My Account was Hacked :(

Jussy

Jussy

Artifact Armor
Adventurer
Joined
Feb 14, 2005
Messages
1,096
Just a tidbit of info for the Quetz community, since I have know way of contacting my friend list people.

Either late Dec 3rd or on Dec 4th, my account was hacked using a virus called infostealer.gamania (a keylogger). PoL cannot reset my password because the people who did it changed it to their own credit card and password. They said they cannot give reset the password for me even with the card info I've used for 3.5 years and every single registration code, because it isn't in accord with their policy. (Their policy states that you must be able to give them account number, name, bday, first and last 4 card numbers, and street address.) I'm still trying to get it back.

The people who took my account moved my character to Asura, and there are two characters believed to be selling my stuff. Tamasa just popped on AH "coincidentally" right after I was hacked. Esanlu seems to have been involved with my account and someone else's.
 
Last edited:
I suspect rmt because they sold a thf knife which i never owned, also they bought hi-potion tanks and ninjutsu elemental tools which suggest using my bst seals to for PCC or something... /cry

Okay, so I've talked to the PoL ppl 4 times today and the police twice. The first PoL instructed me to fill out some report online that is to be directed to the local police dept. Then I called back to get more info, and this PoL representative told me to avoid the online thing and to call the police directly. So the police sent an officer to my house and he explained to me that FBI handles cases of fraud etc, and that its too common of a deal for a local police dept to handle. He said that it should be PoL's responsibility to report this and investigate, not mine. So after he left, I called the PoL ppl back and this guy, in short, told me there was nothing he could do to get my account back and that it was my responsibility to keep my info secure, blablabla. He said there was nothing short of a California court-ordered subpoena (sp?) that would get them to give me the info to get my account back. So I called the police dept again and this guy was very helpful. He listened to the whole ordeal, and then told me he'd look into it and call me right back. He did, and told me that there was nothing they could pursue unless I had physical evidence of credit card use or ID fraud. So he advised me to call PoL again and to try multiple times til i found someone helpful, and to see what else they could do. First try (1/1 unlike Kirin!) I get a really helpful guy. He said that he got an email from his supervisor saying that if someone complained, claiming that their account was compromised, to have them submit main character name, server, linkshells, previous credit card info and address, and PoL registration number. (The crappy thing is that the representative before this said that nobody there, supervisors included, had access to past account info, only present.) I call BS. Oh, and of course, the guy pronouced my character's name as "Juicy?" So now, he's submitting this info to his supervisor, but has no idea when the supervisor will try to contact me, if at all. I'll give it a week-ish until I call back. My last stand is to push for ID fraud, given the hacker is operating the account with his credit card and address under my name and birthday.
 
I called again to see if giving them the names of thost two characters that are suspected to have taken my stuff would get us anywhere faster. She told me the supervisor is handling several cases like mine, and that if anything changes (i.e. "Oh shi... this may be the real owner of the account! We may want to do something.") he will call me. She said that if/when I get my account back, that I should then take it up with a GM. So I'm just waiting on them to process this whole ordeal atm. I'm going to get on a friend's character (Claxton) here in a minute and see if I can talk to a GM now, to hopefully get a faster response.
 
Last edited:
I made a list of about 50 items that I tracked and I checked the Dec 3rd-5th history under each name that popped up to look for patterns.

Okay, so I talked to a GM with Claxton and he said that he will flag the names to be looked in to. I made a breif STF report yesterday, but he told me to make a more detailed one to make it go faster. So I just did that. He also said he cannot reimburse any items traded or sold, only dropped ones. I estimated that the worth of all my gear, including Osode, and LS gil to be around 19M! /cry.

Here is the STF report for those interested in the nitty-gritty details. Don't laugh at my flatteringly persuasive appeals! lol:

Okay, I hope this doesn't get too long. I sent a message yesterday concerning my account being compromised (<insert account number here>). After speaking with a GM today, he instructed me to send a more detailed report in order to make your job smoother.
On either Dec. 3rd or 4th my account was believed to be hacked. Upon compromisation of my account, the culprit changed the credit card and street address information. Therefore, I am having much difficulty with the PlayOnline people. I researched items that I figured I would lose on ffxiah.com and came up with two names that could be involved: Tamasa and Esanlu. As I mentioned, my account was taken either late on the 3rd, or on the 4th, and magically the character Tamasa's first auction house appearance is on the 4th, and they have yet to sell an item that I did not already own. Here is a link showing this:

http://www.ffxiah.com/player.php?id=1095517

Esanlu is suspicious as well. If he is not involved with my account being hacked, then he could be suspected of robbing someone else's items. From Dec. 3rd to the Prism Cape sold on Dec. 5th, this character sold items that I owned as well, however the inconsistency is that Esanlu and Tamasa sold several HQ Staves that were the same. Here is a link to his auction house activity.

http://www.ffxiah.com/player.php?id=1094053&sid=28

My character (I assume after it was looted) was moved to the Asura sever from Quetzalcoatl. There the culprits proceeded to buy items that I previously owned. This is another reason I assume my equip/items were looted on Quetzalcoatl. This is also another reason why I assume I was hacked by RMT-related people (Due to the cross-server collaboration.) The link showing my character's Asura auction house history follows:

http://www.ffxiah.com/player.php?id=1094864&sid=28

Among the items on this site purchased that I already owned, or owned an HQ version of are: Mamushito +1, Amemet Mantle, Evasion Torque, Scorpion Harness, and Fuma Sune-ate.

