there is a new rollback glitch/bug whatever. This time it has something to do with the chaos checks and direct trading so that the traded items are reset :D runs without problems in any case have not reported it yet but in the group where I am in everyone says that it will become public in a few days because it is already getting around
well if its happening trading from the poe site to the exe...would be the weak point. sending whispers outside the app from the website to the app i think is nuts. Also could be todo with hideouts and trading in them...but so far ggg is ignoring the issue as if it doesnt exist so to other people they see it as= not happening at all!
I have 2 good geared characters (LVL 94 & 95). One was stripped completly naked the other was wasnt touched at all. 160 divs from stash gone and the gear from one char was around 100 div of worth. The other character has also a worth of around 100 div but i didnt play that one for 2 weeks. It really looks like they only get the session from the char they hijacked it and cant access other ones..
Looks like they can access you stash tab without accessing your character. Possible a vulnerability in how the stash is linked to your sessionid, allowing someone to enter your hideout and use your stash. Or like you said a server side hack which siphons the currency and items to the hacker stash
I'm new to PoE and i was very afraid that i might end up hacked since i saw the first videos. But seen a guy full of divines, mirrors, cool items and stuff so cool about it made me not give a dam about it anymore lol. And like you said in a comment below, it's early access and the best we can do is provide GGG feedback to fix this problem.
When it comes to currency, i only lost divines too about 320, they didnt even take the perfect jewelry, but they did steal all my gear, including my adorned and another 2 jewels that are probably worth 10divs each at least, and they stole my maelstrom flask. I'm devastated, over 20 years of playing online games, first time someone else logged into my account. Edit: i Thought about you know restarting from 0, buying gear with the exalts / divines from items i can sell and gearing back up again, but i have no idea how they logged into my account in the first place, what's stopping them from doing it again? I'm from Brazil as far away from China/Russia as possible and i didn't get a single thing on my email about logging in from a different location.
Hey dude, sorry to hear about that. I know it can be rough to lose things you put alot of effort and time into making. Maybe take some time off the game to focus on other things that matter outside of the game and hopefully GGG fixes this problem soon. Cheers dude. It's not your fault, pick yourself up and keep moving forward.
What's been passed around to combat this hacking is to log out of the game and the website on your brower after trading with someone because it gives you a new "token" and the hackers try using the one that was created with the trade you did with them and it becomes invalid. Did you at all log out of the browser before going out with the wife/kid for those few hours? It is extremely weird that they are not touching your multi mirror item set on your characters. Maybe because those have a unique ID and currency doesn't which is why only your currency is getting stolen?
It could be the process is automated. So they wont want to strip everything (most people dont have great gear). They only take the liquid stuff from your account cuz its very easy to get rid of. I changed my password right after the hack this morning. So it should have given me a new session. This is why its troubling that this has happened again. I did not trade with anyone else or have anyone else enter my hideout during that time. (Other than DanDanArrow)
@@Uberjager This is all incredibly helpful information. Even after changing everything that needed to be changed or refreshed, you still got shit stolen. The silver lining is that this is EA. Better it happen and be found out now along with the item duping and perfect vaaling cheating going on in EA rather than when the game releases fully. Sorry this happened to you man, you put in so much time into the game it must've been crushing to see.
@@limitgoesoff actually I'm the best person this could happen to. Because I document everything and have streams and videos, my input is substantiated. I also have a long term presence in the game since POE1 beta and have been creating content for years now. So I'm not trying to pull off something shady. It'll be cool when GGG let's us know why is happening, this is EA after all and as long as my data helps them solve the problem and make a better game, I'm happy. Edit: Also I'm a person who doesn't care too much about currency and items. If GGG deleted my progress so far it wouldn't really matter to me. The value in playing POE is the journey and not the result and I have loads of experiences, learnings and knowledge about the game that will never leave me.
there is a new rollback glitch/bug whatever. This time it has something to do with the chaos checks and direct trading so that the traded items are reset :D runs without problems in any case have not reported it yet but in the group where I am in everyone says that it will become public in a few days because it is already getting around
@@dsdsadadsa This instance doesn't sound like what you're describing. Both times my account has gotten compromised and things have gone missing I have observed an invalid login issue with the trade site. Of course, these are too few to conclude causality but I'm just stating what I observe.
i mean if i was a hacker id want to steal everything not just pick and choose what i stole....>_>its very hard to believe people would leave things behind..
