I got hacked

by **denobilen** » Sat May 27, 2023 4:05 am

My account bdenizb got hacked, how do I get it back? :mrgreen:

by **denobilen** » Sat May 27, 2023 4:06 am

The email got changed to hnhuc@fexbox .org

by **vatas** » Sat May 27, 2023 7:07 am

You should PM Loftar with any proof that you are the true/original owner of the account.

memberlist.php?mode=viewprofile&u=53

by **loftar** » Sat May 27, 2023 1:33 pm

I checked this out and responded to OP in PM, but what I found in the logs is slightly concerning, because the same IP address logged in on a whole bunch of other, seemingly unrelated accounts, which makes me suspect some sort of data leak.

Since the number of accounts affected is fairly small (261 in total), I'm not too worried that Haven's own user database would have been leaked (and even if it were, the passwords are bcrypt-hashed), but I suspect there may either have been a data leak from some other site, in which case the affected people should probably be changing their passwords all over the Internet, or perhaps a malicious, key-logging client in use. I don't log what clients people are using, however, so I can't correlate the clients used by the accounts in question.

Interestingly, the attack doesn't seem to be entirely "rote", but targeted at Haven, because the attacker has actually logged in in-game on some of the accounts in question. This kind of strengthens the idea that there may have been a malicious client involved. I'd like to post a list of accounts, so that people can check if they have been involved, and/or report what client(s) they've been using, but I'm not sure it's a good idea to post a list of account names like that. Please feel free to opine. Sending mass PMs probably wouldn't be very helpful, since the people affected have probably had their account passwords changed anyway.

Considering how to proceed.

by **loftar** » Sat May 27, 2023 2:31 pm

loftar wrote:I'd like to post a list of accounts, so that people can check if they have been involved, and/or report what client(s) they've been using, but I'm not sure it's a good idea to post a list of account names like that.

For now, I'll post the list of account names, but hashed. I know that it's a bit obtuse, but it allows you to check the presence of an account without revealing the account names. If there's a consensus that it's fine to post account names, I'll still consider doing so. To produce the hash of an account name, use any freely available SHA-256 hasher. For example, there's an online one here. Don't add a newline at the end or anything. If you do it correctly, then "loftar" should hash to 6e306e647ab05d066a718851233a8dc74b2a2745c4265c6bd9b81582279eecf3.

Here's the list, just Ctrl-F for your hash in it:

