My Account was Hacked :(

Hi folks,

I belong to a computer security forum called AntiOnline. A thread was posted today regarding getting trojans from a FFXI related website. I thought that the information might be of interest to you guys.

http://antionline.com/showthread.php?t=276318

I am not sure if it will accept that URL being as how I only just joined.

If not then if you go to AntiOnline and look for a thread called "Google adsense banners" in the sub-forum "Newbie Security Questions".

The problem certainly seems to exist on the FFIXAH site if not others.

Not only might there be some hijacked adverts, but there is an XSS (cross-site scripting) exploit there as well.:shok:

I thought you might be interested?

My personal thoughts would be to use FireFox with the "Adblock" and "Noscript" plug-ins.

Also check out an Australian software house called DiamondCS. They have a number of free security products. I would suggest that you take a look at "RegistryProt" and "Process Guard"

Cheers,

Johnno
 
From what I read on BG Theeye got some hopeful news:

theeye on BG said:
Hello
Made some progress today was able to get to people in square enix above play on line customer service.
points of intrest
1 They acknowleged this is a major problem
2 They confirmed that it was the ]]DO NOT USE SOMEPAGE[[/realplayer theory
3 told me a possible solution to get guys back after next billing cycle ,however can disclose till tommorrow when i talk to a third level person
4 feel free to speculate on how we may get our guys back
5 Will update you guys tomorrow
and once again ty for starting this thread it is getting noticed by se
 
From what I read on BG Theeye got some hopeful news:

Originally Posted by theeye on BG
Hello
Made some progress today was able to get to people in square enix above play on line customer service.
points of intrest
1 They acknowleged this is a major problem
2 They confirmed that it was the ]]DO NOT USE SOMEPAGE[[/realplayer theory
3 told me a possible solution to get guys back after next billing cycle ,however can disclose till tommorrow when i talk to a third level person
4 feel free to speculate on how we may get our guys back
5 Will update you guys tomorrow
and once again ty for starting this thread it is getting noticed by se


Oh I hope that this works. and people can at least get their characters back sure it might be minus some items, but... I think SE is feeling the pressure now from the word "Lawsuit" and everything. I know when I filled out the survey I attached a wordy 1000 word comment about this problem.

I just hope it all works out for you guys.
 
SE rep: Alright, I've retrieved your character information in our database but we seem to have lost some of the archives for your previous items. Can you remember some of the items you previously had?

random guy: Uh, yeah, I think I had a ridill.. um, a dalmatica.. let's see..
 
There's quite a few things they could do to establish that you were the true owner they just don't care enough to bother. Their policy is that if you don't know the new CC number then there is nothing they will do to help you. They don't really question that you are the true owner or that what you're telling them isn't 100% true they just don't believe it's their responsibility to do anything about it.

Ok, dis the CSR's no problem, but when you get to tier 3 level supervisor, this argument would prove them that you are original owner and have the right to change the password.
 
Also
Jusy said:
I found some pretty disturbing shit relating to the miorsocft domain. It looks like stealing MMO accounts isn't their only specialty. This site and a couple others registered under the same domain were reported months ago for stealing Bank Accounts and other information using similiar methods.

Maybe these stolen credit cards are the ones paying for the accounts at the moment... :/
That would be hilarious. Would be some serious crimes committed by said RMT's then.
 
And now the problem is how to get to them... aside from tracking down the actual people, cross country legal justice is quite sticky, tricky, and picky.
 
Me too :(

I realize most have you have posted at:

http://www.bluegartrls.com/forum/viewtopic.php?f=2&t=27042&st=0&sk=t&sd=a&start=480


but I felt I should post my story here as well:

http://www.bluegartrls.com/forum/viewtopic.php?f=2&t=27042&st=0&sk=t&sd=a&start=480

Recently I have also become a victim as some of you...I would have posted earlier but I have been trying to calm down.

My only course of action now is to now sent a letter to:

Square Enix North America
ATTN: North American Account Manager , William Bisby
999 North Sepulveda BLVD. 3rd Floor
EL Segundo , CA
90245

As you can not speak to him directly nor have his email address!! the local authorties have logged a report but very little will be done...here is the letter I sent:

Good Afternoon Mr.Bisby

I have been a customer of SE since december 2004, starting with the Xbox 360 beta for FFXI. I have since migrated to using the PC version of the game and most recently purchased the WoTG expansion pack.

On the evening of December 6, 2007, at approximately 9:10 pm EST, while waiting for a teleport in WG, I was kicked off of POL with the message that "you have been disconnected as you have been logged on from another terminal". Naturally this was impossible as my wife and I were sitting right there. I tried to log back in multiple times each time being told that my password was incorrect.

I quickly realized my account had been somehow compromised and proceeded to call the NA Support Center, whose hours at from 9am -6pm PT as I'm sure you are aware. I then tried to launch webchat from your website whose hours are also from 9am - 6pm PT. I proceeded to try webchat for the UK which was actually 3:00am in the morning there, hence they were also closed. At this point I had my wife place a GM call ingame as she was still logged into the game and spoke to a GM by the name of Mjorne, who proceeded to inform us that the only thing I could do was log a call with POL support, which of course was not open. I begged and pleaded that he do anything, anything at all, even to the point of having my character jailed until this could be resolved. I was told he did not have this empowerment and could not "jail" a character simply upon request.

