U got hacked ? Read this.

[eRvY]

the "FAIL part" belong to the image ... just focus on facepalms

[CookieGuy]

You know whats sad about this ? The game is so poorly programmed its actually easy to do that :|

[CookieGuy]

Restart the client, login and see how it really works.I also advise to use wireshark together with the xor keys and take a look at the packets.I'll be waiting for your reply.

Edit: name just 1 mmo in which account login pw info is retained in the memory.just 1.

should i really show you how i can delete EVERYTHING related to cabal and do a fresh install and login without having to insert the subpw?(id also add pc restart but i got dynamic ip and it changes all the time)

Don't freaking teach me how login works boy, I've been logging packets for at least an year now, decrypted packets, unlike wireshark which will show you the raw data.

As long as the client stays open, ID, password stay in the memory UNENCRYPTED, and subpw stays in the memory ENCRYPTED (Salted ). ( if you didnt know, boy, the memory data is gone once you close the game) .

The Auth packet that gets sent when you login your character still has the salted sub pw in it even if you didn't insert it, because it was kept in the memory.

I hate people like you who try to talk smack on stuff they have no idea about.

[xMarshall]

and all you numbnuts keep playing and paying to this game
go find another game really its not that hard, mmohut.com hes got 200 f2p games listed

stop being a sucker.

[Shivan]

make him a GM ! he can do more than our current staff

[rock86]

Interesting point you have here, but just a few questions. If the hacker is bypassing sub pw simply by pressing esc, how does that explain when some players still got hacked when they have locked the invtentory sub pw?
Also, another player had his character stolen, how was the hacker again able to by pass sub pw to transfer the acc? since you need to know the sub PW to be able to transfer the char/acc.

base on my experience in cabalsea those which player lock his eq and invtentory not lose they item accept alz in char poket....but if in eu server got case like that, then i cant explen anything.

our gm fix the bug after we get next patch for ep8, since we get ep8 the hacking case was stop.

i got 3acc in cabalsea' 3 of my acc using long word password' and 3 of my acc never get hack since hacking case happen in cabalsea..i got ask alot player which get hacked' what they do before they get hacked' some of them tell me what he did like pvp, some open shop etc.. but still got case player not online for so long but still get hacked so we know cabal database been hack then we chg our password asap' but after that some of them after chg password still get hacked'
so i try find out why me and my two other acc not get hack' then i go ask few friends which get hacked, how longer they password word' then i get conclusion which who are use password less than 8characters can get hack back even chg they password, and for who using password more than 8characters not get any hack after chg the password...


1more thing i know that hacker keep watching his target to hack his target acc..because got another case' is happen to my bro acc' that time my bro just log out his id then i take over the pc to log in my id because we share 1pc' after log in my id i saw my bro char just log in into game then i help my bro log in back his acc make the hacker dc..after log in my bro id i saw that hacker take out all my bro char eq which he using in his char invtentory but not yet tranfer it because my bro char that time at mf..then i ask my bro chg his password more than 8character mean 9character or more' because my bro already get hacked before and already chg his password twice since hacking case happen but that hacker still can hack him, after my bro chg his password more than 9character my bro acc not get any hack anymore..

[Asgarrr]

Well my hack also was spot on. I just bought 2xbof7, vamp 7, got 180lv, made myself st armor plate 7/3/80, amp rune and got hacked next day. Not to mention they also stole my gs aop6 and eof7. It was around 23rd martch so i guess they were testing their method

[Szablar]

Well my hack also was spot on. I just bought 2xbof7, vamp 7, got 180lv, made myself st armor plate 7/3/80, amp rune and got hacked next day. Not to mention they also stole my gs aop6 and eof7. It was around 23rd martch so i guess they were testing their method

hmm, if I remember it right, my char was cleaned next day after I bought vamp earing +7. maybe just coincidence

[YloH]

hmm, if I remember it right, my char was cleaned next day after I bought vamp earing +7. maybe just coincidence

Mine was cleaned after we droped eos+8 in mo, but i think it is just coincidence.

[Flyby]

@Flyby
or they actually visited a site got infected, wich gave them the acc and pw info, and the hackers found a way to bypass the sup pw securitys (this one is the most logic in my opinion) hence the restauration of items policy, since one of their secuirty measures failed.

