So within 30 minutes of the initial attack we had determined the method of attack and closed the vulnerability. We disabled the account used for the initial attack and determined the extent of the GM commands used.
Essentially the initial attack served to gain access to a high level GM account. Unknown to us at the time is they had gained access to other accounts.
The initial attack reset spells (mounts / professions) and then talents. Afterwards they targeted specific persons within the area and removed honor / arena points / gold and deleveled players to level 1. (This is the reason for the initial rollback).
Later on there was another attack which used a lower level account that was a "Left over" account of a high level staff member, the same GM commands were used.
Afterwards we audited all permissions and one day later we noticed activity that matched the hacker but since they had no GM access they were unable to do any damage.
The partial rollbacks that we performed had some side effects, on Remorse they are more prominent. Quests were rolled back but items weren't. Since the quests require you to have the previous item you obviously cannot continue. Devo is working hard to go through hundreds of quests and remove the item requirement. This is an ongoing effort and should be posted as fixed soon(tm).
Everywhere else the rollback acted as rollbacks tend to do, items and levels lost. The GM staff has answered over 800 tickets in the last 3 days regarding this issue. It is easily verified who donated for what and when (or voted) so where tickets have been put in for those we have resent those items. If you are still missing donation or vote gear feel free to put in a ticket and a Super GM or higher will assist you with that.
While most servers would have folded and shut their doors the fact we are still in operation stands as testament to the hard work and dedication of the Eternal Staff, and it's players.
Thanks for sticking with us and allowing us to work through this, and also thanks for your patience. With a small staff of dedicated individuals it is still difficult to answer the load of tickets we have in such a short amount of time.
TL;DR: Hack attack happened, it's fixed, it caused some problems but we're still alive which is a big "#@&! you" to any "hackers".
Coupon Is now working,
- Code: Select all
hackfail

















