hacked except for WoW's, of which I only played for 4 months back in 2006 and my WoW account was hacked in 2009 (just before they added battle.net merges) when I wasn't even playing it, reports said that there were inside jobs but I managed to have the WoW account permanently locked.

    image
    image

  • vonbose0vonbose0 Member UncommonPosts: 23

    I just want my account back. Been about 4 days since I recieved the email telling me that the email attached to my account was changed. I sent the petition right away to get things taken care of. I'm starting to think this problem may be bigger than they are telling us, if it is taking them up to a week to return people's accounts.

     

    Wait... have they returned any accoutns yet ?

  • NadiaNadia Member UncommonPosts: 11,798
    Originally posted by vonbose0
    Wait... have they returned any accoutns yet ?

    yes they have

     

    GW2 Support forums are now available

    https://forum-en.guildwars2.com/forum

     

    info from the most recent update

    http://wiki.guildwars2.com/wiki/Game_status_updates

    Customer Support
    Our customer support team is prioritizing hacked accounts and other blocking login issues over other types of support requests.
    Hacked accounts - If you submit a support ticket for a hacked account, ensure it is properly prioritized by following update your existing ticket, clearly state that this is a hacked account ticket, and provide as much information as possible, including your account email address, your account display name or character names, and your 25-digit Guild Wars 2 serial code.
     
     
     
    Info on Old/Unresolved Tickets
    https://forum-en.guildwars2.com/forum/support/account/Info-on-Old-Unresolved-Tickets/first#post11698

    Our Customer Support Team is working diligently to resolve unanswered tickets.

    In a previous Game Status Update, we suggested that players with an older, unresolved ticket about a hacked account or blocked login issue should submit a new ticket to get their issue correctly prioritized. However, in retrospect, that suggestion was an error. Players should not submit duplicate tickets, but should update their EXISTING ticket. This is a different procedure than we had messaged earlier, and we apologize for any confusion this may cause.

    If you have submitted a ticket and have not received a response, please make certain that you have provided a clear and accurate description of the issue that you are facing. If you would like to update your ticket for clarity or to provide more identifying information, simply update in the Support interface or respond to the most recent emailed copy you received and include as much of this information as possible:

    • Your GW2 Username
    • Your serial code
    • A character name, if any
    • A detailed description of the issue that you’re experiencing
    • Any error code that you are getting

    Please also make certain that you have closed out any additional tickets that you may have created about the same issue to expedite your response.

    Thank you for your help!

     
  • NadiaNadia Member UncommonPosts: 11,798

    http://www.examiner.com/article/new-account-recovery-system-available-for-hacked-guild-wars-2-players

    Today, however, ArenaNet launched the self-help system for players to recover accounts. Players in need of resetting their passwords or turning off email authentication can do so at this webpage. These options are available if the player is unable to access his or her account due to an unwarranted intrusion. Using this self-help system is recommended if a player cannot otherwise get into his or her account.

    This method requires an account name or email, the serial code associated with the account, and a character name. Once this information is entered, the account will be verified, and the player should be able to access his or her account again. Of course, if the account was maliciously attacked, there is no guarantee that characters, items, and gold will still be there. At this time, character reinstatement is not an option.

     

    related mmorpg.com thread

    http://www.mmorpg.com/discussion2.cfm/thread/364399

  • TeknoBugTeknoBug Member UncommonPosts: 2,156



    NCSOFTs side was quick to respond ..processing a refund of $120.00 worth of gems that were charged on my cc.
    Just wanted to quote that from the other thread that was closed, good for NCSoft to do that- contact NCSoft or ArenaNet before consideroing chargebacks (banks take it seriously and it can affect you in the future if you do one).


    I've been hearing about people having their accounts stolen by hackers, with items and characters gone and then being able to recover the account only to have the hacker report the stolen account and ending up being banned (or terminated).


    ArenaNet needs a better measure of security against this garbage, you need to realize the general population aren't that smart (read about average IQ dropping over the years) since most people will use the same login/email and password often. A majority of MMO games out there has decent account security which includes secret question, authenticators, confirm on change/action- GW2 has none of those, you receive an email saying someone is accessing your account from a specified IP address but doesn't give you an option to allow/deny it, and a secret question would help prevent email/password change.

    image
    image

  • SoulStainSoulStain Member Posts: 202

    Anyone else think that them blameing the rash of hacked accounts on an undisclosed fansite being attacked and their info stolen for use on GW2 's accounts ...a bit of bullshite?