How do you explain then that my storage account got hacked?
and that RatzaTM's storrage account (not touched in 6 months) got hacked while he was online on another account?
and the many friends I had in our guild that were all "serious ppl".

I'm talking adults here, ppl with responsible jobs in real life (lawyer, executive manager, etc...) - Not the type of ppl with double-digit IQ's, that take security lightly or that behave "silly" by visiting hacker sites.
I agree with you that having those dreadful password retrieval websites doesnt make it easier and adds alot to the general confusion, but there are more and more cases that exceed those obvious possibilies for being hacked. Something else is going on...

[SJS-Hunter]

i wonder why always ga write such posts. yes its only you. viral is (depending from all gm's) the "most" active gm on this forum. (thats what i think)

Yes... And as such he's almost definitely not the GM in charge of subpass blocks and items restoration, at least not directly...

[RatzaTM]

How do you explain then that my storage account got hacked?
and that RatzaTM's storrage account (not touched in 6 months) got hacked while he was online on another account?
and the many friends I had in our guild that were all "serious ppl".

I'm talking adults here, ppl with responsible jobs in real life (lawyer, executive manager, etc...) - Not the type of ppl with double-digit IQ's, that take security lightly or that behave "silly" by visiting hacker sites.
I agree with you that having those dreadful password retrieval websites doesnt make it easier and adds alot to the general confusion, but there are more and more cases that exceed those obvious possibilies for being hacked. Something else is going on...

Let me explain it even better, to remove these false ideas that people have :

I have 2 Web accounts, each with their own Game IDs.

Web Account 1 with :
- Game ID 1
- Game ID 2

Web Account 2 with :
- Game ID 3
- Game ID 4
- Game ID 5

Web account 1 and 2 are both treated identically (accessed from the same PC with the same security, etc), just that Web Account 1 hasn't been accessed since 2008 or so (MORE THAN 4 YEARS AGO), ever since before the introduction of Subpasswords (hence it had none).

To my surprise, ID 2 which was the storage account for the Mercury Smithereens guild, WAS ONLINE when I tried to log for a routine check (after seeing the hack wave). Not only was it online, but someone had placed a subpass on it. I had to block it after 20 failed subpass attemtps, then wrote a ticket and Jo unblocked it.

However, all my belongings were on a totally different account, a third one, which is perfectly safe so far.
If I had been keylogged or whatever other crap variants you guys think are the root cause of this, I would've lost ALL accounts, not just 1 Game ID in an inactive Web account. Think about it ... they simply bust in whatever account they find.
Also, I might add they were smart to do it, since that account had at some point pages full of CR2 and RoL2 from before the update, so they're targeting valuable accounts, either high profile players or old/new storage accounts which might have valuable jewelry on them.

Please explain my situation, dear non believers, and don't give me that "You visited sites and lost your account or gave it to someone" because that's not going to happen in a million years.

[Flyby]

Grmmmmblll...Getting old.. memory is starting to fail , it seems..
K.. it was 4 years.. not 6 months then..

[YloH]

My main acc and alt acc was hacked the same day(though the alt had only 10kk, but they even took the alz).
But my warrior account (Full miths) wasnt hacked and is still not hacked. All 3 account was 3 different web account and had all different combinations of password/subpwd.

I dont really have an explanation of what happened exactly but it is not my job to find out either

[polinadk]

I bought CC via www.cabalonline.com many times last months
but i never i said NEVER
changed the u/p at least 1 year and a half now.
I think that would help.
What real disturbs me is that U/P can be compromised but its IMPOSSIBLE the
SUBPASSWORDS.
You see if a SOMEKIND of a keylogger is installed at main site or
to your pc it records only keystrokes .
If the hacker wants your subpass as well he must install some real time monitoring programs
so that way can get everything he needs. (the hacker can see what ever u do at real time as long u doing it at your monitor)
Real time monitoring programs are like those they use at NET's ALL the ADMINS
to Monitor Client's Pc's (radmin,vnc,realvnc...etc), those programs with some
hex coding u can change their size,visible active process name, service ..etc so it would be impossible from all TOP AV or malware software to block them.
Consider this if i get a virus or a realtime program and change 1 just 1 byte AV/antimalware,etc cant recognize it as a threat.
Some of then also injects their self into main active process named svchost.exe which
all PC have and is real pain in the ars to remove it if not format your pc.
In the other hand maybe i said maybe there is a backdoor at Cabal Data Center / Main Site's Database
so well hidden that also GMS cant take any action.
Many friends got hacked and many of them have quitted after 5 years of fun and game play.
ACTIONS taken from GMS/GAMEGUARD i dont have a clue.
But my normal mind says to me that nothing has change since 2day we speak people
still getting hacked with a glimpse of an eye.

