Concern about being HACKED

Concern about being HACKED

in Account & Technical Support

Posted by: smitz.9042

smitz.9042

Ok so I just checked my email because for some weird reason i got a log-in attempt yesterday, which i just checked today. After checking, i also found out that i got another log-in attempt last tuesday which i missed. To make matters worse, i searched my email for all other log-in attempt emails, and found out that this has been going on for the past two months.

I even got a log-in email attempt from Massachusetts, and i live in FLORIDA. _

SO i quickly logged in to see which computers have been authenticated and found some which are quite fishy. I removed all of the authenticated computers to start out fresh, which leads to another problem (see image). A current and very recent log in from Texas. Again, i live in FLORIDA

Halp!!

Attachments:

Concern about being HACKED

in Account & Technical Support

Posted by: Astral Projections.7320

Astral Projections.7320

The Texas one is probably just the site where the servers are located. That shows up sometimes.

However, have you done a full security sweep of your computer? Checked for a keylogger? If your computer is clean then change the password on your email. Then change the password to your game. It wouldn’t hurt after that to get a new email and switch the games email to that. Read this thread for more help. https://forum-en.gw2archive.eu/forum/support/account/Account-Security-What-you-need-to-know

(edited by Astral Projections.7320)

Concern about being HACKED

in Account & Technical Support

Posted by: Behellagh.1468

Behellagh.1468

If you do a whois on the Tx IP it shows it belongs to NCSOFT. The other three are likely yours.

http://whois.arin.net/rest/net/NET-64-25-32-0-1/pft

We are heroes. This is what we do!

RIP City of Heroes

(edited by Behellagh.1468)

Concern about being HACKED

in Account & Technical Support

Posted by: smitz.9042

smitz.9042

switching email sounds likes a good idea. Ive chaged my password already, so now changing emails would be good

Concern about being HACKED

in Account & Technical Support

Posted by: Astral Projections.7320

Astral Projections.7320

Make sure your computer is clean before you make any changes. Making changes on a hacked computer simply hands that information to the hacker and you are back where you started.

Concern about being HACKED

in Account & Technical Support

Posted by: smitz.9042

smitz.9042

Make sure your computer is clean before you make any changes. Making changes on a hacked computer simply hands that information to the hacker and you are back where you started.

im pretty confident that my computer is clean, but how do you even change the email? accnt’s linked btw

Concern about being HACKED

in Account & Technical Support

Posted by: Astral Projections.7320

Astral Projections.7320

You have to contact support at https://help.guildwars2.com/anonymous_requests/new to change your email for Guild Wars 2

Concern about being HACKED

in Account & Technical Support

Posted by: smitz.9042

smitz.9042

You have to contact support at https://help.guildwars2.com/anonymous_requests/new to change your email for Guild Wars 2

Thankks! ill be sure to do this

Concern about being HACKED

in Account & Technical Support

Posted by: Pogromca.4512

Pogromca.4512

Same problem here. Someone logged in from texas 17 minutes ago, I got him disconnected. Is it NCSoft for real? If yes – why so?

It’s quite scary, I just set up my mobile authenticator :O

Concern about being HACKED

in Account & Technical Support

Posted by: Astral Projections.7320

Astral Projections.7320

Same problem here. Someone logged in from texas 17 minutes ago, I got him disconnected. Is it NCSoft for real? If yes – why so?

It’s quite scary, I just set up my mobile authenticator :O

You can check the IP to see where it’s coming from. It’s its from ncsoft or the Austin area it’s most likely the IP glitch. The login goes through that site and it can show up on your IP.

Concern about being HACKED

in Account & Technical Support

Posted by: Caro.2730

Caro.2730

I have the same Texas “Guy” with the same IP on my account as well and despite the mobile authentication! I got scared too… And was wondering how is that possible. xD But now when I think of it, this Texas “Guy” didn’t change my account’s password or didn’t disconnect me from the game, so I believe that it’s truly from Anet and not hackers. xD

Concern about being HACKED

in Account & Technical Support

Posted by: Gaile Gray

Gaile Gray

ArenaNet Communications Manager

Next

My own account shows “log-ins” from Texas on the exact IP address that Smitz sees:
64.25.32.69

On my account, it was that exact IP address last week. It’s that same IP address today.

That is us.

I cannot say things like “Meh, just ignore Texas on your list.” But as posted by Caro, no authentication request came through, no changes were made to the account or password, and yet I was “logged in.” We know that forum access can present our IP. So that “access” might be assumed to be benign.

Again, no blanket acceptance, but if your account management page (security tab) shows that exact IP, I personally would not be alarmed.

If you do a whois on the Tx IP it shows it belongs to NCSOFT. The other three are likely yours.

http://whois.arin.net/rest/net/NET-64-25-32-0-1/pft

Helpful info, thanks!

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet

(edited by Gaile Gray.6029)

Concern about being HACKED

in Account & Technical Support

Posted by: Behellagh.1468

Behellagh.1468

There is something wrong Gaile if this keeps getting fixed and then breaks again and ends up once again freaking out the customer base who bother checking the security page. I think this is the third or fourth time it started to pop up regularly with fixes in between.

We are heroes. This is what we do!

RIP City of Heroes

Concern about being HACKED

in Account & Technical Support

Posted by: Gaile Gray

Previous

Gaile Gray

ArenaNet Communications Manager

Please see my post above for an explanation of the situation and be assured I am pursuing this matter.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet