Possible Hacker on ASA !

[Larkfields]

Hi All.    

Beware:  someone joined my server last night and was able to become admin.
I don't know how - my password is quite tightly controlled.

They deleted a few bases and left again.

WildCard - I have their player name and IP address if that's any use to you.  I can send you their   .arkprofile   if you want it.

Edited November 13, 2023 by Larkfields

[Larkfields]

And again !

This is making life difficult for players on Unofficial 😞

[pleinx]

Do you have the logs enabled? Maybe there is some information how the hacker gets the admin rights?

[Larkfields]

Turns out they didn't actually get admin rights...   They managed to bring an admin gun in from single player thanks to a bug that's been shown on YouTube.

[Wafflez19]

Sad to see it happen. Best advice is to create an archive every 15 minutes of your save folder.

The same happened to our server. The user was only on for about 8 minutes speed hacking and destroying everything before logging out to go to the next server. Wildcard just told me they don't support unofficial servers and to get with my admin or server provider. Clearly with the log I provided I was the admin and just wanting them to be aware of a player who's grieving / cheating in their game, but from the response I got it just sounds like what happens on unofficial happens with no repercussions. 😅

On a side note I think it would be cool for unofficial servers to have access to WildCards global ban list again, like we did in the past. It was nice to prevent things like this.

If anyone was curious: 00029896568d46b7baf6bd5efd5f7362

Edited November 21, 2023 by Wafflez19

[Wafflez19]

Just thought about it, turn off server transfers for the time being should prevent this from happening. That is if you aren't using the transfer feature for some reason.

[Larkfields]

8 hours ago, Wafflez19 said:

Just thought about it, turn off server transfers for the time being should prevent this from happening. That is if you aren't using the transfer feature for some reason.

Already did - but thanks anyway 🙂

 

[Larkfields]

9 hours ago, Wafflez19 said:

if anyone was curious: 00029896568d46b7baf6bd5efd5f7362

Thanks, I've added that id to my ban list.

 

[techigor]

This 2 did the same here

0002700abf9e4be09a494922a5fef19e
0002fba83fa243c487d189f6ba5fefbe

Closing character and items transfer solved the problem.

 

[ScaredDonut]

00029896568d46b7baf6bd5efd5f7362 same user destroyed bunch of bases on my server. Luckily I had a backup of the server that was 7 seconds before everything happened lol.

[Larkfields]

The two griefers on my server were...

0002c42b631a49a7a654f70606d75576
0002de30207e4e1a84210b3e6db2109b

[pleinx]

But you have transfer and download disabled?

PreventUploadSurvivors=True
PreventUploadItems=True
PreventDownloadSurvivors=True
PreventDownloadItems=True
PreventUploadDinos=True
PreventDownloadDinos=True

And still this attacks from SP?