It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussionGoG accounts being hacked by the thousands(147 posts)(147 posts)
(147 posts)
Pages:
1
2
3
4
5
6
7
8
9
10
This is my favourite topic
Posted April 09, 2019
low rated
avatar
richlind33: You are obviously right about this, and the only way for CDP to protect the integrity of GOG accounts is to make the Cyberpunk 2077 release a 1 year Steam exclusive.

Right? lol
avatar
satoru: https://www.gog.com/forum/general/gifting_of_the_witcher_3_wild_hunt_temporarily_unavailable_fix_in_progress/page1

Due to a very large number of fraudulent transactions coming in, we have had to disable the gifting option for three items: The Witcher 3: Wild Hunt, The Witcher 3: Wild Hunt Expansion Pass, and The Witcher 3: Wild Hunt - Game + Expansion Pass.

We are working to clarify the problem and prevent further fraudulent transactions from being made.

We will make gifting possible once more as soon as this issue is resolved
avatar
satoru: Again with the Witcher 3 GOG was shown that frauders will go to where there is money. The Witcher3 was worth money and they exploited GOG for it.

They've stopped doing it because GOG accounts dont have value.

Steam already has to deal wtih fraud on a global scale and has lots of internal tools to deal with it because they are, unlike GOG accounts, actually of value to fraudsters and are under attack 24/7/365.

When Cyberpunk 2077 gets announced and pre-orders are available on GOG, you can bet frauders are gonna look at GOG accounts and wonder "how can we make money from GOG's default really terrible default security profile on accounts". Most users wont have 2FA enabled on GOG unlike on Steam where it's required in order to do trading, which is the most valuable mechanism to extract value.

History repeats itself if one ignores it.
And more likely than not, GOG will enable 2FA on all accounts right before the announcement. Or they won't.

Zzzzz.....
Posted April 09, 2019
low rated
avatar
richlind33: And more likely than not, GOG will enable 2FA on all accounts right before the announcement. Or they won't.

Zzzzz.....
Again ifyou think scammers are magically going to ignore GOG for Cyberpunk2077, when they were having a field day with the Witcher 3, sure stick your head in the sand right?

Scammers have nothing ot lose to try and hijack GOG accounts and seeing if they have anything of value so they can scam users on shady cdkey sites. Since GOG doesnt enforce 2FA they'll, just spam every account they can find off of previous username/password site exploits and see what sticks. They just need a few accounts to have some money to get what they need, buy a giftable copy, sell it on a shady cd key shop for dirt cheap to ensure someone takes it quickly, then take out the money asap.
Post edited April 09, 2019 by satoru
Posted April 09, 2019
low rated
avatar
richlind33: And more likely than not, GOG will enable 2FA on all accounts right before the announcement. Or they won't.

Zzzzz.....
avatar
satoru: Again ifyou think scammers are magically going to ignore GOG for Cyberpunk2077, when they were having a field day with the Witcher 3, sure stick your head in the sand right?

Scammers have nothing ot lose to try and hijack GOG accounts and seeing if they have anything of value so they can scam users on shady cdkey sites. Since GOG doesnt enforce 2FA they'll, just spam every account they can find off of previous username/password site exploits and see what sticks. They just need a few accounts to have some money to get what they need, buy a giftable copy, sell it on a shady cd key shop for dirt cheap to ensure someone takes it quickly, then take out the money asap.
I'm all out of fcks to give, so I'll let you do it for me. Thanks in advance. ;p
Posted April 09, 2019
what would a hacker even do with a gog account? buy you some games?
Posted April 09, 2019
spend my non-existent wallet funds?
Posted April 09, 2019
avatar
swsoboleski89: what would a hacker even do with a gog account? buy you some games?
As written above, if payment info is stored, it's possible to buy gift codes and sell them on other shady sites. And yes it did happen after the Witcher 3 release. I remember both the threads about "my account was hacked!" and "why has Witcher 3 disappeared from my library?".

Still, the first rule is "Don't Panic" and the second "turn on the 2FA".
Posted April 09, 2019
low rated
avatar
rtcvb32: No one is trying to deplatform him at all either...

Oh wait a minute... that happened.
avatar
firstpastthepost: To be fair, he deplatformed himself. You can't expect to get to keep using a soapbox you don't own when you're using it to slander others.
You mean like how leftists/progressives(extreme ones) say similar stuff yet hardly ever get deplatformed for?
avatar
firstpastthepost: No one is trying to kill him. He's his own crisis actor.
avatar
rtcvb32: No one is trying to deplatform him at all either...
Oh wait a minute... that happened.
Him, Tommy Robinson, etc...and soon to be(possibly) deplatformed chaps like Sargon/etc.

