My account has been compromised.

[Zephs]

I raided tuesday evening 19:00-23:00 (server time) and my account was fine then. Now when i login my account has been hacked. My gold is gone and my bank/bags have been emptied. I still have 7 gold left and several valuable items in my bags that hasn't been touched, so this whole thing feels like some kind of "scammer bot". I have not swapped IP location for 1 month so you can confirm this by checking my activity on the account in order to find and restore what's been taken and track/ban the person responsible.

1) I have NEVER shared my account or my password with anyone.
2) I have not done any illegal gold transfers. Everyone i have given or taken gold from have been close friends or guildies. Feel free to check and track this as well.
3) I keep the password to my account in a notepad document and copy paste my password to prevent keyloggers from grabbing my password. So there's no way that this has happened because of me being irresponsible. I always make sure i take the highest precautions when it comes to things like this, and have never been hacked for over 10 years on retail servers.
4) I have not used the same account login information on any other private server.

Character name: Trizephs on PvP realm.

I've heard about others getting their accounts hacked recently as well, and them being permanently banned for it. But i'm hoping that it's because you have investigated their accounts and they have done something that isn't allowed and are against your rules. I have done EVERYTHING in my power to keep my account safe. I've always followed your rules. So i'm doing this ticket anyway, even though my entire guild says i shouldn't. I believe in this server and plan on playing here for upcoming expansion(s) and years, so i believe that nothing bad will happen to my account since i have followed your rules and guidelines.

Help would be greatly appreciated. Feel free to suspend my account while doing the investigation. I want this solved and done the right way.
// Zephs

[Uzephi]

Why would you copy/paste? There is malware that can read your clipboard as well :/ Best thing to do is type the end of your password at a certain number and then click the beginning or middle and type the rest, like below example.

Actual password:
incorrect

Typed when seen from keylogger:
ectincorr
incectorr

or however you do the clicking.

In any event, if the gold traces back to your account, no matter if you report it or not, they will ban it. They have stated you are responsible for your account. I just hope you changed password and did a malware check. glhf

[Zephs]

Why would you copy/paste?

Better than nothing.

I just hope you changed password and did a malware check.

I changed my password after getting hacked and my computer is clean of any malware or virus.

Thanks for the reply.

[Mencius]

so you can confirm this by checking my activity on the account in order to find and restore what's been taken and track/ban the person responsible.

It's good to help out the GM's to help them track down and punish the person responsible. Unfortunately in regards to restoring what was taken, the GMs can't help you:

A. Account security

The account owner is responsible for the security of the account and that it's sufficiently protected. Note that Nostalrius staff does not recover hacked accounts. You should:

Never share your account information;
Have a unique and complicated password that does not exceed 16 characters;
Connect yourself from a secure computer and network;
Never download unsafe files that might contain viruses/malware.

[Zephs]

so you can confirm this by checking my activity on the account in order to find and restore what's been taken and track/ban the person responsible.

It's good to help out the GM's to help them track down and punish the person responsible. Unfortunately in regards to restoring what was taken, the GMs can't help you:

A. Account security

The account owner is responsible for the security of the account and that it's sufficiently protected. Note that Nostalrius staff does not recover hacked accounts. You should:

Never share your account information;
Have a unique and complicated password that does not exceed 16 characters;
Connect yourself from a secure computer and network;
Never download unsafe files that might contain viruses/malware.

If my account got hacked due to my own irresponsible actions or stupidity i agree. But that's not the case here, and the Nostalrius team knows it.

I never shared my account information.
I have an unique and very complicated password that i copy paste from a notepad document everytime i login.
I am the only person with access to my own computer and ISP network. It's very secure.
I never download unsafe files that might contain any type of malware or virus.

I followed their guidelines and did nothing wrong, yet somehow, my accounts security has been breached????
How can they put the reponsibility for the security of my account on me, when i'm not the reason my password got leaked? That's like saying that every person is responsible for their own money in our bank accounts, and if they go missing because the bank accidentally shares the account information, well it's your own fault. Completely retarded logic.

I spent 1 month farming gold in Dire Maul so i would have enough for the upcoming tiers and patches, and now it's all gone and it's 100% not my fault. Do right by yourselves Nostalrius and fix this. Not only my account, but all the accounts that got hacked during this time frame due to your failure.

[Noxm]

Account security suggestions :
https://forum.nostalrius.org/viewtopic.php?f=45&t=38579

[Zephs]

I can no longer access my account cause it says it's suspended, and when logging in here on the site it says "Your account has been banned permanently".

So i would like to know the reason for this permanent ban. Cause if you seriously banned me for this when i have done nothing wrong, and i come to you for help, i am done with this server for real. Go ahead, say that this is for gold trafficking so that the community can laugh at you yet another time.

[Hashmire]

Zephs,
I am in the same exact situation you are currently experiencing. My guess is instead of researching prior to a ban the staff has a ban first and wait for an appeal approach. This is likely made worse by what seems to be a recent security breach.

All we can do is hope that the GMs do their jobs admirably and quickly. It is best not to respond to all the keyboard warriors who apparently live in this thread, it will just frustrate you and feed the trolls. Hopefully we will both be able to look back on this and laugh.

[Niko]

Can we get some management attention onto this, it has to be under investigation right?

I've got several friends whom have been hacked and banned recent days/weeks and it's just rising in numbers, feels like a part of your database isn't sanctioned against forced attacks and that it's now roaming amongst goldsellers. I'am also guessing the people behind these attacks are using bots with patterns to clear out valuables and send gold away, as it all seems very irrational with leaving expensive rare boe items be, but selling greenie items and engineering items.

Please devs, can we get some kind of official notification on this current goldhack situation?

Regards,
Niko

[Eligius]

Have you made a bugtracker account with the same credentials as your ingame account?