Regarding the "Remote Hack"

**liz** Mon May 02, 2011 3:09 pm

I don't know if you have read it yourself yet or not but I'd like you to be informed about this.

Okay. I've been left in an incredibly awkward situation because I have NO official word from Nexon on this.

Last week, as many of you will remember, there was a lot of drama about remote hacks. As I said at the time there was no evidence of that hack being active on EMS and the people involved in that drama were not remote hacked - they had their details compromised by using dodgy hacks. This was true at the time.

At the time I also warned Nexon that if this vulnerability was possible in EMS that people would now be looking for it and I submitted all the information on how it worked.

Unfortunately, yesterday it was confirmed that the remote hack was possible and being used - and I'm not talking about the hearsay type evidence here. I attempted to raise this with Nexon as a matter of urgency. I submitted all the information that I had which should have been more than enough.

This hack is essentially a session hijack. It DOES NOT give people full account access or compromise your account details such as ID/password. It does however, give them access to one character, completely.

Right now the number of people being targetted is small. If you want to protect yourself the 100% safest way is simply not to log in. If you do log in you may wish to stay away from populated areas such as the FM and Henesys, or log in using alt chars without expensive equips. If someone you don't know asks you to change channel for no reason, simply walk away and do not change channel.

I probably shouldn't be posting this, however, I cannot in good conscience say nothing, given the information I currently have.

kazz

Kazz will no doubt delete this post, but I hope a few of you see it.
The only people I've targeted for remote hack are all in the 2147 guild (and are also all hackers). I've been getting a lot of PMs today on a certain hack forum asking me to give back SusieQ and some other player's stuff, but I can't as I'm not the person who took it.

The difference between my method and whoever else is doing this' method:
My method strips the character entirely - all their untradable items, use items, set-up items and etc items are dropped. This only takes a matter of seconds to perform, and doesn't require me going in-game.
The method that whoever else is doing this is using is to actually gain full access to your character in-game and trade your 'godly' items to a mule, or whatever.

I'd like to make it quite clear that I have no intention of hacking any legit players' characters. I'm purely going after people associated with the guy who hacked my Bishop.

~Tryst

PS: A few tips to avoid being remote hacked if you still want to play: Once logged in don't change channel and don't enter the Cash Shop, and if you are map crashed, don't log back in for a good 3 or 4 hours.
You can get remote hacked: 1. when you log in, 2. when you change channel, 3. when you enter or leave the cash shop.

Thanks.