Code: Select all: 001c6d592a9129ddfde1fd5d6394e6a89e7ae11e3ef7bcb99b6a602722253698 031dbe7b4772688b7d4e56d31176310935645f7d7f5bd5087b0d5fecd3011a02 048430b6b019d6672d746c8db3a26e334ea4d59d2a4a562e2392d2331b8c3e77 07256fa4fb5c4e9f45450bb60a61bebcb6032ee46b90143032c8e9ad32506990 072f0c34d2d0e25325c35483e557aa0a3542d1934759c2dbeb95e3348b7ed13f 08f83be41e650e3e0f61df8db488a6a1e07550cc2bf0acc6b8e70d4b301499f4 0b2d4d74561e8f05aae20c484d462850bbc59793c8ab5752c3139d3c0236f25e 0bb0f1861b7b00443f8b306d67a6c5c29b38b629ab1050da2110d3ab23a579b6 0bc1907b909c5ef883f33c5142500fa2597b8ca1bba0d6347fe867dd10f76829 0c16d82a68279db26c063527378e5eb79017aacfdc33bc593fceb18a2a78a672 0cdec1f9e669013c0c08c0ea80aa91d02f0b66ca26b3a7c53860fcc6b9b48a56 0f6004338820eb3b3152d71736789329b2886048acb537e69f80af6df426238d 0f6b43dfcb82478704786dc1b767f782a543886a30ca57e14256960ed9e4a238 1211abc1c0630080c64ad4d29aafff20bb66612dc1f75ff430749c9d1387cd64 1372e7c362f8950173e7ec0fd09aeb6fa86f3a8a70beb74e87c45c18f683e366 15abadc69ca8fb24352a093f5db84434764d8b55d0747ef1f7467104463ae34f 15dae8e6dfdf186a4ffa388451e13be9d63a6dc4c7044c401205115828c00c23 174e6140f5968ded555aec12bb3832449af2e530c18b326e76e8a775ae99f722 180da90f15434a4784c2108e66607a495be046bbb8f4d7f46fbf07e7967ff78d 18297c0056b6bc67eac12231afa2b7e71eb3be88db28b1040927b6c72b661b9e 1b03a8129efc54bd5c67912e92f5652372ea0c89ac3703fc979bf5cfee307805 1b0c4d44fa7aebbb5733939b3c9f6c6942fe07ee8d44c19f4f482132d4b033b3 1b7e8ff52a8c1180d47bd46bf82d7bda021e46869f492fbb7c4ec92073b54ba9 1bc9b5c546e742cb8d6789a29510b3363a4b0447c88711cb581c4d82156b6daf 1c56b6dbe88bc742ed30d27e695f09b92f5c0261ec143104c72d5ac65b3acb9b 1da6a4aa0734883fa6152e7bfc2444eba4304464f622f78eefedcab4fa10deea 1e612a7ad509ddafed05011205a572dfd55fd29e8da786eb1d368c513475fb12 1f2f8f903f810367f40daa6f1d267b5abfdbe8560ec393bc51ea230781ac4e17 1f8609c9955d9c22b3cf60440a68f2351d926188ea5fe0ea3884e655aecb450e 216b7c91cf879db1c1789ec6c27e3fdadf9864c13948a2e59b605bf1e6acbb1e 219df311fa2774d627adbb71106d13f00b0f94a6356e3d05737063232243e9cd 23f02c3c2eb444a6a347f359a5e20988a4c211c9e8134516553d3db3b81dbdf6 24178cc0b96dbca619c23a3af8044e36c0b64440140783cc82932fc705b3ee83 24244c62fdd3f3f37867e2618cef6b16c573d0255555ba0b3ab779d96d24b15a 2474cf474fcb4c16ab41864a43e55a4f11924622a98617c678fc8ff2a547185b 248e2e52ee59d41abc1c82e7483ca18d205347bdcdb514831d94462532f83d5d 2675fd3edd868473a6be79179c71d2d8e5b0d1309a96e48d66314e28f88eec34 27a0b41be4c0d60527979e4d8cc8444cac399b9f385d0b3247dc51cb09b58894 28b4259d92d627144bdda48e27493ab965b82a382ac2d587fe518fc78a5b863b 28dc6321e716147bff057bb95e39699756b55e8a643dc2906426292a27da642b 2c7d38b8276fea34c2e56db8299f388b30ff221d33d172cc42194b8fe57f6f01 2c957975a56ca221bb025474835e489ba81cf50d71f8b39c84fac8ee325104ec 2cf7fdd82821bdddd314de6fdbd4f3b66a019f44461b1a1033f9da5654ae51d0 