From my experience GGG doesn't directly remove currency. They just ban you. Also I don't RMT because frankly speaking I play this game for fun. If I wanted money I'd day trade. The amount of money potential for video games is so limited its an actual joke to try to treat this like a job.
@@ominarous Ah, I guess I'll answer that question here. I'm a "journey is more important than the result" person. Buying currency is pointless as it cheapens your experience. I don't give away currency to friends for that same reason. It cheats them out of mastering the game and getting better. It's like using cheatengine to play Elden Ring or Dark Souls. What's the point for that? You win the game yes, but it's self deception because you didn't earn the win. Examine me for the quality of my thought process, and ideas. Make this assessment yourself while you struggle against the game and its systems and difficulty. You think I'd get this good while taking shortcuts? You think Jung would recommend this channel in his top 50 content creator video if I cheated myself out of learning the game properly? Probably not.
@@Chad-mx1pd 2fa steam. Same with all my other accounts. I run separate passwords on everything and have access notifications for everything. Nothing else was compromised.
@@Uberjager I think it got something to do with the steam account because a week ago i found some old person in youtube comment complaining that he cant access his account(it's probably accessed by someone). Maybe you want to investigate whether other content creator who got hacked access it from steam also.
This is where I'm confused af lol. Because if this is the case, its not through ingame interactions. Someone is able to directly access the stash. (could it be a server side issue?)
They did have a realm restart today, maybe the fixed something on the server side. I'm just baffled why GGG has NOT even responded to this yet. They're either trying to figure it out what's happening before going public with this or they really haven't communicated ANY of this internally. I know they're on holidays, but come on, you don't just completely shut down the entire company during holidays. And no one can tell me that Jonathan or other people are not reading reddit or whatsoever. You eventually read this somewhere, unless you completely turn off your phone and live in the woods for 3 weeks
When you have enough damage and when you have good relics to run the boss. Also, you can actually buy 4th Ascendancy runs from other people (far easier to do time and currency wise). Last I checked it was about 45 ex, considerably less time taken than running it yourself.
a friend was hacked today and all their gear was taken. i am very curious what is happening because the highest plausible answer is malware from trade apps. ggg might have something compromised / very bad vulnerability, but no one knows what's going on atm besides stuff are being stolen. o7 soldier
I don't use third party tools. (I'm not even using awakened POE trade for POE 2) There are only two access points for my account. The official POE trade site and via Steam. I use completely different passwords for all my accounts (Email, steam, etc.) and none of them have been compomised. This is implying that there is a vulnerability that is on GGG's side.
This is insane man. I can't believe numerous youtubers and people have been now hacked and ggg still hasn't made an emergency patch. They were quick to hot fix that dupe when it got brought up on reddit, but they really seem to be in denial about this hacking going on.
They might be doing their own investigations and have not concluded what the root cause is yet. Give it time. Also this is EA, having some of this friction addressed now is about par with what is expected.
@@ominarous Yep precisely this. The only thing we can do as a community is provide them details and our observations. GGG will do something about it when they know enough about the problem. I've seen them work and they haven't let me down yet. Edit: Except Kalandra league, dear god that League almost made me quit POE. LOL
@@GE_Photon_Lord And how would you know this? Everything he said so far sounds like a compromised device to me, just because his POE1 is untouched means jack sh#t
@owlmostdead9492 People get hacked when they trade, visit hideouts. Has something to do with sessionID. A lot of people covered this. People got hacked both on poe2 and poe1 btw, depends what the hacker wants. Some took poe2 currency, some took poe1 standard gear.
@owlmostdead9492 It's a sessionID related problem, has nothing to do with hardware. My PC is brand new, browsing is clean, I could still get "hacked" if I trade with someone.
@@Anon1370 I've stated multiple times. I don't care about items on EA LOL. I'm literally playing SSF right now. I did the investigation because it was fun, not because I want GGG to do anything. Edit: My whole shtick is this. If I'm convinced that the problem stems from a vulnerability or issue at GGG's end I have to report it. This helps GGG fix the problem and prevents other people from losing their shit. I've already stated on previous videos, I'm happy it happened to me and not someone else, because I've been able to document all instances of my logins and can verify I have not compromised my machine and all my other accounts. I also have enough knowledge on how POE2 works (from POE1 experience) to perform a pretty decent root cause analysis. Also SessionID jacking is not just a "lose item problem" if it's possible for malicious actors to get your sessionID from ingame interactions this may infringe on some EU GPDR type shit, which also isn't good for GGG. That's WHY I report it and draw attention to it.
