BNET Account Scammed

[Crazyhorse]

a- email exploit isnt hacking
b- email exploit isnt cracking
c- its was already fixed. Like I noted above.
d- that was already mentioned. rementioning it doesnt add any veracity.

A - The end result of a password being in the hands of someone I don't want to have it and it not being my fault is the same so I don't care what you call it. If you would like call it Happy Chicken with Jelly.
B - See A.
C - Yes it was fixed, that doesn't change the fact that people have passwords to accounts shared when they did nothing wrong which was my point.
D - I guess it is very obvious at this point I didn't read the entire thread.

The point I was trying to make was that Bnet isn't perfect and people that say there is no way you could have been "Happy Chicken with Jelly"ed unless you did something wrong are not always right. If blizzard was perfect they would patch all the dupe methods. I know there are people out there that can dupe, otherwise the runes wouldn't be as cheep as they are. Bnet won't do anything about it aslong as the dupe stays private and there isn't a few thousand people duping. Maybe it would be that same way with a account hack?

 

[xNamastex]

Somehow, I very much doubt that...

So you're saying it easy and common for people to hack eachother's password without any clue of the password and the password itself being a complex alphanumeric combination? Meh.

If you're gonna says things like that, I for one would like to seem some proof. (legit proof, not something you wrote or made up yourself)

Seriously though, there is proof in my mind that it happens, and it means we all need to be careful and use the highest quality passwords (ie. ASCII) and never use the same password for multiple services. Maybe BNET has good security in place to prevent multiple brute force attempts at password cracking, however, related services such as this forum or RPG Traders may not (I am in no way implicating - just pointing out a possibility).

Also need to remember that many people who could potentially get access to our DiabloII.net forum password or our RPG Traders password, could actually play the game as well - so a bit of conflict of interest could be in place that you need to protect yourself from.

For my situation, I truely believe that if I followed my above suggestions I would have been spared my "Greif" (or at least saved my "Greif").

Nuff said about this now for me - I believe I know what happened and I know how to prevent it from happening again. Becuase of that, at least I am happy that I can continue to play D2.

 

[Xenon[XoA]]

A - The end result of a password being in the hands of someone I don't want to have it and it not being my fault is the same so I don't care what you call it. If you would like call it Happy Chicken with Jelly.

The whole point of having a language, is to ensure accurate communication.

It's offensive and inaccurate, to call the script kiddies + dupers + ppl who abuse exploits, hackers.
"Happy chicken with jelly" is both inaccurate, and nonsensical. No one will have 1/10^600th of a clue as to wtf you're referring to, thus defeating the point of using a common language in the first place. You might's well start posting in swahili.

I know what point you were trying to make. I am capable of reading.
I was pointing out the incorrect / outdated facets of that statement.

 

[Crazyhorse]

The whole point of having a language, is to ensure accurate communication.

It's offensive and inaccurate, to call the script kiddies + dupers + ppl who abuse exploits, hackers.
"Happy chicken with jelly" is both inaccurate, and nonsensical. No one will have 1/10^600th of a clue as to wtf you're referring to, thus defeating the point of using a common language in the first place. You might's well start posting in swahili.

I know what point you were trying to make. I am capable of reading.
I was pointing out the incorrect / outdated facets of that statement.

The "Happy chicken with jelly" was there to let you know as someone not in the IT biz I could care less how you want to define different subclasses of hacks. It was my way of saying I don't care in the least how you want to break it down it means the same thing to me.

If you are in the IT biz I'm sure you know 500 or so different terms to describe what my mind blanket considers hacking(hack/hacked). The use of comments like this to try to belittle people on a forum is pathetic. Maybe if we were on a website talking about how to hack or something of that nature what you are saying would make sense to your audience, but on a game forum I doubt it. I also doubt many people care about how you classify different groups of hacks. Let me give you the definition of hack from www.dictionary.com:

hack1 ( P ) Pronunciation Key (hk)
v. hacked, hack•ing, hacks
v. tr.
To cut or chop with repeated and irregular blows: hacked down the saplings.
To break up the surface of (soil).

Informal. To alter (a computer program): hacked her text editor to read HTML.
To gain access to (a computer file or network) illegally or without authorization: hacked the firm's personnel database.

That last part is exactly what I'm referring to when I say hack, but somehow you feel I have used the word incorrectly? Then you continue on to say I have a communication problem? I think you have a comprehension problem my friend.

This conversation has veered far off topic and this will be my final response to it.

 

[Dinnin Darkblade]

The fact that people feel it is impossible to be hacked/cracked with out doing something to deserve it just proves thier ignorence. It is possible if someone knows what they are doing and put forth enough effort into it. Also Key Loggers and what not can be downloaded onto your harddrive with out downloading anything or visiting unclean sites. Thats why they always say that cable connections that are online 24/7 are more supceptible.

IMHO What hit the OP was exactly that, a Key Logger. He said he was using Norton Anti-Virus. That was mistake number 1. Nortons in my experience tends to over look addware and spyware way to often. Switch to McAfee. The full package of Virus Scan/Fire wall/Privacy Protector will not only stop unwanted connections to your computer, but also log them/trace them/report them back to McAfee's hacker data base so they can report the action if deemed nessacary.

When I first hooked this ancient computer I'm on now to the cable connection in our house I had Nortons. After a few days and realizing that Comcast's offer for McAfee was still valid and not for companies only I downloaded it. I ran a scan immediately and guess what, 20+ Addware/Spyware programs running that Nortons never detected. I visit select sites. DiabloII.net, Yahoo.com, and AnarchyOnline.com. Thats it. Each site is professional and quite freqently used. The only downloads I made were bittorrent from the bit torrent site, and the anarchy online client. Yet I ended up with massive amounts of addware/spyware. One of wich could easily have been a key logger.

So make sure you know what your talking about. High Speed connections have thier benifits, but they also have thier pit falls and if you do not protect yourself properly from them you can fall victim to them very easily with out ever knowing it happened.

 

[Stompwampa]

None of the last 15 or so posts have yet to explain why the OP's items are missing...and thus, i'm still not convinced. Granted, the purpose of this isn't to convince me, or anyone really. In fact, I'm not even sure what the purpose of this thread is.

The OP says he lost a bunch of high end items, het he has done nothing that would put his accounts in jeapordy, such as using hacks or 3pp's.

He says his password is an unguessable alpha-numeric combincation that is only used on b.net, and two other places.

But yet, somehow, someone managed to get his password, get into his account and steal all of his godly items?

i'm not buying it.

The fact that people feel it is impossible to be hacked/cracked with out doing something to deserve it just proves thier ignorence. It is possible if someone knows what they are doing and put forth enough effort into it. Also Key Loggers and what not can be downloaded onto your harddrive with out downloading anything or visiting unclean sites. Thats why they always say that cable connections that are online 24/7 are more supceptible.

That is true...but the effort it would take somebody to find an open unrestricted port on this guys computer, and then install a keylogger onto his machine and then sift through all the keystrokese just to log on to b.net and steal a few items is HIGHLY unlikley.

IF somebody were to take the trouble to do so, they would obviously be smart enough to pull it off, which means they would be smart enough to attack one of the top ladder players instead, as Merick already pointed out.

Yes, having your account hacked into is possible, but it is just SOOO unlikley to happen unless the account owner did some batantly stupid things, in which case it would be his own damn fault.
But, as has been already mentioned, the OP claims to have done nothing to jeopordize his account....which is still why all of this seems too utterly ridiculous to be true. Because if it were true, there would be a hell of a lot more of these kind of threads being posted.

I couldn't care less who my "audience" is, nor how many ppl refuse to use accurate terminology. Just because multiple ppl generalize, doesn't mean that I should, or let it slide.

well said.

 

[Xenon[XoA]]

I'm sorry I don't set my life by whatever dictionary.com defines it as.

I am not your friend. Plz do not ~miscomprehend~ that.

