Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Rift Getting Hit Hard with Hackers

watchawatchawatchawatcha Member Posts: 960

So far four of my guildmates have been hacked.  I thought a few might of been careless, until one individual got hacked.  Now this guy is paranoid and was telling us not to go to other sites.  I know he wouldn't of gotten a keylogger.

On top of that people's characters are getting deleted.  This seems malicious.  Why would hackers want to delete characters?  I thought they needed them as a host to do more selling/botting?

Comments

  • Ren54Ren54 Member Posts: 67

    4 in the same guild? Have you checked the security of your guild website? There was a rumor going around that guildlaunch was being targetted.

     

  • SolestranSolestran Member Posts: 342

    You should ask those four if they use the same login and password as their World of Warcraft account.  Many people have been doing just that, making it incredibly easy for hackers to just switch over from WoW to Rift. 

  • Ren54Ren54 Member Posts: 67

    Originally posted by Solestran

    You should ask those four if they use the same login and password as their World of Warcraft account.  Many people have been doing just that, making it incredibly easy for hackers to just switch over from WoW to Rift. 

    That is quite amazing and very possible. Some people are asking why their WoW account which is more valuable was not touched. It is because of the authenticator.

     

  • LowdosLowdos Member Posts: 644
    If you're getting spammed a lot for game Blizzard / WoW account security alerts (phishing emails), its highly likely that you could be a possible victim. I reccommend creating / changing to a unique email address for different games, and create a complex password (mix of letters, numbers, upper and lowercase) for each of those accounts.
  • YasouYasou Member Posts: 86

    So why isn't there an authenticator available for Rift? This seems to be the safest method against hacking so far.

    I've submitted this question on the Rift official website, still awaiting a response...

  • NeVeRLiFtNeVeRLiFt Member UncommonPosts: 380

    Originally posted by Yasou

    So why isn't there an authenticator available for Rift? This seems to be the safest method against hacking so far.

    I've submitted this question on the Rift official website, still awaiting a response...

    lets hope they get one out soon

    the thing I read said something about a digital app you could download and use, also one for your cellphone

    Played: MCO - EQ/EQ2 - WoW - VG - WAR - AoC - LoTRO - DDO - GW/GW2 - Eve - Rift - FE - TSW - TSO - WS - ESO - AA - BD
    Playing: Sims 3 & 4, Diablo3 and PoE
    Waiting on: Lost Ark
    Who's going to make a Cyberpunk MMO?

  • helthroshelthros Member UncommonPosts: 1,449

    To be honest with you I think the way it's happening is through various bogus fansites.

     

    People are so used to seeing WoW fansites that when they see what appears to be a Rift counterpart, they willingly click on it. I think a lot of these bogus sites are actually loaded with scripts and harmful software. I've told my gf not to visit any fansites looking for info or crafting guides just yet.

  • RemyVorenderRemyVorender Member RarePosts: 4,006

    Coin Lock is coming to save the day.

    Joined 2004 - I can't believe I've been a MMORPG.com member for 20 years! Get off my lawn!

  • CeridithCeridith Member UncommonPosts: 2,980

    Originally posted by helthros

    To be honest with you I think the way it's happening is through various bogus fansites.

     

    People are so used to seeing WoW fansites that when they see what appears to be a Rift counterpart, they willingly click on it. I think a lot of these bogus sites are actually loaded with scripts and harmful software. I've told my gf not to visit any fansites looking for info or crafting guides just yet.

    Not to mention all of the 'fan' sites that popped up offering beta keys if you signed up during beta, and of course the "legit fan sites that host 3rd party ads (that are infected).

  • KhrymsonKhrymson Member UncommonPosts: 3,090

    Originally posted by NeVeRLiFt

    Originally posted by Yasou

    So why isn't there an authenticator available for Rift? This seems to be the safest method against hacking so far.

    I've submitted this question on the Rift official website, still awaiting a response...

    lets hope they get one out soon

    the thing I read said something about a digital app you could download and use, also one for your cellphone

    Interview with Scott Hartsman from Massively

    A big launch can be both a blessing and a curse. Obviously, your popularity right now has made you a main target of hackers/botters/third-party traders. How do you protect yourself and the players from that?



    We knew it was going to come on launch day. We were not expecting it to come crazy hard on launch day, to the point that, had our ops guys not had the foresight to pick up the load balancers and the particular networking hardware that they did, we would be in a very different state. We would have been denial-of-serviced off the internet, basically. The hackers came that fast.



    Think about it: They've had seven years of practice hacking other games. Every time they hack one of those accounts, they save the account name and the password. Plus, you've got other sites that have had break-ins, that aren't MMOs entirely, and the hackers have no problem running lists of 10 million names against our authentication system. So we've done some basics and some clever stuff. Our spam filter was collecting messages all during beta, and we turned it on after head-start began. The in-game mail filter goes in on Monday, because they moved to mail. And the filter feature has been collecting info the entire time, but we'll start the blocks and the auto-bans this week. At the time head start began, we already had auto-kicks and auto-bans for speed-hackers and teleport-hackers. We've been doing credit card bands on Fraudsters, because hacking and fraud is not limited to inside the game. We're selling the game too, and people have no problems stealing some poor non-player's credit card and trying to buy 260 accounts for the game.



    The next thing we're working on is a mechanic called coin-locking your character. If we detect that you're logging in from a fishy location, which is generally the case if you're getting hacked, your character will be coin-locked. Until you authenticate some sort of other way, you will not be able to get rid of anything on your character. You won't be able to sell it off; you won't be able to destroy it.



    We're also working on two-factor authentication, via both cell phone app as well as text message. We're not going to go with a separate hardware authenticator, because these days, pretty much everybody has the ability to receive a text message or use an app. So we're going to go out with that, because it's a lot cheaper for everyone involved, and people are more likely to use it if they can download it (as opposed to something they have to order and ship and wait for). And the goal for use is that we want these things to be used.

     

    If I read that correctly, the two-factor authentication is for cell-phones only?  {Not everyone has a cell-phone...me!}  The only other feature would be coin locking that puts annoyance on the legit player after they've been hacked, why not prevent it from happening entirely with an authenticator.  I would much rather purchase an authenticator as I have for FFXI, FFXIV, and WoW ~ its not like they're expensive.

  • ErstokErstok Member Posts: 523

    Their script kiddies. They're not real hackers. They use other peoples programs and target people who make stupid mistakes.

    image
    When did you start playing "old school" MMO's. World Of Warcraft?

  • joeri123joeri123 Member UncommonPosts: 247

    If I read that correctly, the two-factor authentication is for cell-phones only?  {Not everyone has a cell-phone...me!}  The only other feature would be coin locking that puts annoyance on the legit player after they've been hacked, why not prevent it from happening entirely with an authenticator.  I would much rather purchase an authenticator as I have for FFXI, FFXIV, and WoW ~ its not like they're expensive.

    Why is coin lock an annoyance? You log in from your regular IP location and nothing happens. Some dude from china logs in and you get locked.

    I would rather get an e-mail with a reset code when I get hacked instead of losing everything I have and waiting hours/days to get it restored.

  • AmanaAmana Moderator UncommonPosts: 3,912

    There are several threads about this topic already. Let's try to keep the information centralized. Please continue discussion either in the stickied keyloggers thread or this one: http://www.mmorpg.com/gamelist.cfm/game/431/view/forums/thread/309875/A-LOT-of-Hacked-Accounts.html

    To give feedback on moderation, contact mikeb@mmorpg.com

This discussion has been closed.