I need your help admins for my problem regarding my account may have got hacked!

[OmaRosh]

Hi,
Firstly, I don't know if this's the correct section for my problem or not. if it's not I am Sorry.
My problem simply is that the littlewhitey's account of my little brother has got stolen!

Problem Details :

* (My Bro. ingame name is "VCPR_850". he has also another account  "[Sym3ol]^VCPR_850^")
*Today while he was playing, someone contacted him privately. He asked him if he had another account, My Bro. told him yes.
*He someway persuaded My Bro to Give him the full name of the other account claiming he wants to join the same clan.

*Then he gave my brother an ip of a new Server to add in VCMP Client Claiming it's a more fun server.
after that my brother did what he asked and joined that server but with a different Username.
*When My Bro rejoined the official littlewhitey's server, He discovered he had no money is left in hand or in bank.
then he checked the other account and found the same. Even the 2 cars of both accounts had gone. (btw :"HotRacer & PCJ600") 

*Then I came from outside and logged in with my account which is "[Sym3ol]^Omarosh^" .. I found no change and quieted the game but after that, someone logged in with my account and I wasn't able to play with that name ("Account already in use")
* So I used another name and logged in and talked to an admin about what happened. in that moment, the theft disconnected from my account. fortunately, my account is not affected.

------------------------------------------------------------------------------------------------------------------
Finally,
 I don't know what to do for my Brother's both accounts. they are 0 now! So I seek your help what to do.
Sincerely.

*By the way

-the ip of that server is : OMITTED
-My brother is young and was not smart enough to know he shouldn't give info to strangers.

[krystianoo1]

How much money did your brother have? When did this happen?
What was the name of the person that contacted your brother?

The account was quite probably hacked; when your brother joined the other server, did he register? If yes, then the person have gotten his password from the database and tried to use it on your bro's account in which he succeeded. This is why you should NOT use the same password on different services/servers.

I might be able to pinpoint the accout that the money was transferred to by searching my IRC logs - however I'd love to know when had this happened.

Code: [Select]

Nov 04 15:22:48 <RostySpoon> [11] VCPR_850: !give vicecity. 100000
Nov 04 15:22:49 <RustySpoon> [13] _DmC_devil: !b+
Nov 04 15:22:51 <RastySpoon> [11] VCPR_850: !give vicecity. 100000
Nov 04 15:22:51 <RostySpoon> >> [9] Oath left the server. (Quit)
Nov 04 15:22:55 <RastySpoon> >> [9] Oath joined the server.
Nov 04 15:22:55 <RustySpoon> >> Oath is connecting from China.
Nov 04 15:22:55 <RastySpoon> [11] VCPR_850: !give vicecity. 50000
----

Code: [Select]

Nov 04 15:23:30 <RastySpoon> [3] [Sym3ol]^VCPR_850^: !getcar
Nov 04 15:23:33 <RostySpoon> [3] [Sym3ol]^VCPR_850^: !bank
Nov 04 15:23:35 <RustySpoon> [7] (_**MORKANE**_): mn w33ean
Nov 04 15:23:37 <RastySpoon> [14] Ws07: ana mini l maghreb
Nov 04 15:23:38 <RostySpoon> [4] [RKr]aAMINEe: !getcar
Nov 04 15:23:41 <RustySpoon> ** assassin... killed S.2277 (M4) (Body)
Nov 04 15:23:42 <RastySpoon> ** ArThaS. killed [VU_T]Best1Ever (Uzi) (Body)
Nov 04 15:23:45 <RostySpoon> [9] Oath: !ca
Nov 04 15:23:46 <RustySpoon> ** ArThaS. killed [RK]SeaN^ (Spaz) (Right Leg)
Nov 04 15:23:47 <RastySpoon> [14] Ws07: morocco
Nov 04 15:23:48 <RostySpoon> [3] [Sym3ol]^VCPR_850^: !sellcar
---

Code: [Select]

Nov 04 15:24:45 <RustySpoon> [3] [Sym3ol]^VCPR_850^: !give vicecity. 100000
Nov 04 15:24:47 <RastySpoon> [3] [Sym3ol]^VCPR_850^: !give vicecity. 100000
Nov 04 15:24:50 <RostySpoon> [3] [Sym3ol]^VCPR_850^: !give vicecity. 73848
Nov 04 15:24:51 <RustySpoon> >> [3] [Sym3ol]^VCPR_850^ left the server. (Quit)
Vicecity.'s PAC account:
http://pacommunity.co.uk/profile/30755

Later on:

Code: [Select]

Nov 04 15:41:28 <RostySpoon> >> [20] vicecity. joined the server.
Nov 04 15:41:28 <RastySpoon> >> vicecity. is connecting from Pakistan.
Nov 04 15:41:31 <RostySpoon> [20] vicecity.: !give holden 100000
Nov 04 15:41:32 <RustySpoon> [20] vicecity.: !give holden 100000
Nov 04 15:41:34 <RastySpoon> [20] vicecity.: !give holden 100000
Nov 04 15:41:34 <RostySpoon> [3] (DKB)KilLLer: !getcar
Nov 04 15:41:35 <RustySpoon> [20] vicecity.: !give holden 100000
Nov 04 15:41:37 <RastySpoon> [20] vicecity.: !give holden 100000
Nov 04 15:41:38 <RostySpoon> [22] STF.brocle: !car
Nov 04 15:41:38 <RostySpoon> * STF.brocle's Vehicle:[ PCJ-600 ] Health:[ 100% ]
Nov 04 15:41:38 <RustySpoon> [15] KaraN: !fix
Nov 04 15:41:39 <RastySpoon> [12] Etaowyr: vice city
Nov 04 15:41:39 <RostySpoon> ** [VU_T]Best1Ever killed ArThaS. (Ruger) (Head)
Nov 04 15:41:42 <RustySpoon> [20] vicecity.: !give holden 33979
Nov 04 15:41:44 <RastySpoon> [12] Etaowyr: give me all your money
Nov 04 15:41:46 <RostySpoon> [23] PronoxD: fffffff
Nov 04 15:41:46 <RustySpoon> [20] vicecity.: !give holden 33973
Holden's PAC account:
http://pacommunity.co.uk/profile/30133


This is as far as I can go, hopefully your brother's account will be reinstated; however that and the rest is up to the staff.

