Security Breach!
A friendSecurity breach!
Ok, u may ask what is going on or who am i. I am a normal guy from Iran and I want to tell u all something important.
It all started from a normal day.
I was chatting in a normal codm group on telegram and then some random guy sent a pdf.
I opened the pdf and it was like this:
About the image: U may ask what have i done to the photo.
This photo isnt a normal photo.
It contained gmails and their passwords.
Idk how many of them but it was like 10 pages of passwords and emails.
I asked the guy , wtf is this?
And he said: "try them! U may be lucky and get a legendary gun! Lol!" (The gap was related to codm, so he was talking about codm (even tho the name of the gap was codm :/))
And then a person sent a picture of him self being lucky.
He tried them and got a legendary gun.
He got a account that had a legendary gun on it (the account also had the battery torque (the blue one from the season 1 )) And also, the guy that sent the pic, was a youtuber (he had YT in the end of his telegram account name) (i did not know him, he was a random guy that had YT in the end of his name).
Then i reported the pdf and told the admins to delete that horror piece of garbage.
And they did remove it.
Now i want to answer some questions. U may do not have any question but please read the qusetions and the answers.
Questions and answers:
Example:
-what is the answer of 2+2?
-- The answer is 4.
Real questions:
Now i want to tell u a definition
"Crack"
-What is crack?
--crack in english means to break or make something break but on my country, it is related to a account.
When a person leaves his account and don't even comes back again (like some of the og season 1 players) or he spendes a huge amount of money on the game and he leaves the game (again like some og players) or he has a normal account but somebody steals it by its email and changes that email, we call that account on that time a "Cracked account".
Once the gmail is changed (the gmail that the account is madeup with),
The owner can not login to his account by activisions website or codm (if he is logged out of his account)
Example:
Bob is a s1 player.
He has ghost (s1 ghost)
He is rich so he bought the whole dream crystal draw.
He left the game and vent to play fortnite (or he died (sorry for my language))
Then Jack is a hacker(or he has the pdf) (what pdf? The one that i wrote holy bucking shite on it and it was like 10 pages)
He goes to the account, then activision website and changes the email and password.
Then the account is his!( in his opinion)
This was a example.
-ok. Where did the pdf came from?
-- my friend nugget (i count him as my friend) told me that on some times, when the activision website (the site that all of the passwords and email are at) is on its weakes position, some hackers come and extract everything. The emails, passwords and etc.
A dumb hacker sent me this picture of him, trying to get all of the data. (He sent the image on a codm group and he was saying:"yeah, i am trying to crack"
About the image: Don't ask me, idk anything.
-what will happen to the stolen data?
--When a hacker finds the data, he may use the account for himself or he may sell it (to a guy that does not know anything) or he may make a pdf that is full of those and sell that to a random guy by a price of 4 example 2 bucks.
-so we know now where this account come from but which account are at danger?
--all of the accounts. Activision website is full of emails and passwords, all of the account are at danger! (Even the other activision games)
-holy! Then what do i have to do to protect my account? I spent over 10 billion :(
-- u have to put a 2 step password on your account
-what is a 2 step password?
--2 step password is a secondary password.
When someone tries to login to activision website by using your email or password, if u have the 2 step password thing on (and it is full set) the hacker requires a passcode that is being shown on google authenticator and if the hacker does not have the code, he can not enter to activisions website. (In order to change the email and password of the account to make the account for him self, cause in activisions website u r able to change the email and the password of the account)
-so, then the hacker can not enter to my account via codm app?
-- no. He still can enter to your account by codm but 2 step password causes him to not be able to change the password and email so u r still able to go into your account only on the time that hacker is not on it.
-wtf? Why only the time that hacker is not on it? I want my account back! >:(
--when somebody enters your account, if u want to use your account again, he has to log out of the account (or maybe he have to close the app? Idk, but i am sure that he have to log out of the account) .
When u try to login to your account that there is a hacker on it on that momment, a screen pops up and tells u something like this: "there is a person on your account, if u want to use your account, he has to log out of your account"
-so, he entered my account. He is on it day and night. He has the email and password. What can i do?
--change the email and password. This is the only way.
Idea:There has to be a button on the site that causes eveyone on the apps to be forced logout of the accounts (again, accounts cause activision has made many diffrent apps) so the person can go into his account easily (In telegram there is something like this and also google (gmail when u change your password)) .
As u know the hacker will or may leave the account so u will have your account back.
About the idea: I am just saying that there has to be a button so we can kick everybody out of the account if it is needed. (So i gave a feedback.... right?)
-consider that there is a hacker on my account while i am not online. What will happen if i become online?
--When u try to login to your account that there is a hacker on it on that momment , a screen pops up and tells u something like this:
"There is a person on your account.if u want 2 use your account, he has to logout of your account" .
-why do i have to trust u? U may be a lier.
--i am not a lier. I do not even see a point of lieing to u all about this. Do not believe me and a lot more account will be gone (by those hackers)
Example of how the 2 step password works:
Bob is alive ( in another universe, parellel one :/)
He has the 2 step password on.
Jack tried to go into his account. He goes into it and he is on it. He goes to the activision site to turn on the 2 step password so bob can not enter his account ever again. But the password it on (jack does not know).
He types the email and password and presses the enter button. The site wants a password of jack. (A code that is a 6 digit one. I will put a guide to how to put a 2 step password) .
Jack does not have the code, so he can not change the password (cause he do not own the email and he is only in the account);
Bob founds out that there is a person on his account. He goes to the site and types everthing. Email, password and the 6 digit code.
He enters the account ( activision site one, not the codm account) and he changes the password and email.
Jack logsout of the account so he could come back again.
In another time, he tries to log in but he faces the issue!
"The password and email r not correct!"
-tell me which website should i go for the 2 step password. Do not give me a link cause i can not trust u.
-- this is the link:
Link: https://profile.callofduty.com/cod/profile
If u do not want to press it then go to the call of dutys official website (profile.callofduty.com) then go to your profile.
----how to set up the 2 step password?
---https://profile.callofduty.com/cod/profile
This is the link.
Go to it and go to your profile (u can do this. It is easy) then i will see this (when u go into the profile)
Press privacy and security
So u can put the 2 step password so the hackers can not enter your account.
Info of the pic: This happens when your 2 step password is on. (Basically, 2 step password is another required password that is taken from google auth...... and if the hacker does not have it = he can not enter to codm profile site .
( if he Presses the basic info on the profile (when he is on the account) he can change the email and the password)
Image of how 2 step password works:
-how serious is this?
--look at this pictures. This is only some of them (the ones that i found they r cracked) ( the owner told me (some people on my country r dumb) )
Info about the pics: All of this pictures are taken from diffrent accounts.
Also i found a video of a cracked account that had 24 legendaries and 2 mythic guns.
The person that took the video, was trying to sell the account on a account market (on telegram) (the account wasn't his, he mentioned it) (the guy was trying to sell this with only 100 bucks :/)
This is the link of that video that i uploaded to youtube so u all could go and get how serious this problem is.
Another accounts: Even tho there was a account that had 2 full lucky draws.
Bk57 and a random legendary gun and also it had the ak47 frostband (the one with op ironsite).
-why u did not censor the names?
--codm has to do something about this. For the start i gave the names of this account.
If they ask me, i can even gave them the pdf that I got from that gap.
-so this is the reason that we r seeing s1 ghost again and again?
-- yes. It is a target for those hackers. They want it so much.
-have u used those emails from the pdf?
--i swear to my life and my whole family that i did not even typed those emails and passwords even on a keyboard and i have not even entered even one of them.
Idk how can i make u believe me but i have not done anything.
-why r u telling this to us now? U could tell us sooner.
--i am sorry. I wanted to do this but i did not have the time. Now i got the time and put this here.
-is it safe to have our account only linked on a single thing? (4 example facebook or activiaion)
--no. If the person changes the email of the account, u will lose the activision but if your account is also linked on another platform (facebook, line or etc) u can login to your account by using them (if the guy has logout of your account.
- what if i do not believe u?
-- today i was checking reddit and i saw 2 people that they lost their accounts
Do not believe me if u do not want to but please put that 2 step password!
××Ok so i answered all of the questions that i thought u may say.
Fell free to ask a question
I tried to answer as many questions as i can so u can ask less but please, if u have a question, ask it by usuing simple english. My english sucks badly :(
And also
Those who found out what i meant please answer the other peoples question
I told u all all i knew and now i do not know anything that i missed (from telling u all).
Good luck and please put the password on your account.
Those hackers won't give your account back.
P.s: changing your password every month is better than never changing your password!
Update: juat found a channel full of those pdfs (i got like 50 of those). If activision asks me, I can give those pdfs to them (but it wont change anything cause those crackers (the people who crack) are still making those (and selling those)
Basically, they r getting paid to make some pdfs for EACH person that it means that i do not have them all.
P.s.2: There r some Iranian people on this subbredit, they may try to say that I am lying but i have more than 50 pdfs that will count as a clue . Those pdfs r also in persian telegram channels.