Diablo 3 Accounts Being Hacked

[Rockhoundhigh]

Okay, So before people in this thread spout bullshit they don't know.


ITS NOT BLIZZARDS FAULT.


People getting hacked is their own fault, They clicked on suspicious emails and got a keylogger or trojan virus installed on their computer.

The only way to hack an account with an authenticator is to have a trojan interceptor that blocks the user from connecting and sends the auth code to the hacker, letting them on the account.

For people getting hacked without one, well its their own damn fault for not spending 4 dollars, or getting a free phone app.

Lastly, I haven't had connection issues with Diablo since day one, and the game is amazing IMO, so don't try and start things you know nothing about.


Lastly, once you use an auth code on your account, you don't need to enter it for about a month, as long as you access the account from the same static computer+location.


TL;DR Dumb people are DUMB

Some people who bought it have connection issues just because you don't have a problem doesn't mean everyone doesn't have a problem. Some people don't even have a smartphone to get the free app or are unwilling to get the authenticator. Even then people with it got hacked. Thats the problem, people are unwilling to protect themselves.
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Spoofing a session ID is Blizzards fault they should of at least came up with some counter-measures all you have to do is join a public game and someone can do it to you assuming spoofing the session id is how they get it you. The authenticator offers no defense what so ever in this scenario.

You have no proof of people get hacked just by joining random games.

---

 

[ferofax]

How is lax security NOT Blizzard's fault?

 

[PolloDiablo]

blizzard.... just put an offline mode

 

[DSGamer64]

I really see no reason as to hacking D3 accounts. The Real Money Auction House is a joke and very few people are going to use it, whether it be for end game PvP when it comes or just for getting the best gear possible. The majority of players are finishing off Normal or Nightmare modes, considerably less have cleared Hell and Inferno modes. Gold is so absurdly easy to get that if someone wants to buy gear off the Auction House, they can just use gold to buy it rather then real money.

 

[Deleted User]

Posted by​

Bashiok

Despite the claims and theories being made, we have yet to find any situations in which a person's account was not compromised through traditional means of someone else logging into their account through the use of their password. While the authenticator isn't a 100% guarantee of account security, we have yet to investigate a compromise report in which an authenticator was attached beforehand.


Ie. People are lying/trying to stur things, they have a Trojan and or Keylogger, or they didn't protect themselves.

It seems to me like it's the most logical way to go about it. Build up a list of accounts and passwords, and then hit them in a rapid succession before word can spread and people can change their passwords, add an authenticator, etc.​

 

[IBNobody]

I've updated my first post with the quote from Bashiok.

 

[Zaertix]

Posted by​

Bashiok

Despite the claims and theories being made, we have yet to find any situations in which a person's account was not compromised through traditional means of someone else logging into their account through the use of their password. While the authenticator isn't a 100% guarantee of account security, we have yet to investigate a compromise report in which an authenticator was attached beforehand.


Ie. People are lying/trying to stur things, they have a Trojan and or Keylogger, or they didn't protect themselves.

It seems to me like it's the most logical way to go about it. Build up a list of accounts and passwords, and then hit them in a rapid succession before word can spread and people can change their passwords, add an authenticator, etc.​

And of course you have to be a tool. Why not just let it be said and leave it at that? Oh wait, you're an egotistical ass. Thaaaat's right.

Glad you left though and stopped raging.

 

[ComeTurismO]

Oh no. On a other forum my friend was complimenting diablo. He asked if anyone likes playing it. Next day, he says "F*** I got hacked on my level 50 wizard godly stuff I had".

 

[SSVAV]

It's ironic they try to sell authenticators when it's well established that the account hackings aren't done by stealing the account passwords.

lolherpderp commercial technique?

 

[Hunter X]

People are also getting hacked by stealing user ids and passwords. I got an email from "Blizzard" inviting me to play WoW MoP Beta. It was a little strange because every email i've gotten from them has their email in the sender field, but the one i got was from myself. The email looked very legit with a proper title and images. However, me being skeptical with emails I get, I dissected the email header and found it originated from the email account [email protected] from IP address 106.10.149.71 which is in Singapore. The invite links you to some obscure site ​ hXXp://www.sbeha-ernyzf.gx/login.asp?ref=https%3A%2F%2Fus.battle.net%2Faccount%2Fmanagement%2Findex.xml&app=bam (Please don't visit this link) and I believe this is where people are getting their credentials stolen.

 

[Seaking]

[removed link] (Please don't visit this link)

well herpderp the start of the URL isnt even battle.net, its forun-realms.tk, who could be so stupid to NOT look at a URL when typing in login info?

 

[Hells Malice]

I really see no reason as to hacking D3 accounts. The Real Money Auction House is a joke and very few people are going to use it, whether it be for end game PvP when it comes or just for getting the best gear possible. The majority of players are finishing off Normal or Nightmare modes, considerably less have cleared Hell and Inferno modes. Gold is so absurdly easy to get that if someone wants to buy gear off the Auction House, they can just use gold to buy it rather then real money.

I lol'd hard.
You must also think free2play MMOs with cash shops just do abysmally too, right?
Or hey, gold sellers must make a pittance since gold is so easy to get in MMOs.

Rich kids will like Diablo 3, and they will pay for anything they desire with mommies credit card. Why? Because people are lazy. They want to be amazing at a game, but they just really are too important and busy to play themselves.

