Tanales/Teldo hacked?

[Mezzanine]

Hey,

could an officer demote Tanales/Teldo temporarily please? We think he's been hacked and Sohkar is telling me there's stuff missing in the bank.

/Nina

[TeaLeaf]

Logging in

[JonnyAppleSeed]

awww man :crying:

[TeaLeaf]

Demoted Tanales, Teldo & Beldo to Dog House.  Not sure what the rank entitles him to, but it was the lowest rank I could find.  Might be worth the permissions table being posted in Council for future reference.  

Teldo was online in WG when I demoted him and the other alts, but no whisper or comment received from him, so it does look like a hack.

Not much missing from guild bank.  Only some stuff from Tab 2 has been withdrawn.  24 hours ago Tanales deposited 50g into guild bank.  I think this deposit is unrelated.

4 hours ago (server time is currently 11:40 on Saturday) the bank log shows:

Teldo withdrew:
19 x Elixir of Lightning Speed
1 x Veiled Monarch Topaz
1 x Eternal Earthsiege Diamond
10 x Potion of Nightmares
1 x Swift Skyflare Diamond

and at the same time Tanales withdrew:
1 x Book of Glyph Mastery
2 x Solid Sky Sapphire
20 x Lesser Flask of Toughness

No other withdrawals shown by any of Tanales toons.

Now we wait for Tanales to find out.

Mezzanine was originally whispered by Froody of Goodfellas guild.  Froody is a hunter miner and he was farming WG nodes.  They were disappearing when nobody was stood next to the node.  He checked his logs and it was Teldo mining the nodes, so this confirms that it is a hack as they are exploit mining the nodes for more gold.

[TeaLeaf]

Decided to kick the 3 Tanales toons from DMR guild until this is sorted.
Exploit mining will reflect poorly on DMR, so I kicked.
Ticket was submitted reporting the exploit mining & the hack but the toon logged off before a GM replied.

[Gandalf]

Thanks TL. For reference, the Dog House has no permissions what so ever, you cannot even talk in guild chat with that rank.

[Limps]

sry to hear about the damn hacker may they all burn in hell




Edit: Brun = Burn

[Tanales]

yeh just noticed... got home from beeing with family an hour ago and my account has been locked when i tried to log on just now.
Got an email saying the account has been reimbursed but its still locked down
according to Blizz ive been keylogged so gonna run some scans tonight i reckon...

[TeaLeaf]

Good luck Tanales.

[Vanguish]

damn those stupid hackers.... :ranting2:
 
Hope things will soon be ok again for you Tan :sad:
 
Vanguish

[Inspiron83]

Sorry to hear that, sucks getting your keys logged, happened to someone i know and it is frustrating knowing someone is using the account for illegal purposes.

You mentioned getting scanned, do you have an AV solution on your computer already?  If so, which is it?  Also try one of the many free online solutions such as House Call:
housecall.trendmicro.com

Also, have you updated your system with all the essential security updates?

*Edit*
Also glad Blizzard locked your account as quick as they did.  I have seen compromised accounts stay active for days (as was the case i witnessed before).  Think TL's quick GM report helped!

[Tanales]

yeh got avira antivir personal installed.
scanned the PC with 3 malwavescans so far and nothing has come up, Ad-Aware, Spybot - Search & Destroy and that AV program.

Did a password reset for the Battle.net account and the account is still locked

[OldBloke]

yeh got avira antivir personal installed.
scanned the PC with 3 malwavescans so far and nothing has come up, Ad-Aware, Spybot - Search & Destroy and that AV program.

Did a password reset for the Battle.net account and the account is still locked

Download, update and scan with both of these:

Malwarebytes Anti-malware

SUPERAntiSpyware

I've always found that, between them, they're best at finding the nasties.

Good luck.

[DannagE]

Did you have AV installed on your PC when you got hijacked?

How about trying microsofts free one? http://www.microsoft.com/Security_Essentials/

[Azunai]

And get an authenticator