Account compromised.

Printable View

April 16, 2020
changes1

Account compromised.

Hello,

Is it possible for someone to take over your account just by knowing what your character names are and somehow guessing what your username is? I have 2FA enabled both in-game and website but they still somehow managed to steal it. There was a PW request change before this that got sent to my email but after that I cant seem to log in anymore on the website.

Also, it's weird that my old password still works in-game but of course asking for 2FA but not sending to my email but can't log in via website.
April 16, 2020
skullatbash

when you try to log in-game, it asks for 2FA code before to check if password is correct or not.

If you have lost access to your account you may send an email to [email protected] for support.
April 16, 2020
changes1

Quote:

Originally Posted by skullatbash

when you try to log in-game, it asks for 2FA code before to check if password is correct or not.

If you have lost access to your account you may send an email to [email protected] for support.

That actually makes sense, I thought my PW was still working and ya already sent them an email. I'm hoping that my IP address history will help since it's just being logged in my geographic location since 2015 after Molten disappeared.
April 20, 2020
changes1

Bumping this thread since my account got hacked again. Warmane helped me and was able to retrieve but today it was stolen again. I emailed info@warmane asking if there's a way to change my username. If the hacker already did this twice, there's no stopping him to do this again for the 3rd time.

Can someone make me understand how this person can hack my account just by guessing what my username is? This baffles me. I have email 2FA and in-game but he seems to still hack it.
April 20, 2020
skullatbash

try to be more clear.

How can you be surpriesed?
If a guy has already stolen your account once, he does not need to "guess" what the username is. He already knows it.

How did you lost access to the account with 2FA enabled? it means he has access to your email address then
April 20, 2020
changes1

Quote:

Originally Posted by skullatbash

try to be more clear.

How can you be surpriesed?
If a guy has already stolen your account once, he does not need to "guess" what the username is. He already knows it.

How did you lost access to the account with 2FA enabled? it means he has access to your email address then

That's not the part that I was surprised. I was surprised how he hacked it the first time around just by knowing what my username was and doesn't have access to my email.

I don't think he has access to my email. It's enabled with google's 2FA and I've been checking the account login history and nothing looks suspicious.
April 20, 2020
Duderinho

There has to be something which you didn't account for. No one can just guess a username or just pass the 2FA on your email address without having some kind of access to something.
April 21, 2020
changes1

Quote:

Originally Posted by Duderinho

There has to be something which you didn't account for. No one can just guess a username or just pass the 2FA on your email address without having some kind of access to something.

Assuming that he knows what my username is doesn't have access to my email. Is it possible for someone to get the email changed just by knowing that info? If he did have access to my email, google will block it and notify my phone for unauthorized access but nothing.
April 21, 2020
Duderinho

Do you think he just "hacked" Warmane or something then? Don't you think that would happen on a larger scale maybe and not only to you?

I would advise either setting Google Authenticator instead of Email Authenticator in the Security tab on the Warmane page, or just resetting your password, choosing new security questions with answers for your Google mail account, all this eventually after you reinstall your Windows, just to eliminate any possible factor here.
April 22, 2020
changes1

Quote:

Originally Posted by Duderinho

Do you think he just "hacked" Warmane or something then? Don't you think that would happen on a larger scale maybe and not only to you?

No, I'm not that dumb to think that.

I would advise either setting Google Authenticator instead of Email Authenticator in the Security tab on the Warmane page, or just resetting your password, choosing new security questions with answers for your Google mail account, all this eventually after you reinstall your Windows, just to eliminate any possible factor here.

The first time that my account got hacked, I was using email authentication. As soon as I got my account back, the first thing that I did was change it to Google authenticator and obviously that didn't work. My Gmail is safe, I've been keeping track of account activity and nothing suspicious came up but I changed PW for security measure. Also, if it was my machine that's compromised other personal stuff (non-warmane) related would've been hit by now right?

Thanks for your time. My question is still unanswered:

My thoughts here is that, is he using some kind of a bypass to change the email address just by knowing my username? If you re-read my previous post it probably will stop you from jumping into the conclusion that Warmane as a whole got hacked.
April 22, 2020
changes1

Got my account bank and this is all it took him to take control of my account as per the account logs:

I only received the password reset email request on the 17th of April and somehow he was able to change the registered email by April 20 and finally took over.

Password Reset successful April 20, 2020 at 14:54
Password Reset email sent April 20, 2020 at 14:53
Password Reset email sent April 17, 2020 at 20:04
April 22, 2020
Lonelywolf

Quote:

Originally Posted by changes1

Got my account bank and this is all it took him to take control of my account as per the account logs:

I only received the password reset email request on the 17th of April and somehow he was able to change the registered email by April 20 and finally took over.

Password Reset successful April 20, 2020 at 14:54
Password Reset email sent April 20, 2020 at 14:53
Password Reset email sent April 17, 2020 at 20:04

To me, this looks like it is not your account. You probably bought it or it was given to you by someone. The original owner of the account can retrieve it any time he wants. Warmane will ALWAYS recover email to the original owner ( the first email that it was created with ) Period.
April 22, 2020
changes1

Quote:

Originally Posted by Lonelywolf

To me, this looks like it is not your account. You probably bought it or it was given to you by someone. The original owner of the account can retrieve it any time he wants. Warmane will ALWAYS recover email to the original owner ( the first email that it was created with ) Period.

It is my account lol. Warmane reverted it TWICE to the original registered email which is my email. I hope you realize that an account won't be retrievable if it's not your OWN account since Warmane only changes it back to the registration email. Did you even read the whole thread?