@@Anon1370 In POE1 the vulnerability was the player, meaning most of the time hacks happened because they were careless with passwords. I've already proven in my case that it wasn't the issue. GGG can verify this by checking if someone accessed my account through an authentication process through another region. What is likely is that this is a session jack, which means a malicious actor did not NEED my password or login to access my account. This would be vulnerability at GGG's end either in the client or the server which needs to be fixed FAST. This also means that no matter how SAFE you think your account is, anyone can get access to it as long as they can pull and spoof your session. I'm doing my part to draw attention to this because if this is not fixed FAST it may violate regulations for providing this game service in the EU.
Interesting I wonder if the session id allows them to take from only public stash tabs, very strange... I know other people have had their characters and Jewels stripped but based on poe1 u can see those in the character api. Maybe if your account is privated on the official poe page this will stop then from getting access It's also really strange that they aren't taking everything. Like why would u leave stuff if u could take everything?
Wtf… they need to find a solution for this. Maybe once they get access to your session, they can access it again. Wouldn’t it be ironic if the hacker saw this video?
Makes me sad to see a fellow dad quit the game after having sunk so many hours into it. Hours that we BARELY get especially if you have a kid. Just wanna say keep playing bro and do what you love, don't let the hackers get to you!
Nah I'm stopping cuz I'm getting bored of EA. I honestly don't care too much about losing stuff. This is just a helpful event to get me to fully wean off the game lol.
I come up with an idea that maybe only item from drop can be stolen directly. If item was traded before, they can't steal it. So, they can monitor your session on trade market by some web browser plug-in. They saw you traded for 10D and instantly steal yours after you logged out. Can you share what item did you sell?
Hmm, and most of us with more currency than this isn't having any of our accounts compromised at all... hmm? You might want to work harder on not just securing your email and game account but also revoking sessions and LoginIDs and any similar instances of such. This is straightforwardly doable with GMail but if you're one of them Hotmail bois, you might be SoL.
Most of us might be abit of a stretch. The currency taken from me probably puts me at the top 5% of playerbase. (Lost 1 mirror and 30 divs and a temporalis thats currently on the market for 180 divs). I have set up access notifications for all accounts. Nothing else has been compromised other than POE2. (I also have expensive shit in POE1 standard and that wasn't affected)
i honestly think this is RMT sites just bruteforcing logins with the email/passwords they have stored on their websites from customers previous transactions. Never used an RMT site, i have a mirror service wand up in trade & i have 2.5 mirrors in a public currency tab. Still waiting for the hackers to come get me
@@Uberjager Look man, I have no idea how you're getting repeatedly compromised - maybe a rootkit/malware you least expect (from a different thing or some such nonesense) but realistically speaking this isn't a "database breach" like most people have been proliferating. TL;DR - I'm sick and tired of the claims that there's a data breach when a lot of people are playing just fine unaffected by any of this
@@kashashk It's absolutely crazy that it happened to so many people that could confirm many different reasons as to why it's most likely a problem from GGG's part and not the players themselves, and still you really said "it didn't happen to me so it must be false". Your way of thinking about this is completely backwards, and very ignorant. Pretty sure the people that got robbed are a little bit more sick and tired than you living in a fantasy world. Get real. (and before you got full 2head on me, no I did not even get hacked, but still believe it's on GGG's part as it has been proven now many times that players that got hacked had basically no vulnerabilities introduced from their side)
Plot twist: What if it’s not a hacker but your split personality secretly trading behind your back?
Rule one of the mirror club is not to talk about it
Then it would be in my log files.
Lol
im invested in this lore now
TBH having this happen to me is way cooler and I'm having more fun trying to investigate than logging in to play so I'm glad LMAO.
Same. It's funny and very helpful for the community as well.
Yes, I expect some kind of plot twist, like the wife selling divines. ? :D
@@MrJimGaming Nah found the guy. Some Russian dude.
