Guild Wars 2

so i got recently hacked and got my account back(thanks to the quick responses of the support team)
now my question is:how can i improve my security to prevent this from happening again in the future?as the email authenticator wont be enough anymore

I am going to forward you here: https://en.support.guildwars2.com/app/answers/detail/a_id/9238
That is another layer of security you can add to your account.

https://www.guildwars2.com/en/news/mike-obrien-on-account-security/

ok thx i’ll do that

I got my copy back in november. Installed it and played till level 5.
Afterwards never touched it again until now.
Apparently someone else was playing on my account with a new character which already reached level 80.

I did get the email about someone trying to login in from a different location. I thought it was a fake gw2 email. So I ignored it. I really had no clue.

So yeah, pretty angry about it as he also played a few minutes with my character. Changed my Email password and my GW2 password. So it should be fine now. I hope.

Sidar.1468:

I got my copy back in november. Installed it and played till level 5.
Afterwards never touched it again until now.
Apparently someone else was playing on my account with a new character which already reached level 80.

I did get the email about someone trying to login in from a different location. I thought it was a fake gw2 email. So I ignored it. I really had no clue.

So yeah, pretty angry about it as he also played a few minutes with my character. Changed my Email password and my GW2 password. So it should be fine now. I hope.

No it isn’t. If someone hacked your account you should do two things always:
a: file a support ticket. This way Anet can gather information bout hackers.
b: review your computer security. A hackers is called an hacker cause they infiltrated your computer. So scan for unwanted software, use an alternate free scanner if nothing is found, and make sure you have the latest updates installed.

mercury ranique.2170:

Sidar.1468:

I got my copy back in november. Installed it and played till level 5.
Afterwards never touched it again until now.
Apparently someone else was playing on my account with a new character which already reached level 80.

I did get the email about someone trying to login in from a different location. I thought it was a fake gw2 email. So I ignored it. I really had no clue.

So yeah, pretty angry about it as he also played a few minutes with my character. Changed my Email password and my GW2 password. So it should be fine now. I hope.

No it isn’t. If someone hacked your account you should do two things always:
a: file a support ticket. This way Anet can gather information bout hackers.
b: review your computer security. A hackers is called an hacker cause they infiltrated your computer. So scan for unwanted software, use an alternate free scanner if nothing is found, and make sure you have the latest updates installed.

a:
probably
b:
New system format and new network setup. So not a problem.
I find it highly unlikely they did it trough my computer. The login happened in February. By then I already stopped playing for 2 months. Didn’t check the remember login info on the client.
It’s also particularly strange for someone to “hack” my computer knowing somehow that I have a Guildwars 2 account( after 2 months of purchase, not playing it). Eventhough I never downloaded anything Guildwars2 related which wasn’t official.

I’m just wondering if they can obtain account info by other means.

Sidar.1468:

I’m just wondering if they can obtain account info by other means.

Yes:
a: they also hacked your emailclient (webbased).
b: they hacked a community hosted website with your personal info (e.g. a guild-forum)
c: ’ Brute forcing’ (wich is actually educated guessing).
Read more bout hacker’s methods here: https://www.guildwars2.com/en/news/mike-obrien-on-account-security/

You should not ‘probably’ contact support, you should definitely contact support. Support might find evidence, later, that your account was involved in botting or RMT activities during that period and terminate the account. You would want it on file that YOU did not have control of the account at that time. Just a friendly tip. =)

Ensure you use a quality anti-virus program and anti-malware program. Regularly update them and perform scans to ensure you have not picked up anything. There are web sites out there that have malicious code embeded where you can become infected just by viewing the site. With quality anti-virus and anti-malware, you should at least be alerted if they pick up something. If they do, get the computer inspected and cleaned before attempting to log into anything secure (like your game accounts or online banking, for example).

Never use the same email address and password for everything you do on the internet. Set up a “garbage” email account that you can use for forums or other sites, but have a seperate “good” email account that you use for secure programs and sites. When sending email out, use the “garbage” account or another account, don’t use the “good” one unless you fully trust who you are sending to. This way, if the receiver does something like my dad where he forwards emails without cleaning the senders address, at least your “good” address does not get forwarded around to people you don’t know.

ALWAYS use a different password for everything on the internet. Re-using the same email address and password for several forums as well as you games could potentially be where your details were farmed, as the security on some forums isn’t great and there have been contact lists stolen. If you need to keep track of the passwords you are using, set up a spreadsheet, or for something more secure use KeePass. It’s a free program that you can install where you can not only record the usernames and passwords for multiple sites/accounts, it even has a random password generator if you need to create a new one.