3 weeks later, the same person hacked Slasher's account, Daevor 60 fighter, and deleted all chars on the account.
We decided to get everything in the open with OS, in the hope to find the culprit, and to maybe get Slasher's restored. At the risk of being both banned.
Here is the answer from CSR_Hal :
Thank you for handling this. I don't think I could. I simply can't handle this kind of betrayal. For someone I trusted, and helped to the best of my ability, to turn against me like this is... unspeakably hard to understand, let alone deal with.
---------- Forwarded message ----------
From: Outspark Customer Support
Date: Tue, Jun 9, 2009 at 1:13 AM
Subject: Account Hacked [Incident: 090525-000040]
To: slashertheslayer@gmail.com
Recently you requested personal assistance from our on-line support center. Below is a summary of your request and our response.
We will assume your issue has been resolved if we do not hear from you within 48 hours.
Thank you for allowing us to be of service to you.
To update this question by email, please reply BETWEEN THE LINES BELOW. If you don't write between the lines, we will not receive your message, it will be discarded by the system.
[===> PLEASE ENTER YOUR REPLY BELOW THIS LINE. DO NOT TYPE ANYTHING ABOVE <===]
[===> PLEASE ENTER YOUR REPLY ABOVE THIS LINE. DO NOT TYPE ANYTHING BELOW <===]
THE BEST WAY TO UPDATE THIS TICKET is from our support site, CLICK HERE.
Subject | |||||||||||||||||
Account Hacked | |||||||||||||||||
Discussion Thread | |||||||||||||||||
Response (CSR Hal) | 06/08/2009 04:13 PM | ||||||||||||||||
Dear SlasherTheSlayer, Thank you for contacting Outspark Customer Support! It's hard to say what is going on here, but it looks like either Nimmie1400 or Nimeroth are responsible. Comparing IP logs to Shevchenko.7 doesn't indicate him at all. It doesn't appear that he is involved. Unfortunately, because account sharing is involved I am not allowed to restore any characters or assets. At this point, we would suggest just letting go of the situation and moving on. Avoiding Nimmie and Nimeroth would be in your best interest at this point. We apologize that we could not help you more directly with this issue. Regards, CSR Hal Customer Support www.outspark.com | |||||||||||||||||
Customer (SlasherTheSlayer) | 06/03/2009 03:05 AM | ||||||||||||||||
Dear CSR Hal Thank you for the warning. I have checked my e-mail and I see that I changed the password on 29 May. Even if I had a keylogger running on my pc, it would not help a hacker, since I only ever copy-paste passwords. It makes no sense to me why this person would access my account 3 days after deleting all the characters on it. Are you able to determine if it was one of my ex-admins (Nimmie1400/nimeroth on Bijou) who deleted my chars? Perhaps it is time I explained everything, and I apologise in advance for the length of this post. On my main (DaevorTheDevoted) I started collecting godly/+9 equips from my 4x levels, and I would often lend my equips I was not using to some guildies. When the guild I was in (Dragons_Wrath) got disbanded, I opened my own guild ("The_Round_Table", later moved to the exhibition guild "The Round Table"). Anyway, it was mostly my closest friends and ex-guildies who joined my guild, and I loaned them of my equips too, and they would give me mats in return (informal system). Basically, the routine was: I lend them my equips, they bring me mats, from which I make scrolls/pots/stones for sale, and from the proceeds I buy more godly/+9 equips so that when they outlevel their current equips, a new set awaits them. And so the cycle continued. It was a *very* successful system: I built up a great store of godly/+9 equips, and my guildies were always outfitted with some of the best equips to be found. Eventually, however, all the production I had to do simply consumed too much of my time, and I decided to split responsibilities up amongst myself and my admins. I then introduced a "Credit System", where a guildie earns credit for mats/equips donated to the guild, and can use this credit to "rent" equips from the guild. I created separate accounts for each production skill, and various admins were responsible for scroll/stone/pot production, as well as comp/decomp. (Account sharing, I know, but there was no other way to make the system work). All the equips were also stored on 4 separate accounts (one for each class), and only 2 admins were allowed to access it (nimeroth and Nimmie1400). At the time of creating the Credit System, SlasherTheSlayer was a storage account, and as such I gave the password to Nimmie/nimeroth. Anyway, running the system became increasingly difficult (drama after drama), and I eventually had no choice but to abandon the Credit System. I asked for all the guild equips to be returned when the rental period of said equip expires, and paid everyone out for their Credit