See latest update.
there is a new rollback glitch/bug whatever. This time it has something to do with the chaos checks and direct trading so that the traded items are reset :D runs without problems in any case have not reported it yet but in the group where I am in everyone says that it will become public in a few days because it is already getting around
What do you mean by “direct trading”
well if its happening trading from the poe site to the exe...would be the weak point. sending whispers outside the app from the website to the app i think is nuts. Also could be todo with hideouts and trading in them...but so far ggg is ignoring the issue as if it doesnt exist so to other people they see it as= not happening at all!
Thank you for using your account as a test for this hacking bs. Appreciate your efforts.
I have 2 good geared characters (LVL 94 & 95). One was stripped completly naked the other was wasnt touched at all. 160 divs from stash gone and the gear from one char was around 100 div of worth. The other character has also a worth of around 100 div but i didnt play that one for 2 weeks. It really looks like they only get the session from the char they hijacked it and cant access other ones..
Knn from playing PoE to become playing private detective
@@stanyeo6650 fun what.
@@Uberjager Agree
Looks like they can access you stash tab without accessing your character. Possible a vulnerability in how the stash is linked to your sessionid, allowing someone to enter your hideout and use your stash. Or like you said a server side hack which siphons the currency and items to the hacker stash
both seem plausible. Maybe I'll log in and change my hideout.
Edit:
Ok! Hideout changed lets see if this happens again.
I'm new to PoE and i was very afraid that i might end up hacked since i saw the first videos. But seen a guy full of divines, mirrors, cool items and stuff so cool about it made me not give a dam about it anymore lol. And like you said in a comment below, it's early access and the best we can do is provide GGG feedback to fix this problem.
Not like we are keeping much of this stuff after anyways. New league soon and all that.
@@InnerExile_92 yeah economy destroyed anyway after all the duping. I spent 200 divines on temporalis before the dupe and got burnt lol
im sure i got currency stolen as well but i thought i was just going freaking crazy
Go to technical support on the POE forums and lodge a report.
When it comes to currency, i only lost divines too about 320, they didnt even take the perfect jewelry, but they did steal all my gear, including my adorned and another 2 jewels that are probably worth 10divs each at least, and they stole my maelstrom flask. I'm devastated, over 20 years of playing online games, first time someone else logged into my account.
Edit: i Thought about you know restarting from 0, buying gear with the exalts / divines from items i can sell and gearing back up again, but i have no idea how they logged into my account in the first place, what's stopping them from doing it again? I'm from Brazil as far away from China/Russia as possible and i didn't get a single thing on my email about logging in from a different location.
Hey dude, sorry to hear about that. I know it can be rough to lose things you put alot of effort and time into making. Maybe take some time off the game to focus on other things that matter outside of the game and hopefully GGG fixes this problem soon.
Cheers dude. It's not your fault, pick yourself up and keep moving forward.
I dont know too much about this, but could It be that the divines that you got were bugged and after you logged out they dissapeared?
What's been passed around to combat this hacking is to log out of the game and the website on your brower after trading with someone because it gives you a new "token" and the hackers try using the one that was created with the trade you did with them and it becomes invalid. Did you at all log out of the browser before going out with the wife/kid for those few hours?
It is extremely weird that they are not touching your multi mirror item set on your characters. Maybe because those have a unique ID and currency doesn't which is why only your currency is getting stolen?
It could be the process is automated. So they wont want to strip everything (most people dont have great gear).
They only take the liquid stuff from your account cuz its very easy to get rid of.
I changed my password right after the hack this morning. So it should have given me a new session. This is why its troubling that this has happened again.
I did not trade with anyone else or have anyone else enter my hideout during that time. (Other than DanDanArrow)
@@Uberjager This is all incredibly helpful information. Even after changing everything that needed to be changed or refreshed, you still got shit stolen. The silver lining is that this is EA. Better it happen and be found out now along with the item duping and perfect vaaling cheating going on in EA rather than when the game releases fully. Sorry this happened to you man, you put in so much time into the game it must've been crushing to see.
@@limitgoesoff actually I'm the best person this could happen to. Because I document everything and have streams and videos, my input is substantiated.
I also have a long term presence in the game since POE1 beta and have been creating content for years now. So I'm not trying to pull off something shady.
It'll be cool when GGG let's us know why is happening, this is EA after all and as long as my data helps them solve the problem and make a better game, I'm happy.
