How Do People Get Hacked?

basilmarket.com forums : General Maple Story | 14 posts archived

thread starter Optimistic Aug 25 2010 + PM | QUOTE | PERMALINK | REPORT

Seriously... In the 4 years I have been playing, not one time have I ever been hacked, scammed, "hell-banned", banned "falsely" or anything even remotely close to that. What do you people do to have this happen to you? Every time I hear about some "apocalypse" on basil, I log on and it hasn't happened to me. I just don't understand.

My Characters: Icthlarin - 28 DemethosGMS Magician

myrdrex 08/25/10 + PM | QUOTE | PERMALINK | REPORT

[quote] linnypig : I used to think that too.... until i got hacked recently T_T [/quote] Sadly it was likely one of the reasons I mentioned, not a Nexon flaw- account sharing, social engineering, or a malware app likely gotten from a MS fansite/hacksite.

My Characters: ulgarbosnot - 50 Scania Aran in Memory

Tearsofglass 08/25/10 + PM | QUOTE | PERMALINK | REPORT

I can understand if they gave there info away to someone or on some website or something, or would be stupid enough to fall for a scam.. but honestly i've been playing for about 4 years also and last December i got hacked and hadnt done any of the things i stated above..its a very peculiar thing i guess i'll never understand either ):

My Characters: Haku32 - 90 Scania Hermit

myrdrex 08/25/10 + PM | QUOTE | PERMALINK | REPORT

[quote] Tearsofglass : I can understand if they gave there info away to someone or on some website or something, or would be stupid enough to fall for a scam.. but honestly i've been playing for about 4 years also and last December i got hacked and hadnt done any of the things i stated above..its a very peculiar thing i guess i'll never understand either ): [/quote] Sadly it does sound like there was a 1-time SQL injection database breech. It's since been corrected and won't happen again. But it's possible you were the unwitting victim of this,through no fault of your own.

My Characters: ulgarbosnot - 50 Scania Aran in Memory

Tearsofglass 08/25/10 + PM | QUOTE | PERMALINK | REPORT

[quote] myrdrex : Sadly it does sound like there was a 1-time SQL injection database breech. It's since been corrected and won't happen again. But it's possible you were the unwitting victim of this,through no fault of your own. [/quote] Seriously and now I only log on ms because i'm in denial and SQL stands for what? haha

My Characters: Haku32 - 90 Scania Hermit

linnypig 08/25/10 + PM | QUOTE | PERMALINK | REPORT

[quote] myrdrex : Sadly it was likely one of the reasons I mentioned, not a Nexon flaw- account sharing, social engineering, or a malware app likely gotten from a MS fansite/hacksite. [/quote] Account sharing - no social engineering - my password is complicated so i don't think they can guess it malware app - uhh no i didn't go on a stupid website that had an app i'm pretty sure..

My Characters: MystMist - 84 Bera F/P Mage

adapolski + PM | QUOTE | PERMALINK | REPORT

SQL is a programming term that deals with all the account names, passwords, and pins, level of account, fame, luk, str, ect. Another easy way of getting hacked is joining a ps with the same username and pass as game... @ above option 3 can happen when you have no idea it is happening, doesnt even have to be intentional. You could be holding a keylogger for years and not have anything happen. Albeit unlikely, the hacker decides what he wants to do with the keys you pressed.

My Characters: AppleSoft - 126 Mardia Blade Lord

Ecktopus + PM | QUOTE | PERMALINK | REPORT

No one got "hacked". They all did something to cause it, whether it being sharing an account, possible brute forcing due to you releasing your ID, getting phished or a trojan. No "pro" hacker gained database access. Nexon actually has almost obsolete database security, and even if someone hacked into it they probably wouldn't be able to make much of it. People who say that this is false and they were actually hacked need to look and backtrace a little further. The database isn't as easily layed out as for pizza slices, plus most all the SQL injection vulnerability are fixed (they couldn't get too much out of SQL injection either, the only ways left are through the rankings).

myrdrex 08/25/10 + PM | QUOTE | PERMALINK | REPORT

[quote] Tearsofglass : Seriously and now I only log on ms because i'm in denial and SQL stands for what? haha [/quote] SQL is the language used to get information into and out of databases. A SQL injection attack basically goes like this: A site asks for your username. Behind the scenes it does something like: "select username from user where username = " + userName " and password = " + encrypted password; It build a string that adds your username that you typed in to the rest of the SQL statement. However, a person at the website could enter their username as " ''; union all Select * from user;"; This would effectively add on a giant select statement to what was otherwise a harmless statement. It would query the results of the entire database, possibly showing the result of the entire user table to the website user, usernames, passwords, and all.