balance upon returning the equips. Everyone returned the equips, except Nimmie1400 and nimeroth. They were unhappy with the abolishment of the Credit System, and, well, basically threw a tantrum. (Note that 90%+ of all the "guild equips" were my personal equips I had acquired before the formal introduction of the Credit System) 1 day after I had a particularly unpleasant MSN conversation with them (asking for the return of the equips), all the guild accounts (equips, mats, seller accounts) were accessed, and everything of value was taken. These accounts were: [Daevor: I removed the e-mail addresses] [Daevor: e-mail addresses removed] and the 4 equips storage accounts had the most valuable items on them that were taken. Between myself and a friend of mine from France, we changed all the passwords (though evidently I did not successfully change Slasher's password). Nimmie1400 and nimeroth claim they were hacked (by shevchenko.7) at the same time. Then, I had another unpleasant conversation with them: this time they were asking for their "guild money" - i.e. having their Credits paid out. They were refused on the basis that they had not returned all the +9 and/or godly guild equips (which they claim a hacker stole from them). A day later, SlasherTheSlayer's account was accessed, and his chars were deleted. This, then, is the full account of what has happened. I know account sharing is against the ToS, but there was no way I could have run my "communal" guild system without it. If you have to punish someone for the account-sharing transgression, please only punish me. Don't punish my admins for a system I implemented. I am sorry about all the unnecessary work this is causing you, and really appreciate the effort you are putting in to this. Kind regards, SlasherTheSlayer aka DaevorTheDevoted | |||||||||||||||||
Response (CSR Hal) | 06/02/2009 04:05 PM | ||||||||||||||||
Dear SlasherTheSlayer, Thank you for contacting Outspark Customer Support! My records are showing that this user from the Netherlands is still accessing your account, the latest of which was the 28th. Please change your password at once and check your system for keyloggers and trojans. Please do this at once and let me know when it's done. Regards, CSR Hal Customer Support www.outspark.com | |||||||||||||||||
Customer (SlasherTheSlayer) | 05/29/2009 01:33 AM | ||||||||||||||||
Dear CSR Hal Thank you for your reply. I believe this is the same person that hacked all my storage accounts, the list of +9 items stolen is here: http://outspark.com/forums/showthread.php?t=200352 And on SlasherTheSlayer, I had these +9 items: https://i.servimg.com/u/f88/13/68/44/58/scree188.jpg https://i.servimg.com/u/f88/13/68/44/58/scree127.jpg https://i.servimg.com/u/f88/13/68/44/58/scree186.jpg If those can be traced, then I believe we have found the hacker. A little bit of background: On my storage accounts, I did do account sharing: I ran a very communal based guild where I acquired equips and loaned it out to guildies for in-game mats. My admins had access to the storage accounts to help administer this program. This is why I did not report the hack on my storage accounts because I broke the ToS by doing account sharing. 2 of admins from the Netherlands also had their accounts hacked at about the same time my storage accounts were hacked. They have characters on Bijou "Nimmie1400" and "nimeroth" (and happen to be bf&gf irl). They claim (unsubstantiated) that they were hacked by "shevchenko.7", who happens to be the irl ex-boyfriend of "Nimmie1400". My guess is that either Nimmie1400/nimeroth or shevchenko (all from the Netherlands) deleted my character and stole my equips. If you are able to trace the equips, however, then I believe we would have found the guilty party. | |||||||||||||||||
Response (CSR Hal) | 05/28/2009 05:54 PM | ||||||||||||||||
Dear SlasherTheSlayer, Thank you for contacting Outspark Customer Support! Your characters were deleted by someone from Netherlands. There are log entries from February by this person. What can you tell me about this information? Regards, CSR Hal Customer Support www.outspark.com | |||||||||||||||||
Customer (SlasherTheSlayer) | 05/25/2009 09:09 AM | ||||||||||||||||
Hi A friend of mine contacted me (at about 5:15pm UTC-2 timezone, 25 may 2009) on MSN saying that I had just deleted her from my friends list, yet I wasn't logged on. I immediately logged on and discovered that all my characters had been deleted on this account. I presume a hacker had gotten into my account and deleted all my characters at the character select screen. Attached in the screenshot she sent me depicting the deletion from the friends list. Please help. | |||||||||||||||||
Auto-Response | 05/25/2009 09:09 AM | ||||||||||||||||
We have already displayed suggested solutions | |||||||||||||||||
Question Reference #090525-000040 | |||||||||||||||||
|