Guild Wars 2

Actually, I was posting that picture of my ranger only to say how fabulous it looks. Suppose it’s a matter of taste.

Fairly, I think the price is perfectly reasonable. It is supposed to be an end-game unique looking armour, not everyone is supposed to be running around in it. If you like it, save gold and grind for it.

I see no reason to complain – the tier 3 cultural set is equivelant to a unique looking weapon which you’d spend a few hundred gold for.

Have had the set for a while now… Best one around

I’d like to verify if possible that the mobile authenticator still works even if the e-mail of the account has been changed.

Since of a few hackings on our server a couple days ago, we can’t be sure whether the mobile authenticator still protects the account even if the e-mail was changed by the hacker.

Or if the e-mail is changed then the mobile authenticator no longer applies?
Please answer this question as many others have been asking about it.

Neandramathal.9536:

Shame I can’t get mobile auth due to my phone type, but some of the players hacked are using mobile authenticator anyway. Once they change your email they can login and disable it I believe?

So the root of the problem is how are they changing the email to begin with.

Actually they can’t disable the link to the mobile authenticator unless they have access to the phone itself.

Toothy.8640:

The most basic thing to establish is this – are they hackers using a support ticket to change the email?

If they are, and they are providing arenanet with the cdkey WITHOUT the victim’s email being compromised, then something is massively wrong.
If they are stealing an account which is protected by mobile authentication without the victim having their phone stolen, something is also massively wrong.
Please arenanet, look into this asap and tell us. Just tell us so that people are not feeling massively insecure and worried.

If they are changing the email without making a support ticket, and the account is verified, something is also massively wrong.
It should be simple to get an answer from customer support as to WHY they changed email and what information was given to them.

I’d like to mention that however I did get my e-mail changed and couldn’t access it, my ingame account hasn’t been touched – perhaps because I did have the mobile authentication.

That’s why I’d like to suggest to anyone reading this right now, put on a phone authenticator if you can.. Whether or not that’s the reason my account was left untouched – can’t be too sure…

Hyung.6140:

Nymeria.5468:

I personally didn’t have anything stolen, I’m hoping it is because I have the mobile authentication activated.

That’s interesting – so they were able to change your email/password, thus preventing you from logging in, but not to log in themselves? Otherwise I can’t imagine why they wouldn’t have stolen from you.

That seems like a bug in the mobile authentication – if you have it enabled you shouldn’t be able to change the email associated or password without mobile authentication.

Though as pointed out above it seems they’re able to change the email without even a confirmation to the original email, which also seems like a loophole.

Yes, I thought about that exactly. And yes, I can’t think of any other explanation of why my account was left untouched. I’d really like to think it is because of the authentication, meaning I can stay safe for the meantime.

Maetel.2130:

Yesterday I went afk to eat for a while leaving main char logged, then I came back and started playing again.
After almost 2 hours since I went afk I’ve been sent to char screen, I relogged and got kicked again after 10s.
After that I started being worried because random dc happen but not like that, so I relogged and also logged to my email to check if something had happened.
I found out your email (in English) saying “Someone, hopefully you!, etc.” and quickly tried to access to Control Panel here, but it said info were wrong…
While kitten hackers were kicking me every 10s I tried to reset password, but of course it didn’t work.
After about 10 tries the ******* permanently kicked me while I received the message that someone from another location had logged on.
Made a support account or whatever it was and sent 2 tickets, but wasn’t very lucky cause GM asked more info only when damage was done.
After 1 hour and 2 emails in French (I guess from Anet, but I haven’t them anymore), my account has been restored.
After that I went to ‘My Account’ -> ‘Edit Profile’ and changed both email and password.
I received another email from Anet saying the mail was changed and in the new one a mail to confirm the change.
My chars are still there but everything has been stolen…

Other things: I don’t have a mobile authenticator cause I haven’t a smartphone, but I’m shocked about the fact that the confirmation mail is sent to the NEW one. Are we joking???
You haven’t to prove you’re the owner of that mail because you have only to know the password of the new (the hacker’s) mail.
And…you said email can be changed only through ticket…how is possible that after have had my account back I managed to change it normally from here?
And…if instead they sent you a ticket knowing my email and game password, you should know I wasn’t because you needed the serial code which I used only before BWE1 and it’s in my physical box.

So…being able to change email without ticket/confirmation is a fact ( I did that yesterday, although it’s not possible anymore), and I wanna guess they didn’t send a ticket.

How can this work?

I don’t understand this myself. How can they gain access to another e-mail if I verified mine? Is the confirmation sent to the new e-mail? What is the logic in this?

I also had a few e-mails sent to me in french from the support – kind of odd since I’ve never accessed the french version of the support… Guessing it is from the hacker themselves..?

I personally didn’t have anything stolen, I’m hoping it is because I have the mobile authentication activated. But as I stated before, it simply feels unsafe, even if you take all the extra precautions.

Hello, I’ve been hacked yesterday as Irontodge mentioned, only just now gained access to my account back. Apparently nothing was stolen or deleted, but I’m still not feeling very lucky as I feel very insecure.

I changed my e-mail, my password, put a mobile authenticator, just 2 days ago. Yet my account was still taken away? How is this even possible?

Something very fishy is happening here, targeting “wealthy” players in our server. This isn’t a coincidence, and it seems more and more of a security breach on ArenaNet’s side. Please do take notice of this and do something before other people get hurt.

Thanks