2cfd952e64cc7f4cf4cc0d74666c175661a1a63358b932ef64458bd874dc001d 2d702553d61c9000058acc385291ef17df8998fa416f75090e69a4a88081069c 2d9752db73ecf82bfd8f5f14dab9495f138b947b6ef12b39c6e5ef26eec833ae 2db2ccc19f745eaac6ae363ef389c54d8adb8776168916ae3214d0384563366b 2e681bfaa6d5fd45d0d2295a16d95c03b0b6c26466ccf41812acc23bc81bb8ba 2ee0fa01c15db4482ba1862c7eb43a4e5f307cf394c91a1b2124de9f8eba27a5 2f6e1243115b55de57fd500d4f213ff243d39692551cf3152f79d8349f021f31 312791d6d94d714c748de883cdbd1a6a5d2e22ef7653253502df81ab019df1f9 31b63db9458445a39c0408f4ae1e391dd19e27c350b353a44fe8907c49d70bb9 323184066ef6fcedf30a18e64e1def6e1a99eea9103c05d977a6c66a70cfcdf4 32540990e525665647571f9c89363b6ad8dbf7cd93fc42c6d37e358bd669a9ba 32b55ea8267c12d5afddd74a8a293c18c86aff2dd0d76416d58b867adabdc458 332164510fe4c141f93652b0843bd1fb1b28bb2214b9eb664e5202e34e18970d 33fc2279e401ab6e078ed3f7fcaf265db0c921ec5050c0bad695682488fd5c76 35e6a5a1184b907c7884cdb89a5bd66f0032e61eb8942637cb0323aa126976b3 370da5c323fce28534ca1d330089074054cf5e8b7b2806c1909d6d94f1efc6d7 374592bcca12aff3f4ea94584cc07ca680d098ff5811c18c88057681561c648d 37831241213b2f80f0300c431021e18a6d19f67134e320303fa2cc2d3eb02944 3a678320c035c157d726d968eff9d99e061f89ef2fc66694c7a36491db706bc4 3afe26d5634f1ca53edd83f4abf992c0ec908be04049ec4497807f29f07d6ac2 3be9bb92c2bfb3d37ac44af072fc985cd4d233d0f750c1edf6dfe3b5110f3fe7 4061cd7b50a5c62643997f8976b83272e371b01b0b8a57b718aee8b4b71f6bb9 427b8eba99652b726d36fd09cd3627bed986db97cb7e51179d3142602174f744 42ad9947c30c2f73ea7b542594c4b9d044f8ee9983aa30442fb612740195eee2 44b0b9e0bcf7b442ff40556d87e033d2fd7ef36a7520a57141f28f4ac92b067c 457750dcb56fdfe7512956170e963bcc5e04c2eec7379a00a2697f84530c0878 45cd7f7e6e22524d521e2cb012ac2e283843f96986d040cf2ec793348e672b43 46a77e8038702eaa0fe68489b0d76aa7c044ffa045843377f60c029a35f6d202 47977eb976e86adee9ce062b5ff6faae8155774f4a9165a884e2b92fa5a45414 48403e5f8c77c3c3ad6f89676504420f1321f4a58ae1395e3317db6c307736dd 4af3319601e92595d9732d0d2ee10fc64543aa36dc6114294cd3e11ffce126b1 4f3a399951723596c89130e4b399f11093069afb49435a7bcb77479164b9c6f8 506fceb8650295ad5f05d2acff5b270970497f6c81cf0cea67a7265f17cd132f 50e7669226293df6ef1fe2648588001f9e67d7a92992859865d6d0349a536ec9 5131bde71369271ddde96e0bec61ade1900abb904be9bc1a2333e4715ef68392 51a503b053c33b0f9977504dfc0166101152e1d5d285873e7d56b2d344680701 53ee3f6cd4bb669c67db79b6e3fe9d63513541b39c825a02fb049b8cbc3ba142 5408f8194f5a13b32e13d6faf008d3d9ba2ce03e77174d6ec1f2d225dbf0ed17 56eb586bbb20f488b4b54a2f1223cb9852b2726ae35108b3432e060192a9d55a 579b8b89c5151e331517d70379d4c15720a0fcaf02b8329a93005e0f1f043240 5803188cdf6f190038b843937df8ee91c755d9dabcc1f96c6e728f8bf8fbdfab 588279ac6bff2ac886aa3cca2ff0f92dab15f45fa42e03899d3efec925eb4ba3 59153a54d1b0f959367075191fa26a977c71de85c531a9e7c3dc669be6a39ef1 5a1f80bdddc8e54a3ef2492c8e8efe0873a01a3a1aa1430a29b6ea5866518337 