Edit:
Also I'm a person who doesn't care too much about currency and items. If GGG deleted my progress so far it wouldn't really matter to me. The value in playing POE is the journey and not the result and I have loads of experiences, learnings and knowledge about the game that will never leave me.
Why they dont steal ur gear? Other people who were hacked were always naked.
@@Senpai_Joshi
I have no idea tbh. It could be a new vulnerability that was different from the last one.
there is a new rollback glitch/bug whatever. This time it has something to do with the chaos checks and direct trading so that the traded items are reset :D runs without problems in any case have not reported it yet but in the group where I am in everyone says that it will become public in a few days because it is already getting around
@@dsdsadadsa This instance doesn't sound like what you're describing.
Both times my account has gotten compromised and things have gone missing I have observed an invalid login issue with the trade site.
Of course, these are too few to conclude causality but I'm just stating what I observe.
I've seen on other guys stream another guy withouth being in a party enter his hideout and his map and stole his boss drop LOL
LOL got a video? thats insane
i also got hacked but i got only few alches and vaals, so hacker gave me 1 div and 20 ex.
i wonder if staying logged in is a temp solution
@@jasonlin6570 could be. Give it a shot. I'm not testing this though.
I tried staying logged in for more and also quickly logging on and off, maybe it resets that token.
Hope ggg sorts this out, hate seeing this stuff happening
this is exciteing!
How bout running a vpn change your ip address see if they can still get in
I'm in Singapore. We have dynamic IPs that are allocated to us via the ISP.
Other people who this happened to actually had their gear stolen from their character aswell and also their unique jewels
i mean if i was a hacker id want to steal everything not just pick and choose what i stole....>_>its very hard to believe people would leave things behind..
is it possible that ggg remove your currency because RMT or something. sorry if i was wrong just give opinion.
From my experience GGG doesn't directly remove currency. They just ban you.
Also I don't RMT because frankly speaking I play this game for fun. If I wanted money I'd day trade. The amount of money potential for video games is so limited its an actual joke to try to treat this like a job.
@@Uberjager he obviously meant you buying currency not selling it
@@ominarous
Ah, I guess I'll answer that question here.
I'm a "journey is more important than the result" person. Buying currency is pointless as it cheapens your experience. I don't give away currency to friends for that same reason. It cheats them out of mastering the game and getting better. It's like using cheatengine to play Elden Ring or Dark Souls. What's the point for that? You win the game yes, but it's self deception because you didn't earn the win.
Examine me for the quality of my thought process, and ideas. Make this assessment yourself while you struggle against the game and its systems and difficulty. You think I'd get this good while taking shortcuts? You think Jung would recommend this channel in his top 50 content creator video if I cheated myself out of learning the game properly?
Probably not.
2fA on steam?
Or using ggg client
@@Chad-mx1pd 2fa steam. Same with all my other accounts. I run separate passwords on everything and have access notifications for everything. Nothing else was compromised.
@@Uberjager I think it got something to do with the steam account because a week ago i found some old person in youtube comment complaining that he cant access his account(it's probably accessed by someone). Maybe you want to investigate whether other content creator who got hacked access it from steam also.
tbf wouldnt a hacker also just take ur gear?
i ask myself why the hacker didnt take everything if i was a hacker i'd leave nothing...everything is worth something even to disenchant.
they got their hooks into you 💀
This is where I'm confused af lol.
Because if this is the case, its not through ingame interactions. Someone is able to directly access the stash. (could it be a server side issue?)
I had someone whisper me to purchase an item in my stash that wasn’t up for sale…. Can they normally do that??
@@colemcnabb4662 yes they can. All items in public tabs are indexed and can be searched for via the trade site.
@@Uberjager imagine in an intern went rouge 🙀
@@WOMFT Imagine if there's a server vulnerability. xddddd
Are you using loot filters? If so, are they personalized or did you get them from someone?
I got them from Fubgun. (like many other players)
So I doubt that its the loot filter.
Why are you quitting? 😢
Let me use your gears lol 😭😭😭 don’t leave us 😢
They did have a realm restart today, maybe the fixed something on the server side.
I'm just baffled why GGG has NOT even responded to this yet. They're either trying to figure it out what's happening before going public with this or they really haven't communicated ANY of this internally. I know they're on holidays, but come on, you don't just completely shut down the entire company during holidays.