It may be a good idea to research what characters my character (Jussy) was involved with immediately after server migration on Asura. There may be more dirty crooks to be found there.

Thank you for handling these kinds of issues. You guys are heroes for those of us who really enjoy playing with as greatly reduced RMT-activity as possible. I hope I have supplied enough information to aid you in catching these guys. It's sickening how they take people's years of hard work on FFXI and then throw it all away to make a quick buck somewhere... truly sickening.

If you happen to need more information that you believe I may help you with, my e-mail is [email protected]. I've estimated that I will have lost around 19M in gil. According to current RMT prices on various sites, this is close to $1000 worth of items lost. And to farm that back (50k/hour) it's an estimated 380 man-hours lost. Please catch these selfish people!!
 
So... I went to Wal-mart and bought a new Norton software disc for both my PCs. When it did a scan it found Infostealer.gamania (A malicious trojan virus that records passwords and keystokes) To anyone not using anti-virus software, or really crappy kinds (like the free stuff) I'd suggest paying $70 to get the real deal.
 
I talked to a PoL representative yesterday and he thinks that the supervisor won't have any more power or whatever than he does, but I think its BS. Why would a supervisor send out an email requesting extra information in these cases if he had equal clout?

Anyway, Monday I plan to call to see if I can speak to a supervisor directly. Them saying I may never see my character again is plain sickening. It'd be like 3.5 years' work /flush. I also plan to see if they could do something more if I were to fackin fly to California and show em my I.D. in order to prove it's me.

I don't yet know what lengths I'm willing to go to in order to get my account back, but this should NOT be this difficult. I plan to file a complaint as well with the SE people, and I will make a Comments and Suggestions deal. Once I do, I will post it so that as many of you can do the same. One representative told me that if enough people push for it, perhaps the policy would change in the future.
 
I am calling PoL for like the 6th time Monday to see if I can speak to a supervisor directly, and to see if I were to fly to California if presenting my ID (which would prove ownership) would get my account back. The people who took my account have commited fraud now since they are operating it and a credit card under my name and birthday. I can't believe PoL employees are allowed to let that continue. So anyway, if neither of these work, I'm hitting up the police station for the 3rd time.
 
Blackmagik said:
oh my, that sucks, hmmm 3rd party programs 4tl? :D
Click to expand...

I have windower on my laptop, but rarely use my laptop over my desktop. Also, I have not downloaded it in over a year. How my account was compromised is not the issue; how to get it back is. Please stay on topic.
 
You managed to get A LOT done in the span of what looks like 19 mins.
 
Jussy said:
Just a tidbit of info for the Quetz community, since I have know way of contacting my friend list people.

Either late Dec 3rd or on Dec 4th, my account was hacked using a virus called infostealer.gamania (a keylogger). PoL cannot reset my password because the people who did it changed it to their own credit card and password. They said they cannot give reset the password for me even with the card info I've used for 3.5 years and every single registration code, because it isn't in accord with their policy. (Their policy states that you must be able to give them account number, name, bday, first and last 4 card numbers, and street address.) I'm still trying to get it back.

The people who took my account moved my character to Asura, and there are two characters believed to be selling my stuff. Tamasa just popped on AH "coincidentally" right after I was hacked. Esanlu seems to have been involved with my account and someone else's.
Click to expand...

As far as the esanlu thing is concerned we witnessed this guy stealing the items from one of the people in our LS by the name of THEWOLF. He was a completely tricked character including genie weskit, kraken club, 45 100 coins and a whole lot of stuff like that. We were on our way to sea when the person logged onto thewolf and proceeded to mule everything that he had over to the esanlu guy while several members of our LS were witnessing the theft and calling a GM while it was happening.

The GM stated that they would investigate it but they were unable to resolve the situation because they too had their account information changed instantly once the character was transfered.
 
Last edited:
Myrrh said:
You managed to get A LOT done in the span of what looks like 19 mins.
Click to expand...

If I only had a brain.

EDIT: Ok, that might be a little out of line, but do you really think all of that was done within 19 minutes? :/
 
Last edited:
Euphacent said:
If I only had a brain.

EDIT: Ok, that might be a little out of line, but do you really think all of that was done within 19 minutes? :/
Click to expand...

It was a joke -.- Jesus.
 
My friend was hacked at about the same time by a keylogger these past 2 days. He's a windower/parser user. Didn't get his account. Just all his non ra/ex items. Sadnlaa has sold all his items on the AH. And the name "Shankus" was mentioned by a GM. But no idea what correlation he has to it all.
 
You must log in or register to reply here.
Back
Top