5a872106f039cd568615c7fdf0a127c9fe3acecad2ae73a3206fa90fcd05a48e 5b9353389e0290788805f9d04063305d82ef219ad68cfdfb89a6e4f1001a1b6f 5c3cf455fd3f8dc922f28e5e09251b0651c8c4d859f0e93fe927366aaf556ff0 5d288bcf868865aab1a2d3fc9904a0f8128d04ebb6fd234ebf8557bcc545656c 5d55583972555ec2d92b608d86ec5c54c883d1357bebb701a5e3e1400927c65d 5d5637a168c05878c2ac140eea1387ae792b1486cfd00e91457efcf5d7d7a7a3 5d6ae620fb0465637f17c7a34855f48f38574253c1fc9881906636f4de4db6dc 5fa8e7c45a55939e207a55f015fb1278d3b001456060fa950a17a84893f5e7e5 60338bd882a7e538bfbb34c42fae3af10585d3c1727377c4d340ab7939dfb0f0 62842c7d248edc286b2d71712ad040d76aa4255a507ae852c3768b9b07100158 641bb2c3a914bfaf5d8de943a53d00cf6a356e96d575895c62fcf471011cb108 65dd741b1361eabd2c4bab6437f529945144b769985b05564b3ec1f4acd44d7a 67b894691096c5d044ca7a1f8a15c8001de24945b0e8611db7d718d35e8e6a4d 69c4b192538a2a02466fd0da413fc35df7d58c3c823febb2daa685abd3da5eff 69f2dbea06064691b23d217b99fe54847979716bb0ea951186db57f68b3282a8 6a5e800d0e11cac7c80179b6373b80a9a62ba4537f06681cdd80f608d1e3a73c 6af8cba46dcca1e17b9f16792f84ff40e9b5d70b126bb9187605225c5e2da58b 6b6f3ffdc7f7dd16f4962fe33940dd27c1356859eb9fc34029da52bd0995cddd 6bd3b295146ce6feb30d0ebddc5793d85d4e477925cfffa7e093c190a9735692 6ee96dc87685cdca8cc6eb185a5679e4d6e4dd2daa9eb5fbea90a9637b6758f5 6f0c7b8367b3f35e854636a2b4097ac01138a1c7eb291126127b687d368a728e 71054ebe7b7f4a7c116c38da8f7beabb239916025bf954fcb42887f4e4bea970 714a2387a5740cc16cfa02bdc25bafff4bae5f2fab93fdcde6dae64bf9f5fc04 73b72cc83b8df94dabc6f52f819bd30f1a12fd79ea0a56e69bbfd6dec1d744ff 74a82eb135a6e44e98d009d01c0ec0a91ff6bc18898cedcf995075b1200465f7 74b60737989f2fc8ee55a64bb15b1ff76dec01bc0f2e57dc213a4351b4fb1ebf 750762eecfecdba6fc7cbf21f259fb1469e78ffb03a8985df7061025a6373f72 76216a2f83baf2b178692fcd7b1547a94a6fc211772738c13501a76991c6b082 77a06e3f6c64e8aeb02e4ebfde787e0f797d6fbbd5d80682bdc2f9fdf1b27f34 77cecfecdbb7e2c5966c8dcebda6c6efed9987e0c8f84f831cd3f3344b47d1b4 7989df5d816eaa7341594c095bfd7ece1324f965f1bbd3d120f62d09f0069f44 7d613ae955a9097c38fb6291febdcd94c888d11b90ea202112c2bf40bc526e14 7ec8896b929d3ada0f9d895b30a3b5e9bc5b63c56ed56ce3eb744885f26440ad 7f87224f88a868c02dec2b731026f08a8c08c93946787d9a16060e8e8a92b9cc 7fa9316452606ee7b2b1353e7d8e927dc1c1f6f09fc6433eaf0cb2d9448d9dba 81a4e40f89c015049618eff5e1ce241c54fe5531f91649279445a610711e9675 81d4f58e6685f1b17c70f14dba7b5185caccac12fe61c6df63c7e0c450684604 82f79dd5f910be69e1710c3f50b59662820fc263c1b87c0c5e5354047bd6120b 84887588adbbab25c853e36dc385a43e64d80331c8b92ccfeb4124b5a5006202 85e0242089b999809e9ba07af844355095fe6f092996b0e77ddbf6a0b3ee9ac2 8c9aaedc749a085903fa3546fb69091c6976f3a8436838664d450b9499edcc49 8ce318539e72916312c7146deeacaa584c9ba3fc587ee24a6884c8a4fbbddffd 8e67dedd111e5ed511231ad5a544a2500fe7513ea79774a13a5cf4d718852747 