Hacked guildbank. Useless safegaurds

#0 - Sept. 27, 2009, 5:50 p.m.

So our guild bank was hacked...

I have very strict daily limits set on everyone in the guild. Including the officers.

Last night an officer of the guild was hacked and the guild bank was completely pillaged... the account involved was able to bypass ass these "safeguards" and take everything from the bank.

He had a 150g a day withdraw gold allowance... He was able to take 40k... 150g increments at a time... Someone in the guild mentioned that he was able to do this by logging on and off over and over again.

He had a 2 stack allowance in the tab that had anything of value. He took over 30 stacks from it... Again I would assume this was done via logging in an out over and over again.

Several people in our guild have in petitions including the person who was hacked. No GM has responded yet (9 hours and counting)... But even if we get our stuff back I would like to ask... How do we prevent this from happening again besides preventing any use of the back from anyone? Aren't these daily limitations put in place to prevent this type of thing?

Aredek

#5 - Sept. 27, 2009, 6:55 p.m.

Hm. Thanks for bringing this to my attention, Poena. Please leave your petition open so that we can investigate your losses as quickly as possible. I am also going to forward this information to our Hacks Department for further review.

If you managed to speak with your guild mate, please make sure that he reads the following threads:

Computer Security Recommendations:
http://forums.worldofwarcraft.com/thread.html?topicId=1778038509&sid=1

Account Compromise Info Center:
http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1

Let me know if you have any questions along the way.

Aredek

#25 - Oct. 2, 2009, 3:50 p.m.

Q u o t e:
Well, we did not get everything back. We were short about 6k gold and a handful of crusader/runed orbs... Without a function guild bank log I cannot tell for sure on the specifics.

Does anyone know of a way to view more than the last couple hundred entries in the gbank on the armory? or in game?

Hey again, Poena.

Unfortunately, I do not have any workarounds which would allow you to view more transactions, but if the compromised player responds to the restoration e-mail with as much information as possible, we may be able to locate the remaining items. If you can only remember the gold and runed orbs or missing, please be sure to let us know and we'll try to restore any other items removed around the same time that were not previously restored.