Hacked with a GoldCard .... !?

[Raffaele Meiers]

Originally Posted by Auktuma

to "hack" you need just 3 consequtive codes? That could be possible to do with keylogger. Save your computer and save your GC - if you still have it that dont means that some1 used to get 3 codes from it.

No need to crack any algorithm at all, only keylogger and a fake Entropia.exe which can display Startup Screen, Login Screen, GC Screen and Server Maintenance screen and send the so collected Infos back to the hacker - all done he has all the info he needs to login with right username, password and the right GC number,then he logs in and gets rid of all your stuff and log out.

He even could get a second GC number easily from the customer without doing too much danger to himselve to be exposed and could even replace the fake entropia.exe with the real one,and overwrite his fake program and the keylogger and not let a trace of his work on the victimes PC. So the victim can log in again and finds his Avatar purged.

[jod]

Originally Posted by Raffaele Meiers

Best is go back to read my post and then try to answer again, OK?

For your convenience here the relevant part:

if someone can place a keylogger onto your PC he also can place a fake entropia.exe on your computer which displays the login screen and ask for login, password and after that for your GC number then displays the Server Maintenance screen and sends the collected informations to the hacker



So no need to crack any algorithm, not logarithm

Are you a script kiddy? - LOL just jokeing

Lol I said i wasnt sure if it was the right word :P

And after your reply to Auktuma i see what you mean.

[Auktuma]

Originally Posted by Raffaele Meiers

No need to crack any algorithm at all, only keylogger and a fake Entropia.exe which can display Startup Screen, Login Screen, GC Screen and Server Maintenance screen and send the so collected Infos back to the hacker - all done he has all the info he needs to login with right username, password and the right GC number,then he logs in and gets rid of all your stuff and log out.

sounds as more complex way - you need to replace Entropia.exe. You will change checksum of it and could get alarm to which you for sure will pay attention coz well known name appeared . Will happen if your comp safety software still alive.

[Raffaele Meiers]

Originally Posted by Auktuma

sounds as more complex way - you need to replace Entropia.exe. You will change checksum of it and could get alarm to which you for sure will pay attention coz well known name appeared . Will happen if your comp safety software still alive.

If so you also would notice the keylogger trying to connect to the internet but this is allways circumvented in using a known vehicule to get the data to the internet, for example Internet Explorer, and Antivirus will notice when scanned that checksum is different but this changes also with every update and on the other hand it does not access the internet at all during the login process so firewall is also useless against it.

I never said it will work allways but until AV manufacturer have a sample they cant implement a signature to scann for and as it is not spread widely but to a closed circle and when he tries to hide it's traces it can go quiet a while until this is implemented in the av database and to change the virus then a bit to not be found by the av software is a task they do every day, I can tell you this as I'm often on the other side and try to get rid of the viruses the customers had on their machines.

[NavadaDucrot]

Last week a m8 was royally pissed at me because he swore i logged on after midnight. I was out of town where there is no internet, and my GC was with me. Didn't answer his PMs and then logged off about 10 minutes later. I have a GC so I figured it was a bug. Well honestly he told me about it a few days after when I was fairly drunk so I just remembered lol. I guess I'll be sending a support case as well as soon as I find out from him when I was "online" that night.

Lynn

[Auktuma]

lets hope there is time function and old codes could not be used, even if consecutive. Then you need to care just about security of your computer, but not about old "friends".

[Raffaele Meiers]

Originally Posted by Auktuma

lets hope there is time function and old codes could not be used, even if consecutive. Then you need to care just about security of your computer, but not about old "friends".

sadely not, you can generate a code or as many as you want and write them down and then use them hours, days or months later as long as you do it in the right order.