8fe55fa4b618dafdbc1f4c11675eb3a2574191524896d58ce8005141626f9112 908409652d9cbddcd1249a58f22a7438b2919929812addaa75616159620b4b41 90e79a336e4ab8664e67470d73ed9bc3ea6576e881fa4aeafac4ac166b74fe25 92102a057c6e73b624a6a9830bcb1a4ad363be5f6915a14f0d74c7c622fb9ed3 9372f96b46a0f762090356ee6a9116de9534c20ee7fb346c585536bb4092b79a 938a07b58e6da13ae41b67fcdfb767db5aa43ab9870d094500f43272eda355d4 93df55085d3681086a75e7d9d952f81ce5cfe7c469acd8488a007859859fb16d 941ff884663abacfc1a204b46420042822c941271225f27ea0ff2c9f2233f36a 953511852a496fa7e4f1fed7d9c9588ff30e7f01e0e5edd7883b2c9fc74ffce6 953f10355e67a31dfcdd7774c5304945ec72edfa1086d2effdc836b9be264df4 95b708edf650c5acabdfa36af25d0b81f2cf30a8a7326bf51cbfad77df719f40 96a32952d4863b9cafa0695c4a983f00b217cdd31083613cf7fb7ea6f1ae15d0 97f7cb0697dd78bfb1e4abe43a3118277d1a8a86690ad5396fbf7afdb136320e 98c32b63261a58851c35c1482063b02451492c63c88146709e19805a1027d1fe 98f0db12881490f6af351c13f893a5451e5daf194357c9872df7a92688a3d7ad 9a414eccd9c1cdbb334be11162f682d16ad83c793a888250e61928b53b7bec5b 9a575533b229756782119dc8bfe7e80ff4a7eef005c759c3b51351fd68f45f85 9bd59feff0e3f945c819529832880064c95f7e56cadeaba88c71bef0c8f0dfb5 9bfa9862bfc6e8a85c529fd0ce2b1f7f0682396f9273558947b66d8c6e45c49a 9cf7a222ff5b72be8cdf55711a8fad4f40b8749313e10365a3dc27eb36dbdd11 9e6d7a24b6d517bc87c3b7759203ea2893ca400b0316f334de6b75fa1b4e2f3e 9fa05cee617ebcee214efa8f8d68fdb4c86622938756cc5d24c40e0cdd5c149b a216f0bc6acc0bf4bae822a9a7db20ff0501d98cc68e5c822cb7e508595f4105 a23d2e6bc9c53fedb80fc6d384323f02a4bc69cd4f2cc232e646652f3bfb8b46 a252d8d6043fc9d79849a9529dc3c2727ba9c25f9975ecfc8172ef3f54b15ea8 a386fda92825acbe100ceb1973ae121a6620e4193c10d8e0b57a73383873d3a5 a6273af2127f37840d4619afbd61549654500c0277cbc4081a373f8dfa77cb8f a70ad8fe7eef59afd80621408e5a500634f315908f98906ab0b016e021d7f70b a83aae6fe63ff13b03bae057c91642adb414430e97886ffb7702307632c85df8 a847a96827e174ffce5a749ebffcb8e3b41985bb231715ff43e80d1141aa46b5 aa8d0e6e340d7dca614364f2de9c734d84d4f399be9d885226fb0072824387cc aaf6098b637fb8486ec5ecd8e27461e99ca38f6dc8cf0dc60cea0db813bd6dea ad0b93c0b64cb171f1e87377f81d717f9081df3f7bcb2ddb48123c1ab0dfba72 ad7cd8f57a365404976bb11fac6b2ad678eec60d9463c2ecc0f550e06b336a31 ae343245b65377ffe2865b8d3528d932c1055f1b22d284516907324b685688d9 af9f6dc946f4db255272d1d4d8c4b4dd294a9f9bdb0d661fa339332eb425727b b0fb7fa8e093874b81a3d5a2a39e2d65a6808e0dd9c70b4b53e6d11912f0aeff b10e782979d77570e97573ea693e83d67cd987a1933ff3006c08f1ba6224c8b2 b177d1f587c9a552f167ec9345ff157edb81b9580ea47f362b1bbcb91b8abe71 b1973295823c5065a341f258613ec045bcfbdbdadfbd6ff5a6fa2a13611d03e8 b30d16116702a18059be0a6fca74681b23414faaa0268a544f8c768411f0c0c2 b40895243486613049fa100f7c1472395204139e58dcd697ccfbfa9574e5d5c5 b471a4ec1b3b6465f48194426376b5ca1a242d4e99ba6317e801a412f6f4d1b9 b484de50221991d4d2869ba02959af550beefb7975da6bd5a735fc94e40e9b78 