Velox Phishing Crisis: Difference between revisions

From Graal Bible
No edit summary
No edit summary
 
(One intermediate revision by one other user not shown)
Line 1: Line 1:
'''http://www.antiunixmad.com/'''
[[Category:Graal History]]
The Velox Phishing Crisis refers to [[User:Velox Cruentus|Velox Cruentus]] gaining access to several Graal accounts through an advanced [http://en.wikipedia.org/wiki/Phishing phishing] method.  This was the worst breach in Graal security since the [[Christmas Password-Theft Crisis]] in December of 2001.


'''[[Viper]]'s [[Graal]] Issues.'''
==Graalians.com==


Hello everyone, as of late, many people have been attacking me on the issues and matters, trying to lie about things, bend the truth, and downright spin to make me and others of my cause look bad, in this text document i will discuss and lay to rest the issues that matter.
In late September, 2005, Velox posted a [http://forums.graalonline.com/forums/showthread.php?t=61473 thread] stating he had created a new website, [http://www.graalians.com Graalians.com], which allowed [[Graalian|Graalians]] to create elaborate profiles, post screenshots, and post server reviews. This was a factual statement.  There was not a single person who expressed suspicion and most of the replies to the thread were positive, with [[User:James205|James205]] calling the website, "probably the best [[Graal]] website I've seen."


