Please remove "Drigr" from all Gaiscioch guilds

Until further notice, please remove me from all of our guilds. I have just received email (while at work) that my guild wars 2 email has been changed. I did not request such change and have no idea what has actually happened or what I will need to do, but for the time being, if my account has been hijacked, I don't want it doing any damage to the guild.

Thank you.

Everyone got those. Your fine. Unless they hack your email they cant do anything.

Yeah, delete the email and don't respond or click anything, they are fishing accounts to find live ones. If you use gmail turn on two-step authentication when you get home. The email on it's own is nothing to panic about.

» Edited on: 2012-08-30 10:38:33

Everyone has been getting ones about their emails being CHANGED? Cause this was different than the "password reset" email

The first thing to do is to verify whether your game password actually was changed. This could still be phishing... just slightly more sophisticated. :) If it indeed changed, your email account has been compromised, so you'll need to change its password (if you can still access it) as quickly as you can. Next step is then to contact support to try to regain control of your game account.

The thing is, I never got any email to confirm changing the email. I get it to my phone, so chances are I would've seen it, and I have nothing in my trash or spam about it, and no notification from gmail about my account being accessed outside of my usual IP. I'm heading home for lunch and I will be changing my password to my email (I don't know how to do it from my phone). Like I said, I just want my account doing any damage to the guild, so while I am sorting this out, I would rather it not be in the guild. I will ask, via raidcall, for an invite when ANet gets everything sorted out (even though I thought they put measures in place to lock accounts where they are until they had better security on their end...)

They seem to be using a couple of techniques - one e-mail stating "your password was reset and to a link to reset it if it wasn't you who did it" and another one stating "your account was hacked" and to click the link to change your password neither are truly from Arenanet. Just go directly to you account page on the GW2 site and reset your password from there. More than likely it was never actually changed. They are attempting to get you to click the links in the fake e-mails so they can gain access to your accounts. And they really don't want to play the game as you - they want to steal all your stuff - mostly any personal info you have on file. Good luck and safe journ.

Drigr if you have a GW1 account and have it linked to GW2, there are details here on how to get your account back (and email changed back). http://www.reddit.com/r/Guildwars2/comments/z08yi/if_you_got_hacked_and_linked_your_guild_wars_and/

Don't have a GW1 account, and I have confirmed my account has been hijacked (can't log into the game or GW2 site, says the email account is invalid) Here is the email I got this morning. ----------------------------------------- ArenaNet noreply@guildwars2.com 9:50 AM (2 hours ago) to me Someone -hopefully you!- has requested to change the email address associated with your Guild Wars account. Need help or have questions about your Guild Wars account? Visit our support site: http://support.guildwars2.com/. Thanks! -The ArenaNet Team ---------------------------------------- Like I said, I never even confirmed an email change, it simply just happened without my permission. And I never clicked on any of the links from the emails.

» Edited on: 2012-08-30 12:02:57

You probably never saw any email to confirm changing the email because the email was probably not really changed. That email you received wasn't actually from ANet. It was spoofed to look like it came from them. That's why people are saying to try logging into your account page to see if it was in fact changed to something else. If you are unable to log in then yeah you have a problem. If you're able to log in then your password hasn't been changed and you can look to see what they have listed as your e-mail. I'm willing to bet it's listed just the way you put it in which case you're safe. Well, as safe as anyone can be now-a-days. Regardless, for peace of mind it probably wouldn't be a bad idea to make a new e-mail/password combination. Plenty of suggestions out there on secure yet easy to remember things to do. My favorite suggestion so far is creating an e-mail that has the name of the game in it, and for the password use a phrase with the name of the game in it. Long phrases are difficult to brute hack or phish. Going that route you can apply it to other games that use an e-mail for login as well as an easy way to have passwords to other games you can easily remember. A password of "boyisurehopegw2issecurenow" and "boyisurehopediabloissecurenow" is pretty dang secure and you're unlikely to forget it compared to having all manner of "hk4#hi?1*" and "ule4*3l2!i#" that you'll end up forgetting constantly. And much better that "1234" and "password" hehe. Here's a link talking about using phrases for passwords. It compared random characters being brute forced taking months to a few years or simply using "this is fun" taking a brute force attack 2,500 years. http://lifehacker.com/5796816/why-multiword-phrases-make-more-secure-passwords-than-incomprehensible-gibberish

Of course it never hurts to stick a random character or two into that phrase for good measure.

