You are not logged in.

Applications: [GameMaster: OPEN] | [Volunteer Testers: OPEN]


This forum will be permanently shut down on Friday 13.07.2018
Please copy or save all important information from old forum before they will be deactivated
We have moved to new board. https://forum.runesofmagic.gameforge.com/Come join us.

1

Tuesday, March 20th 2012, 4:59pm

WARNING! please be careful and please read

In the last few days, I've heard of a GM coming on to Artemis and spamming world shout the name of gold selling websites. At first I thought this was a joke or maybe a drunk GM, I yesterday saw a level 70 character from a well known guild do the exact same thing. This morning I heard from someone that a guildie of mine had also done the same. He just logged in to find ALL of his gold missing and lots of other stuff too.

From what I've been hearing it looks like there's a serious problem somewhere, it may be a security hole on Frogsters end, it could be a trojan on someones system or even a website which mines data somehow.

Regardless of what the reason behind it is I'd like to ask everyone to be VERY watchful over your friends and guild members. Make sure you speak to them when they come online, watch out for people logging on at unusual hours. I would also recomend that you perhaps even change your passwords to be on the safe side.

Nothing more is known at the moment other than its very unlikely that these people have given out their accounts to gold spammers....

Just a heads up, would appreciate hearing about any other strange goings on so we can try and catch anything early.

One more piece of advice for those who want to be cautious, send all your gold to a low level character or something, they'll most likely go for the highest level character on an account.


*Update* Problem now seems to affect only US servers. Russian servers were recently all forced to change theirs for an unknown reason.

2

Tuesday, March 20th 2012, 5:09pm

Which server? I have yet to see or hear of any of these issues on Osha.
Thanks for the head's up tho...

ps. As a regular practice, I change my password at the very least monthly, but will be doing it again today.

3

Tuesday, March 20th 2012, 5:15pm

Was all on Artemis. I just want to add that this could just be three random incidents that all happend at the same time, but its suspicious enough for me to want to post a thread.

regentego

Professional

Posts: 1,686

Location: AZ

Occupation: Manager

  • Send private message

4

Tuesday, March 20th 2012, 5:19pm

Yeah it was GM aquila's account, wasn't a hoax either. Hackers will be hackers, if they want in they will find a way.

ipeacefrog

Intermediate

Posts: 371

Occupation: Business Owner

  • Send private message

5

Tuesday, March 20th 2012, 5:27pm

.

BTW, there was a time and may still be that someone at CURSE would attempt to login to ROM accounts with usernames and passwords that people used to setup CURSE accounts with.

.
Elldarian, Leadership Council Dovahkiin on Palenque Lvl 12 Guild

"Gentlemen, you can't fight in here. This is the War Room!"

Drakkarsdad

Professional

Posts: 599

Location: In a house

Occupation: CSR

  • Send private message

6

Tuesday, March 20th 2012, 6:12pm

Interesting.. I had a similar thread up about this 2 days ago and Dionaea removed it.. I wonder how long before this one disappears...

Dionaea

<span style="color:#3399FF !important;"><b>Community Manager</b></span>

  • "Dionaea" has been banned

Posts: 937

Location: US, Oklahoma

  • Send private message

7

Tuesday, March 20th 2012, 7:24pm

Hm wasn't me.

For the described situation, this was a single case and is fully under control now.

That is a good example to stress that playing online you should check your computer for viruses and keyloggers on regular basis, this goes not only for regular players but us as well. Also you should change your passwords regularly and not log into other sites with your game login credentials, including forums and sites of the kind we do not want to talk about (goldseller sites, botter forums, private servers, remember: all these are forbidden activities in our game.)

Do not buy gold from goldsellers and accept gold gifts in mail from players you do not know and did not talk about with them. If you suspect a hacking attempt on your account, instantly change all passwords and contact our support.

