test content
What is the Arc Client?
Install Arc

Account hacked, items stolen

gorrundgorrund Member, Neverwinter Beta Users Posts: 11 Arc User
edited February 2014 in General Discussion (PC)
So it's been a fun day for me. This morning I logged into Gateway and noticed some of my profession tasks were completed when they should have still had time left on them. I log into the game and see that I am standing next to the postal courier in PE...which was weird since when I logged off last night I was somewhere else completely. A few seconds later I get a 'logged in from another location' and was booted out of the game. After a few seconds of saying WTF to myself, I realized someone else was in my account. I logged back in real quick to boot the other person out and went to the PW site to change all my login info. So then logged out, back in with new info, and surveyed the damage. Most of my profession resources/assets were gone and a few other items. Looks like I was in before they could do anything like delete my armor, weapons, toons, etc. I didn't really have too much of value, some steel tools, one mithral swivel knife, bunch of green workers, and lots of leather, residuum, vitriols, ore. They also got a bunch of rank 5 enchants.

So then I check my email and see that there was a Password Recovery message stating that I had requested a password reset and that if I didn't to just ignore it. The password however was never changed, and the hacker was somehow able to use my own password. I don't use easily guessed passwords so no idea how they got it. I only play on this particular pc at home as well. And no, before someone says it, I have never used a gold site.

Shortly after, I start searching the auction house for my missing good. There I find one person selling exactly what was missing from me. The exact number of tools, resources, enchants all for sale on the AH. The all had 4 days, 23 hours, and some minutes left on timer so they were just listed. I took bunch of screenshots of everything I could find, and submitted a ticket.

I find it worrisome that someone can get into an account so easily. I've run all types of malware, virus, etc scans and nothing wrong with this pc. This would really suck for someone who had a lot of valuable items on their toon. Now I'm hoping it doesn't take a week for support to get my items back.
Post edited by gorrund on

Comments

  • dartakxdartakx Member Posts: 201 Arc User
    edited June 2013
    gorrund wrote: »
    Now I'm hoping it doesn't take a week for support to get my items back.

    No it won't take a week, some guildies and I who actually used the ticket support in the last 2 months it averages 4 weeks, out of 5 tickets their fastest reply was 19 days and longest 29 days, mine took 26 days, i'd say expect 3 weeks at least.
    [SIGPIC][/SIGPIC]
  • nikitaoznikitaoz Member, Neverwinter Beta Users Posts: 149 Bounty Hunter
    edited June 2013
    A few questions:

    1. Did you use that password for other sites/games?
    2. Have you been to some suspicious sites? Nowadays antivirus programs rank the sites.
    3. Do you have Remote Desktop Connection active on your PC?
    4. Do you have antivirus/firewall on your PC?
    5. Are you using international torrent sites? Some of them install malicious software on PC.
    6. Perhaps, you used Gateway in some public place? Any place?
  • moerevolvermoerevolver Member Posts: 128 Bounty Hunter
    edited June 2013
    When you first boot up NW, your account will be tied to your computer. Whenever you log on into NW on a different machine the game will send a verification code to your email address. In order to play your account on a different machine, you need to enter that code.

    The chances are they have access to your email address, or access to your computer. There is no way someone could login to your character and simply steal everything without that email verification code. Unless there is a hack or exploit which bypasses everything that no one is aware of.

    So I guess the best thing for you to do is change your email and account password. If you use the same password for anything else like your social networking sites, I'd also change those. Since you had no success with your antivirus, there is nothing much you can do and hope it's gone. You can do a system restore to the date prior to installing NW but that's a little extreme.
  • gorrundgorrund Member, Neverwinter Beta Users Posts: 11 Arc User
    edited June 2013
    Wow, weeks for a response. ouch, at least they didn't take/destroy anything important for play. I'm having a ton of fun with the game, so going to keep playing.

    My gaming passwords are always different from email/forums. I don't use any torrents, all my software is legit, and haven't been to anything suspicious that I know of at least. i do have antivirus running all the time and firewall up. I have had the Remote Desktop Connection and related turned off since I built this pc about 4 months ago. I haven't used Gateway anywhere else either. If I'm going out I just set some extra long tasks to run. The only thing I've done that would even indicate publicly that I'm playing NW is 'Like' the Neverwinter facebook page...and I use a different password for FB as well.

