Toon Hacking/Account Stealing/Keylogging Consolidated Thread

[Niber]

Originally Posted by Oswaldor

Most public Wiki sites are probably not susceptible to this. It is just Trend-Micro's sites that forgot to validate their input and was thus open for the SQL injection attack.
It is quite mind-blowing that a security company is unable to protect themselves against these very simple attacks.

The plethora of homebrew wiki sites makes me second guess their data validation. Most forum software (vBulletin) is fairly standardized and doesn't parse (user) html code.

[axuis]

i just love the way every 1 assumes people that get there account hacked are given out passwords etc willy nilly no 1 in there right mind does this how ever as any 1 looked deeper into this

i known a few people that have had there accounts hacked and passwords changed etc now tell me you have to put a secret answer in to get this information how does any 1 get that?

on top of that i known people to be asked by sony what the answer is they didnt even know there selfs or forgot it now how does any 1 explain how these people get this info
im sure they dont sit there with key loggers for that as you never write that in unless you are changing your pass word lets face it how often do you change your password once a week/month 2 month thats a real hit and miss aproach and this means they must sit there brute force your secret question now why isnt there any software set up saying hang on whats going on here hes had 1000 trys at his secret pw in like 10 mins somethings not right lock it down

theres more to these hacks than meets the eye imo to have so many people hacked over the last few weeks and to have pass words emails changed etc lot more going on than some one going to his mates oh heres my password log me in if that drops please

[irad]

It s obvious that SOE is behind that shit...

The Dangers of Buying Plat and/or Power Leveling services

Now they are blaming plats sellers for their inability to keep their data safe? That's bullshit. They just did that to compromise plat sellers. How is it only SOE accounts were "hacked"... Are plat sellers only making money on SOE's games? That's bullshit again... They created mayhem to piss off plat selling sites.

They did that. They were able to access the infos to change passwords. They did on purpose at the same time they are launching a partnership that will give them more control on the business behind EQ2. (changing station exchange) Guys, it's SOE that is owning you badly on that one... And that was really cocky.

[Oswaldor]

Originally Posted by irad

It s obvious that SOE is behind that shit...

The Dangers of Buying Plat and/or Power Leveling services

Now they are blaming plats sellers for their inability to keep their data safe? That's bullshit. They just did that to compromise plat sellers. How is it only SOE accounts were "hacked"... Are plat sellers only making money on SOE's games? That's bullshit again... They created mayhem to piss off plat selling sites.

They did that. They were able to access the infos to change passwords. They did on purpose at the same time they are launching a partnership that will give them more control on the business behind EQ2. (changing station exchange) Guys, it's SOE that is owning you badly on that one... And that was really cocky.

Hmmm, what frequency did you tune your tinfoil hat to, in order to 'receive' these thoughts?
Did a wide-range search with mine, but nothing like this came up, even with the stupidity boosters.

[the one and only]

I have a question.

Do keyloggers only capture keystrokes from a real keyboard or will it also capture virtual keyboard strokes?

[Oswaldor]

Originally Posted by the one and only

I have a question.

Do keyloggers only capture keystrokes from a real keyboard or will it also capture virtual keyboard strokes?

Usually they hook the system wide message and log that input. But there are variations; some hook the keyboard at the driver level (which would not get the virtual input), some hook each application running etc.. It really depends.

[the_mo]

i just recently had our guild forum hacked and they added an <iframe> to the very end of the page to load up some shit. some guildmember alerted me as his virus-detection started ringing.

i dont want to go any more into details about how the page was hacked tho

i cant say any more about how they got in, but i think it was an automated attack like all the others because the iframe was very badly hidden in the settings

[axuis]

prob various way they can hack your account im just at loss how they get your secret password to change your password

and why if that is being brute forced why soe not got any software that picks up on it like you get 5 attempts then they lock you out and you have to get in touch with soe support

[Rahboni]

I got an email yesterday, saying someone asked for a password reset on my old EQ live account.

I haven't looked at that account in over 3 years....I had totally forgotten about it, actually. It doesn't appear they've got anywhere with it though. I can get into either account fine.

Incidentally, by logging into the EQ account, I've been given some free play time. Should be done patching in about 15 minutes....gonna go take a look.

[Rashul]

Strong ignorance this thread has. Much training you noobs require...