Addition: Lauren Southern, who got IRL banned from thbe UK(she may have issues but her attempts to showcase the sad double standard in regards to a certain migrant group(when compared to others/pother religion's freedoms) in the EU is eye opening.)

(To be clear i'm not saying I agree with any of them 100% or even close to that percentage, just that sometimes they say stuff which makes sense.....and because they're labelled as racists/nutters their logical/smart stuff gets lumped in with all the crazy/bad stuff,sadly)

avatar
Evan_Damien: Upvote and follow for more notifications on GoG, and the games they provide.
avatar
Breja: wat
Didn't you hear? Every site and their mum is adding upboats nao.
Post edited April 09, 2019 by GameRager
Posted April 09, 2019
low rated
avatar
firstpastthepost: To be fair, he deplatformed himself. You can't expect to get to keep using a soapbox you don't own when you're using it to slander others.
avatar
rtcvb32: When the bar is set so low... anyone can get banned
=============================================
Unlike... oh i don't know...The Washington Post
The interesting thing about that twitter ban is that even though she was/is a feminist, she still said a"alt-right"/conservative style opinions on that subject. Now if she had said PROGRESSIVE/leftist leaning stuff on that topic(i.e. "all trans haters are ebil nazzis", etc) she'd likely have been alright.
===========================
That kid got tons of flack for stupid sh*t(wearing a HAT and GRINNING at a minority).....good on him that he is suing those who slander and defame him.

avatar
Darvond: I see this thread's already gone to the trash can, let's see what it is actually about.
avatar
MarkoH01: It's been there since the OP imo. No proof of anything, no source just telling people to panic. Ridiculous, unbelievable. Thread can be closed there's nothing left to say. Hello troll and goodbye.
Um, friend......could you tone down the condescending tone a bit? 0.o

Yes, the OP is a bit "clickbait-y" and unsubstantiated, but that doesn't mean the OP is a troll or automatically a competitor shill/similar or that the thread should be discarded(some here might have views left to express on the main issue at hand which isn't just unsubstantiated/fearmongering & should be allowed to be heard if at all possible.

(I agree the offtopic stuff should be toned down/held back though.)
Post edited April 09, 2019 by GameRager
Posted April 09, 2019
low rated
avatar
swsoboleski89: what would a hacker even do with a gog account? buy you some games?
They could use any linked payment methods(I think GOG allows such, but i'm not sure) to buyt game keys(giftable versions) and then sell those same keys to others for IRL money.
Posted April 09, 2019
low rated
avatar
swsoboleski89: what would a hacker even do with a gog account? buy you some games?
If you have GOG wallet or a stored payment method, a hijacker would use it to buy a giftable copy of Cyberpunk 2077 then sell it on a shady cdkey shop for profit.

Just like scammers were using stolen cc cards to buy Witcher 3 giftable copies and selling them on shady cd key sites to the point where GOG disabled gifting of the Witcher 3 entirely.


1) The OP is likely lying mostly because scammers/hijackers don't care about GOG accounts right now since they have little value
2) However I believe that when Cyberpunk 2077 comes out, you will see a large swath of hijacks as scammers attempt to cash out on the game's popularity
avatar
Microfishd: spend my non-existent wallet funds?
The issue is that hijackers don't functionally know this and thus will use a shotgun approach.

On Steam you can get 'self selecting victims' by offering "FREE CSGO ITEMS" or "GAMBLE ON DOTA2" where you can basically ensure the victims logging into your site are likely to have valuable items/inventory and the means to trade them away to your scam bot. This is similar to how scam email purposely have typos. Its actually a victim filtering tool. A person who notices the typo, is likely to notice other issues with your scam. Where as a person who misses those typos, is much more likely to fall for the entire part of the scam.

On GOG a scammer has no way of doing this nor creating a scenario of 'self selecting victims'. Thus they will resort to "spam and hijack anything and everything and see what has something". They'll just hijack hundreds/thousands of accounts and just hope for it has a linked payment method. If it doesn't they move on. If it does, then they've made some money.