I have been involved [[Graal]] for over three years now, and i used to really like [[Graal]] and its admins alot, then slowly after about a year [[Graal]] and its admins went in a bad downward spiral, i still stuck with [[Graal]] in hopes [[Graal]] would pull itself out of this hole and [[Unixmad]] would go back to the right path, this however did not happen, instead [[Unixmad]] and even [[Stefan]] went fouler and lower than i could have imageined, First with fireing [[Pachuka]] and [[Fuitad]], two of the BEST [[Graal]] admins ever in my view for no other reason than disagreeing with his future plans, then if just fireing them was not bad enough, he threatend to sue them and kill they're families, this was so wrong and bad [[Fuitad]] even said he would punch [[Unixmad]] in the face for saying that if he met him in real life, but that was just the beginning of the downward spiral [[Unixmad]] foolishly invoked onto [[Graal]], he then blatantly STOLE a domain name [[Graal]].net from Owl Shimy which costed over 30$ US Dollars, and never gave it back to him and never paid him for the cost of the domain, he also threatend to sue Owl Shimy and kill his family although it was [[Unixmad]] which stole the domain from Owl Shimy, then around [[Graal]]1.3.1 he blocked off [[GServer]]s officially and threatend to sue anyone that ran the former [[GServer]]s, although they were released as "Freeware" and actually used to encourage people to use the [[GServer]]s, this was a blatant attempt to monopolise , threaten, and intemidate that players that actually helped [[Graal]] and supported him, he then made claims he copyrighted "[[Graal]]" and would contact so called "Lawres" about anyone that used the name "[[Graal]]" or had "[[Graal]] Files" on there websites, although [[Graal]] was distributed as "Freeware" or "Shareware" and had no official software copyrights related to it, and that the name "[[Graal]]" was actually the name of a holy sacred golden cup used in some religion, and in that he has commited blasphemy against whatever religion has the so called "Holy [[Graal]]", then later on [[Unixmad]] fired SuperNick, because of his country and his origion and called him an American Asian slut, this was the first sign of racism on the part of [[Unixmad]], towards [[Graal]]1.4.1 [[Unixmad]] was secretly unwrapping his sadistic plans, he then started claiming credit and claiming to own the copyrights to [[Graal]], although [[Unixmad]] has done nothing but host some stupid weak as servers, and yet [[Stefan]] Knorr has done all the real work for [[Graal]], and was the one to make ZeldaOnline , [[Graal]]Online in the first place and has written every bit of codeing for the [[Graal]] Client , [[GServer]], RC, ect, yet [[Unixmad]] the worthless pile of trash that he is steals all credit for [[Graal]], then in February 2001, [[Unixmad]] and Antago release [[Graal]]2001 and the start of the "Pay to Play" system, now i have no problem with the fact that it is pay to play, the issue is when you PAY for something you actually expect to get the worth while of your money in this product, but instead they got a shittily made level generated land that was 99% empty, the NPCs were and are laggy as hell, and there were no quests, and there is only two shitty things today for hearts that suck so much i refuse to even call them quests, and to add to that about 40% of everyone that paid and gave [[Unixmad]] there credit card number NEVER got the accounts they paid 27$ or more for, and those that did clearly got chumped out by a cheap peice of crap that aint worth paying for, it sucked so badly that most people played on [[Graal]] Classic still, even those that foolishly paid for pay to play accounts, and in an attempt to "FORCE" people to pay for a shitty product they do not want against they're will [[Unixmad]] hired "Tyhm" to deface and ruin [[Graal]]Classic in an attempt to make it buggier and less fun than even [[Graal]]2001, about this time i was disgusted with [[Unixmad]] and most of the other admins and decided to downright turn against [[Graal]] and for the most part stop playing the peice of crap in general. People starting getting angry, complaining, asking for help, and asking for refunds, of coarse [[Unixmad]] gave noone a cash refund, and simply deleted and banned "PAID ACCOUNTS" of those who complained, asked for help, or asked for a refund these are PAYING CUSTOMERS, they have the rights of basic service that they PAID for, [[Unixmad]] promises pay to play players a quality product and customer service, but instead gives them a grade F product and ripps off his customers and delete they're accounts that they PAID HIM money for, his excuse? Credit card fraud, when infact at least 90% of the people he bans for credit card fraud pay legitamately with there OWN credit cards or pay via paypal by check, and yet [[Unixmad]] has stolen and used others credit card numbers to buy things for himself on several occassions, he also claims he needs pay to play money to keep [[Graal]] alive and running, yet there has been evidence that he makes at least 90% profit out of the monies he gets, and that he uses illegal porn ad banners and illegal cookie style web tracking and giveing email adresses of the players and even phone numbers of every player to spam and telemarketting companies without there permission, he even keeps personal player info, includeing email, adress, and phone number on unsecure servers which have already been leaked out, such info about people should not be on a public webserver accessable to the internet in anyway, then after all that [[Unixmad]] starts banning african american people, asians, koreans, and or people with images of people of that race from the [[Graal]]2001 forums and [[Graal]] itself, yet again they are paying customers and this is another sickening act of racism on the part of [[Unixmad]] and [[Graal]]Online, and then even more disgusting is what [[Stefan]] posts on the [[Graal]]2001 forums, he makes several anti american, racist, pro terrorist, pro nazi, and pro taliban comments on that post and goes on and on several pages bashing americans, this post was offense, obcene, and disgusting to many people includeing myself . If all that does not make you sick to your stomache or dislike [[Unixmad]] yet, i am far from done, then [[Unixmad]] proceeds to illegally DDOS webservers of mafukie and make threats to him over the phone, and has phone assaulted me over 40 times a day between midnight and 5am, and has made threats to sue dozens of people, kill there families, and shut down innocent websites and servers, while hosting illegal stuff and doing illegal things himself with the use of his own wanadoo.fr servers, stuff which includes child porn, bestiality porn, DVD Piracy, DDOS Attacks, theft of copyrighted materials from gameing companies such as nintendo, Credit Card fraud, theft, spamming, phone harrassment, useage of illegal pirated corperate softwares, all this just to start the list of what [[Unixmad]]', [[Stefan]], and they're servers are doing 24/7 for nearly 4 years now , anyone that likes [[Unixmad]] or thinks he is a good person even after all this is clearly a fool, everything in this document is the truth and why i hate [[Unixmad]] so much, if you like [[Unixmad]] after all these sickening things he does, then you are no better than a KKK or Neo Nazi member and should go kill yourselfs, i do not tolerate facists, racists, or nazis, they are all bad people, and [[Unixmad]] is one of the worst of the worst, and no person with any morales could tolerate or support such a person like Stephane Portha or [[Stefan]] Knorr. The people that spin, lie and bend the truth in support of [[Unixmad]] will always exist, but i will always reveal the truth about [[Unixmad]], and EVERYTHING said in this document is true, despite what any assclowns try and say about this, and this supriseingly enough is only 1% of the bad things [[Unixmad]] has done, how some people even tolerate, none the less support such a bad person is beyond me... I fight against bad people like [[Unixmad]], why? Because unlike many others in this world i actually care about other people, and i will do everything in my power to stop [[Unixmad]] from hurting [[Graal]] or its innocent players, many say i want to destroy and kill [[Graal]], this is NOT true, i used to love [[Graal]], i only wish to stop [[Unixmad]]'s evil sadistic illegal actions and restore [[Graal]] to the great game it used to be when it was "for the players, by the players" , but if i have to destroy [[Graal]]Online in exchange to stop [[Unixmad]]'s tyranny, it will be regreteable, but sometimes some sacrifices have to be made for the greater good, lets just hope that [[Unixmad]] drops dead and that sacrifice never has to be made... I love [[Graal]] and lots of its players, and i wish to someday restore it to the grandness it once had, but bad people like [[Unixmad]] must be gotten rid of if that is to be achieved...
==The Phishing Crisis==
 