My Characters: ulgarbosnot - 50 Scania Aran in Memory

dopl3 08/25/10 + PM | QUOTE | PERMALINK | REPORT

[quote] linnypig : Account sharing - no social engineering - my password is complicated so i don't think they can guess it malware app - uhh no i didn't go on a stupid website that had an app i'm pretty sure.. [/quote] lol so you got hacked too? i got my lv 141 archmage hacked on the server check and i dont share info and i dont visit those "fake" websites, but. i still got hacked :l , at least not in aran (lv162 btw) lost 70 PoT, 3 chaos 3 90& potentials 5 80% enchancement and 1 adv diamond, w/o counting valuable gear. maplestory sucks if this happened because a there was a breach in the database. this is the 2nd time it happens.

My Characters: m4sterb4itor - 162 Windia Aran in Hope

adapolski + PM | QUOTE | PERMALINK | REPORT

[quote] Ecktopus : No one got "hacked". They all did something to cause it, whether it being sharing an account, possible brute forcing due to you releasing your ID, getting phished or a trojan. No "pro" hacker gained database access. Nexon actually has almost obsolete database security, and even if someone hacked into it they probably wouldn't be able to make much of it. People who say that this is false and they were actually hacked need to look and backtrace a little further. [/quote] What he said is completely true, if it was due to the fault of nexon they would have said SOMETHING. I can easily release a list of 20 thousand randomly generated names, passwords and pics and some people would beleive its real. If there was breach in there servers, the FBI would have gotten involved and there would have been articles written on the topic. That is a federal crime and can be punished. Remember the guy in mabinogi that went on a gm acount and gave himself millions of nx, hes in juvenile hall now and paying hefty fines. Search on google and you will find the article. @ above, there was no first time, as there was no second time. You, if your truly did not do any of the ways to get hacked, just subject to a lucky guess hacker, or your account info is like an account name and password is 123456, or password. ( expect to hear from you saying your password and username is hard to guess)...

My Characters: AppleSoft - 126 Mardia Blade Lord

dopl3 08/25/10 + PM | QUOTE | PERMALINK | REPORT

[quote] adapolski : What he said is completely true, if it was due to the fault of nexon they would have said SOMETHING. I can easily release a list of 20 thousand randomly generated names, passwords and pics and some people would beleive its real. If there was breach in there servers, the FBI would have gotten involved and there would have been articles written on the topic. That is a federal crime and can be punished. Remember the guy in mabinogi that went on a gm acount and gave himself millions of nx, hes in juvenile hall now and paying hefty fines. Search on google and you will find the article. @ above, there was no first time, as there was no second time. You, if your truly did not do any of the ways to get hacked, just subject to a lucky guess hacker, or your account info is like an account name and password is 123456, or password. ( expect to hear from you saying your password and username is hard to guess)... [/quote] lol no, ive been playing for 4 years and i can assure you my password is not 123456 or something like that, the weird thing is that MANY people who i know also logged and saw that they had no items nor mesos, and many strangers too, just wait a bit at the free market and see that 2 of 4 ppl that logs in are nude and when you ask em if they got hacked thay say "yes".

My Characters: m4sterb4itor - 162 Windia Aran in Hope

myrdrex 08/25/10 + PM | QUOTE | PERMALINK | REPORT

[quote] linnypig : Account sharing - no social engineering - my password is complicated so i don't think they can guess it malware app - uhh no i didn't go on a stupid website that had an app i'm pretty sure.. [/quote] I'll accept that you never once, ever, shared your account info. (Don't forget, if you let even the most trusted friend log in, you're now trusting that their computer has no virus on it!). Social Engineering isn't just easy-to-guess passwords. It can be you simply sharing your real name to someone. If I know you're Bruce Campbell from LA, I can find you on facebook/linked in/myspace/etc... I can see where you live, pictures of you with your car, etc... I can then guess your yahoo password reminder questions "What city were you born in? What is your uncles name? What was the make of your first car? Etc....". Once I can log into your email, well, resetting your nexon password and PIC gets me that info. Malware- this would be hard to detect. You never once visited a hack site? You never tried using a mesos generator, etc...? You have all virus defs and windows updates and browser security updates perfectly up to date? You block ads served up through Basil, Sleepy, etc...?

My Characters: ulgarbosnot - 50 Scania Aran in Memory

parsapwner1 08/25/10 + PM | QUOTE | PERMALINK | REPORT

This is why i have eset and antimalware =D Also, i never share my acc info because no one i know IRL plays maple XD

My Characters: tony2314 - 51 Bera Fighter