b49ab1db6017dc2ea524fa977af6e9c7a2888255b7a07211b75e33a0886a6024 b5c27f4249d055f32655f74b161e32d42b1091ef99ffe53664104f9f925b5012 b6f976fb6202c8e6a69d0482a7baffa5bdee05203685dfd1a92c43f9416cff44 b82e7e77cdbc5c4d8aad5a8435556c51789a32408ebb90d6536078d2268c0e0d b869a26fec1cfe33183f8550ed1941342cdf6f0bb3615ae169736093f316a1c9 b8887eab6f049a2ae92715c5c72b8bf58b39a6771a9be83dba3ec0aeef1229a8 bb9bf6d4e2ffabe5774550f4ef93b65382ef93c99069974989d4483800581658 bb9e10f5754bf626a2e43db6dfcc375a7f4c9a85eb7377473f1c9e88962cfd5d bc54c66e8db401fc6fb057a50309e3dc992dcbf799a077c74e6fe08a7757345e bdae661b1c7e8a75fccec176a82d1cfed12d9cc090e4ba145eb79f0e0d6bc6f1 bfbbdc4e85bdee85286e29eb2213d65db945ec72293af4b350d4114edc42e5c6 c02d6f2c9b89280da4ff3a06d1c8392871811245d1ea7bf684ee24bdd6268bdb c06a5a56ec0e01a123353b23204a5c3061589d0d625cff3bd132f43f7c818a22 c0ed712c7b7081747347280106e2a3e0be0bb64c722a5f62bd1f74727546fcca c37c586cac380422aafcfed611655a905cebf4380002e88ab47c69c0f2825c0f c3a5788ecfe41961ef66973cd82dc51fa6d3eb2d5ab60d545dc2cfefe9ef7a31 c483eb78b29bd56fe51169d2a0830694fa8e21ef27bdf14e8f32a704818dcf7d c59a6d8a67dbfe67e50bc349f49c97e90e425a806bafa666cebf1b7764fb120a c60f90590eaf05e80a66b85af6002c2fe5810230581f7a40a44d3d7aa9b52ace c6202e471e75da2182eb24c7526272fd64c2a87f0b5b418f82bc9e8af4391c53 c63771b7bbf606a37e393f287d0efb445313c06685637f94db0a36234fcc880d c6d1b3e63babf5e79694b69793a3e930536fc3a105b895adad5e96de41a3306c c6d2d93072ad1a030aefb43fc607b38f927be3079dd87ae6456cb9c696db7177 c6d78d397c43f89b6cbb8d4e451c697c227be5efb9413319551305539f19e5ec c83d236fbe2b749baf56b8b91e52af981e10778cdeb5623b2d25aa545b43bcdb cc7a9974235df85ccaa1fe849890b026b6514e0ddb3deda887a4743d033b3f1d cedd4f2e88acca6b4acbda6a607e6affcfbf51016824caec929bd1a622b4277d cf33f309868cfa2bbbcd69eb565d80155d9b47417fa61382ba3c1b1f37fb6e21 cfcafa6715af2ba91e9441f3bf59161623887b7c7388d9e6470303a7802bf919 d10e26c948ab6dc99ee46a655dcf89e1e520c00de32feeb793af6b641ec1927c d111f981dc30cd16096939bb5c8bf445774b9ed2b2488bcebdd29a3126b66544 d14f3f7b392ecb0f312c5aaea0f42fa5f1eafbbbd89f5d37e0d075cb1f187d46 d16f6c04edbce70eccbd06238fac691041c0823a0110eff10a10822bd8f9d78a d1f56766f2458e28a442ba47515ed281375d44d2e131ae46a9df34d3d8cd3c08 d381001cae03c77bfb295bffde278b5dac099fcc71845e1b8b4ce0a366d6657c d42e483768bf60591af82673ad5c8d772f9c1e170bde770b056b866b96ac4921 d4caf1ff5bf06e33fc9d5cc49740bd02ba8b20338fc6ed08a4ccfd5607d85b83 d4f23c6400651b73b0ad267b9d5865b7e32bcb127dbbd36dbbea4289057c2df9 d5c6af04520495a5477515df71a0798efa9d5d4178889f505d123a0564f6d9da d5db981907b8b8aae3dc8c18784341283c80c2105bbc19ccb4ea34fd9a7f1218 d83a054f5376913f4e254c66978c50cdda797d256e1b4b8268e665f3f4dc6125 d860a7ccf70ec5caffb2d8d8154fec1117c74e5d66f2282e8e83c5bbceccb448 d869789a4b3525208dd91582323e65efafc91a1b4a6b554593b4d8dcfa28eefd