Another hacked account

G

Grumgrim

Member
Blaster said:
Do I have something I need to admit to? Yeah, if your hack came as a result of your actions, then you reap what you sow. There you go. My great admission is this: Your actions have consequences.

I, like others, am trying to find cause and effect here. If you didn't use a third party site to buy boxes, then there may be another reason your account got hacked. If you did buy third party boxes and that's not the cause of your hack, then there must be another reason. We're just trying to figure it out.

Personally, I don't care what you did or didn't do and what it resulted in, but if we can find any commonality amongst the accounts that have been compromised, then perhaps people can figure out a way to avoid such issues in the future.

(Just like how players saw the need for crowdsourced debugging information when SSG falls short. People see problems, try to find solutions, so that in the future hopefully someone else can benefit from those solutions.)

I've stated what I've seen and the connections I've made. We have European accounts, some possibly old enough to link back to the beginning of DDO and whose credentials have passed through multiple ownership/development hands at this point. Players getting tight-lipped when asked for more details about potential causes for their hack leading to the possibility that they engaged in activity that could have compromised their accounts. That's just what I see from my perspective, but there's probably more.

At the end of the day you agreed to DDO's EULA. Good luck fighting that. Spend your time, money, and life fighting a battle you're not going to win. And if you do win, great, we'll throw you a party, and I'll saddle up and have a big ol' slice of sh*t pie and admit I was wrong.

In the meantime you're probably going to keep playing the game. So many players have threatened to leave, and few follow through with it. If you have true conviction to turn your back justifiably so on a company that doesn't care about you -- and spoiler alert, companies don't care about you -- well then good for you. You deserve to do something with your life that respects your time and your money.
Click to expand...

Consequences? I was asking for it was I? or was I dressed for it and should expect it?
I will continue to fight, I dont accept theft as acceptable ever.
I am european, I have been playing since just before cap was moved to 16, My password has changed more than a few times since then.
Username has stayed the same due to SSG unable to change it. I don't share my account and the security on my pc is as good as you hope for (nothings perfect, if they got access to my PC, DDO is the least of my concerns)
I have not been tight lipped SSG have, they wouldnt tell me anything about the account access which makes me think they have something to hide.
I will continue to play as I play with friends and family however my spend on the game will go from $1000's of dollars a year to maybe $25. as will several other players. Multiply that by each of the people who have had thier accounts hacked and this will be a problem for the game.
 
rabidfox

rabidfox

The People's Champion
Dude said:
"The judgement is likely to have widespread ramifications because this effectively means there’s grounds for facing criminal charges if you’re caught stealing virtual currency in any game that makes use of it."
Click to expand...
The hackers are already making illegal credit card purchases on people's accounts, so what's a few extra charges of theft to them? Of course, the odds of law enforcement ever tracking down those involved is like near nil.
 
Last edited:
D

Dude

Well-known member
rabidfox said:
The hackers are already making illedgal credit card purchases on people's accounts, so what's a few extra charges of theft to them? Of course, the odds of law enforcement ever tracking down those involved is like near nil.
Click to expand...
That last part is the big issue. They have to get caught first and most local police organizations, the ones that would have to deal with it, have almost no capability to conduct an international cyber investigation.
 
PersonMan

PersonMan

Well-known member
rabidfox said:
The hackers are already making illedgal credit card purchases on people's accounts, so what's a few extra charges of theft to them? Of course, the odds of law enforcement ever tracking down those involved is like near nil.
Click to expand...
They would have to actually bother, which seems unlikely.
 
J1NG

J1NG

I can do things others can't...
JammyHammy said:
I didn't have my account compromised, but know someone who had their account compromised, so I can hopefully shed a little light on information (at least in this specific instance). This happened on Moonsea sometime between 1 and 2 pm est on December 20th, at least this is when the person who accessed the account logged out, so it could have been between noon and 2 pm est, but in that ballpark.
Click to expand...

Interesting. This is on the weekend, which is of course when there is most players on, which would lead credence to the theory that it's a login server fallover along with the game servers doing the same thing. Which could suggest this happens only during certain times only when conditions can be met (many players logging on/logged on).

JammyHammy said:
The person affected was logged in at the time it happened.
Click to expand...

Hmmm, in all my time in DDO, the only time I have been logged into the same account twice, was when I logged into a different server and the game client didn't boot me from the first server. I've not noticed it happen again since. But interesting nontheless, as it could suggest that this can only happen to players who have logged on "recently" or are "currently" logged on, so it could be more an attack of opportunity by parties that have discovered that they need only log in with as many accounts as possibel to try and log into a different server to be on at the same time and possibly act without the other player realising.

JammyHammy said:
Most of the payments were ddo points and were in increments of 249.99 usd. The person who accessed the account must have had access to the password, whether through brute forcing or some other means, because they had logged in to the standingstonesgames website and had changed the email associated with the account as well as the password. Because they had logged in on the website with their password, I doubt it was simply about improper logins switching accounts with another and being able to access their characters and store from there.
Click to expand...