And no one can tell me that Jonathan or other people are not reading reddit or whatsoever.
You eventually read this somewhere, unless you completely turn off your phone and live in the woods for 3 weeks
jesus christ man...sadge, also i had a question on the gas arrow monkas..when should we feel comfortable taking our 4th ascendancy for leech to ES?
When you have enough damage and when you have good relics to run the boss.
Also, you can actually buy 4th Ascendancy runs from other people (far easier to do time and currency wise). Last I checked it was about 45 ex, considerably less time taken than running it yourself.
@ I figured lmao and yeah my friend actually sells them and boosted me, but yeah i don’t recommend taking that node while leveling 😂😂😂
hahah new detective conan episode is out lesgoo
a friend was hacked today and all their gear was taken. i am very curious what is happening because the highest plausible answer is malware from trade apps. ggg might have something compromised / very bad vulnerability, but no one knows what's going on atm besides stuff are being stolen. o7 soldier
I don't use third party tools. (I'm not even using awakened POE trade for POE 2)
There are only two access points for my account.
The official POE trade site and via Steam.
I use completely different passwords for all my accounts (Email, steam, etc.) and none of them have been compomised.
This is implying that there is a vulnerability that is on GGG's side.
@@Uberjager no i understand that much. i was just saying that was my original thought process. hmge
It might be like on d2 lod , mass duped Runes with same id goess poof
Ok i just subscribed. Interested in your detective work.
dude right now in game exist some glitch when any dude can farm 1k divine per day, and it is not about temporalises, so 10 div it is nothing
This is insane man. I can't believe numerous youtubers and people have been now hacked and ggg still hasn't made an emergency patch. They were quick to hot fix that dupe when it got brought up on reddit, but they really seem to be in denial about this hacking going on.
They might be doing their own investigations and have not concluded what the root cause is yet.
Give it time.
Also this is EA, having some of this friction addressed now is about par with what is expected.
it's hard to patch something if you don't actually know what the problem is
@@ominarous Yep precisely this. The only thing we can do as a community is provide them details and our observations. GGG will do something about it when they know enough about the problem. I've seen them work and they haven't let me down yet.
Edit:
Except Kalandra league, dear god that League almost made me quit POE. LOL
They can't patch it if they don't know what happens!
@@Uberjager well, they basically mirrored it and added a boat last league :^)
It doesn't matter if you change password ON the compromised device, you're compromised on a deeper level
There is no compromise on his PC, the hardware has nothing to do with this.
@@GE_Photon_Lord And how would you know this? Everything he said so far sounds like a compromised device to me, just because his POE1 is untouched means jack sh#t
@owlmostdead9492 People get hacked when they trade, visit hideouts. Has something to do with sessionID. A lot of people covered this.
People got hacked both on poe2 and poe1 btw, depends what the hacker wants. Some took poe2 currency, some took poe1 standard gear.
@owlmostdead9492 It's a sessionID related problem, has nothing to do with hardware. My PC is brand new, browsing is clean, I could still get "hacked" if I trade with someone.
@owlmostdead9492 It's related to an ID not hardware.
people will say you've done this for views and hacked yourself....
They can say whatever they want, I've already sent an email to GGG. I'm just waiting for their response.
@Uberjager they wont compensate you if that's what you are after
@@Anon1370
I've stated multiple times. I don't care about items on EA LOL.
I'm literally playing SSF right now. I did the investigation because it was fun, not because I want GGG to do anything.
Edit:
My whole shtick is this. If I'm convinced that the problem stems from a vulnerability or issue at GGG's end I have to report it. This helps GGG fix the problem and prevents other people from losing their shit.
I've already stated on previous videos, I'm happy it happened to me and not someone else, because I've been able to document all instances of my logins and can verify I have not compromised my machine and all my other accounts. I also have enough knowledge on how POE2 works (from POE1 experience) to perform a pretty decent root cause analysis.
Also SessionID jacking is not just a "lose item problem" if it's possible for malicious actors to get your sessionID from ingame interactions this may infringe on some EU GPDR type shit, which also isn't good for GGG. That's WHY I report it and draw attention to it.
@@Uberjager the thing is back in the day poe 1 players where hacked and ggg did nothing i expect the same if its happening in poe 2.
@@Anon1370 In POE1 the vulnerability was the player, meaning most of the time hacks happened because they were careless with passwords.