Hacking refers to cracking, but for the general improvement of systems, programs, - creating shortcuts, or bypasses that IMPROVE. Cracking is hacking - with malicious intent. To say a bnet kiddie is a hacker - that is, have the equivalent skill of a real hacker - is downright insulting. Like comparing say, the child who screams 'n00000b' into his monitor all day, vs a guru like +mala or wizard like Svd... It's a completely different level.

And hey. As long as we're posting links

The use of comments like this to try to belittle people on a forum is pathetic. Maybe if we were on a website talking about how to hack or something of that nature what you are saying would make sense to your audience, but on a game forum I doubt it

Pathetic? Belittle? Hardly.
It's rather pathetic within itself that you'd attempt to elicit flames from me with that low-grade troll. Attempting a correction on inaccurate terms is belittling? Cha.. People are rather low on self-esteem these days, if they'd take something so simple to be belittling.

I couldn't care less who my "audience" is, nor how many ppl refuse to use accurate terminology. Just because multiple ppl generalize, doesn't mean that I should, or let it slide.

 

[wromaniaâ„¢]

So the conclusion? what he say in first reply can be true? i cant read all pages but i think they speak about other things now.

xNamastex your bnet pasword was same with this forum pasword btw? u can say now lol. And u sure your computer isnt used by more ppl? Prolly some1 saw you typing the pasword :shocked:. Could be also a paranormal thing, really, u saw before around paranormal things? im not joking.

buh again my post "hidden" by next reply, posted in same time (i mean next guy didnt saw my post)

 

[Dawnmaster]

I'm not saying I think these people try combinations of passwords as that would be a pain in the butt. There are what like 2 million or so combos if your password is only 4 chars. I'm saying there are other ways and if you are asking for proof I'm guessing you wern't around for season 1 of the ladder.

I've been around SP since 1.09 and joined bnet since 1.10, so I've seen the lights of the first ladder.
Never had any problems in all my years of playing (except for 2 cases: go to our website for voting for clan or something => drophack, and a trade on this forum with an accountname that was seemingly identical)

And I'm not very carefull, it's only an account with virtual items, I'm not gonna protect that like it's my firstborn :shocked: If something happenes to my account, I'll just start again from scratch, like I've done before, like we all did in the beginning.

The OP says he lost a bunch of high end items, het he has done nothing that would put his accounts in jeapordy, such as using hacks or 3pp's.

He says his password is an unguessable alpha-numeric combincation that is only used on b.net, and two other places.

But yet, somehow, someone managed to get his password, get into his account and steal all of his godly items?

i'm not buying it.

Nomatter what Xenon said sofar, I'm still leaning forward to this explenation.

 

[wromaniaâ„¢]

topic starter should advertise blizzard there could be guys inside (blizzard) who steal

 

[tasien]

To all forum members:

Please be on alert for some type of scam on BNET that has just occurred to me. I have been playing for the last 6 months or so almost daily. I logged into my account this evening and low and behold.... all of my excellent items are missing from all of my characters. My Greif, Fort, Hoz, Dracs, Torches, Annis, Skillers, Tals, Travs, etc... however, the rest of my, less valued, inventory is still there.

Most of these items were self found and not from trades, so its not a dupe related issue. I have NEVER given out my password to anyone and it is a complex alphanumeric. I thought I was aware of all the various scams and have protected myself accordingly - I guess not!!

If anyone else has had this happen or know anything about this, please message me, so that I can prevent this from happening again as I restart all my wonderful charactors.

I believe as the exact same thing happened to me. I logged back in yesterday after getting back from spending the weekend at my cottage and I notice that my sorc and zon (my highest level characters) were visually missing items on their icons so I check and my zon is less a gaze and my sorc is robbed of her shako, occy, ss, skullders, eth skullders, ist, travs, magefist, gheeds, 7smfc but luckily I guess whomever did it didn't bother to check my 46 pally as he had a lot of twink gear stashed on him (enigma, hoto, um'd shako, goreriders). I totally think this was my fault though (bad password practices) but just to continue with the conspiracy theory my password for my account was (notice the tense, fool me once shame on you, fool me twice shame on me, thanks for the info on ascii chars) the same as my RPGtraders account password and that is the only other account that I used that password for.

