Hacked account many items stolen.

Account was blocked today.

Promptly changed the password, also was mailed an unlock code.

However, all my currency and valuable items were stolen.

I did not get any information concerning either the login attempt or the location.

That is pretty weird, considering that i received a warning mail when I tried to access my (hacked) account...

Time frame: today 18/03/2013, between 19h10 and 21h45.

Character name: Cyanyx lvl 76 shadow.

I can provide a list of the items that have been stolen, including the stats and gems in sockets, if needed.


Is there some way to get those back, or should i just uninstall and forget about this game ?

You should be worried that the people who stole your items may also have access to your email account.

Well reading the forums, it seems the same thing is happening to a lot of players.

Account blocked without any warning or mail. I doubt every one of us has had their computer compromised.

What doesn't make any sense, is that i got locked out of my account while trying to log in today...

why didn't they lock out the hackers?

While there could be another explanation, what I'm suggesting is possible is that they obtained access to your email account in order to respond to (and likely also delete) the email that was received when they attempted to access your PoE account.

If the method by which they obtained the PoE password in the first place is a keylogger, it's pretty likely for them to also have collected your email account password along the way. Or if similarly you share your email account password with other things, it's possible that it has landed on the giant list of compromised passwords that's being used.

Their action of responding to that lockout email on your behalf would also reset the city that you normally connect from, so when you then logged in, you would then get the mail saying that your city had changed.

This doesn't mean that's what happened, I just wanted to make it clear that it's possible.

"

Qmabyte wrote:

Well reading the forums, it seems the same thing is happening to a lot of players.

Account blocked without any warning or mail. I doubt every one of us has had their computer compromised.

There are a *lot* of compromised computers out there which show essentially no sign of it, apart from the fact that they will without warning respond to certain requests made of them via the Internet. Usually the same software which makes this happen also makes it impossible for programs on the running system to detect that it's there, by replacing various parts of the operating system (i.e. you would need to examine the disk without running the OS that's installed on it in order to be able to detect that this stuff is installed).

For this reason, it's very hard to ensure that machines are truly not compromised. While we can't go around being paralysed with fear, it's pretty hard to know for sure, even if you have a lot of technical ability.

Apart from this, there are various giant username/password lists floating around out there which have been collected from many compromised websites. The people who have been attacking PoE accounts have gone through hundreds of thousands of username/password attempts, most of which fail, but a few of which manage to succeed, and when one works, you'd bet they'd also look through the list to try to break into the associated email account by trying passwords associated to similar usernames.

This has been enough of a challenge for them that the flood of broken-into accounts has nearly dried up, but it seems there are still a few that get through.

"

what I'm suggesting is possible is that they obtained access to your email account in order to respond to (and likely also delete) the email that was received when they attempted to access your PoE account.

That's very possibly what happened, since my email password hadn't changed for ages...

All my passwords are often changed/ updated, but i stupidly forgot to change this last one :X

Dumb..dumb...DUMB.

Anyway, changed my mail pass, which requires to be logged from my own connection, so i *should* be safe for now.

"Just" lost a 5L/6S 400+ ES tunic, 110+ ES boots, 300+ ES shield, and of course all my quality gems + the few orbs i had left.

"

Qmabyte wrote:

"

what I'm suggesting is possible is that they obtained access to your email account in order to respond to (and likely also delete) the email that was received when they attempted to access your PoE account.

That's very possibly what happened, since my email password hadn't changed for ages...

All my passwords are often changed/ updated, but i stupidly forgot to change this last one :X

Dumb..dumb...DUMB.

Anyway, changed my mail pass, which requires to be logged from my own connection, so i *should* be safe for now.

"Just" lost a 5L/6S 400+ ES tunic, 110+ ES boots, 300+ ES shield, and of course all my quality gems + the few orbs i had left.

From what I understand, hackers (at least the chinese type) generally don't take items, just currency. Do you have any real life "friends" that could have done it?

"

Lask001 wrote:

From what I understand, hackers (at least the chinese type) generally don't take items, just currency. Do you have any real life "friends" that could have done it?

I definitely have no friends that could have done it... and they took the gems out of my gear, and my 5-linked chaos resist chest.

Just looked closer and they really combed through my inventory.

"

Lask001 wrote:

"

Qmabyte wrote:

"

what I'm suggesting is possible is that they obtained access to your email account in order to respond to (and likely also delete) the email that was received when they attempted to access your PoE account.

That's very possibly what happened, since my email password hadn't changed for ages...

All my passwords are often changed/ updated, but i stupidly forgot to change this last one :X

Dumb..dumb...DUMB.

Anyway, changed my mail pass, which requires to be logged from my own connection, so i *should* be safe for now.

"Just" lost a 5L/6S 400+ ES tunic, 110+ ES boots, 300+ ES shield, and of course all my quality gems + the few orbs i had left.

From what I understand, hackers (at least the chinese type) generally don't take items, just currency. Do you have any real life "friends" that could have done it?

Not sharing my account details with anyone.

Since i had very few orbs left after crafting my 5L tri-resist chest, they took all the top end items they could take, only leaving trash loots.

There should definitely be a character rollback option, since situations like these can only lead to one consequence: stop the game in disgust.