Guild Wars 2

Today I was serving around the internet for GW2 website. I found a link to this site (http://www.gw2hq.com/home.php) on GW2 official Wiki (http://wiki.guildwars2.com/wiki/List_of_fansites), so I decided to take a look.

It seemed like a harmless community site at a glance. I signed up. But later on they asked me to log on to Facebook (by typing my FB password and acc on their website) to find my friends who also has an account on this website. I thought it’s a bit fishy, but I input my info anyway despite my guts feeling (I guess that’s kinda stupid).

The moment I did, my facebook page logged out automatically, and FB informed me that someone had made an attempt to sign in to my FB account from somewhere I’ve never signed in before. I changed my FB password. (I guess it’s a good thing that I have a habit of using a very different password for everything, so I’m not worried much.)

I’m not sure what’s the purpose of trying to hack my FB acc. It could be a site created to steal FB password and hope that people would use the same set of password in GW2 games. I want to post my story here to warn people of this case and wish ArenaNet to take a look into this. And hope no one would make the same mistake as me again. (lol)

ANet isn’t going to look into a site that attacks Facebook.. I have the idea however that maybe this was an “inert attack” and instead of trying to steal your FB account, it was trying to scan over all your account data to mine it, probably put some links up on your wall and share a few links back to its site, but that’s also very much a bad thing, and that doesn’t absolve the site.

The wiki is a wiki.. That doesn’t mean the link was there officially, you’d have to check the log of the fansites page.

Well… Like I said, I’m not sure of the purpose of this website. o.o The main reason I’m posting here is that I’m just concerned of the other players who might end up putting their sensitive information on that website, that could possibly lead to their GW2 acc being hacked. GW2 acc are getting hacked everyday and many. I’m not attacking the Wiki or whatsoever. I’m just posting here as a warning that this maybe where the hackers getting your information from. I just think it could be useful to everyone.

Wow thank you for posting the warning!

I think that with the recent waves of GW2 accounts being hacked, this could be one way which crackers are trying to acquire GW2 emails & passwords.

I think that even if it is an inert attack, crackers having access to your potentially shared passwords is a security breech, and they could, at any time, choose to log-in to your GW2 accounts and hijack it.

Anyway, nice one REM!

Please edit the web address from this thread. You are advertising them and could end up with a ban yourself.

could it be that fb flagged the ip that the website was attached being that the request came from that websites ip address where you had just put in the info to log into fb from and it was a legitimate loggin by you from there.