Hacked account

Hello. 3 days ago i have been hacked and stolen all my items. I contacted support and they said that i shared account, other one told me that they cant share information with me but only with account owner (seriously??? ), one of them told me that my items was sold via AH and private shops, but my account have just 20 million (had 1.8b adena). The funny thing is that all this actions were made from different IP not mine, but gm still insist that i shared my account.

Here is all the conversation.

geomam81
Mar 22, 02:55 PDT

Yesterday around 9.44 Greek time someone loggend in my account. I couldnt log int to check what happend so i did it now and i see my player completely naked. Someone hacked me. I need desperately your help. I lost all my armor, my weapon, my jewels, my adena, everything. Please help...


geomam81>
Mar 22 (3 days ago)

to Lineage
Hello. Any help for my problem?

GM Sylvia (Lineage 2)
Mar 22, 23:13 PDT

Hello,

Thank you for contacting us.

In order to assist you as quickly and efficiently as possible, please provide the answers to the following questions:

(Feel free to ignore unrelated sections)

• Character name
• Server
• Time of the incident (PST/CST/EST/GMT)
• When was the last time you had access to your account prior to the compromise?
• Could you provide a list of the exact names of the items you are missing from your characters?
• Any other information you think may help (screenshots)

Once I have this information, I can further investigate this issue.

We look forward to hearing back from you.

Regards,
GM Sylvia
NCSOFT Support Team


Mamouzellos Information Technologies <[email protected]>
AttachmentsMar 23 (2 days ago)

to Lineage
Character name: Haarg
Server: Chronos
Time of the incident : Tue, 21 Mar 2017 12:08:59 -0700 (PDT)
When was the last time you had access to your account prior to the compromise? Tue, 21 Mar 2017 10:52:04 -0700 (PDT)
Could you provide a list of the exact names of the items you are missing from your characters?
DARK ETERNAL HELMET +11
DARK ETERNAL BREASTPLATE +10
DARK ETERNAL GAITERS +8
DARK ETERNAL GLOVES +8
DARK ETERNAL BOOTS +8
CHEF MONKEY BELT +5
DARK DUALSWORD 2 SA +12
ANTHARAS EARRING +5
BLESS ZAKEN EARING +5
FRINTEZZA SOUL NECKLACE +5
BAIUM SOUL RING +5
ANTS QUEEN SOUL RING +5
INSANITY TALISMAN
VENIR TALISMAN STAGE 16
ABUNDANCE TALISMAN LVL 1
ANAKIM TALISMAN
LILITH TALISMAN
ADENA 1.8b

To be honest i dont remember exactly the enchant level of some jewels

Any other information you think may help (screenshots): Friends told me they saw me in rune city, then in Gainaik village droping items, and probably trading with newborn toons. I found an email for the verification with an ip i am not, as i live in Kalymnos Island, northeast Greece, and the verification email was from Athens, i trace the ip and i have also some info.

geomam81
Mar 23 (2 days ago)

to Lineage
I would like to ask if you can also restore my mails in inbox and outbox

Mamouzellos Information Technologies <[email protected]>
Mar 23 (2 days ago)

to Lineage
I just noticed that im missing also 15 pass for kamaloka and 15 for atelia

GM Vidar (Lineage 2)
Mar 23, 20:16 PDT

Hello,

Thanks for writing back to us.

We have reviewed the game log data involving your account, but we are unable to verify that any compromise had occurred. The changes that occurred are not consistent with account compromise. On the contrary, these changes indicate that the account was shared with other users.

This type of behavior is against the terms of the User Agreement and Rules of Conduct. Since account sharing is a violation of our rules, your account and characters do not qualify for any assistance or restoration services.

Please know that account sharing is a violation of our policies and items lost due to this are not recoverable. We have included links to the User Agreement and Rules of Conduct below for your reference.
http://us.ncsoft.com/en/legal/user-agreements/lineage-2-user-agreement.php
http://us.ncsoft.com/en/legal/user-agreements/lineage-2-rules-of-conduct.php.

Here are some tips to help you protect your account and keep your computer secure.

