Pages

Showing posts with label hacked. Show all posts
Showing posts with label hacked. Show all posts

Monday, July 3, 2017

Diablo3 Hacked Even Authenticators Didnt Save Them!

Diablo3 Hacked Even Authenticators Didnt Save Them!


Image from Eurogamer.net Article


WoW. Reports are showing that 1000ish accounts were compromised and/or lost yesterday during a downtime on servers. Scary part? Many of them were supposedly using Blizzard Authenticators....






*Edit- @Sapu94 tweeted a link on another Article with a Blue Response:

http://us.battle.net/d3/en/forum/topic/5149539239

I was tossed a link through a DM that started this whole thing (and you know from reading my blog, I am proudly 110% supportive of any conspiracy theories...) :



What, you cant read that? Okay, further investigation of these reports bring up a more "english" friendly and updated post:

http://www.eurogamer.net/articles/2012-05-21-diablo-3-accounts-hacked-gold-and-items-stolen

A few quotes from this article:

"The reports coincided with the EU Diablo 3 servers going offline on Sunday afternoon for around four hours, preventing players from logging in (error 33). It has been suggested that the EU servers were taken offline following a SQL injection attack, but this remains unconfirmed.

One theory suggested by players on the Battle.net forum revolves around hijacking session identifiers, which would allow hackers to take over accounts without alerting Blizzards authentication server. Again, this remains unconfirmed."

More info on this post on the D3 forums: "I was not hacked, Diablo III was"

http://us.battle.net/d3/en/forum/topic/5149538944

An actual real reporter for a website who was hacked:

http://www.examiner.com/article/accounts-on-diablo-3-hacked

iMax hacked- posted on official Blizzard D3 forums:

http://us.battle.net/d3/en/forum/topic/5149008932




With the RMAH coming next Tuesday (supposedly), I really do not like this happening, as I dont give my RealID away (always cautious with anything like that), I absolutely have an Authenticator, and run multiple virus/malware programs on my computer. Better safe than sorry.....

But in this case, it seems that folks, even with all the security setups you may have.....are absolutely fucked. Because it seems that individuals were not necessarily hacked, it was Blizzard that was. I seem to remember the last time I thought blizz was compromised.

Enjoy D3 folks, I know I am! 

*well, until I get haxxored

Alto.


If you are not subscribed to RSS feed via email (my posts go directly to your inbox so you dont miss a post!) you can click the Orangish RSS feed up top or go direct here:

Get ALTOs Gold"ish" Advice- The Worst WoW Blog Ever! delivered by email

You can always follow me on twitter as well for the most recent gold making tips:  @Altosgold
Read more »

Tuesday, June 13, 2017

Did Blizzard Get Hit By Their Own Banstick WoW Hacked

Did Blizzard Get Hit By Their Own Banstick WoW Hacked


Hey folks!



So the other day, I received an email from Trion, the owners of the MMO Rift. They haz been Haxxored. Since I have no real worry about my account there (nothing even closely resembling WoW by email or password combination) I could really give a rats ass. But....

(Tobold hit on the Rift hack on his site if you want more reading on it: Tobolds MMORPG Blog)










This morning, I open up twitter, and see that Blizzards forums have been down...for 6 hours...so far. Did they get sliced as well? Whaddabout our Authenticators, did that server get hit too?








My wonder is....are we in trouble? Are our accounts safe?

Better be safe than be sorry, so after changing my WoW password, and re-linking my Authenticator, I feel more in control of the situation. You can never be too careful, huh?

I am sure more updates to come. Who knows, maybe they are just going through Maintenance on...a Saturday? Or maybe they are giving us all Christmas in game pets....ITS A CONSPIRACY I TELLZ YOU!

I wonder if they did get hacked, would they admit it? Not likely....

---------------------------------------------------------------------------------


If you are not subscribed to RSS feed via email (my posts go directly to your inbox so you dont miss a post!) you can click the Orangish RSS feed up top or go direct here:

Get ALTOs Gold"ish" Advice- The Worst WoW Blog Ever! delivered by email

You can always follow me on twitter as well for the most recent gold making tips:  @Altosgold
Read more »

Sunday, April 30, 2017

Diving into an hacked Chrome extension

Diving into an hacked Chrome extension


This page explain how to make minified JS code readable.

Dive into HTML

The HTML part is usually easy : just need to open the .html files and to look around. However, mine appeared tricky ! The developers, a professional software company wishing to increase its visibility, voluntarily made the code harder to read. My .html is actually almost empty, and filled through js event. So I went on...

Javascript

The JS code was itself *minified* : no comments, no spaces, no lines jumps. This practice increase code opacity, making it quite unreadable for humans. Below is an example, I changed some code (ie:myID) so you can guess a bit:
function openurl(){chrome.extension.sendRequest({openurl:http://www.mywebsite.com},window.close()}var fill=document.getElementById(myDivID);fill.innerHTML=<font color="#888888"><b>My Bold Sentence:</b></font>;fill.title=Fly over title ;);fill=document.getElementById(mySpanID);fill.innerHTML=<img id="image" src="myIcon.png" >My small sentence.;?
After asking a friend for keywords, I googled for a "minifier/unminifier". I loved:
  1. http://jsbeautifier.org/: website, simple, efficient, online deminifier
  2. Pretty Beautiful Javascript (Chrome extension): elegant, efficient, on-fly deminifier ! In chrome://settings/extensions need to "Allow access to file URLs" chrome extension, need based on the website script
Grap my ugly code. Copy, paste into, run: unminified. Copy, paste into my text editor (or http://jsfiddle.net/): enlightening. I get the following:
function openurl() {
    chrome.extension.sendRequest({
        openurl: http://www.mywebsite.com
    },
    window.close()
}
var fill = document.getElementById(myDivID);
fill.innerHTML = <font color="#888888"><b>My Bold Sentence:</b></font>;
fill.title = Fly over title ;);
fill = document.getElementById(mySpanID);
fill.innerHTML = <img id="image" src="myIcon.png" >My small sentence.;????
Much nicer ! The code is now far more readable and human-friendly. Prepare a cup of coffee, warm up your eyes and fingers: you will have to code tonight !



Read more »