Warning about graalians.com

Admins · #1 11-07-2005, 06:57 PM

It seems that several accounts were hacked by user "Velox Cruentus", so people were losing items on Kingdoms and eventually on other servers. It seems he was using graalians.com to get the emails and passwords of people (people often use similar passwords for their email account). It is recommended to change the password of your email account and your graal account, or any other service where the password is the same like on graalians.com.
Here is the list of Graal accounts which seem to be hacked, although it can be more:
(all account names with first login time and last login time)

NPC Code:



Ithica1          | 2005-10-25 09:36:43 | 2005-11-03 05:43:16

atomask          | 2005-10-21 10:40:22 | 2005-11-05 17:38:01

raiden0899       | 2005-10-21 10:35:59 | 2005-10-22 19:13:46

Magadal          | 2005-10-21 10:36:19 | 2005-11-05 17:37:16

Sage_Shadowbane  | 2005-10-21 10:38:13 | 2005-11-05 17:40:41

Nitkizi          | 2005-10-21 10:38:42 | 2005-10-23 12:07:30

Genesis          | 2005-10-21 10:40:00 | 2005-11-05 17:40:11

criter           | 2005-10-21 10:41:06 | 2005-10-22 19:10:29

LadyDarkwolf     | 2005-10-22 19:51:39 | 2005-10-23 03:16:32

corny20          | 2005-10-22 20:45:57 | 2005-10-22 20:45:57

8balla           | 2005-10-22 20:46:11 | 2005-10-22 20:46:11

chickenfriedcake | 2005-10-22 20:46:25 | 2005-10-22 20:46:25

Drumguy1         | 2005-10-22 20:46:53 | 2005-10-22 20:46:53

gm2000           | 2005-10-22 20:47:03 | 2005-10-25 22:04:02

powerash         | 2005-10-22 20:47:15 | 2005-10-22 20:47:15

StalePhish96     | 2005-10-22 20:47:29 | 2005-10-22 20:47:29

sukuru1          | 2005-10-22 20:47:40 | 2005-10-22 20:47:40

TigerCub1992     | 2005-10-22 20:47:50 | 2005-10-22 20:47:50

ericku           | 2005-10-22 20:48:02 | 2005-10-22 20:48:02

HINKLE           | 2005-10-22 20:48:15 | 2005-10-22 20:48:15

GeforceIX        | 2005-10-22 20:48:29 | 2005-10-22 20:48:29

Gene_Starlet     | 2005-10-22 20:48:43 | 2005-10-22 20:48:43

imawesome999     | 2005-10-27 18:31:53 | 2005-10-27 18:31:53

scoobsonwhat     | 2005-10-28 19:44:51 | 2005-10-28 19:44:51

Draenin          | 2005-10-28 14:03:51 | 2005-11-04 10:24:09

sage_scooby      | 2005-10-28 19:45:05 | 2005-10-28 21:49:33

Riven2           | 2005-10-29 02:17:32 | 2005-10-29 07:10:13

XenticKnoble     | 2005-10-29 03:19:38 | 2005-10-29 03:19:38

Jamilla          | 2005-10-30 05:38:56 | 2005-10-31 05:20:50

LilNiglet        | 2005-10-31 16:44:51 | 2005-11-05 17:38:50

Lylic            | 2005-11-02 13:48:35 | 2005-11-03 18:03:21

Tuoni            | 2005-11-03 01:29:07 | 2005-11-03 01:29:07

Spazzykins       | 2005-11-03 01:35:36 | 2005-11-03 01:35:36

Chett            | 2005-11-03 01:38:20 | 2005-11-03 01:38:20

Shabangizzle     | 2005-11-05 01:18:49 | 2005-11-05 01:18:49

Cassy            | 2005-11-05 04:29:10 | 2005-11-07 10:16:34

Aflack3          | 2005-11-05 17:35:46 | 2005-11-05 17:35:46

Riland           | 2005-11-05 17:36:35 | 2005-11-05 17:36:35

smashatakk       | 2005-11-05 17:37:00 | 2005-11-05 17:37:00

OrigitalTrial    | 2005-11-06 21:25:01 | 2005-11-06 21:25:01

Hypo182          | 2005-11-07 05:32:17 | 2005-11-07 05:32:17

Malinko · #2 11-07-2005, 07:03 PM

...

Wow. A lot of players on the list have access to major playerworlds.

Change e-mails and passwords quick!

Smutastic · #3 11-07-2005, 07:26 PM

Wow...

Quote:

Originally Posted by Malinko

Change e-mails and passwords quick!

And PWAs!!111.

Matt · #4 11-08-2005, 10:02 PM

Quote:

Originally Posted by Malinko

...

Wow. A lot of players on the list have access to major playerworlds.