[polinadk]

I bought CC via www.cabalonline.com many times last months
but i never i said NEVER
changed the u/p at least 1 year and a half now.
I think that would help.
What real disturbs me is that U/P can be compromised but its IMPOSSIBLE the
SUBPASSWORDS.
You see if a SOMEKIND of a keylogger is installed at main site or
to your pc it records only keystrokes .
If the hacker wants your subpass as well he must install some real time monitoring programs
so that way can get everything he needs. (the hacker can see what ever u do at real time as long u doing it at your monitor)
Real time monitoring programs are like those they use at NET's ALL the ADMINS
to Monitor Client's Pc's (radmin,vnc,realvnc...etc), those programs with some
hex coding u can change their size,visible active process name, service ..etc so it would be impossible from
all TOP AV or malware software to block them.
Consider this if i get a virus or a realtime program and change 1 just 1 byte AV/antimalware,etc cant recognize
it as a threat.
Some of then also injects their self into main active process named svchost.exe which
all PC have and is real pain in the ars to remove it if not format your pc.
In the other hand maybe i said maybe there is a backdoor at Cabal Data Center / Main Site's Database
so well hidden that also GMS cant take any action.
Many friends got hacked and many of them have quitted after 5 years of fun and game play.
ACTIONS taken from GMS/GAMEGUARD i dont have a clue.
But my normal mind says to me that nothing has change since 2day we speak people
still getting hacked with a glimpse of an eye.

[Diabolique92]

Don't freaking teach me how login works boy, I've been logging packets for at least an year now, decrypted packets, unlike wireshark which will show you the raw data.

As long as the client stays open, ID, password stay in the memory UNENCRYPTED, and subpw stays in the memory ENCRYPTED (Salted ). ( if you didnt know, boy, the memory data is gone once you close the game) .

The Auth packet that gets sent when you login your character still has the salted sub pw in it even if you didn't insert it, because it was kept in the memory.

I hate people like you who try to talk smack on stuff they have no idea about.

That was what i thought about him in 1st place and u would be surprised how many GENTLEMANS get to finish a university without knowing shiz.

[HouseDR]

The sad truth is that people are quitting and its becoming to a mass quitting or either they start to use hax, I know many good players really good ones which came across with the haxors and after 4-5 years of playing (some are pro players some are middle players with middle EQ) thought there is no longer fun in playing with a fear of being hacked or in playing with full PT while a very big group of people use speed hack and more to do ft2/mo and more in 5-20 min. The game just lost its sense most of the good players after they're getting hacked comes back and cheat or simply quit. I assume that 50% of current cheaters are old good players who either lost their chars/stuff or played for a very long time but got nothing while someone who plays 1 month has uber sig/mith amped +15 stuff. In my opinion it will be very hard to fix this 'coz people are changing cabal for something else personally I got hacked at least I think I did two days ago or yesterday as I wasn't online for two days and today I saw a message that my account has been blocked while my friend wrote to me on xfire that I was playing. Now if I don't get my account back I'm quitting, most people won't care about once more player but soon It can be YOU who will quit due to hax or loss. Ah to add last thing in my case I've visited main site and had my PC clean so GMs should do something about this otherwise more and more will quit/ get hacked/ start hacking.

[I3anned]

Hmm?

I dont know... Is these type threads are joke or just ...

I tested once all support departments and these forum threads lies that you need wait 89 years =.= You can get answer 1 - 7 days, depens of department.

My suggestion: Try to explain problem as deep as you can and as understandable as you can. Then it will come fast asnwer.

EDIT: Oh, i forgot one thing - dont forgot this is free to play, so slower support is normal then p2p.

[zsolti1980]

lol CABAL EU hacks: http://www.youtube.com/watch?v=0cpBLyCakq8

[marcino16]

wuhuhuhu got banned 1 week after i sent ticket because got hacked

[RatzaTM]

lol CABAL EU hacks: http://www.youtube.com/watch?v=0cpBLyCakq8

Which of the two pixels was the hack !!?!