    I got hacked and I am very safe. Yes ..everyone says this but in my case it is true. The only other time I've been hacked is when SOE had their problems last year and a 3 yr old EQ2 account I set up got hacked.I dont respond to emails or other phishing from what is sent to me.. I always respond to those by checking my accounts directly through the web address bar and I have 3 virus screeners. One I run manually every day. No keyloggers. Nothing. Yes..I use diff usernames and passcodes for various games and sites. No..I do not frequent..or infrequent....porn sites. My browser clears upon exit..no cookies stored..etc.etc.

    NCSOFTs side was quick to respond ..processing a refund of $120.00 worth of gems that were charged on my cc. It will repost sometime w/i 5 days according to them. They got back to me in 3 hours from my ticket.

    The other part of the ticket...getting my account and characters back..has yet to be answered.

    I find it too convenient that it's because of another companies fansite and believe thats a B.S. scape-goat excuse. An attempt to absolve Anet of any responsibility for lacking decent security. What is this other website? anyone know? Because the only fan site I became a member of is this one. As you can see by my post count that was recently. I think we have a right to know if a fansite we are supposedly using has security issues this severe. Why is the name undisclosed? 

    The stupidest thing I did was leave my credit info on account..just forgot this time. My fault entirely.

    Well..i was just wondering because it seems too large scale an incident to blame on some other website and/or us exclusively.

    Hope I'll get my thief back ...at least eventually....he was 15th level and had many dyes unlocked.  I love the game and am waiting patiently to be able to play again but just wanted others opinions.

     

     

  • TeknoBugTeknoBug Member UncommonPosts: 2,156

    SoulStain, guildwars2guru.com was the one that was hacked, it's kind of silly that people used the same login/password on a site such as that for GW2 and I bet you they do on other games as well.


    I bet you that my hotmail address is being checked everyday to see if an account in GW2 exists, I know for a fact hackers has my hotmail address because every day I get WoW, Diablo 3 and other games spamming with "account notice" and such when the address isn't even linked to any of the games nor have I ever played most of the games. I may just create a dummy GW2 account with the hotmail address to see how quickly it gets broken into, I'm curious.

    image
    image

  • SoulStainSoulStain Member Posts: 202
    Originally posted by sookster54

    SoulStain, guildwars2guru.com was the one that was hacked, it's kind of silly that people used the same login/password on a site such as that for GW2 and I bet you they do on other games as well.


    I bet you that my hotmail address is being checked everyday to see if an account in GW2 exists, I know for a fact hackers has my hotmail address because every day I get WoW, Diablo 3 and other games spamming with "account notice" and such when the address isn't even linked to any of the games nor have I ever played most of the games. I may just create a dummy GW2 account with the hotmail address to see how quickly it gets broken into, I'm curious.

    See..that's interesting. I have definitely never signed up at guildwars2guru.com. I don't even recall being phished at any of my 5 emails for guildwars 2. So I really think the breach is not just limited to some 3rd party website and someone's just trying to cover their butts.

    Anyway...I hope they resolve this soon and If I get banned for a stolen account after I get my account back,  I'll likely lose my mind .If this happens I will definitely try to get a refund for the game and all the money I've actually spent on gems. I hope it won't be necessary since I DO like the game. A Lot.

  • kevjardskevjards Member UncommonPosts: 1,452
    Originally posted by Blathian
    well everyone keeps talking about not using same passowrd ect. but to any of us that have been hacked/banned the real question is what now? the support from Arena Net is very sparse and limited. I just need to know what to do from here. I have yet to register my retail serial code, but considering my account is banned i cant. Im wondering if i can just make a totally new GW2 account and use this retail code as if i bought the game today and just start over, or is that cide tied to my "pre-purchase" code i received from amazon. The real issue here for me with arena net is the communication to those of use who have had our account comprimised. Fine i f@#ked up and used the same password as an old game and got hacked, shame on me, so now what?

    this and also for me is the sheer lack of interest this company has in solving our problem.i sent reply after reply and well i,m on 5 days and not even a reply apart from the automated crap is disgusting.not sure they are actually interested in helping at all..they maybe under the illusion that i'm going to pay £40 for another copy..yeah keep dreaming.if this was any other game people would be up in arms over this mess.like i said you get what you pay for and in the end i got a game(a good one ) but the company are a joke when it comes to customer support.

