some turkish IP tried to access my account

Hello,

Some hacker tried to access my account from a Turkey IP.
The hacker gained access to the new random password.
This is a serious security breach. You should do a internal check.

A few years back my account was hacked into, tho I never shared the password I use on warmane account.
Turns out the whole db was leaked (info at haveibeenpwned dot com)

I'm not expecting any response. Just making you aware of what has happened.

mail:

Code:

---

Dear <*****_acc_hidden>,

We've received a request to access your Warmane account from a new location.
The following IP Address is making the request: 88.241.82.32

To complete this process, enter the following code into the authorization box to begin playing:

<code_*******>

Thanks for helping us maintain the security of your account.

Kind Regards,
Warmane Support Team

Please do not reply to this message. Replies to this message are routed to an unmonitored mailbox. If you have any queries visit http://forum.warmane.com/.

---

whois:

Code:

---

IP Information for 88.241.82.32
 Quick Stats
IP Location        Turkey Turkey Kusadasi Turk Telekomunikasyon Anonim Sirketi
ASN        Turkey AS9121 TTNET, TR (registered Dec 29, 1998)
Resolve Host        88.241.82.32.dynamic.ttnet.com.tr
Whois Server        whois.ripe.net

---

Add two step authenticator.

2FA is enabled but it sends the email before it checks the password with the ingame client.
So if you have username hunter123 and the Turkish guy has hunterr123 he may have had a typo.

I'd change my password just in case, but it's nothing to worry about as long as 2FA stopped him.

Quote:

---

Originally Posted by ra3or

Hello,

This is a serious security breach. You should do a internal check.

---

Since when a logon attempt is a breach xD

Anyhow.. Kusadasi, uuuuh.. dude.
Give him your Warmane acc for a week vacation at his place of residence.

Quote:

---

Originally Posted by Palutena

Add two step authenticator.

---

read the 'mail' from OP (it is enabled)

Quote:

---

Originally Posted by dolcokidol

2FA is enabled but it sends the email before it checks the password with the ingame client.
So if you have username hunter123 and the Turkish guy has hunterr123 he may have had a typo.

---

If this happens, it should be fixed. It exposes that 'hunter123' account name exists.
If it correctly checks username and password both match, that email was sent because the details were exposed.

Quote:

---

Originally Posted by Invictum

Since when a logon attempt is a breach xD

Anyhow.. Kusadasi, uuuuh.. dude.
Give him your Warmane acc for a week vacation at his place of residence.

---

not feeding the trolls