Never give your passwords to anyone, including family, friends, or clanmates. Even if the person is normally trustworthy, you cannot guarantee that they will be following the same strong security precautions that you will follow. Also, there have been occasions when friends have deleted items or characters (often by accident) without the owner's knowledge or permission. If you believe someone may have learned your password, change it right away.
Do not re-use the same username and password on other accounts. For example, if someone learns the e-mail address and password that you use for a certain message board, it will be easy for them to log into your game account if you use the same e-mail address and password. Use different passwords to improve your account security.
Do not install third-party software (i.e. software not created by NCsoft or ArenaNet). Programs that claim to be item modifiers, cheat programs, or even harmless looking programs such as attribute, skill, or dye calculators might actually contain a harmful virus or keylogger that could allow someone to steal your account information. If you think you have accidentally installed a keylogger on your computer, you should:
a. Obtain anti-virus software, make sure it is updated with the latest files, and scan your system for viruses and key-loggers.

b. Change all the passwords for accounts that you may have accessed after installing the third party software, such as your Lineage 2 game account, NCsoft master account, e-mail address account, fansite forum accounts, etc.

c. Never download any untrustworthy programs in the future! Even if you are confident that you can trust the third-party, please use extreme caution. Virus and keylogger creators rely on your trusting nature to help them steal your accounts from you.

Please review our Security FAQ at the following URL, which includes additional information for keeping your Lineage 2 account secure:
https://support.lineage2.com/hc/en-us/articles/204360919-Security-FAQ

We truly apologize for the inconvenience this matter has caused you, however, we can only ask for your kind understanding regarding this case.

Kind regards,
GM Vidar
NCSOFT Support Team

Mamouzellos Information Technologies <[email protected]>
Mar 24 (1 day ago)

to Lineage
I want to know where my ittems went. I already contacted greek electronic crime agency because i believe player named RoseMarie did it. Ofcourse i am deeply disapiinted for not been help from the ncsoft. At least i want to know where my items went. Had been droped to the ground and someone picked them up? It was trade with players? It was iconic sell?

geomam81
Mar 24 (1 day ago)

to Lineage
I need the IP adress my character logged in and also other players logged in from the same IP, i will need them for the police

Mamouzellos Information Technologies <[email protected]>
Mar 24 (1 day ago)

to Lineage
I need all the transactions my toon made and/if he dropped items on the ground.

GM Raphael (Lineage 2)
Mar 24, 11:46 PDT

Hello,

Your items were sold via auction house or by private store. Unfortunately, we are not able to share information regarding account of the other player due to privacy and security. Any inquiries or concerns regarding the involved party will be strictly between the account owner and NCSoft only. Thank you for understanding.

If you have other concerns, please do not hesitate to contact us again.

Regards,
GM Raphael
NCSOFT Support Team

geomam81
11:04 PM (19 hours ago)

to Lineage
I am the account owner, what are you talking about? Someone hacked me, took my items and you saying infos only between account owner and ncsodt? I am the account owner. I need to know how much the hacker sold my items. If you check it, you will see that it would be extremely cheap and very quick after been placed on AH. Also try check the buyer of all my items. Probably the same.

GM Randgris (Lineage 2)
Mar 25, 05:47 PDT

Hello again,

Please be advised that we are still unable to restore your lost items as we have verified from your account logs and records that you were indeed involved in account sharing which is a violation of our Lineage II User Agreement and Rules of Conduct.

I know that this is not the answer you were looking for, however, we'd greatly appreciate your understanding on this. Thank you.

Kind regards,

GM Randgris
NCSOFT Support Team


Ps. i just read that also other person has been hacked...

Sorry to inform you that you have ZERO chance of items recovery. GM's dont guarantee the product they are gm'ing. Basicly, they give you ZERO protection for theyr customers. I've lost some items as well, and got only but "sorryes" back. Sad but True.

So, like in the other topic for stolen account was already commented. If someone did really hacked you then:

- they must know your login e-mail
- they must know your in game password
- they must know your PIN
- as you said they log in from a different IP then they must know and your e-mail password also

You are trying to tell us that all the above is just a h*a*c*k and not account sharing? For me it is hard to believe that this kind of hackers exists. It is not the case like you have some archived file and using a brute force algorithm to try get the password...

Let me ask/tell you some stufs:

How someone know who is your mail who you use for game and who is pass for that mail not ingame but in mail server (hotmail/yahoo/gmail...) if you are internet user how ffs you not know the pass from that mail need to be other not same with pass from game and last how someone may know your game PIN code. Pin code when you log ingame you must use mause/mause pad.