Change e-mails and passwords quick!

Atleast IPs must be secure.

Malinko · #5 11-09-2005, 06:48 PM

Quote:

Originally Posted by Matt

Atleast IPs must be secure.

How does an IP range being secure matter? You could request the IP range to be changed and therefore log online to your RemoteControl.

Matt · #6 11-11-2005, 04:34 AM

Quote:

Originally Posted by Malinko

How does an IP range being secure matter? You could request the IP range to be changed and therefore log online to your RemoteControl.

Ah yes, i keep thinking all accounts require a Secure IP to logon the client like Admin-Playerworld accounts, although they do still have messengers to contact other Staff.

Fry · #7 11-07-2005, 07:19 PM

Now I never would've expected that from Velox, quite sad, actually.

Skyld · #8 11-07-2005, 07:25 PM

Quote:

Originally Posted by Fry

Now I never would've expected that from Velox, quite sad, actually.

Nor I. I must admit, I'm disappointed.

Sacred Shadow · #9 11-07-2005, 07:28 PM

Quote:

Originally Posted by Fry

Now I never would've expected that from Velox, quite sad, actually.

I agree completely, I was JUST talking to him on AIM while he was at school... He told me he was being framed, but the evidence is overwhelming...

Fry · #10 11-07-2005, 07:30 PM

Quote:

Originally Posted by Sacred Shadow

I agree completely, I was JUST talking to him on AIM while he was at school... He told me he was being framed, but the evidence is overwhelming...

The thing is, why'd he save the passwords in plain text if not for using them himself?

xAndrewx · #11 11-07-2005, 07:28 PM

What evidence is there?

Sacred Shadow · #12 11-07-2005, 07:33 PM

Quote:

Originally Posted by xAndrewx

What evidence is there?

What are you, an idiot? There's paypal logs of him stealing money, Stefan shows logs, what more do we need?

xAndrewx · #13 11-07-2005, 07:34 PM

Quote:

Originally Posted by Sacred Shadow

What are you, an idiot? There's paypal logs of him stealing money, Stefan shows logs, what more do we need?

I wouldn't class that as a log, it shows someone logging on there account and back off. That proves alot, idiot.

Admins · #14 11-07-2005, 07:34 PM

Quote:

Originally Posted by xAndrewx

What evidence is there?

- IPs matching on most of those accounts, e.g. Draenin is using the same ip for several weeks, only one day the ip was different, and was matching the ip of the account Velox Cruentus; it was the day when he got reset and lost his items
- v4 computer id database, from which the above list was generated. The computer has been used around 300 times for Velox Cruentus, and 1-13 times for those accounts listed
- some items of hacked accounts have been found in his house on Graal Kingdoms
- paypal logs, money has been transferred to Velox Cruentus without the ok from the (real) owner, see the thread of Draenin on the Kingdoms forum

xAndrewx · #15 11-07-2005, 07:35 PM

Quote:

Originally Posted by Stefan

- IPs matching on most of those accounts, e.g. Draenin is using the same ip for several weeks, only one day the ip was different, and was matching the ip of the account Velox Cruentus; it was the day when he got reset and lost his items
- v4 computer id database, from which the above list was generated. The computer has been used around 300 times for Velox Cruentus, and 1-13 times for those accounts listed
- some items of hacked accounts have been found in his house on Graal Kingdoms
- paypal logs, money has been transferred to Velox Cruentus without the ok from the (real) owner, see the thread of Draenin on the Kingdoms forum

wow. That's real evidence Tig.
x-x. I'm ashamed.

Aknts · #16 11-07-2005, 07:37 PM

Quote:

Originally Posted by xAndrewx

wow. That's real evidence Tig.
x-x. I'm ashamed.

Why did you know him in real life? For all you know he is some 45 year old guy who lives in his parents basement.

xAndrewx · #17 11-07-2005, 07:40 PM

Quote:

Originally Posted by Aknts

Why did you know him in real life? For all you know he is some 45 year old guy who lives in his parents basement.

I worked with him on Era. I hired him as a scripter, then I quit and gave manager to him. That's why I'm ashamed.

Splke · #18 11-08-2005, 05:09 AM

Quote:

Originally Posted by xAndrewx

What evidence is there?

Why are you always such a douche?

~

Velox eh? I thought he was kindof uh.. cool, ish. Glad I don't sign up for every "graal" related website like the rest of you tards.

Mykel · #19 11-08-2005, 06:38 AM

Quote:

Originally Posted by Splke

Why are you always such a douche?

~

Velox eh? I thought he was kindof uh.. cool, ish. Glad I don't sign up for every "graal" related website like the rest of you tards.