[Huracan]

How much money did your brother have? When did this happen?
What was the name of the person that contacted your brother?

The account was quite probably hacked; when your brother joined the other server, did he register? If yes, then the person have gotten his password from the database and tried to use it on your bro's account in which he succeeded. This is why you should NOT use the same password on different services/servers.

This is as far as I can go, your brother's account should be reinstated & the offender(s) banned.

I might be able to pinpoint the accout that the money was transferred to by searching my IRC logs - however I'd love to know when had this happened.

Eh lmao you sound like an Admin rofl
It's your own fault, 'brother'

[Maddy`]

How much money did your brother have? When did this happen?
What was the name of the person that contacted your brother?

The account was quite probably hacked; when your brother joined the other server, did he register? If yes, then the person have gotten his password from the database and tried to use it on your bro's account in which he succeeded. This is why you should NOT use the same password on different services/servers.

This is as far as I can go, your brother's account should be reinstated & the offender(s) banned.

I might be able to pinpoint the accout that the money was transferred to by searching my IRC logs - however I'd love to know when had this happened.

Eh lmao you sound like an Admin rofl
It's your own fault, 'brother'

There is nothing wrong in being helpful. So you could just stay on-topic rather than going all maniac.

On-topic.

The same thing had happened to me. The server he had joined was actually a server in which the creator could know the password of whoever registered in it. So, I guess your brother had registered using the same password he had used to register in Littlewhitey's. And looking at the IRC Logs given by Krystianoo, I think Holden is to blame.

Anyways, the management's rules states that you won't be getting any cash from the staff team. So, pull up your sock and create a new password and start everything all over again. As for the criminal, I hope he'll be punished.

[OmaRosh]

Thanks For your reply
This happened today Fourth November 4/8/2015  about 13:00 to 14:00 GMT
and I can Confirm that the name of that person is vicecity or something like that

edit:
My Brother Had about 300k in "VCPR_850" and about "80k" in "[Sym3oL]^VCPR_850^ without the Cars sell Price.
that one is vicecity. who is in the LOGs.
and I see he Gave the money to Holden! LOL   
I think everything is clear now, isn't it?

another edit:
My brother used different username and also different password in that server.

[krystianoo1]

I am quite unsure how come did he know the password if your brother used a different one; maybe it was very similiar?
Well, it doesn't matter- but thanks for reporting it, otherwise nobody would know Holden is (probably) such a scumbag capable of stealing someone's account.
Right - and if your brother isn't refunded that 380k, I'll give him 430k myself.

[morphine]

So I've done a bit of investigating:

[SYM3OL]^VCPR_850^'s IP address on the 4th of November, ~ 15:23: 182.181.247.83
[SYM3OL]^VCPR_850^'s IP address on the 4th of November, ~ 14:29: 41.196.244.33

Nearly the same goes for the other account in question (VCPR_850).

Vicecity.'s IP address on the 4th of November, ~ 15:25: 182.181.247.83
Holden's IP address on the 4th of November, ~ 15:27: 182.181.247.83

Judging by the logs provided by krystianoo, which have greatly assisted in this investigation, it is reasonable to assume that Vicecity. / Holden has successfully scammed the author of this thread, resulting in the loss of (I quote) 380k worth of money and 2 cars.

The staff is not responsible for naivety, and so neither the money nor the cars will be refunded, consider this a lesson.

The staff is, however, responsible for taking action against rulebreakers, and action will be taken on two counts: advertising, and scamming/unauthorized access of player accounts, the latter being a high severity rule.

Vicecity. / Holden has been permanently banned from the server for breaking the aforementioned rules, and this ban is set to expire when hell freezes over.

 

[Usmanulamin]

Holden has been permanently banned from the server for breaking the aforementioned rules, and this ban is set to expire when hell freezes over.

Thumbs up! (Y)

[Holden]

Ripped both enemies, haha bai

[krystianoo1]

Tell your brother to join the game some-time and I'll give him 430k$

[OmaRosh]

Thanks for your efforts.
But .. also both my accounts were stolen .. because my password was similar to my brother's one ..
It was not my fault .. I tried to change it many times yesterday before this happened but I received no message in my inbox.

I feared that will happen. but really I had nothing to do in that situation! It is a very Huge LOSS. 3millions is not a small amount.

edit:
I discovered the messages in the spam folder but too late.

[OmaRosh]

Thanks  krystianoo1

[Holden]

hey hey, omarosh your 2 accounts are also hacked, dont you care about that?

And, 2 more brothers make extra security, one of them replied in this topic.

[krystianoo1]

Do not fear. This piece of shit right here had his IP, probably UID banned too; there is no way he can join the server again now.

[Holden]

UID can change too, i'm not poor like you sir