Accounts and their security
Usually, a new player doesn't worry much about account security because he or she has no idea of its value yet. Or doesn't give it much thought until he or someone he knows encounters a hacker. For some, information security is an obscure foggy area where cool hackers can bypass any defense and keep everyone in fear.
In fact, it is very easy to secure your account - just follow the basic principles of information security, which we will tell you about in this article. If you know them and follow them, you won't be afraid of any scammers or mythical coolhackers.
Before we start going through the details, remember the three golden rules:
- Connect Google Authenticator and don't give anyone codes from there.
- Use a uniquely generated password.
- Never, to anyone, anywhere, publicize that password.
Remember that you are the one who protects your data first and foremost, and developers only provide the tools to do so.
Most hacks occur due to the fact that users themselves give their data to scammers. Below we have collected real examples of fraudulent schemes that are actively practiced to steal accounts from players:
Cheap equipment, stalcoins at a discount or for free on third-party resources. In this case, often offered equipment that has long been impossible to get or the price for it is much less than what other players are willing to pay. An example of such a message in the game chat:
- Sweaty Mole but you're a good boy, you got it, write down 12354682 this is the code to get barter on the site:
- Sign up here and get a free cash: .
- It turns out EXBO has rolled out a free promo on the site, pick it up:
- Yo! There is important information for you on the EXBO forum for members of top clans: .
- There is a screenshot contest at EXBO and I decided to try to win, please vote for me at the link: .
- Hello. In honor of the upcoming holidays we would like to please you with some gifts. Therefore, we are introducing a new mode, in which you can earn stalcoins and get a lot of useful things. To enable this mode, write your consent, login and password from your account. Sincerely, team of developers.
- Hi, on Wednesday we'll have a sweaty 2nd base, we need full online on CW. If you can not come, then send the details of the account, we will put a replacement.
- Hey, a buddy of mine made a program that helps with the game. Well there are artifacts shows on the mini-map, builds the optimal route and even increases the speed of the character. You can download the program here: .
- Look, let me play a bit on your account. Because I've never played with MG42, but I'd really like to. To make it fair, I'll give you my account, and I'll also give you some currency.
Golden rule number three is to never, to anyone, anywhere publicize your password!
- Our representatives will never ask you for confidential data.
- Never share account data with third parties. Buying, selling or transferring account data is prohibited under the License Agreement. Doing so may result in serious damage to your account.
- The methods of receiving prizes for winning official contests and drawings, as well as possible contacts of the organizers are specified in the terms and conditions of the event. Any other messages from unknown players with an offer to receive a prize are fraudulent.
- All news about promotions and game events are necessarily published on the official resources of the game. The company will not notify about any promotions involving prizes or discounts through chat or third-party resources.
- Carefully study the address of the site where you are going to enter your credentials. Even if it looks similar to our official resource, but differs by at least a few characters, it is a phishing website.
Phishing is the creation of a fake website to obtain user logins and passwords. Do not let the similarities to EXBO resources mislead you.
- Only purchase gear and useful items from the in-game store or from other players for in-game currency.
- Avoid downloading suspicious programs from unreliable sources to avoid putting your data at risk.
- Under no circumstances should you do anything that the scammer offers you.
- You can always report a scammer in the in-game chat and also make a ticket in the support center.
Repetition is the mother of learning! Let's repeat the three golden rules:
- Connect Google Authenticator and don't tell anyone the codes from there.
- Use a uniquely generated password.
- Never, to anyone, anywhere, make this password public.
Mobile Google Authenticator is an application downloaded to your mobile device that allows you to create one-time passwords to log into your account. This is the simplest and best option for account protection. You can read about how to activate this protection here.
We also have another option of two-factor authentication available - via e-mail. This option is useless if you do not protect the mailbox itself with authentication. It is also important to use reliable and trusted email services.
Use a unique generated password, separated for each service that is important to you. Nowadays, even large companies are constantly leaking their databases, and if your email and password are in the public domain, the first thing attackers will do is to scour all third-party services where these data may match.
Never enter your stalcraft password on minecraft servers and even less stalker in minecraft. This is a very common cause of hacking.
Use password managers to keep all your generated passwords in one place so you don't forget. You will only need to remember one master password that you can never, anywhere show to anyone.
We have analyzed the cases when a user can give his/her data to fraudsters or become a victim of a database leak on a third-party service. Now we should analyze the cases when data can be stolen directly from the user's device without his knowledge.
Viruses that steal user data are called stealers. They can be used to break into Telegram, steal saved passwords from Chrome and other browsers. They can also screen capture the screen and collect data from the keyboard to record the passwords you have entered.
Stealers can only get to PCs and Android devices by running a program that can be disguised as anything. Sometimes stealers are delivered to the user by scammers or "friends" - they drop a file and ask to run it under any pretext.
The most common way to get stealers on computers of stalcraft players - through cheats, launchers of unscrupulous minecraft projects and phishing sites (imitating sites EXBO and STALCRAFT, downloading stealer instead of a launcher).
To prevent viruses from entering your devices, install an antivirus, especially on your computer. Update it in a timely manner and try not to run suspicious programs unnecessarily.
Company resources are listed below:
- Discord servers: EU–NA–SEA
- Game's website: stalcraft.net
- EXBO website: exbo.net
- Reddit: reddit.com/r/Stalcraft
- Twitter (X): twitter.com/STALCRAFT_ENG
- Facebook: facebook.com/stalcraft.official
The main weapon in protecting your account is your knowledge. We hope that after reading this article you are sufficiently armed to secure your loot on Stalcraft and other games or services.
The best thing you can do now is to download any popular password manager and put unique generated passwords on all your important resources! And ideally, you can secure it with two-factor authentication.
If you have Google Authenticator disabled on STALCRAFT - you should turn it on right now!
We hope this article will be helpful and save you from potential hacks that may already be looming over some of you! Don't delay, and secure yourself right now.
With care for you,
EXBO Security Department.
HK G3A1, OTs-14 Groza, AS Val
