Compromised PoE Accounts: Stolen Items and Hacked Accounts - Discussion and Leads

So It was a "Rogue" admin account...

https://www.reddit.com/r/PathOfExile2/comments/1hzx8hx/admin_account_got_breached_confirmed_in_interview/

https://www.reddit.com/r/pathofexile/comments/1hzxdzi/so_accounts_were_hacked/

phew so i can finally download cracked pdf's again

must say, I learnt a lot about victim blaming here. maybe some others did too.

"

medicated03#7220 wrote:

Zero proof.

All big streamers safe.

No snoobae isnt big.

Infact recent posts of people being hacked and having their paypal used point in the not GGGs side direcrion, keep clutching straws though 😊

Well, this has aged like milk hasn't it. Turns out it wasn't malware pdfs after all.

https://www.twitch.tv/zizaran/clip/SpineyFlirtyLemurPoooound-WpxdBi6XOSpHuQbX

yeh and they tell me to change my passwords.

so just in case someone missed the interview and checks back in this thread:

- ggg confirmed that one of their customer service admin accounts got compromised via social engineering
- therefore the hacker could change the password of any account and log into the account (i assume without triggering the new location email or any 2fa)
- there was also a bug that the password change was not logged in an audit log, but only as a note instead - which can easily be deleted
- they found 66 accounts where notes got deleted, so they think that 66 accounts got compromised this way
- since all infos got deleted, its pretty hard for them to find out exactly what happened - they got some weblogs and analysis is still ongoing
- they will post all information in the next 1-2 days

So all the fanboys blaming the victims and blaming passwords and blaming 3rd party apps..

How you feel now knowing a support account was hacked on GGG?

And GGG read this 41 pages... It wasn't "66 accounts, 66 notes deleted"

Good to know GGG admitted it was a hack within their teams account. Crazy how complete silence and it has to be brought out in a live stream when asked about it.

my main account was hacked on December 21st, it was funny to read tips about password complexity, etc., especially after the information about the admin panel

@ex_IllusionisT#8571

"

Also, it's so much easier to blame anyone. ANYONE but your own negligence.

Where are you now?

Now haters who said change password be silent right? HAHAHA

"

Krematorial#3777 wrote:

@ex_IllusionisT#8571

"

Also, it's so much easier to blame anyone. ANYONE but your own negligence.

Where are you now?

indeed xD