There is no option to someone copy-past code. Even if someone know your master ID, game mail/pass and try change pin from web he must contact support.

https://support.lineage2.com/hc/en-us/articles/205041615-Changing-Character-PIN

so you friend tell to all us to who you give your PIN or w/e, you not need to tell us, just get logical conclusion the person to who you give pass is your "hacker"... ok ok if you are stupid the pass is 111111/123456/123123 or etc and someone have lucky to lol you from that 3 try then you are realy stupid.

Account sharing it is.

Well, you gave us your own email adress.

If you are dumb enough and put an easy password, a recovery question or a fake phone number is easy to pass through your mail adress. Especially if someone just paste it into Google and ding, steam account - birthdate, facebook account - birthdate, it is an easy win. If not people can still submit a ticket, and if you shared somewhere your birthdate and your mail adress, it is an easy win again.

Privacy won.

The "I was hacked" lie doesn't work anymore, with the PIN system.

Try again. Gratz on being had.

This is a scam, not a h*ck.

They can change your email, but the account will still be unable to log in characters without the PIN.

I know. I had to take a couple of days to remember my PIN when I came back. It was my account, and I couldn't log in a character or change the PIN until I remembered what the PIN was.

Stop Account Sharing.

lol dude, you must be desperate ...you can complain even to Donald Trump but your items wont coming back. Next time dont share your account.

Account Sharing it is, you cant posible hac k this log in game.


Ps:As always, Golemka spit againt the wind...sometimes, when you try to be diferent might be not cool.

BTW in homepage you able to see authorized IP

Acount->settings-> secirity->Authorized Locations

lol dude, you must be desperate ...you can complain even to Donald Trump but your items wont coming back. Next time dont share your account.

Account Sharing it is, you cant posible hac k this log in game.


Ps:As always, Golemka spit againt the wind...sometimes, when you try to be diferent might be not cool.
Its actually quite possible to hac k the login. If you are dumb enough to get ratted. Though I don't think that thats the case here...

Its actually quite possible to hac k the login. If you are dumb enough to get ratted. Though I don't think that thats the case here...

No. It's not. The login is worthless without the Authenticator code, which for NCSoft is the Account PIN. Someone can steal my WoW login, but they will never get past the login even with the right email and password because of the Authenticator. The PIN serves the same function for L2 accounts. I know this. My WoW account was chain hacked before I changed email addresses for it, and later put an Authenticator on it for good measure. The PIN was added to get rid of fakers like the OP, and improve account security for all players.

People are seeing their accounts cleaned because they have shared their login details, including the PIN for Authentication.

Unless you completely take over NCSoft's system to allow yourself to change a PIN without knowing the current PIN you will never fully log into the game. You cannot keylog PIN entry. It's by click only, and the locations are randomized on each attempt. Attempts are also limited, and increasing lockouts enforced. You cannot brute force it. The only way to do this, is to have been given that information.

Either you will make miraculous guesses on a 6-8 number PIN, or you will be forever unable to get past character selection. You can't even delete a character without the PIN, so it's impossible to sabotage an account even if you h.ack the login credentials. The Original Owner can always recover and change the login details later if they are legitimately hacked. You are not hacking a PIN. Don't peddle nonsense.

First logins from a new location are also two factored by default.

I refuse to believe every scammed L2 player neglects to set up even the most basic recovery options on their email accounts, as well.

Account Sharing is the reason why this is happening. It has always been the predominant reason. Enjoy the benefits of it.

The OP will get nothing back, and the likelihood of an account ban is very high these days. See other threads.

Love how random hackers are trolling the internet looking the NCWest L2 account holders to steal worthless pixels from.

No. It's not. The login is worthless without the Authenticator code, which for NCSoft is the Account PIN. Someone can steal my WoW login, but they will never get past the login even with the right email and password because of the Authenticator. The PIN serves the same function for L2 accounts. I know this. My WoW account was chain hacked before I changed email addresses for it, and later put an Authenticator on it for good measure. The PIN was added to get rid of fakers like the OP, and improve account security for all players.

People are seeing their accounts cleaned because they have shared their login details, including the PIN for Authentication.