Registration at the website required the user to state their Graal account name, provide an E-Mail address, and create a password.  Some members used the same password for Graalians.com as they used for their Graal accounts and/or their E-Mail accounts. This allowed Velox to get the passwords to several Graal accounts. Either because the member had used the same password for both Graal and Graalians.com, or by accessing their E-Mail and requesting the password, or finding it in an undeleted E-Mail from [[Cyberjoueurs]].
 
Velox was also able to gain access to the [http://www.paypal.com PayPal] accounts of [[User:Draenin|Draenin]], [[User:Cypher|Cypher]] and [[User:Tupper|Tupper]] by accessing their E-Mail accounts and requesting the PayPal password.
 
Velox put this information to use in early November, 2005, by stealing several items from accounts on various servers, often resetting the accounts when he was done.
 
He also transferred $350 (USD) out of Cypher's PayPal account and $450 (USD) out of Tupper's, a serious criminal offense.
 
[[User:Damix|Damix]] was the first to realize that something was wrong when his roomate, [[User:Lylic|Lylic]], realized his account had been accessed.  Damix connected the security breach to Graalians.com and Velox.  He then informed [[User:Stefan|Stefan]] via [[RC]].
 
Draenin was the first person to blow the whistle on the crisis by posting a [http://forums.graalonline.com/forums/showthread.php?t=62130 thread] on the [[Graal Kingdoms]] forum.  About three hours later, Stefan posted a [http://forums.graalonline.com/forums/showthread.php?t=62131 thread] explaining what had happened.
 
==Velox's Apology==
 
Velox used one of the stolen accounts, WeedDigger, to post the following [http://forums.graalonline.com/forums/showthread.php?t=62140 message]
 
"Well... You banned all my accounts, so here I am, on another...
 
I gave Lyndzey the full list, so don't bug me about it. For Stefan... That list isn't even half what I got.
 
For Sage (Cypher) and Tupper, I'm trying to fix your financial problems as much as possible.
 
I'm sorry for what I did, and I'm trying to fix most of it.
 
 
Ugh. I deserve what I got none-the-less. Good Day.
 
I was thinking of making a better talk, but... I guess it's not my place."
 
==List of Accounts Velox Gained Access to==
 
* Termina_Owner
* GeforceIX
* Vaappolan
* Gene_Starlet
* Rance_P2P
* LadyDarkwolf
* sage_scooby
* Lylic
* Draenin
* Cassy
* Aflack3
* Riland
* smashatakk
* Magadal
* atomask
* Ithica1
* LilNiglet
* Genesis
* Sage_Shadowbane
* Nitkizi
* XenticKnoble
* scoobsonwhat
* criter
* raiden0899
* corny20
* 8balla
* chickenfriedcake
* Drumguy1
* Drumguy
* gm2000
* powerash
* StalePhish96
* sukuru1
* TigerCub1992
* imawesome999
* Riven2
* bart_rocks
* bealfeal
* DarkFireSword
* flash777
* homerexe
* inkpot
* kaoticgunman
* larso da king
* lionkid321
* master_josh
* megamanexe11
* MoonWars
* Nadithan
* poopyman
* psychobadger
* Soccerfreak2
* Tommys
* WeedDigger
* zach3805
* Shabangizzle
* ericku
* Hinkle
* Chett
* Tuoni
* Spazzykins
* Amanda11
* DrkDestroyer
* ericku
* FroggyLordv
* Haloheros
* jevon121
* partyboy56794
* OrigitalTrial
* Hypo182
 
In total, 70 accounts were compromised in the crisis. A considerable number as there were only 215 accounts created on Graalians.com, though clearly some accounts (such as Drumguy and Drumguy1) belong to the same person.

