Guild Wars 2

Hello everyone,

so i was hacked some days ago and got my password resettet by the support yesterday.
Now I’m wondering why I didn’t get an Email that somebody tried to log in from a different IP in the first place or why I didn’t get an Email about the Password change, the hacker did.

At first i thought he changed the Mail which is registered to my account but when trying to change it myself i couldn’t find any option for that. Only some support article saying that you have to contact the support to change the mail.
So eitherway the hacker contacted the support to change the registered mail or he acctually hacked into the database and changed the mail there (which would be pretty scary) or there arent any Emails send at all anymore if someone tries to login from a different IP or changes the password.

I checked my registered mail for possible mail forwardings, i also changed my password there and scanned for keyloggers or malware. But im still very unsure if my account is safe again now, especially because i dont know if the Hacker is informed about the password change allready because he has somehow registered his mail to my account.

If your email was previously authenticated then the hacker would have had to contact support posing as the account holder to have the email tied to the account changed.

If he had/has access to your current email account then it is possible.

Gaile Gray.6028:

Be aware that they will require a lot of proof of ownership, but once you provide that, they’ll be happy to help.

All they needed from me was the CD key, Trans ID & 4 digits of my card which not only changed my email but also un-linked my authenticator in the process.. which is why I asked support to remove/hide my vital information given in previous tickets, but apparently they can’t.

Okay but how do i know if the registered mail was changed?
Is it allways the mail adress you have to use to login?

Yes it is the one used to log in, if you also have the NCSoft master account setup you will see your GW is changed from there.

Possibly the hacker stole your browsers cookie. You need to be careful to the sites you visit especially gold seller/ guild wars 2 fansites. I recommend if you are using Firefox browser, download and install NoScript addon for additional security against cookie stealers.