d8d1fc4c1d191ba86fcf5b76459f3d4b8477b9835764d38762d44541d49d3bc8 d8f8b084f8df879f8eb26172bf7316b5d514c56a5e23bd8a748270ee678bbe7e da5283d3f51ae5ddde50ca6181d8dfd91dece7c6ee080caf7a6a65b30fe66d8f daface85e3ec46fff435b2a8c3ae23bac72b65bc426851862e53bc2b3eb8963a dc64ca24e128d97627d6585d9ba869f6d4ef7ab7ad82515b6100244cdec3e9e6 dce35c39de92b5dda4a553d92eba49b9d353aa663f0f62a2a3bf2cffce03a62e e0df70de310478938e22add0529e8256d6e292286df281a701650ae7ccee4752 e13390836c8feccf79f943cc787b1d8527ccb8c175911841ad9169b7b2230d0a e1c923ec863c53b69567bcc5f5553b6809aba272483c204d7f04dc0717714d8d e307b5e021b6ce2b2dffb61df6ac88169be5762dc3cc19a0fb9a6c2f4d513d87 e398486c0acf90500ef03dff3c741734ad39fdadfdfb6af388a2249a341c6376 e487891a7f721e0b05a7392ff3a2b568697978498cf266c41d85b3d7d7e8487e e4f0033a1381036c3b42e081656a6803b9d14c14512bc4c2e29268de2eb80bfb e5a6db7b43e598c1cd7cf9a0983e40c22be568a5820489f40124bbbce32273ab e602b911643af2a3112056a8b65bb1255793b880d105c387234045957f890979 e6dacbde3ce2d8b6bafae8fa3c7ef79a3e7c1761fff47f40624983533cb81443 e774d6274643ad34168751d1defa5cda584a5b5659adbd412d583fda6e711fd7 e86cad5ea6d539d79c60cb4d1e5d8d1b8feb860fc51d0d19caf916320001865e e8e7c1fa18697c3d9eb512600a00971521700453871d569127de3eb63671d006 e8fe48c630379050d86485ee651c8c7785081a6f7ce010d097f82eee20c42765 e934ccee0a6afa72d3f9b5530de5882fbc048d8a764b4e0b677aaccfd9bae500 ec3771ce95ea0a5a3746701d594ea653931ec3149f10f7c71afda13fe5a765eb ed64643dd6393caed749966278c24f5602ac86e29e60d37924d973630ce16ec2 ee40516097578753e5d60099403a465fe4c04667a421e71ef1e152c15a23c360 ee6da8a003796225e61dfc1c871da0e7ad63dcf17ab7530e859ba03c6941a00e f13a617d7f1a3ceec8c29c6711a07437be05a385a1ad756187a8bbcb6e02a541 f1670d736104c68374d7f6a8bc80dad33b34ac2c3a54500d1a3ff646d05c32df f18a4c98072a6c8b79ca9867f8994f9ed6c1e6b9c1586937755d890d4696c12b f34be6e76ff3a17d8d01de64d769371c823f96a54f6149897b56882198a8dacf f357422f944da5b34c3b8ede92d4196386dea3b7dfabf386416c46c5e5122f85 f388c910124077f7af18e4265072f31f8b76281eae6ac2849c2f3deaa7a0cc29 f5aa583495afe54666c82b782f9276f161cd4c0347a6e2a7b84a4a044988f067 f6c22fde354c622b435f2955ae34ef820d61336384261fb7bf653d749cbf38c3 f7c491e9c42693a4c3e8b526da0be259938a71bb8aa29a8da193ac0579ed0bb3 f8621ab97702b1472640fabdecb6424e8459873e706f292c16f73186516b7c15 f924191c79ecc08cf76f7279d2bb2d3dd49428084215243d7d923f9ff2c3144a f980063a0605649dd1ca9aa7616f167e8b1b819bd257ecd43f07d965579b70f6 fa87c80b22c737902e663036bc5458c1b64f76da38378e284a907a7da284a268 fc3082ee972704e31d21caf9ed853adbd5bb9439f7a81caec7aa3c11abfeedc2 fd99a462b102af2fa1653d4eb8aa12fa80b571b986fde922a2c4302cc161f12c fdd1fa5ad0fbfca1e04a36be1667e772e90646a99511c7a2c37f2511b2f16580 fe7faea4499d7a2b858ebb38708f4d063f6ba888b814af8828a83db1e6cce966 fef8cec0ffdcbf78b64df6bd244dd57a0224531513cd85e16b354d92264676b6 ffed71527082c3fda58d9cfcf77823619b212dc2cf0a08b967e7644fe384c4e7

