Hacked, and it seems like others are getting hacked too.

[Thuse]

Rip, lost 60+ divs and any trust in GGGs security. Steam was not accessed, but (like an idiot) my account is linked to PoEs page, and this happend right after i sold a headhunter.
There are other posts popping up with similar issues. Dont ever link ur steam to GGG if ur only playing through steam, they dont even have 2FA after all these years with this amount of players, and it leaves a gaping hole in their security. Dont expect them to do anything about it sooo was fun while it lasted, will ask them to sever the link so i can play after EA.

[Thuse]

Originally posted by Arxya:

Originally posted by Thuse:

Rip, lost 60+ divs and any trust in GGGs security. Steam was not accessed, but (like an idiot) my account is linked to PoEs page, and this happend right after i sold a headhunter.
There are other posts popping up with similar issues. Dont ever link ur steam to GGG if ur only playing through steam, they dont even have 2FA after all these years with this amount of players, and it leaves a gaping hole in their security. Dont expect them to do anything about it sooo was fun while it lasted, will ask them to sever the link so i can play after EA.

You opened a scam post link or something like that, this happens in games since the dawn of time.

What's more likely is you were rwting or letting someone access your account to grind or something.

my account and mine alone, havent let anyone use any of my accounts EVER.
+ nah no scam links to my knowledge, been nothing to press really, besides poe2 trade, but that page is probably as unsafe as the rest of poe

[Bad]

I was also hacked on Christmas eve, lost over 350+div and would like to add that I did try Exiled-exchange2 and the overwolf one. But stuck with Exiled-exchange2 and used it for the entire time until I woke up Christmas eve and realized all my stuff was gone. I never click on discord links, or anything weird (I never even get bots dming me links). Also, would like to note this happened almost immediately after I dropped a mirror, sold it and bought a bunch of gear for a stat stacking character. Ran it through the campaign in 9 hours, did a few maps and got off. In the morning it was all gone. So, I fully believe it was linked to the trade macro because it was right when I had a lot of value the attack happened. I would stay far away from these 3rd party trade apps, though I did use awakened poe trade for literally years on poe1 and never had an issue.

[Ydoc]

Made a video to showcase the happenings of this hacking issue.

https://www.youtube.com/watch?v=X_s3uN6JOc8

The goal of this video is to showcase what's happening to the community and hopefully continue to shed light on this issue, motivating a response and action from GGG.

[drake.mouth]

I was hacked as well. Lost over 80 divine pure and another 400 divine in gear. GGG said we cant help you. You are on your own. No roll back no help. Said just restart from scratch and have fun being a unpaid tester for are EA.

[drake.mouth]

Originally posted by Zin:

I was also hacked on Christmas eve, lost over 350+div and would like to add that I did try Exiled-exchange2 and the overwolf one. But stuck with Exiled-exchange2 and used it for the entire time until I woke up Christmas eve and realized all my stuff was gone. I never click on discord links, or anything weird (I never even get bots dming me links). Also, would like to note this happened almost immediately after I dropped a mirror, sold it and bought a bunch of gear for a stat stacking character. Ran it through the campaign in 9 hours, did a few maps and got off. In the morning it was all gone. So, I fully believe it was linked to the trade macro because it was right when I had a lot of value the attack happened. I would stay far away from these 3rd party trade apps, though I did use awakened poe trade for literally years on poe1 and never had an issue.

Just happened to me as well. Never used a 3rd party at all and use steam. They bypassed steam log in some how and my 2a security. So no idea how this is happening but it sucks lost every thing. well over 400 divine worth.

[Millertyme]

Originally posted by Thuse:

Rip, lost 60+ divs and any trust in GGGs security. Steam was not accessed, but (like an idiot) my account is linked to PoEs page, and this happend right after i sold a headhunter.
There are other posts popping up with similar issues. Dont ever link ur steam to GGG if ur only playing through steam, they dont even have 2FA after all these years with this amount of players, and it leaves a gaping hole in their security. Dont expect them to do anything about it sooo was fun while it lasted, will ask them to sever the link so i can play after EA.

RMT trader lost all his goodies? NO WAY!

[Radagast the Brown]

It would honestly be really really ironic and funny, if till Monday, on the next announcement of GGG, we learn that all the people that got hacked, where in fact not hacked but actually had the items deleted, because they were either dupes, or RMT-ed. Would really love to see it, if this is the case. If not however, they will need to improve security that's for sure.

[SirPanty]

Originally posted by Red iKnight:

I use steam to log into POE which has 2FE

Sure, but it's not needed, if your POE login gets stolen they can login via their own launcher so your steam stays safe but your POE acc doesn't.

[cAipi_rInHa]

Originally posted by drake.mouth:

lost every thing. well over 400 divine worth.

Good. next RMT idiot scammed. Hope to read more of those "sad" stories lol

[cAipi_rInHa]

Originally posted by SirPanty:

Originally posted by Red iKnight:

I use steam to log into POE which has 2FE

Sure, but it's not needed, if your POE login gets stolen they can login via their own launcher so your steam stays safe but your POE acc doesn't.

Bro.
GGG ist not getting HACKED.
Its 1000000000000 % rmt people that get scammed.
It`s so much easier to hack a ♥♥♥♥♥♥ rmt site than GGG.
Even more likely: they don`t have to hack the rmt site because it`s the same guys.
What do you think the currency they sell is coming from ?

[Voodoochile]

All the stories about people being hacked is right after an in-game trade for valuable items.
I'm not that tech-savy but this points me rather to the game it self than the website.

[This PC]

Originally posted by Voodoochile:

All the stories about people being hacked is right after an in-game trade for valuable items.
I'm not that tech-savy but this points me rather to the game it self than the website.

You're not tech savvy tho. :P
Could be third party software installed on machine that steals auth tokens.
That third party software might not even be linked to PoE in any way, just grabbing useful info. :P

At this point, it's all conjecture, and only GGG has the actual data to properly parse this and the tools to act. The funny thing to me is that some people are also getting banned, which hints at me there might have been foul play involved and this hacking narrative is just a convenient thing.

[SirPanty]

Originally posted by cAipi_rInHa:

Originally posted by SirPanty:

Sure, but it's not needed, if your POE login gets stolen they can login via their own launcher so your steam stays safe but your POE acc doesn't.

Bro.
GGG ist not getting HACKED.
Its 1000000000000 % rmt people that get scammed.
It`s so much easier to hack a ♥♥♥♥♥♥ rmt site than GGG.
Even more likely: they don`t have to hack the rmt site because it`s the same guys.
What do you think the currency they sell is coming from ?

Why are you tagging me? I never said GGG is getting hacked.

[Midnight]

We don't even know if this is targeted hack.

It might be a credentials leak, malware or exploit completely unrelated to PoE. Data from such are being traded among hackers all the time.

Someone might've pulled a bunch of session tokens through an infected cracked version of some random game and simply sold the relevant parts.

It's fun to speculate but that's all it is.

[Midnight]

Originally posted by Voodoochile:

All the stories about people being hacked is right after an in-game trade for valuable items.
I'm not that tech-savy but this points me rather to the game it self than the website.

Alternatively someone could have a massive credential list from whatever leak source and use the trade to ID potential targets to match against it.