Special Nx Event hosted by GMs
So I got a message in my shop today from a GM in G-A-Z-E-D, announcing a special event where you sign up you can win up to 25k nx. As he suggested, to prove him really being a GM, I tried adding him to my buddy list and yes, it said "You are unable to add Game Masters to your friends list". So he was really a GM, so this event must be real -- right?
So I follow the link he showed me to go to, and I end up [url=http://oi50.tinypic.com/19oyf4.jpg]to this page.[/url] Everything looks legit, it's on the actual Nexon website after all... but I was a little hesitant to provide my PIC as well for registering. [i]Whatever[/i], I thought. [i]Why would a REAL gm be telling me to go to this link, which is actually affiliated with the Nexon site, just to be keylogged?[/i] It wouldn't happen. So I signed up.
Next thing that happens, I am sent to [url=http://i45.tinypic.com/5frgwj.jpg]this page here.[/url] Pretty weird. Because I did give my real info, and now it says that it's not working. Afterwards, I did end up changing my password and PIC just to be safe... but I'm not really worried. I think it was just a web error.
So now I'm thinking what the hell just happened, and if anyone else was invited to participate in this event by a GM (being sent the message in game, from your store).
[b]Update:[/b]
Wow I am an idiot. I advise anyone against going to sites that people post in your store. (Is this against the rules to post GM's names? -- if so i can remove this) The Gm's name was branlenGAL. Go see for yourself how that's a real GM, but I realized the person that actually messaged me is only impersonating as him. His ign must have been branienGAL.
I looked into the code source for the site they sent me to, and in the "register your information" part, there is a form with an action phisp.php
I understand php enough to understand he is using this POST method to grab my information, and it's being all being sent through a mailing function to an email or something to store all the information.
Well, let's close this thread.
13 Comments • Newest first
they steal accounts
People seriously still fall for this crap?
inb4 "OMGFGOMFOGMFOMG I GOT HECKED" thread
You can use a mule account?
For everyone asking me to post the image with the actual url, I won't do it. Just in case it is unsafe, I wouldn't want someone to follow the link. Lol.
But, just to be safe, I did change all of my information... I did that from a separate computer. So I should be alright, right?
[quote=Taichikara]Nexon doesn't ask you for your pic at all.[/quote]
I meant when you log on to your account. Not actually telling a GM. There is no where else that needs the PIC besides login (game).. not even on site.
[MapleTip] Game Masters will NEVER ask for your personal information.
Anything that requires your password from another site or program is a bona fide scam. People should [i]know[/i] this without having to be told and re-told.
But it was an actual GM o.o Have you ever tried adding a GM to your buddylist? It won't let you, you get a special message in a dialog box saying "Gamemaster is unavailable as a buddy". The guy that posted that to me was legit a GM...
[quote=Darrylx3]LOL Phishing sites.
Never enter your information unless it's from nexon.net[/quote]
In both images the Url is hidden, it could be real or fake.
O_o that looks werid already... Nexon will never ask for a PIC outside of the game. Only inside game...(I mean like when you have to input your PIC to log in and what not.. )
Fake. And can you not cover the link?
That^. This happened to some other guy I knew, but he didn't give in his PIC or anything, so Idk what will happen to you.
What was the EXACT URL? PM me it and I will tell you if it was a Keylogger or not.
One, they wouldn't need your PIC for logging in.
Two, telling you to log out, means they want to log in. Really now.
Honestly, I have no idea how anyone falls for these things.
Do you have a SS of the "GM" sending you a message? It's probably just a similar name, but you tried to add an actual GM, thus causing the message. It's best to Right click, save name, and paste it into /find.