Ouch, sorry to hear you were actually hijacked. If I was in your position I would now be running every anti-virus, malware, spyware scan I could get my hands on, from a secure computer creating a new e-mail account and changing the password on any bank/credit-card/etc. type sites I use... lol. Yikes. Good luck getting everything under control. Not a fun position to be in at all. :(

lol, very true Narco. Just as long as it doesn't turn into something you'll never remember again I suppose. Please enter password: b^#o!y19i*sur%2(ehopeg@w2i_@10*sse&cu1renow Password incorrect please try again! %*&%!!

Looks like I will be creating a few new email accounts, getting a notebook to write passwords in, and getting in touch with ANet support tonight. In the near decade I've been gaming, this is the first time I've actually lost control of an account, and so easily. Only other time I've dealt with anything similar was like 2 years after I started MMOs when someone cleaned my runescape account, but never took control of it. The hardest part about all of this is I'm dealing with it while working and having a fully booked week with my sisters getting into school next week and going out of town for the weekend with family so I haven't had the time to sit and reset everything.

» Edited on: 2012-08-30 12:16:18

Really sorry to hear this Drigr. I can't think of anything worse in this day an age than looking at a potentially compromised PC. (They could have also brute-forced your password and your PC is fine.) People these days have all sorts of sensitive information on their digital devices it's quite scary. Hope you get it fixed soon and you know the family is always here for moral support and a willing ear.

I'm fairly certain it was brute forced. It was relatively short and a mix of a word and number combination. I'll admit, I used the ancient method of "easy to remember, hard to guess (apparently easy to bruteforce)" for my password. In any case, I temporarily changed my password on my email account and enabled 2 step verification (didn't even know GMail had that) so that IF the had access to my email, its going to be cut off now. I'll be running my virus/maleware/spyware software when I get off work and see if there's anything to deal with there as well

Those are legit email changes notices because right now Anet does not verify email change. I think it was one of the things they said they were working on. . If you get one of those and you didn't change your email address you have been hacked. I think I may have gotten lucky yesterday because I saw a Chinese IP on my account and was able to reset my passwords and set up a new email account without losing anything.

» Edited on: 2012-08-30 13:10:54

Sorry to hear you got hacked, Drigr. For security all my passwords are different on everything. I use Lastpass to keep track of them all, it goes to a secure hashed cloud so I can access it anywhere. Also all my passwords are four random words, quite long and would take forever to crack. I was hacked in LotRO and it was a terrible feeling. Best of luck getting everything set back up.

Does anyone know how long it usually takes ANet to get back to you on a support ticket? I'm working on creating separate email accounts for each game I play, as well as different passwords for each, and keeping them all written down in a journal that will sit in a locked filing cabinet.

Hey, Drigr. Sorry you actually got hacked. You only had a char in Na Rall and I just kicked it for you. Since we have Gaiscioch working right, when you have things worked out we will pop you in there. Hope you get this sorted out in quick order.

Thanks Briseadh. I plan on being back, I just don't want a lost account doing any harm to the family,

Drigr, this is probably not what you wanted to hear, but I thought I should brace you for worse case scenario. (I haven't seen an official response, but there is a screencap attached to the post.) It sucks buddy, seriously. http://www.reddit.com/r/Guildwars2/comments/z5jd3/support_team_unable_to_restore_missing_items/

» Edited on: 2012-08-31 14:04:39

Loosing items, no biggy. Loosing a char, that would depress me for a little bit, but if I could remake it, then I would get over that too. In all honesty, I just want my account back, I don't want to have to pay for a new account when I only got to play the first one for 4 days. However, I'm still waiting to hear back from support. Currently 27.5 hours and no response.

Update on hacked accounts from Anet: "For hacked accounts, expect a response within 72 hours. As of this writing we're working on tickets submitted August 30. If you submitted a hacked account ticket on August 29 or earlier, and haven't received a response yet, your ticket may not be correctly prioritized. In that case, please submit a new ticket using the above instructions, and in the title write, "Hacked Account - Ticket submitted August 2x - Ticket number xxxxxx-xxxxxx" (fill in the date and ticket number), and we will prioritize your existing (August 29 or earlier) ticket."

I am out camping, so I cannot log in to assess damages, but my account has been returned to my control.

Home from camping, account intact, money gear and all.

Yay! Happy to hear that!