Skip to main content

Browse GamesGame JamsUpload GameWinter Sale 2025Developer LogsCommunity
On Sale: GamesAssetsToolsTabletopComics
Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
TagsGame Engines
zegamez213 days ago

They hacked Discord account of assistant. I was stupid enough to pm him passwords there. That’s how they got access to my site and chat gpt account I paid for him. How they got access to my assistant’s itch? I don’t know. Probably, he used the same password. But it doesn’t matter now as he is not admin anymore.

This problem arose not because of malicious software on my pc. I have paid versions of Norton 360 and Malware bytes (they can work together) on my PC to make sure I don’t have any malware. 

But anyway, thank you for your support!

Reply
Arikania212 days ago

If your next admin is going to be someone you don't know personally, you may want to agree on a code that you can give him (a word or phrase, a numerical code or a chess move) that you can occasionally ask him for authentication. Tell him ofc to delete the DM in which you give him that code.

Also, change your password every 3 or 6 months to stay ahead of brute force attacks (i.e. someone using a program to spam passwords on your login page until one works), and ask your admin to do the same.

If you have the possibility to do so, you may want to set up your website so that, after like 3 failed password attempts, the user has to wait 15 minutes before he can try again.

And finally, I myself store my passwords on a USB-stick, so that I can keep them offline, and still have them at hand when I need to.

I'm happy to be of help of course, and even gladder to find you back in business. Welcome back!!


Kindly,

Arikania

Reply
zegamez212 days ago

Thank you very much for the advice!

But what I’ve taken away from this situation is—no more admins. My next assistant will do everything offline, and I’ll handle the website updates myself.

It only took the hacker a couple of minutes to cause trouble and move on. Honestly, I was lucky that he acted so blatantly instead of trying to embed some malware into the working version of the game.

I’ve changed the password too. So, lesson learned. No serious harm was done. Those players who downloaded the malware did it for free, which means, as compensation, they now have access to the games and all future updates.

Reply
AboutFAQBlogContact us
Copyright © 2025 itch corp · Directory · Terms · Privacy · Cookies