    So I'm truly baffled. In the meantime I've changed my passwords and user email/login on just about everything I use online.
  • huckasevenhuckaseven Banned Users Posts: 470 Bounty Hunter
    edited June 2013
    you email account also got hacked, otherwise its not possible to get your NW account hacked...unless the hacker sits on a PC that you used already once to log in and thus you unlocked yourself
  • imsmithyimsmithy Member Posts: 1,378 Arc User
    edited June 2013
    When I first logged into the game and gateway using my new pc I had to do a Cryptic account guard check that links my account to my pc , didn't you get this option? and if so doesn't it work?
  • chrono0812chrono0812 Member, Neverwinter Beta Users, Neverwinter Guardian Users Posts: 501 Bounty Hunter
    edited June 2013
    gorrund wrote: »
    Wow, weeks for a response. ouch, at least they didn't take/destroy anything important for play. I'm having a ton of fun with the game, so going to keep playing.

    My gaming passwords are always different from email/forums. I don't use any torrents, all my software is legit, and haven't been to anything suspicious that I know of at least. i do have antivirus running all the time and firewall up. I have had the Remote Desktop Connection and related turned off since I built this pc about 4 months ago. I haven't used Gateway anywhere else either. If I'm going out I just set some extra long tasks to run. The only thing I've done that would even indicate publicly that I'm playing NW is 'Like' the Neverwinter facebook page...and I use a different password for FB as well.

    So I'm truly baffled. In the meantime I've changed my passwords and user email/login on just about everything I use online.

    Here's an Idea, bare with me....Change It All Period. If it baffles you and has you second guessing how a hacker could have gained access to your Neverwinter account.....Change it all, change your email, change your social networking sites passwords, change your password you use to log into your computer, change all the passwords used to log into different games you play.

    Why risk having another issue, I'd take out a piece of paper and I would re do all my passwords for all my accounts, then run a systems check to make sure I don't have any unwanted stuff installed on my computer. Once all of that's done I'd make a note of all the new passwords (in case your like me and would forget) and then stick that paper away so only you have access to it.
    Death_knight.jpg

    Life is a dream for the wise, a game for the fool, a comedy for the rich, a tragedy for the poor.
    ~Sholom Aleichem
  • chrono0812chrono0812 Member, Neverwinter Beta Users, Neverwinter Guardian Users Posts: 501 Bounty Hunter
    edited June 2013
    huckaseven wrote: »
    you email account also got hacked, otherwise its not possible to get your NW account hacked...unless the hacker sits on a PC that you used already once to log in and thus you unlocked yourself

    This right here, any time I've had to re-install Neverwinter, I've always been prompted to enter a code that was sent to my E-mail Address before I was able to play the game. You are also prompted to enter a code after re-installing Neverwinter on your computer and you visit Neverwinters Gateway site for the first time.
    Death_knight.jpg

    Life is a dream for the wise, a game for the fool, a comedy for the rich, a tragedy for the poor.
    ~Sholom Aleichem
  • gorrundgorrund Member, Neverwinter Beta Users Posts: 11 Arc User
    edited June 2013
    I had the account guard check when I first installed the game, which was after I built the pc. It worked fine and have had no problems at all since then.

    I've brought out my 'Tome of Passwords' which has every password and logon I've used over many many years. Continuing on to change it all! I do have to write them down too.
  • gorrundgorrund Member, Neverwinter Beta Users Posts: 11 Arc User
    edited June 2013
    I just checked my 'trash' folder from my email and shortly before I logged on the there were two messages. One for New computer accessed and New computer saved. So this person did have access to my email somehow. The email shows the ip address they were accessing from...well unless it was spoofed.
  • okoko1plokoko1pl Member Posts: 6 Arc User
    edited February 2014
    no need to know e-mail account, hackers attack from game - they standing close to U, choosing U, and attracking, if u are online of course
    i lost my 4 char. lvl 60 like that - that **** after deleted my characters created new one, very funny
  • lewstelamon01lewstelamon01 Member Posts: 7,415 Arc User
    edited February 2014
    I'm sorry, but this is not something that can be resolved at the forum level. Please contact customer service to assist with your issue.

    Just checked the post date also. Please check your post dates and if more than 30 days have passed, please start a new thread. Necro'd threads may be left open at the discretion of the community staff however this would not qualify.
    ROLL TIDE ROLL

    Great Weapon Fighter: Because when is today not a good day to die?

    PC and PS4 player. Proud Guildmaster for PS4 Team Fencebane. Rank 5 Officer for PC Team Fencebane. Visit us at http://fencebane.shivtr.com
This discussion has been closed.