I've already proven in my case that it wasn't the issue. GGG can verify this by checking if someone accessed my account through an authentication process through another region.
What is likely is that this is a session jack, which means a malicious actor did not NEED my password or login to access my account. This would be vulnerability at GGG's end either in the client or the server which needs to be fixed FAST.
This also means that no matter how SAFE you think your account is, anyone can get access to it as long as they can pull and spoof your session.
I'm doing my part to draw attention to this because if this is not fixed FAST it may violate regulations for providing this game service in the EU.
duped currency poof? :D
Interesting I wonder if the session id allows them to take from only public stash tabs, very strange...
I know other people have had their characters and Jewels stripped but based on poe1 u can see those in the character api. Maybe if your account is privated on the official poe page this will stop then from getting access
It's also really strange that they aren't taking everything. Like why would u leave stuff if u could take everything?
My currency tab is private though not public. So I'm not sure that's the case.
@Uberjager hm that's super strange. I hope more info comes out about it soon
Imagine they watch your video 💀
No one is going to hack you and take 10 divs and leave your gear that’s worth 300+divs
But they did take the gear
IMO you’re just a sleepwalker, or sleep PoE player in this case. 😂
GGG do care about players, so they'll do nothing. Oh, and here's your 3 week ban because why not and we wont ban the real hacker xdd
Truly GGG move.
Wtf… they need to find a solution for this. Maybe once they get access to your session, they can access it again.
Wouldn’t it be ironic if the hacker saw this video?
No once you change the password a new session is generated.
It's something else. Which is troubling.
Makes me sad to see a fellow dad quit the game after having sunk so many hours into it. Hours that we BARELY get especially if you have a kid. Just wanna say keep playing bro and do what you love, don't let the hackers get to you!
Nah I'm stopping cuz I'm getting bored of EA. I honestly don't care too much about losing stuff.
This is just a helpful event to get me to fully wean off the game lol.
Is you`re currency tab set to public?
@@oversky2741 it's not. It's hidden.
I never make my currency tab public cuz it makes it annoying to use currency from it.
I come up with an idea that maybe only item from drop can be stolen directly. If item was traded before, they can't steal it. So, they can monitor your session on trade market by some web browser plug-in. They saw you traded for 10D and instantly steal yours after you logged out. Can you share what item did you sell?
That hypothesis doesn't work.
Both my temporalis and my mirrors where obtained via trade. I did not drop either directly myself.
maybe you computer is hacked bozo
xDD
Hmm, and most of us with more currency than this isn't having any of our accounts compromised at all... hmm?
You might want to work harder on not just securing your email and game account but also revoking sessions and LoginIDs and any similar instances of such. This is straightforwardly doable with GMail but if you're one of them Hotmail bois, you might be SoL.
if its not happening to me then it doesnt exist
Most of us might be abit of a stretch. The currency taken from me probably puts me at the top 5% of playerbase.
(Lost 1 mirror and 30 divs and a temporalis thats currently on the market for 180 divs).
I have set up access notifications for all accounts. Nothing else has been compromised other than POE2. (I also have expensive shit in POE1 standard and that wasn't affected)
i honestly think this is RMT sites just bruteforcing logins with the email/passwords they have stored on their websites from customers previous transactions. Never used an RMT site, i have a mirror service wand up in trade & i have 2.5 mirrors in a public currency tab. Still waiting for the hackers to come get me
@@Uberjager Look man, I have no idea how you're getting repeatedly compromised - maybe a rootkit/malware you least expect (from a different thing or some such nonesense) but realistically speaking this isn't a "database breach" like most people have been proliferating.
TL;DR - I'm sick and tired of the claims that there's a data breach when a lot of people are playing just fine unaffected by any of this
@@kashashk It's absolutely crazy that it happened to so many people that could confirm many different reasons as to why it's most likely a problem from GGG's part and not the players themselves, and still you really said "it didn't happen to me so it must be false". Your way of thinking about this is completely backwards, and very ignorant. Pretty sure the people that got robbed are a little bit more sick and tired than you living in a fantasy world. Get real.
(and before you got full 2head on me, no I did not even get hacked, but still believe it's on GGG's part as it has been proven now many times that players that got hacked had basically no vulnerabilities introduced from their side)
It was me ._.