RMT Framing

[Icantkite]

I started this investigation as a normal account takeover investigation and restored the deleted characters. My initial case rested on an IP overlap on the primary account HIMITORI and the same IP used during the takeover and deletions. Looking specifically at the IP's history, what I had thought was a history of the IP being used 5 times historically, was in fact re-connects rather than historical log ins.

From what I can still say, HIMITORI's account was taken over by an unknown VPN IP. Their gold was funneled from the taken over account to a second, newly created TOMPEARL account. This second TOMPEARL account then stole the Himitori character name from the deleted HIMITORI account (initially read as a way to reserve their name during this).

This second TOMPEARL account traded the gold to the MMOPROVIDER3 account that was then used for the RMT framing of Blacky.

In light of the IP confusion, and the only remaining evidence being that HIMITORI voluntarily renamed their character to what happened to be a virtually identical name to one of the account usernames that was used to drain their account, we have reversed the ban and given 200 octotokens to HIMTORI as compensation.

From my perspective HIMITORI likely had their account taken over by someone who knew them well enough to basically predict what name they would use.

makes u think now its lyric and his edaters

[Sugardaddyt]

Yeah didn't you used to partially run the Octo Disc that encouraged posting other pservers info on a forum you were super active on?

I’ve only ever colluded with the gms and manipulated the markets apparently, never been a discord gm. I shitpost too much. Just like your mother

also crypty learn how to use forums brother. MUCH LOVE - L.Dingle.

[Kestrel]

can i please get my equipment and gold back. and my name Himitori on my warrior

Yeah we are working on the full restore right now, expect mail with all of the gear/gold that was deleted/sold

[Kestrel]

So "Whoops we falsely accused you publicly and perma banned you, here's 20 bucks?"

Yeah pretty much (well more of a temp ban given it was lifted)

That and stop sharing accounts, there was a lot of account sharing going on and was likely how the account was compromised. Oh and we are revisiting the Warden discussion. We have had Warden disabled up to now due to security concerns but are now re-considering that decision as hardware fingerprints feel like they are becoming more and more necessary. If you have opinions be prepared to give them once we provide a place for that (or throw them here I guess)

[Himitori909]

can i please get my equipment and gold back. and my name Himitori on my warrior

Yeah we are working on the full restore right now, expect mail with all of the gear/gold that was deleted/sold

also my bank alts on my main account please only my main character on my account was restored

[Himitori909]

Hey thanks so much for looking into the problem we've had and correcting it. I appreciate the problem being rectified but with what occurred I don't want this to happen to anyone else. This all started with a password change to my personal account that I did not do, nor received an email on the password changing. Is there going to be a further investigation on the people that did this in the first place?

[Darktifa]

any comment on the accusations here?

https://octowow.st/forum/viewtopic.php?t=1649

[Kestrel]

any comment on the accusations here?

https://octowow.st/forum/viewtopic.php?t=1649

You may need to be more specific. If you mean in regards to the RMT allegations, we are unable to verify the information provided from our logs. We would need reports like this to happen promptly not a month + after the alleged incident took place. The server generates a lot of logs and we need to prune archived logs eventually.

[Darktifa]

You may need to be more specific. If you mean in regards to the RMT allegations, we are unable to verify the information provided from our logs. We would need reports like this to happen promptly not a month + after the alleged incident took place. The server generates a lot of logs and we need to prune archived logs eventually.

so, nobody is under investigation?

sorry i don’t have a level 100 reddit account i this is genuinely my first time posting stuff like this on the forum and i only just brought this to the devs attention a day ago she and her buddy is currently under investigation.

[Kestrel]

so, nobody is under investigation?

Anytime we receive RMT tips we investigate. Investigations are generally not "ongoing" we try to bucket and close them out best we can. If a ban has not gone out we do not have sufficient evidence to support any RMT claims.

We encourage any and all RMT tips to be sent to OctoWoW@proton.me or DMed to me directly here. We of course monitor regularly for new RMT activities independent of these tips but they do help a lot.