Account hacked, trying to figure it out

I'm really confused as to how this happened on Myspace. I got onto Castle Age to find that my display name had somehow changed. I looked at my stats and practically everything is gone. All my favor points and battle hearts were used. All of my heroes, land, and items sold. Money was completely gone, and a War of the Red Plains was started. Nothing else on my Myspace changed. Could the link I posted on Myspace for my Deathrune Seige allowed someone into my Castle Age account? Just want to avoid this in the future. Damn, goiong to take a long time to get everything back...

Wow -- unbelievable! I hope that it takes more than a link to a battle to gain access to one's account. Whoever did this seemed to be pretty methodical -- dunno if a report to the devs could help get you back where you were or not -- if there is a security issue with their game, I am sure they would want to know. Good luck. Dave

I've heard about similar problems in other games, caused by a corrupted database and normally triggered by a new update... Didn't see anything new in CA though

Yes, Splints. That's what happened, I can tell you from experience. As I don't have a dastardly, "What can I do to screw this person totally unknown to me but seems like a great guy?" type of mind, it never crossed said mind to bring this to anyone's attention.

Yesterday afternoon I was again flush with cash. Having refilled my FP account, I was looking for battles. For some reason I've not addressed 'til now, the Magical Monster List was not, and still is not, working for me. So I started going through the "help with battle" threads. I wanted a DRS badly, and found yours.

When I clicked on the link, I immediately went to battle. I stopped to check my stamina, and then noticed a General I did not recognize, and a stamina number that made no sense. I made another attack and looked again, then started actually SEEing what it was that was there. I had somehow gotten into YOUR account, and my attacks were counting for YOU. My name was not on the attacker list at all.

"I have no clue how this happened," said I to myself. I closed it out and went back to the thread where you'd posted your link. Clicked on it again. Got the same thing. I then just closed it out and forgot about it.

Until now. And I feel SO BAD for not saying anything about it preventatively. PEOPLE ARE SHIT SOMETIMES and this is one of the times.

I'm not techie enough to tell you how it happened, what was wrong with your link. I'm only here to say, "Yes, that's what happened." Please forgive me for not suspecting horribleness coming your way. I just don't think like that. I'm old, and naive at the same time.

It won't help, but *cyber hugs*

wow, sorry to hear that. i would contact the devs and let them know what happened.

kajira wrote:Yes, Splints. That's what happened, I can tell you from experience. As I don't have a dastardly, "What can I do to screw this person totally unknown to me but seems like a great guy?" type of mind, it never crossed said mind to bring this to anyone's attention.

Yesterday afternoon I was again flush with cash. Having refilled my FP account, I was looking for battles. For some reason I've not addressed 'til now, the Magical Monster List was not, and still is not, working for me. So I started going through the "help with battle" threads. I wanted a DRS badly, and found yours.

When I clicked on the link, I immediately went to battle. I stopped to check my stamina, and then noticed a General I did not recognize, and a stamina number that made no sense. I made another attack and looked again, then started actually SEEing what it was that was there. I had somehow gotten into YOUR account, and my attacks were counting for YOU. My name was not on the attacker list at all.

"I have no clue how this happened," said I to myself. I closed it out and went back to the thread where you'd posted your link. Clicked on it again. Got the same thing. I then just closed it out and forgot about it.

Until now. And I feel SO BAD for not saying anything about it preventatively. PEOPLE ARE SHIT SOMETIMES and this is one of the times.

I'm not techie enough to tell you how it happened, what was wrong with your link. I'm only here to say, "Yes, that's what happened." Please forgive me for not suspecting horribleness coming your way. I just don't think like that. I'm old, and naive at the same time.

It won't help, but *cyber hugs*

Wow. That's weird and crazy. I'd be interested in seeing that link to see if there was something different about it. Normal CTA links should not do that.

As of yesterday afternoon (Pacific time), it was the last (the longer one) link in the DRS help thread. Splints shared one shorter that, IIRC, didn't really work, then posted a longer link. I just clicked on that. Haven't checked to see if it's still there, but that's where I found it. HTH!

Either I was totally wrong about that, or Splints deleted his messages. I don't know where else to look for it. I know there's a Bahamut link posted in a weird place, but I don't think Splints' were. As of this moment, although it won't help DoR figure it out, I hope the messages have been deleted -- just for my sanity.

Ok. Found it. It was in the DL thread. That's why you couldn't find it. You're not going crazy.

