My Account was Hacked :(

[Jussy]

Theres a thread on Allakhazam saying that malware tried to upload while visiting FFXIAH.COM, most likely coming from one of the ADs. Unfortunately the thread quickly degraded to a Internet Explorer vs Firefox flame.

And I check ffxiah.com the way some people check myspace or facebook lol. Speaking of which, there was a FFXI gil add on facebook of all places. Of course I had to click because I was amazed that rmt was targeting college social website kind of stuff. Man, I really hope to get my character back, and soon. Finding other things to do isn't the problem. The kicker is knowing that the PoL people devised a really screwy policy, and that someone is out there free-riding what I made. I mean seriously, they should have more freedom when dealing with these situations.

[Bret]

And I check ffxiah.com the way some people check myspace or facebook lol. Speaking of which, there was a FFXI gil add on facebook of all places. Of course I had to click because I was amazed that rmt was targeting college social website kind of stuff. Man, I really hope to get my character back, and soon. Finding other things to do isn't the problem. The kicker is knowing that the PoL people devised a really screwy policy, and that someone is out there free-riding what I made. I mean seriously, they should have more freedom when dealing with these situations.

I understand how you feel, the bullshit policy needs to be changed but not alot though, I have sent a suggestion e-mail to where if you are needing your password reset via phone or calling them to notify account being possibly stolen or hacked to just provide the original cc info along with the ffxi none expansion reg code with address and date of birth and all that other jazz.

But that is only my opinion.

btw i think it is a really fucking stupid policy they have right now with having to provide current cc info that could be the info of the person hacking stealing the said account.

[Langly]

It seems the generic idea here is that most people who were keylogged visited an RMT site at one time or another recently. Even just maybe loaded the page.

It's not in my version of the parser or windower. I'm clean. And yet my friend got keylogged. He DID view those websites. Seems they're now resorting to hacking/keylogging their potential buyers in order to get their gil back to resell. The character who sold all my friends gear is very RMTish "Sadnlaa".

This brings another topic to the table. What's really stored on your machine. As per POL's websites. Your POL ID and Password is stored locally on your machine. So it doesn't even TAKE a keylogger to get your info. Just a basic device to scan and send. Voila, POL ID is theirs. And now if they have an account on their RMT website, you can bet your ass they'll try that PW for your POLID. (Which admitted most people I know use the same password for -everything-). Voila, hacked account.

SE needs to consider storing some of this information data side. It seems the PW is the likely candidate, since in some situations people may need their POLID to login as guest elsewhere. And having it displayed at login screen is probably the most convenient location for it.

Of course the inevitable "They should also allow those with the key's to completely sieze the account." For instances like this. Get ahold of them, say "My key is blah-blah-blah can you please halt all actions for the account. I am afraid it's been compromised." This at least gives you a leway for the STF to investigate and find out what's going on.

[Canadiana]

happened to me once, sucks

[Jussy]

I understand how you feel, the bullshit policy needs to be changed but not alot though, I have sent a suggestion e-mail to where if you are needing your password reset via phone or calling them to notify account being possibly stolen or hacked to just provide the original cc info along with the ffxi none expansion reg code with address and date of birth and all that other jazz.

But that is only my opinion.

btw i think it is a really fucking stupid policy they have right now with having to provide current cc info that could be the info of the person hacking stealing the said account.

I agree with this 100%. Old CC info and registration codes should cut it.

[Uzor]

I agree with this 100%. Old CC info and registration codes should cut it.

Well, I think old as in the one you used before then, if its within X time. However, if you'd require an old credit card if you, say, forgot your password, it could create problems, as a lot of people don't memorize or keep old, expired credit cards. So I'd understand requiring the current credit card in those cases.

[Demetrik]

Sooo feel you where your coming from SE customer service is horrible in my own opinion. This is how I got them to help me out.
my xbox encountered thoose nasty red rings of death.... but my ffxi account was linked to my xbox so even with a new xbox SE did not want to assign my character to my new xbox live account . So i give SE a call and there customer service rep hung up on me twice for my persistance, whenever you ask for a manager they'll say that you have to write them a letter blah blah blah. So after about the 5th time i called and let them know where i was standing I was still turned down.

Call SE headquarters!! and let them know about the way you've been treated!! ask to speak to a manager at their corporate office!!. If you attempt the customer service theyll just blow you off. After i spoke with a higher up manager at their corporate location in SoCal he lit a fire under their asses and guess what now they have the access to do whatever i wanted. Dont mess with the little man. My character was restored within the hour and I vowed to shoot myself then call those morons again. Hope this was of some help to you

[Gerry]

Well, I think old as in the one you used before then, if its within X time. However, if you'd require an old credit card if you, say, forgot your password, it could create problems, as a lot of people don't memorize or keep old, expired credit cards. So I'd understand requiring the current credit card in those cases.

Surely SE wouldn't need to know the password of a currently active or expired card though right?

Just having the 16 digit card number should suffice, or at least the last 4 numbers and the security check numbers on the back of the card.

Anyways, sorry to hear about that Jussy, best of luck getting your account back =(

[Calintzpso]

If I could do anything for you Jussy in helpping, Its this. So here goes as it worked for another friend of mine so I think you should consider it maybe. Pol isn't cooperating with you, won't restore your name to the account and Say they can't with current info?

"Persuade" those hard ass idiots with this...

"Oh? so my CC info doesn't match so you won't restore my password and account? I think I will then have to call my credit card company about this Fraud charges I was getting from Square-Enix for the last 3 years cause I supposedly don't have this account with you guys. I guess I was oblivious to the charges until now. You can speak to there lawyers then in court, or you could call your lead manager and we could have this matter sorted out now."

Sweet and evils the way to do it...

A friend of mine used something like this, They called a manager well he was on a off day or something and he had the matter solved asap.

Anything thats gonna cause loads of trouble for the department will get there asses moving. Usually. Its worth a shot, think this is in the same area as declaring ID fraud like you said. Give it a shot.

[Calintzpso]

I just checked, you can't do my idea totally. but you can however on standard credit cards say last months charge or earlier this months you got was a fraud, they will immediately freeze your account. Standard cards have a 30-45day dispute period where you can say you didn't want to be charged for something. That will get your point across to the assholes.