Id wager if you put GOG's accounts through the lists of millions of accounts that have been hijacked from other sites, you'll get a

1) A lot of accounts you can log into
2) A lot of accounts that don't have 2FA enabled
Post edited April 09, 2019 by satoru
Posted April 09, 2019
low rated
avatar
swsoboleski89: what would a hacker even do with a gog account? buy you some games?
avatar
satoru: If you have GOG wallet or a stored payment method, a hijacker would use it to buy a giftable copy of Cyberpunk 2077 then sell it on a shady cdkey shop for profit.

Just like scammers were using stolen cc cards to buy Witcher 3 giftable copies and selling them on shady cd key sites to the point where GOG disabled gifting of the Witcher 3 entirely.

1) The OP is likely lying mostly because scammers/hijackers don't care about GOG accounts right now since they have little value
2) However I believe that when Cyberpunk 2077 comes out, you will see a large swath of hijacks as scammers attempt to cash out on the game's popularity
avatar
Microfishd: spend my non-existent wallet funds?
avatar
satoru: The issue is that hijackers don't functionally know this and thus will use a shotgun approach.

On Steam you can get 'self selecting victims' by offering "FREE CSGO ITEMS" or "GAMBLE ON DOTA2" where you can basically ensure the victims logging into your site are likely to have valuable items/inventory and the means to trade them away to your scam bot. This is similar to how scam email purposely have typos. Its actually a victim filtering tool. A person who notices the typo, is likely to notice other issues with your scam. Where as a person who misses those typos, is much more likely to fall for the entire part of the scam.

On GOG a scammer has no way of doing this nor creating a scenario of 'self selecting victims'. Thus they will resort to "spam and hijack anything and everything and see what has something". They'll just hijack hundreds/thousands of accounts and just hope for it has a linked payment method. If it doesn't they move on. If it does, then they've made some money.

Id wager if you put GOG's accounts through the lists of millions of accounts that have been hijacked from other sites, you'll get a

1) A lot of accounts you can log into
2) A lot of accounts that don't have 2FA enabled
.
.
Why do you repeat yourself ad nauseum? Do you have OCD?
Post edited April 09, 2019 by richlind33
Posted April 09, 2019
avatar
MarkoH01: It's been there since the OP imo. No proof of anything, no source just telling people to panic. Ridiculous, unbelievable. Thread can be closed there's nothing left to say. Hello troll and goodbye.
avatar
GameRager: Um, friend......could you tone down the condescending tone a bit? 0.o

Yes, the OP is a bit "clickbait-y" and unsubstantiated, but that doesn't mean the OP is a troll or automatically a competitor shill/similar or that the thread should be discarded(some here might have views left to express on the main issue at hand which isn't just unsubstantiated/fearmongering & should be allowed to be heard if at all possible.

(I agree the offtopic stuff should be toned down/held back though.)
"Unsubstantiated" is a nice word to call something that obviously is just there to create a panic. It's not that I don't believe the OP wasn't affected at all and I would not even have said anything at all if this would have been the only thing in the OP. But telling us that many others were as well without ANY proof and adding to this that data has been stolen that GOG does not even store (see the post of PaterAlf) ....

If you call that condescending that's up to you. I for one wanted to make clear that we should be careful to distinguish between proven facts and heresay since unfortunately especially GOG has a history with people getting mad about the latter and it's getting a bit tiresome sometimes. So if you should feel offended I deeply and sincerely apologize. THAT was not the reason I posted.
Post edited April 10, 2019 by MarkoH01
Posted April 09, 2019
Joke's on you, there aren't even a thousand users on here!
And since I am one out of the total 11.4 users on GOG and I haven't been hacked, I can confidently say that the OP is spreading misinformation!!!
Posted April 09, 2019
I'll say this...

With the growing PC store/launcher wars, expect more of these "GOG's been hacked," "Why GOG sux," "GOG isn't what it used to be," etc. threads. Hate to see it, but disinformation and "seeding" a community with "false discontent" (not saying all criticism of GOG is wrong or false) is standard operating procedure for business now.
Posted April 09, 2019
avatar
kai2: I'll say this...

With the growing PC store/launcher wars, expect more of these "GOG's been hacked," "Why GOG sux," "GOG isn't what it used to be," etc. threads. Hate to see it, but disinformation and "seeding" a community with "false discontent" (not saying all criticism of GOG is wrong or false) is standard operating procedure for business now.
And "GOG should introduce DRM, if only for a year" :-(
Pages:
1
2
3
4
5
6
7
8
9
10
This is my favourite topic
Community
General discussionGoG accounts being hacked by the thousands(147 posts)(147 posts)
(147 posts)