Unless you completely take over NCSoft's system to allow yourself to change a PIN without knowing the current PIN you will never fully log into the game. You cannot keylog PIN entry. It's by click only, and the locations are randomized on each attempt. Attempts are also limited, and increasing lockouts enforced. You cannot brute force it. The only way to do this, is to have been given that information.

Either you will make miraculous guesses on a 6-8 number PIN, or you will be forever unable to get past character selection. You can't even delete a character without the PIN, so it's impossible to sabotage an account even if you h.ack the login credentials. The Original Owner can always recover and change the login details later if they are legitimately hacked. You are not hacking a PIN. Don't peddle nonsense.

First logins from a new location are also two factored by default.

I refuse to believe every scammed L2 player neglects to set up even the most basic recovery options on their email accounts, as well.

Account Sharing is the reason why this is happening. It has always been the predominant reason. Enjoy the benefits of it.

The OP will get nothing back, and the likelihood of an account ban is very high these days. See other threads.

Love how random hackers are trolling the internet looking the NCWest L2 account holders to steal worthless pixels from.

I am not an expert but I do know a way this can be done and there are probably many others that I have no idea about. There are "rats" out there that can take pictures of your screen every x ammount of secconds. It can also keylog and log where the mouse clicks on the screen. After you have the screenshot of where he enters his pin its childs play to find which is the pin by using the log of the mouse coordinates.
With world of warcraft its a different story because you have a physical authenticator or a mobile authenticator. So the hacker would need to hac k the phone too which would make this a lot harder.

which is why NC has the pin entry field randomized every time you login aka those numbers will never be on the same spots so a mouse tracking prog or the like will not work to capture your pin..

which is why NC has the pin entry field randomized every time you login aka those numbers will never be on the same spots so a mouse tracking prog or the like will not work to capture your pin..

You didnt understand what I just said. The virus takes a picture of the screen showing where the pin numbers are located. Then the click logger takes down the exact location. You can then find out which numbers were clicked and then you have the pin doesnt matter how random the numbers are.

Have anyone tried to reset his own PIN?

You dont need just a single birthdate and they reset your PIN ...

Keylogger, lol :D

big clans, like nova, always full of scammers, stop acc sharing and you will be happy
and stop download p0 rn to avoid viruses

Hello again,

Please be advised that we are still unable to restore your lost items as we have verified from your account logs and records that you were indeed involved in account sharing which is a violation of our Lineage II User Agreement and Rules of Conduct.

I know that this is not the answer you were looking for, however, we'd greatly appreciate your understanding on this. Thank you.

Kind regards,

GM Randgris
NCSOFT Support Team


Why is this even a debate? The OP needs to get over it and stop crying.

Stop sharing accounts.

big clans, like nova, always full of scammers, stop acc sharing and you will be happy
and stop download p0 rn to avoid viruses

Has nothing to do with Viruses. That's a complete lie. The OP was account sharing, and they got owned by it.

The rest is just the same old tired story that people have been using since 2004 when they were shift leveling, sharing buffers, buying accounts, etc. and got owned by it.

Players in Nova aren't immune from it. I remember back in the day Peppinio wanted to quit the game when his high level boxed buffer (that he bought from another player) was recalled from him, Lol. He got over it and moved on. The OP should do the same.

It's hard to claim you were "h.acked" when the "hacker" has his IP address all over your account access history. Exercise some common sense. That isn't going to get you anywhere as an excuse. Even though it has always seemed quite fashionable, it has never worked...

Since anyone can eBay "top gears" I suspect we'll see an uptick in "h.acked" account sharers running to the forums asking for miracles.

And this is the last reply from GM
:D:D:D:D:D:D:D:D:D:D:D:D:D

GM Raphael (Lineage 2)
Mar 28, 12:04 PDT

Hello,

After reviewing your incident, I have found that character on the account did not currently have any class-appropriate items equipped. To help you, I have provided your account with some support items.

Characters level 85 or higher will receive 40 Diplomas added to their warehouse which can be exchanged for R-Grade armor and weapon at a Mentor Guide NPC.

I certainly understand that these items may not be of the same value as what was previously on the account. However, items removed from the account cannot be recovered. You can ask friends and clanmates to help you regain the items you lost.

At least they admit that my items were gone !:D

There was a character named Haarg shouting in game that RoseMarie stole your items? How can you be positively sure that it was that person? Were they selling stuff that looked like yours? Or were you account sharing with RoseMarie?