It was most definitely NOT a normal CTA link. It looks like a log-in link. So, Splints wasn't really hacked, but rather posted the link to log directly into his account. (Didn't even realize you could do that!)

All regular game links take a particular form: http://valerianknight.narutorpg.org/valerian-armory-f5/msca-link-templates-t123.htm

My son got hacked in WOW once. They sold all his equipment and put a dress on him.

I have no idea how I created that link. I posted a similar one on the bulletin page on Myspace, someone probably used that one and decided to have crappy fun with my character. I deleted my Myspace posting with the link, hopefully that prevents that from happening again. I need to read up on how to make the right one next time! The weird thing with Myspace and raids confuses me. I'll just have to rebuild and get a few favor point to change my name from [VK] d,i.c.k.licker

Thanks Kajira Don't worry about not warning me sooner, I put up the wrong link to let someone in, I've learned and will get back to where I was. Thanks to everyone else for the advice and concern. I did email Brian, I just clicked report a problem and got him, is that the right person? Hopefully they will at least let me change my name, that's the worst part.

Best way to contact the Developers is via email: ms.castleage@gmail.com

Whoever changed your name was not very mature.

Death of Rats wrote:Ok. Found it. It was in the DL thread. That's why you couldn't find it. You're not going crazy.

It was most definitely NOT a normal CTA link. It looks like a log-in link. So, Splints wasn't really hacked, but rather posted the link to log directly into his account. (Didn't even realize you could do that!)

All regular game links take a particular form: http://valerianknight.narutorpg.org/valerian-armory-f5/msca-link-templates-t123.htm

This is VERY SCARY! So anyone with my ID can log into my CA account if they know how to build the link? The devs better fix this ASAP or there will be a lot of grieving.

Thanks DOR! I'll send one that way!

yep im in his deathrune siege his names been changed to Dicklicker

[VK] d,i.c.k.licker's Army of 467 fought with

Heroes x23Soldiers x366Weapons x257Equipment x467Magic x144
You need more soldiers and weapons man

I suggest Commander Battle Plates, Champion's Auras, and Ornate War Axes. And Barbarian Captains. A little costly for some of them, but my invasive force is better with them

Thanks for the suggestions Bogrog and Somebody! I used to have plenty of equipment and soldiers before some A-hole sold all off my stuff and lands. Had to practically start over. Trying to build my income back up as well as everything else, but wanted to keep going on my siege. Thanks for everyone's help on it's success!

Splints wrote:Thanks for the suggestions Bogrog and Somebody! I used to have plenty of equipment and soldiers before some A-hole sold all off my stuff and lands. Had to practically start over. Trying to build my income back up as well as everything else, but wanted to keep going on my siege. Thanks for everyone's help on it's success!

Good luck mate. The truly sad part in all of this, is that someone (not "Somebody") went to a great deal of effort to totally wreck your toon; a malicious act if there ever was one ... and it appears that same someone (again not "Somebody") got the corrupted link off of this forum.

This is another of those "Twilight Zone" type things that happens in life. So bizarre!! I wish there were some way to pass EQ back and forth in the game. I'd really like to help you build, Splints, so you need anything, drop me a line and I'll do what I can.

Thanks Kajira, I definately will I truly believe that the person who did royaly screw me over got the corrupted link from my posting on my Myspace bulletin and was not someone on this forum.

I feel sorry for you man...

Shit... so that means anyone can log in w/ a link (i also didnt know that) so how the hell did that happened ... ... im that someone might log in as me... so erm can some admin or someone lock or hide this topic from guest or everyone and DELETE any trace of how to use and make a corrupted link like that?



BTW~ is this problem still goin on or still tryin to be fixed or has the devs not even responded yet?

The link has been deleted for a month now. We're not sure how he got it, but the best way to protect yourself is to look at links before posting them, and to know what a proper link should look like.

Hey I just stumbled across another guy who's done this. Some guy going by 【★】₪.cooĸιe мonѕтer. He's in the icapattern raid, and I added a raid of his to the list. It was in fumbling around trying to make a raid link that he produced the thing. I'm trying to eliminate any trace of the thing now, but it might be in some nonlisted stuff so keep an eye out for that name posting a mini today.

Kajira,

Did you use Firefox as your browser when this happened? FF has loads of glitches in it that allow bypassing and getting into peoples accounts. I've seen it on many other apps as well.