Also a little trick in economics, if mob cash drops and items could be sold for around 5 gold, and making 10k gold would take a day of farming...an insanely epic and rare item may be upwards of 50k.
Blizzard realizes gold drops are really low (this would never happen due to economy destruction, bear with me hurr), so they amplify gold drops and item worth to sell to NPCs to about 5k gold average. Now getting 1mill takes about a day, low and behold, items don't STAY at 50k, they rocket to around 5mill.
Basically if gold is insanely easy to get, well, shit will be insanely expensive to buy. Making the RMAH, ESPECIALLY FOR LOWER LEVELS, incredibly efficient for a person (plus you can buy gold with it). Low level items sell for around 10-30k...I tried to equip my low level DH for cheap, yeahright. Shit my level costs about 20-50k, i'm level 53.
Simple concept.

Last note to make this a bit more on topic instead of half-assed on topic.
Gold sellers are ALREADY selling Diablo 3 gold, and prices are rising and lowering (meaning there is FLOW, people are buying stock and they're adjusting depending on supply and on demand). I've been watchin' out of interest.
So, reason to hack D3 accounts? Plenty. MMOs and online games with currency in an infancy stage are the absolute BEST times to sell gold. It's before people get a handle on what gold is really worth, and they can sell little for quite a lot. There's a lot of demand.

 

[Foxi4]

Adding to Hell's comment which I obviously Like'd, I want to add that Farming is the most mundane and boring activity of them all - it does not progress the story, it's not fun, it's repeatedly maiming one type of mobs because they're said to drop lots of gold or precious items. Farming is not "playing", it's not perfecting your skills, it plays no role in storytelling, it does not make you meet new friends in a fun activity - farming is the equivalent of watching paint dry or grass grow. Some people find it too mundane and boring and simply choose to ask someone else to do it for them for a moderate price and I can fully understand that. MMO economy is unforgiving and if you do not wish to suffer through hours of grinding in a robotic manner, this is a viable option, a win-win situation.

 

[DarkStriker]

Already happend twice to my friend. Guess what their solution was! A rollback! Way to go blizzard......

 

[Deleted member 473940]

weird timing. my youtube account got hacked -.-

after all the delays, they still have flaws :/

 

[Slowking]

There has been talk that session IDs would have to be obtained somehow. They really don't. With this many players online, you can just bruteforce them. Sooner or later you'll find an active ID.
Ofcourse it's easy to prevent a bruteforce, by locking out the IP after a few trys, but considering that Blizzard doesn't even check IDs against IPs I wouldn't be surprised if they don't have such a check.

 

[Deleted User]

Posted by​

Bashiok

Despite the claims and theories being made, we have yet to find any situations in which a person's account was not compromised through traditional means of someone else logging into their account through the use of their password. While the authenticator isn't a 100% guarantee of account security, we have yet to investigate a compromise report in which an authenticator was attached beforehand.


Ie. People are lying/trying to stur things, they have a Trojan and or Keylogger, or they didn't protect themselves.

It seems to me like it's the most logical way to go about it. Build up a list of accounts and passwords, and then hit them in a rapid succession before word can spread and people can change their passwords, add an authenticator, etc.​

And of course you have to be a tool. Why not just let it be said and leave it at that? Oh wait, you're an egotistical ass. Thaaaat's right.

Glad you left though and stopped raging.

Being a tool? It's calling defending my point.


I know that people are trying to shit on this game in any way possible, there was no "stealing" Id's in a public game, it was all normal hacks from un-secure people.

I don't care what you think of me, my point is still correct.

 

[Rasas]

Being a tool? It's calling defending my point.
We are both tools it is just that your a tool defending a company who has done some questionable things and possible have a big exploit.

I know that people are trying to shit on this game in any way possible, there was no "stealing" Id's in a public game, it was all normal hacks from un-secure people.
People will always try to insult something. Even great games like Half Life 2 have people that insult them it just goes towards their tastes or they dislike the company. It is normal for someone to insult something.
I don't care what you think of me, my point is still correct.
Do you have any proof besides statements that are possibly false? Yes both side only have claims but you can hardly say your correct on just claims only.

Hacking of Diablo 3 regardless of the means is happening at such a rate it should be a major issue regardless of it is on the client's side or Blizzard's side. You cannot really trust Blizzard's statements since they might be lies to protect their own interests. Your point may be correct or may be false so drop it your not convincing anyone of your possible lies or truth. Plus Blizzard is deleting a lot of topics where people complain about being hacked so the numbers may be high.

 

[Foxi4]

I know that people are trying to shit on this game in any way possible, there was no "stealing" Id's in a public game, it was all normal hacks from un-secure people.

I don't care what you think of me, my point is still correct.

Prove it. Do you have proof that it is not possible?

And no, don't shove statements made by Blizzard into anyone's faces - of course they're not going to tell the public they screwed up, it's always the End-User's fault.

Unless you have solid evidence that each and every case was a simple matter of keyloggers and troyans on the computers of victims, you can just as well shush now and wait for more information just like everybody else. You don't have a point - you're just being pushy with your argument without anything to prove its legitimacy whatsoever other than some statement made by a Blizzard employee on a forum. This is hardly proof of anything - the accounts are hacked en-masse, how is it hard to understand is beyond me.

EDIT: And no, we're not here to bash Diablo 3. Diablo is a damn awesome franchise and this is a genuienly great game, but it may have a glaring weakness in its online structure and concern is only natural.

 

[Rydian]

Already happend twice to my friend. Guess what their solution was! A rollback! Way to go blizzard......

And the alternative would be... ?