Latest revision as of 19:30, 19 February 2010

The Velox Phishing Crisis refers to Velox Cruentus gaining access to several Graal accounts through an advanced phishing method. This was the worst breach in Graal security since the Christmas Password-Theft Crisis in December of 2001.

Graalians.com

In late September, 2005, Velox posted a thread stating he had created a new website, Graalians.com, which allowed Graalians to create elaborate profiles, post screenshots, and post server reviews. This was a factual statement. There was not a single person who expressed suspicion and most of the replies to the thread were positive, with James205 calling the website, "probably the best Graal website I've seen."

The Phishing Crisis

Registration at the website required the user to state their Graal account name, provide an E-Mail address, and create a password. Some members used the same password for Graalians.com as they used for their Graal accounts and/or their E-Mail accounts. This allowed Velox to get the passwords to several Graal accounts. Either because the member had used the same password for both Graal and Graalians.com, or by accessing their E-Mail and requesting the password, or finding it in an undeleted E-Mail from Cyberjoueurs.

Velox was also able to gain access to the PayPal accounts of Draenin, Cypher and Tupper by accessing their E-Mail accounts and requesting the PayPal password.

Velox put this information to use in early November, 2005, by stealing several items from accounts on various servers, often resetting the accounts when he was done.

He also transferred $350 (USD) out of Cypher's PayPal account and $450 (USD) out of Tupper's, a serious criminal offense.

Damix was the first to realize that something was wrong when his roomate, Lylic, realized his account had been accessed. Damix connected the security breach to Graalians.com and Velox. He then informed Stefan via RC.

Draenin was the first person to blow the whistle on the crisis by posting a thread on the Graal Kingdoms forum. About three hours later, Stefan posted a thread explaining what had happened.

Velox's Apology

Velox used one of the stolen accounts, WeedDigger, to post the following message

"Well... You banned all my accounts, so here I am, on another...

I gave Lyndzey the full list, so don't bug me about it. For Stefan... That list isn't even half what I got.

For Sage (Cypher) and Tupper, I'm trying to fix your financial problems as much as possible.

I'm sorry for what I did, and I'm trying to fix most of it.


Ugh. I deserve what I got none-the-less. Good Day.

I was thinking of making a better talk, but... I guess it's not my place."

List of Accounts Velox Gained Access to

  • Termina_Owner
  • GeforceIX
  • Vaappolan
  • Gene_Starlet
  • Rance_P2P
  • LadyDarkwolf
  • sage_scooby
  • Lylic
  • Draenin
  • Cassy
  • Aflack3
  • Riland
  • smashatakk
  • Magadal
  • atomask
  • Ithica1
  • LilNiglet
  • Genesis
  • Sage_Shadowbane
  • Nitkizi
  • XenticKnoble
  • scoobsonwhat
  • criter
  • raiden0899
  • corny20
  • 8balla
  • chickenfriedcake
  • Drumguy1
  • Drumguy
  • gm2000
  • powerash
  • StalePhish96
  • sukuru1
  • TigerCub1992
  • imawesome999
  • Riven2
  • bart_rocks
  • bealfeal
  • DarkFireSword
  • flash777
  • homerexe
  • inkpot
  • kaoticgunman
  • larso da king
  • lionkid321
  • master_josh
  • megamanexe11
  • MoonWars
  • Nadithan
  • poopyman
  • psychobadger
  • Soccerfreak2
  • Tommys
  • WeedDigger
  • zach3805
  • Shabangizzle
  • ericku
  • Hinkle
  • Chett
  • Tuoni
  • Spazzykins
  • Amanda11
  • DrkDestroyer
  • ericku
  • FroggyLordv
  • Haloheros
  • jevon121
  • partyboy56794
  • OrigitalTrial
  • Hypo182

In total, 70 accounts were compromised in the crisis. A considerable number as there were only 215 accounts created on Graalians.com, though clearly some accounts (such as Drumguy and Drumguy1) belong to the same person.