by **lwdragon** » Sat May 27, 2023 3:23 pm

Isn't account name = forum name? And forum names are publicly accessible via memberlist.php
So im not sure why you are afraid to post it

by **Kyrex** » Sat May 27, 2023 3:24 pm

loftar wrote:If there's a consensus that it's fine to post account names, I'll still consider doing so.

I can't see much reason why not. The attacker already has them.
Would allow us to reach out to anyone who may have had their credential breached (perhaps they mightn't be actively playing at the moment and so might not see this thread).
Besides, one could convert the list back to usernames if patient enough. (scrape site of usernames, convert, lookup, match)

by **loftar** » Sat May 27, 2023 3:42 pm

Kyrex wrote:I can't see much reason why not. The attacker already has them.
Would allow us to reach out to anyone who may have had their credential breached (perhaps they mightn't be actively playing at the moment and so might not see this thread).

Fair enough, spotting your friends may be an actual useful service, and noone seems to have been able to present a good reason to not post them, so here they are:

Code: Select all: 4eRteK abklegendary agenths aidian airuu AJYou akaplan2021 A_Lerien alpseyit Amenadiell Ami81 AnderTraxXD AntoSM Arielllo11 Arkairan artemisia87 asd3961 augustobean Avardir Averet axusik Azadwarf Azzen bartooo12368 bdenizb Biblioburro bic birdana Blazeg1234 BoomGoesThePew br4tishkinoff bruiser15 Bunyez butter_lord84 bwdodd ccMoko02 CelesTaka CelesTakam ChestnutGore13 chirik112 Ciruzzo941 Ckatos cocoshel Code19 ColeoIsCooleo concaveUsurper croowley1313 crowsmoke cwainman cynddan dabada daineloscar DAMNDUDE12438 DanGibbs danielQ danspartan dantexsan davv DBreak DEATHRIDER1138 Denis_animations denobilen dependentu40 deram destinity DevilWhale DJPwnage dnwn Docraff DocRafferty dohggy donatrax DoubleHarts drakosu Drav DrDoomDorr Dsantos duddha dylantt9 dZark edson121 edulife Effi Efirax Egilzzz Elspeth EmberSix erraticpupil fabian_mc FetalPile FilipeMs fionasse fjbkj Fleurpink Fleurrouge Foult FreeJee frozik82 fuhrein Gabriel1205 gamer15604 gedas001 georgeyates goddon654 gonzamvt gonzamvt1 Grimshackle HansVoralberg harpless Harverus Hasmath havebank hazzor HearthKeeper Hermesias hieronimbosch Hiller hoodred ianferreira21 idranaser ImRealyBored infidelcz Internetcancer ironbeast Iskeletu ismixan jacksonmerg JAeoe jeki4 jensbond JerichoPL joemama jomaso1234 jomaso4404 joniku josesgomez Jul1anc1t0 Jules_Merit jvdj kacperkitel14 Kebrian Khai229 KilloSeJoaca Kilos53 KingHoney KodaiSen KuchenSpeck KuroBOSS Lariien lavender Linkur LKing22 loger1200 lokoman321 LolFace loretto LucianDraven lvlduck mangopuff12 ManofDeath Manolillo521 marksilard matiliky matpainter MattoMaindo mauricio134 mavum MegaGamesYT Mijon milithien Minohita mitman Mokeb Mokos mouchlas msspes Muckster Muttsuri Naeght Narasimha NastyRoller nefelindo nefelindo1 Negrordo nevvord NiGhTzS2 nik195 notonthelist nyking odich Onyx1999 Orrilonrion Osurtan PacificaMC pavlecorba Pawlik123321 Pe4enьko piorek1993 Plexisse Porteiro powergusso PrinceDanny punka qoo0958 Rab212 Rad44 Rainhawk RandomPlayer9985 renzodgc riasmaredit Rintaro rndman190 rogerboy0053 ronda Ryflamer Ryuri SalvaSalva SalvaSalvaTY ScourgeOVOXO SenhorNutella SerDer Shiroi_akma shonai SigmundGiant silvershock sjonie4444 skyknight122 smt923 Solista SondTheAnime Spaaks Stori-kun SugarDaddy SynieztroLP Szvani TabrisX Tamiricle Tayashii TeDDzTeR TheLonelyWander TurboLeone TyroneBob Vanirr Vanirrr Vendorprice Venenaobr VirusHunter Vitozzz VoRTeXeR007 Vovkalak WallBreaker1 YATO111 Yavetill Zangon Zeck16 ZeDeX Zetta2661 Zygon

I've also reset the password on all of these accounts, just in case they all use password123.

Kyrex wrote:Besides, one could convert the list back to usernames if patient enough. (scrape site of usernames, convert, lookup, match)

That's not entirely true, though. The forum memberlist only contains accounts that have used the forums.

by **Kyrex** » Sat May 27, 2023 3:46 pm

loftar wrote:I've also reset the password on all of these accounts, just in case they all use password123.

Great, I think that's for the best

loftar wrote:
Kyrex wrote:Besides, one could convert the list back to usernames if patient enough. (scrape site of usernames, convert, lookup, match)

That's not entirely true, though. The forum memberlist only contains accounts that have used the forums.

Only mostly true then ;-)

(or partly.. I don't know stats on forum usage)

by **menillos** » Sat May 27, 2023 4:00 pm

i got hacked and my name is not on the list i feel scammed xD

I got hacked

I got hacked

Re: I got hacked

Re: I got hacked

Re: I got hacked

Re: I got hacked

Re: I got hacked

Re: I got hacked

Re: I got hacked

Re: I got hacked

Re: I got hacked

Who is online