This makes sense, as only a password breach rather than trying to do something to the server would grant access to the accounts bit to change emails.

JammyHammy said:
I will say that they have been playing the game since 2010 and have at least had the same password for a majority of that time, with the password being fairly simple so it is not impossible that the password could have been found through brute force attempts. They have never interacted on any of the third-party sale sites, so they wouldn't have had their password leaked through that. If there's any information more specific you'd need, I can get in contact with them to ask, but that is the gist of what occurred.
Click to expand...

Don't take this the wrong way, but this sounds like it might have been possible for the data breach that Turbine suffered back in 2013 that might have allowed this particular instance to happen if the password was fairly simple and if it was not changed much or at all throughout that time (need to attempt to *ahem* TEST how many attempts at one of my family sub accounts it would take before my IP or that account gets locked, or if I can eventually brute force it open, to know which protections are in place by SSG so we know which outcome - brute force, breach, or latching on was more likely outcome).

J1NG
 
JammyHammy

JammyHammy

Member
J1NG said:
Interesting. This is on the weekend, which is of course when there is most players on, which would lead credence to the theory that it's a login server fallover along with the game servers doing the same thing. Which could suggest this happens only during certain times only when conditions can be met (many players logging on/logged on).



Hmmm, in all my time in DDO, the only time I have been logged into the same account twice, was when I logged into a different server and the game client didn't boot me from the first server. I've not noticed it happen again since. But interesting nontheless, as it could suggest that this can only happen to players who have logged on "recently" or are "currently" logged on, so it could be more an attack of opportunity by parties that have discovered that they need only log in with as many accounts as possibel to try and log into a different server to be on at the same time and possibly act without the other player realising.



This makes sense, as only a password breach rather than trying to do something to the server would grant access to the accounts bit to change emails.



Don't take this the wrong way, but this sounds like it might have been possible for the data breach that Turbine suffered back in 2013 that might have allowed this particular instance to happen if the password was fairly simple and if it was not changed much or at all throughout that time (need to attempt to *ahem* TEST how many attempts at one of my family sub accounts it would take before my IP or that account gets locked, or if I can eventually brute force it open, to know which protections are in place by SSG so we know which outcome - brute force, breach, or latching on was more likely outcome).

J1NG
Click to expand...
No offense taken, that was one of the things I had thought of as a reason why they had been targeted. If the login swaps allow people to log onto characters on other people's accounts, that person I imagine could access the store on any character to see the account's name. So if the source was swapping, it'd also be possible to then brute force passwords (if they're simple enough) to then change the email associated with the account. But it could also just have easily been from the 2013 leak. I think without more information on conditions surrounding other people's situations, it'd be hard to know for sure one way or another.

It seems they had just logged in on the one character, at least to my knowledge, and then moved on without any more activity on the account until it was restored to the original owner, which seems strange to go through the trouble of changing the email associated on an account you only access the one time, but that might have just been done to be petty or some other reason I don't understand.

Also, I didn't mean to say that the attacker and the victim were on the game at the same time, just that prior to the account being compromised, the original owner was logged in. It is unfortunate timing, but they were afk when it must've happened because they were logged out when they came back, so they didn't immediately notice. I just meant to say that they were likely booted from the game due to the attacker logging on on the account. Just wanted to clarify if there was any confusion
 
Last edited:
MarauderX

MarauderX

Well-known member
Had a hack happen in December also, put in a ticket, no response via email... and following up weekly.
 
D

Dulkhan

Well-known member
Well my account just got hacked too and more than 6000 ddo points were gone, thx god I try to delete my credit cards on each purchase...
So they bought Legendary Raid timers and then "sold" them on the auction house, for what I can see I don't have much hope to get anything not even those accounts banned...
 
G

Grumgrim

Member
Dulkhan said:
Well my account just got hacked too and more than 6000 ddo points were gone, thx god I try to delete my credit cards on each purchase...
So they bought Legendary Raid timers and then "sold" them on the auction house, for what I can see I don't have much hope to get anything not even those accounts banned...
Click to expand...
sorry to hear it, SSG do not care, have no intention of stopping it, and personally I think a member of the SSG team is complicit.
The amount of accounts the scammers musty be accessing to find the ones that have ddo points to steal is worrying.
Try to ingore the trolls on here and other places that like to attack victims, you can only imagine why they are like that.
 
G

Grumgrim

Member
nicholas said:
You need to band together with other victims of this crime and create a class action lawsuit against SSG get somebody to check the devs game logs internally in higher authority...
Click to expand...
tried to get them to check logs, no idea if they did but they diddnt want to share, would happily add my voice to a group legal claim
 
  • Like
Reactions: DBZ
D

Dulkhan

Well-known member
Grumgrim said:
tried to get them to check logs, no idea if they did but they diddnt want to share, would happily add my voice to a group legal claim
Click to expand...
Try to get in touch with J1NG since it's seems he is trying to figure out whats going on, and has been for a while now so the more information he gathers the better
 
You must log in or register to reply here.
Top