It had nothing to do with people signing up.

napo_p2p · #20 11-08-2005, 06:53 AM

Quote:

Originally Posted by Mykel

It had nothing to do with people signing up.

People had to sign up for graalians.com...

And Velox was (is) a smart one. He even had attempted tries logged. Even if you didn't use your normal password, but you tried to log in with it by force of habit, he was able to use that too.

xAndrewx · #21 11-08-2005, 01:39 PM

Quote:

Originally Posted by Splke

Why are you always such a douche?

~

Velox eh? I thought he was kindof uh.. cool, ish. Glad I don't sign up for every "graal" related website like the rest of you tards.

You're the 'douche' for not reading the full post[s].

Clash · #22 11-08-2005, 08:25 PM

Quote:

Originally Posted by xAndrewx

You're the 'douche' for not reading the full post[s].

didn't you quit

and all of this just makes me cringe at the graal community

the sad thing is, the fact he didn't even hack anyone he just used some clever or lame (depends on how you look at it) phising to steal a lot of stuff which is dumb. if he hacked these people ninja style he would of never been caught.

oh well time for him to realize he commited a felony and is probably going to go to jail, because in cases like this the internet is some serious business!

Benm00t · #23 11-07-2005, 07:30 PM

Funny, when you sign up with the site, you get this message.

Please do not forget your password as it has been encrypted in our database and we cannot retrieve it for you.

Mykel · #24 11-07-2005, 07:31 PM

...wow.
Didn't see this coming.

WanDaMan · #25 11-07-2005, 07:33 PM

Woah, Freaky.

Sacred Shadow · #26 11-07-2005, 07:39 PM

He's not.

Sacred Shadow · #27 11-07-2005, 07:41 PM

I've known him for years or so -.- I can't believe he did this. He's a great guy..

xAndrewx · #28 11-07-2005, 07:43 PM

I've notified the Era players about this in an anouncement. Quite afew are from Era too. x-x

Mykel · #29 11-07-2005, 07:45 PM

Kind of clever actually...
But still a shock.

Draenin · #30 11-07-2005, 07:46 PM

Man... This is astounding. I knew I hadn't gotten up in the middle of the night and /reset myself. But still... Wow. That's a lot of accounts.

Googi · #31 11-07-2005, 07:47 PM

Yeah, you know, a few days ago I sold him 2 gold keys because he didn't have enough dias to buy any more. And then the day after he had 100 dias and bought five, and I was like "What the heck? How'd he get so many dias in a day?"

Mykel · #32 11-07-2005, 07:53 PM

Maybe it wasn't his fault. I mean, there aren't any good independent Graalian sites, and he had made one. It seems the wonderful world of irony has taken our son.

napo_p2p · #33 11-07-2005, 07:54 PM

I had a feeling that he knew the passwords because he was able to make everyone who had an account on graalians.com to have an account on his forums (with the same password).

I'm lucky I used a password that is not associated at all with my 'main' one.

Mykel · #34 11-07-2005, 07:55 PM

Quote:

Originally Posted by napo_p2p

I had a feeling that he knew the passwords because he was able to make everyone who had an account on graalians.com to have an account on his forums (with the same password).

I'm lucky I used a password that is not associated at all with my 'main' one.

Same.

Damix2 · #35 11-07-2005, 07:57 PM

Quote:

Originally Posted by napo_p2p

I had a feeling that he knew the passwords because he was able to make everyone who had an account on graalians.com to have an account on his forums (with the same password).

I'm lucky I used a password that is not associated at all with my 'main' one.

He got the password to my spam gmail account, oh darn.

Draenin · #36 11-07-2005, 07:59 PM

I am glad that we've gotten down to the bottom of this, or else there'd be more of a crisis than there already is. My best suggestion for now is to post warnings about it wherever possible. Some of the key administrators for a lot of servers are on there, and if they aren't warned, there could be major issues afoot.

Emily_Cruddas · #37 11-07-2005, 09:51 PM

I'm also sorry to hear you were taken advantage of like this, but i have to wonder, after reading about how this happened where did the common sense you people had go for the few minutes you took signing up for this website?

That's all that confuses me, you are all really great people and don't deserve to lose anything, but the common sense that you SHOULD use a different password for safety reasons seems to have taken a vacation at that time for those listed.

Mykel · #38 11-07-2005, 08:02 PM

Also, anyone that has their password/E-mail set the same on graalians.com as they do on their actual Graal account should change it. Just because these are the only accounts that have been hacked doesn't mean that he doesn't have more that he can give out.

Draenin · #39 11-07-2005, 08:07 PM

He hacked LadyDarkwolf's account. And Ithica1's. And Cassy's.

Tukuya_Chan · #40 11-07-2005, 08:38 PM

Wow. Mos def not a gr8 thing to hear. I actually know one guy from that list. =[