  • SoulStainSoulStain Member Posts: 202
    Meanwhile they just announced that they are selling digital downloads of GW2 on the site again...and somehow we are suppose to be ecstatic.
  • kevjardskevjards Member UncommonPosts: 1,452
    Originally posted by Amana

    Hey guys,

    Since this forum is VERY active right now, many threads are getting lost and people aren't properly checking to see if their thread is a duplicate topic. As a result, since this is an important matter, we've had many phishing/hack/security threads

    As we have in a handful of other forums, we'd like to provide this thread for the discussion of phishing/hacking/account security measures and updates on the matter. This way the discussion stays visible and we don't get 20 new threads each day on the matter.

    any chance of some advice if you can please..having my account hacked i cannot get on the forum,has it seems they are dealing with the tickets quicker for those that have been waiting 4-5 days now.problem is for me is that i cannot get on the forum at all .although i have my key code my e-mail does not match up .so i cannot post on their site..any ideas plz Amana...or anyone else for that matter...they say they are dealing with tickets within 48hrs now...well thats not the case obviouly because they have just totally bypassed loads of peoples tickets by closing them.

  • kevjardskevjards Member UncommonPosts: 1,452
    Originally posted by SoulStain

    Anyone else think that them blameing the rash of hacked accounts on an undisclosed fansite being attacked and their info stolen for use on GW2 's accounts ...a bit of bullshite?

    I got hacked and I am very safe. Yes ..everyone says this but in my case it is true. The only other time I've been hacked is when SOE had their problems last year and a 3 yr old EQ2 account I set up got hacked.I dont respond to emails or other phishing from what is sent to me.. I always respond to those by checking my accounts directly through the web address bar and I have 3 virus screeners. One I run manually every day. No keyloggers. Nothing. Yes..I use diff usernames and passcodes for various games and sites. No..I do not frequent..or infrequent....porn sites. My browser clears upon exit..no cookies stored..etc.etc.

    NCSOFTs side was quick to respond ..processing a refund of $120.00 worth of gems that were charged on my cc. It will repost sometime w/i 5 days according to them. They got back to me in 3 hours from my ticket.

    The other part of the ticket...getting my account and characters back..has yet to be answered.

    I find it too convenient that it's because of another companies fansite and believe thats a B.S. scape-goat excuse. An attempt to absolve Anet of any responsibility for lacking decent security. What is this other website? anyone know? Because the only fan site I became a member of is this one. As you can see by my post count that was recently. I think we have a right to know if a fansite we are supposedly using has security issues this severe. Why is the name undisclosed? 

    The stupidest thing I did was leave my credit info on account..just forgot this time. My fault entirely.

    Well..i was just wondering because it seems too large scale an incident to blame on some other website and/or us exclusively.

    Hope I'll get my thief back ...at least eventually....he was 15th level and had many dyes unlocked.  I love the game and am waiting patiently to be able to play again but just wanted others opinions.

     

     

    its already been stated that if and a big if you get your account back all will be wiped by the thiefs..not only can the not do roll back of chars for you..anything in your account will be gone to.

  • kevjardskevjards Member UncommonPosts: 1,452

    ok i got sick of waiting for a response off Anet so i thought about it and looked up the phone number for the uk and spoke to a really nice lady who told me that even if you reply to an e-mail you automatically got right to the back of the queue.that is totally contrary to what Anet are telling people in the e-mail is'nt it?..if this is the case no bloody wonder i have not heard anything.

    look i am not very pc literate so my interpretation is i have been lied to by Anet..that may not be the case and please correct me if i'm wrong.this also maybe a glitch in their system thats placing us at the back of the queue.either way it would explain getting no response at all.

  • kevjardskevjards Member UncommonPosts: 1,452

    so after 6 days i finally got my account back..nice to see that Anet have beefed up their security with authenticator.works a treat.not only that i have totally new e-mail adress just for gw2 otherwise i would think inevetably i would be at risk again.cant say that i,m impressed with the length of time it took.but has i have said i have to take partial responsibility for this..never again.but has i am trying to see this from Anets point of view as well all i can say is hopefully this will never happen again..i would also like to mention all the people still waiting to get back in..i wish you all the best in getting your accounts sorted.i know you feel gutted ,has i did,best wishes all.

    p.s strangely enough the hacker was so kind not to delete my chars..how decent of him.

  • SoulStainSoulStain Member Posts: 202

    ..been 4 days now and not so much as a peep from Anet about my account.

    I have nothing but praise for NcSoft themselves....like I said before they processed my refund with 2 hours and it posted a few days later.

    Anet...hmm. Why so slow?...lol.

    Oh well. I'll play RIft until they fix my stuff.

Sign In or Register to comment.