 

[Dawnmaster]

Meh, wasup with these threads?

All the newcommers from 2006 are together in some sort of clan that finds high runes faster than I can find gold and are getting hacked by the second?

:scratch:

 

[tasien]

Meh, wasup with these threads?

All the newcommers from 2006 are together in some sort of clan that finds high runes faster than I can find gold and are getting hacked by the second?

:scratch:

I am not a newcomer (except to the forums), I played 09 for a couple years before giving it up and came back in 2006. I was trade switched scammed back in the early days when I didn't know any better (only lost a 6os hydra back when all it was good for was 6 pEmeralds), and then once more because of carelessness.

In almost 3 years of play nothing like this ever happened to me until now. I play as legit as I can, I will trade for hrs knowing that they are probably duped but I have never downloaded any third party programs or anything like that nor have I ever given out my password.

I resent the idea that it is only newcomers that this is a problem for.

*Note* I've only ever found 1 high rune (a vex in cows in 1.09)

 

[xNamastex]

I believe as the exact same thing happened to me. I logged back in yesterday after getting back from spending the weekend at my cottage and I notice that my sorc and zon (my highest level characters) were visually missing items on their icons so I check and my zon is less a gaze and my sorc is robbed of her shako, occy, ss, skullders, eth skullders, ist, travs, magefist, gheeds, 7smfc but luckily I guess whomever did it didn't bother to check my 46 pally as he had a lot of twink gear stashed on him (enigma, hoto, um'd shako, goreriders). I totally think this was my fault though (bad password practices) but just to continue with the conspiracy theory my password for my account was (notice the tense, fool me once shame on you, fool me twice shame on me, thanks for the info on ascii chars) the same as my RPGtraders account password and that is the only other account that I used that password for.

Tasien - Thank goodness I'm not the only one who used the same password for RPG Traders and Bnet. Stupid as it may be, to unintentionally lose high end items is not fun and all my characters really suck now. Somehow we should keep track of these incidents as my theory is starting to hold water. Lets see what happens over the next couple of weeks.

On another note, just purchased brand new (and expensive!!) McAfee software yesterday and low and behold... NO VIRUSES or other issues with my computer. I am now 99% convinced my password hack was related to either these forums or RPG Traders. Either someone hacked my password from one of these sites or someone "inside" with access to passwords likes to collect runewords.

Keep smiling :smiley:

 

[baffle]

Tasien - Thank goodness I'm not the only one who used the same password for RPG Traders and Bnet.

See also my reply on page 3.

 

[tasien]

See also my reply on page 3.

I noticed when I was reading but thanks for reminding me. That makes for three us at least.

 

[Dawnmaster]

I am not a newcomer (except to the forums)

That what I meant You don't hear these kind of stories from peeps that have actually been here for years :grin:

See also my reply on page 3.

On what page distribution is that? Because I'm still on page 2 with this reply.

EDIT: the 3 replies after this one will also still be on page 2 for me :thumbsup:

 

[Merick1]

Again, why would someone with inside access to passwords here (they are encrypted anyway, you'd probably have to be lucky or have lots of time) take your account and not one of the best ever?

 

[tasien]

Again, why would someone with inside access to passwords here (they are encrypted anyway, you'd probably have to be lucky or have lots of time) take your account and not one of the best ever?

I don't think it was someone here as my password for this forum and my old password for my b.net account were not the same. I believed the mods when they said that they can't even see our passes. I really have no idea how it happened but my money is either on a brute force password picker or somehow through RPGtraders.

 

[Nubikoen]

That what I meant You don't hear these kind of stories from peeps that have actually been here for years :grin:



On what page distribution is that? Because I'm still on page 2 with this reply.

EDIT: the 3 replies after this one will also still be on page 2 for me :thumbsup:

WHAT?? I thought I was the only one that used that option, I've never ever ever seen any page references that matched my setup, I don't think many people know that they can change it.