8

Tuesday, March 20th 2012, 7:37pm

well it just happened to me so not exactly a single case... I'm pretty careful with my account info, use strong PW and never give it out. also keep my virus/spyware software up to date and do regular scans.

sent in a ticket though with approximate time i was hacked and stuff so we will see what happens. Hopefully they can return my stuff and catch whoever hacked me.
Berec [PPK]
Class: R/S/K 72/72/72
Server: Artemis

Drakkarsdad

Professional

Posts: 599

Location: In a house

Occupation: CSR

  • Send private message

9

Tuesday, March 20th 2012, 8:10pm

Quoted from "Dionaea;518742"

Hm wasn't me.



Hmm...Dellenn said it was. My apologies..Now, can I have some egg rice dumplings? (Pweezze)

Julesjinx

Beginner

Posts: 4

Location: The Netherlands

  • Send private message

10

Tuesday, March 20th 2012, 8:11pm

@ Berec, i saw that today. Even reported you as a spammer....... was confused though! You never seemed the type :)
"glad" it wasn't really you. Hope everything gets worked out
Happiness isn't getting what you want, it's wanting what you got ;)

11

Tuesday, March 20th 2012, 8:32pm

Dionea Iv been trying to contact support for months. Im missing 5k diamonds and nothing is done. I even sent you pms..

MachineOfHate

Death Metal Holocaust

Posts: 63

Location: TEN-UH-SEE

Occupation: Network Administrator

  • Send private message

12

Tuesday, March 20th 2012, 8:47pm

Wouldn't happen if you had JUST played Warriors. Warriors are all broke and nobody wants to play them so they're hack free. srsly bro
Started June 24, 2009 on Artemis.
Iamhell - 70/55 - W/wd + Panix - 70/70/70 W/r/s
The Superbad DPS Engine

13

Tuesday, March 20th 2012, 9:22pm

Quoted from "Julesjinx;518762"

@ Berec, i saw that today. Even reported you as a spammer....... was confused though! You never seemed the type :)
"glad" it wasn't really you. Hope everything gets worked out



yea annoying... sorry to anyone that had to get all the spam, they used up all my world chats ><
Berec [PPK]
Class: R/S/K 72/72/72
Server: Artemis

ruisen2000

not a wallet warrior

Posts: 4,052

Location: here

Mood: Blink

  • Send private message

14

Tuesday, March 20th 2012, 10:37pm

So I guess a good defense is not to stockpile on megas, or at least hide them somewhere. Spammers can't spam world chat if you don't have megas for them to use :)
Noblewarrior
lv 98/98/89/60 M/W/P/K
Kikosi 98/50/60 Wl/Ch/M
the fail clothie tank~

Inactive

Kefkai

Professional

Posts: 907

Location: Pulling my own puppet strings

Occupation: Jerk

  • Send private message

15

Wednesday, March 21st 2012, 7:25am

Now we have a third case of this happening tonight, so the odds of it being coincidence are getting slimmer.. it's the same site that seems to be advertising.

16

Wednesday, March 21st 2012, 7:35am

Quoted from "Kefkai;518881"

Now we have a third case of this happening tonight, so the odds of it being coincidence are getting slimmer.. it's the same site that seems to be advertising.

Another case on Artemis. Spams started about 15 minutes ago. So the account was probably hacked and cleaned out of gold and gear slightly earlier than that.

17

Wednesday, March 21st 2012, 7:58am

As these guys already stated, we have another one on Artemis right now. Any other servers have anything to report? Remember to keep names/guilds/etc off the forum please. Just trying to get a feeling of how many people have been hit so far.

GarySandstorm

Professional

Posts: 656

Location: Cape Town: South Africa

Occupation: Engineering Technician

  • Send private message

18

Wednesday, March 21st 2012, 9:32am

Another longtime player just bit the dust on Artemis.

19

Wednesday, March 21st 2012, 9:33am

And another one just replaced him within minutes :(

GarySandstorm

Professional

Posts: 656

Location: Cape Town: South Africa

Occupation: Engineering Technician

  • Send private message

20

Wednesday, March 21st 2012, 10:02am

I see him standing here spamming world, and he still has all his gear on. Wish we had support that could lock an account. EU office hours do run outside US office hours.