Nexon’s game servers were hacked!!! Be awere!

[VictorDominations]

On May 21, someone named Superman appeared in our alliance chat and started to post messages and friendly challenges without even being in our alliance.
I have contacted Nexon for several times about the issue and they said they fixed it (like they solve and fix everything else, just writing useless stuff without actual solution, even if they say it is fixed).

A few days later that Superman messed up with some player account in our alliance and changed his name to Superman, changed his nation to Koreans, the age said Atomic with a level of 304 and troops were Iron Age. Nexon support resolved the problem and restored the account to what it should be.

3 days ago that Superman forced a war to our alliance against Disorder KA (to try to help them to gain an advantage in war, just to be clear I don’t blame Disorder KA for that. Not their fault) while we have 6 bags and and they have none and we were in a huge disadvantage. But still were able to win them even with many crashes during the war (I guess with Superman involving) and the bags disadvantage. The point here is that someone gained a total admin access to Nexon’s servers and can do what ever he wants. And that should scare everyone in here but especially Nexon that their servers are not secured at all and can be accessed by many without proper permissions.

Yesterday June 3, 2019 that superman started to mess with our other alliance’s accounts and members during a war and rolled back them to iron age with high levels while troops are Iron Age and the name disappeared.

Now I can’t even login to my game process because the app crashes every time i tap on Dominations because of what that hacker Superman did. After contacting helpshift they just tell me to check my device and connection even though screenshots were posted to them about the account issues troops, name etc.

Many of you know the website domination.pl, how do you think it is working? Same Nexon’s lack of security in their servers that someone built a website that reads Nexon’s servers info. But now it reached a whole new level if some individual can gain an admin access to Nexon’s servers and do what ever he wants to any account out there. This should turn the red light for everyone in this forum and anyone who plays this game.

The purpose of this letter is to force Nexon to look into their servers security and fix it! Even if it means invest money into it, because it seems they only want to us to pay without them fixing their game/server issues.

And Would really appreciate your help with restoring my account (and about 10 others in my alliance) and access to it since helpshift is a total joke and actually doing nothing to help and resolve the actual problem.

I’ll try to attach all relevant screenshots for you all to see and demand from Nexon to finally fix their servers security issues so everyone in here can feel safe about his account after investing money into it.

 

[VictorDominations]

Well it doesn’t allow to upload all other screenshots related. But you can check my account in the alliance where it says I’m level 301 as it should be and if you scouting it will show level 272 with bi-planes and level 1 generals.
TinSoldier BHG_Muet

 

[BeerMan]

I always wondered why people blindly accepted dominations.pl as a valuable tool, without questioning how they accessed all that data. I hope this thread doesn't get buried... this is a huge deal.

 

[LordStark263AC]

This sounds horrible and unbelievable. A player with admin powers? This game is falling apart right in front of our eyes.

 

[sponge]

I think I know who this superman is, the way he talks, broken English, I've seen that before. Does Soheil ring any bells to anyone?

 

[Kalinga]

I have also been hacked. I don’t understand how can Nexon’s security be so weak. The tech support is almost as bad as their security. If this is not remedied soon, I will ask for a full refund for the last 4 years from Apple.

 

[Xabar]

TinSoldier BHG_Muet . Could you confirm that there is a serious security problem. We have to save captures of our acounts for any case?

 

[sponge]

I would. Including library, university and museum progress.

 

[TinSoldier]

We are investigating all accounts that are being discussed both here and in the DomiNations Prime discord channel. (Thank you to those of you who have reported it though CS as well.)

 

[TinSoldier]

We are in the process of restoring affected accounts. If you notice any discrepancies with your base, please reach out to our CS team.

Thank you!

 

[VictorDominations]

TinSoldier Thank you for the update. I hope it will be fixed soon since we are during a war and like 50% of us can’t even login right now. Or still have iron age troops because of that Superman scumbag.

But what about the main issue, your servers access? This is the biggest problem! Have you started to do something about this security issue? Because even if you restore all accounts tomorrow it can happen again.

Just like it happened to our member for the second time after previous fix from CS.

 

[sponge]

TinSoldier what are you doing about security of our accounts? Because restoring affected bases is reactive approach, and is really ineffective, that's like restoring backups after ransomware infection, but leaving infected machine on the network, just to have it start encrypting files again. If there was a breach and someone gained unauthorized access to game servers, said hacker can again simply mess with those accounts, or any other account.

 

[LordStark263AC]

sponge Ikr? Hopefully it's not an evil version of Mr. Robot on a vengeful mission after being dismissed for accessing unauthorised files whilst drinking and smoking in the office everyday for 4 months straight looking smug as F because he/she got issues with authority and/or, just a dick.

 

[GGmylife]

Hi Melvin, You still play this game?

 

[Lebowski]

This trully is a huge scandal. Not only the lack of security in their servers is ridiculous but also their ability to fix it is a complete joke. They tried to “fix” a few of Ares accounts and not only they didn’t solve it but they even destroyed more things like removing bought troops or museum artifacts that were there before the hack attack.

 

[LordStark263AC]

I prefer Mr. White.
And yes, I still play this game. Too late to stop now. I'm hooked and I'm not a quitter, gonna ride this motherseducer utill they turn the servers off in February 2034.

 

[Quali]

2034 - you using the 24 hour clock?

 

[chris]

No Title

As someone who’s account has been affected by this I can say the overall experience and communication has been pretty scattered. My own communication to Cs hasn’t been bad, as you could actually tell it was a human responding and not just canned responses. We’re about 14 hours since the first message to CS and only 1 account has been fully restored. I’m one of those who can’t even login to the game to get a screenshot but someone was kind enough to take one for me.

As others have mentioned, I would hate to get things restored and then the hacker do the same thing this evening. We just want better more proactive communication.

Being in IT myself, I know it’s not always easy to give updates when you aren’t making progress but if you are making progress please provide us with something. I’d say you have to be making some progress since one player has been fully restored and another player had been restored while losing 8-9 days worth of purchases and progress.

 

[VictorDominations]

TinSoldier The war soon is over and more than half of us can’t even still access the game and make our attacks (hopefully with normal troops instead of iron troops). When our accounts will be restored? Or at least a game access without crashing on Big Huge Games logo?

Edit: now i can access my account. But many still can’t. But a few were restored as well.

 

[LordStark263AC]

Have faith, once Nexon are sold off to the highest bidder hopefully new owners will see huge potential in Dominations and let BigHugeGames make Dominations great again.