I finally got through to a UK webchat support at 10:30am EST and spoke with SEL Agent Gurinder, who though although could not do very much, was at least able to kick my character off the game and change my password (once, of course, he had verified all my ID). Then I had to wait until 12:00 noon EST to contact the NA Support Centre in order to retrieve my new password and to find out what course of action I could take. Upon logging in I had two characters created under that POL ID. I have lost the following:

Metalmyth = 635,000 gil +/-

Items:

Blau Dolch = 1,500,000
Scorpion Harness +1 = 890,000
Amenet Mantle +1 = 200,000
Precise Belt = 140,000
Thief's Knife = 100,000
Wood M Ledelsens = 50,000
Snow Ring x 2 = @ 400,000 = 800,000
Ziska's Crossbow = 350,000
Pluto Staff = 440,000
Jupiter Staff = 500,000
Auster's Staff = 550,000
Dragon Harness = 390,000
Neptune Staff = 430,000
Aquilo's Staff = 200,000
Prism Cape = 500,000
Vulcan's Staff = 450,000
Terra's Staff = 450,000
Chivalrous Chain = 150,000
Warrior Gloves +1 = 94,000
Dusk Trousers = 700,000
Lu Shang Rod = 1,500,000
Rabbit Charm = 95,000
Garrulous Rings = 45,000
Spinel Ring = 30,000
Jet Seraweels = 235,000
Elusive Earring = 180,000


Zandor = 235,000 gil +/-
Demon's Cloak = 800,000
Velocity Bow +1 = 1,000,000


13,639,000 total value


Naturally, this is very disheartening. I called back to POL numerous times and finally had the issue logged under Issue #780562, where I received every type of response from "You must have given out your POL ID and PW" to "You downloaded a malicious piece of software" to "You are using illegal 3rd party tools" to "It was your fault, Mr. Customer" to which all was incorrect and promptly proceeded to ask to speak with a Supervisor to which I was told "You can't speak to a supervisor" to "We will make a request for you to speak to a Supervisor" to " Supervisors can't help you" to "Your only course of action is to speak to a GM." all of the above transpired over your 8 hour day on Friday December 7, 2007 with multiple agents

I then made calls to the GM, who informed me that only a Lead GM could even listen and consider what could be done. I was told that it would be within 72 hours that I would be contacted. Naturally I asked what would happen if I was not online when he contacted me to which I was told that they would leave me a message ... so would that mean I would have to wait another 72 hours? to which I was told "possibly". As you can imagine from all the above I did my own investigation and found that the following player "Ifmaizhuangbei" had sold all of the following items on the morning of December 7, 2007 before I was able to regain control of my character.

Pluto Staff 440,000
Jupiter Staff 500,000
Auster's Staff 550,000
Dragon Harness 390,000
Neptune Staff 430,000
Aquilo's Staff 200,000
Blau Dolch 1,500,000
Prism Cape 500,000
Vulcan's Staff 450,000
Terra's Staff 400,000
Lu shang 1,500,000
Demon's cloak 780,000
Scorpion Harness +1 800,000
Elusive Earring 180,000



This can be easily viewed at the following URL:

http://www.ffxiah.com/player.php?id=1097436

I realize that this is not an official way to investigate but common logic would dictate that this is the 'person' that all my items were traded to in order to sell. The other items that are listed above are more than likely just not sold as of yet.

I tried to report my findings to a GM to which I was told "There is no way to prove that those are your items and again a request has been submitted to a Senior GM to contact you within 72 hours."

Currently under my credit card I have two characters that I use myself and my wife, also under my credit card, has 4 characters. I understand I am not SE's only customer but with close to 3 years without missing payment and following all ToS, I would expect a little bit better support than Supervisor's that do not return calls within an 8 hour day or being told that they understand I have a job during normal working hours, but I should spend my 72 hour weekend sitting in front of my PC waiting for a possible GM call so that they can consider whether or not they should investigate.

To give you a perspective I was contacted on the third day by a Senior GM who promptly told me that I could make a call to the local authorities and that they "SE" would assist with the investigation but unless the items were lost or droppped there was nothing that could or would be done.I asked to at the very least have an invesrtigation started...NO report the matter to local authorities and was there anything else he could help me with...I was floored I would be treated like this...I objected and he just bid me Good Adventures and left??? I was eventually told by other GM's I could no longer make further calls on this matter as it was decided and if I continued I would be banned for 72 hours!!

I have been further told by both sides that neither the POL Support Team nor the GMs have any way to communicate with each other, even though they work under the same company for the same product and that my only alternative, if I felt the support was not as expected, was to send YOU a letter through the US Postal Service as you have no email address nor do you have a direct line.

The above lists for both characters represents 2.5 years of my leisure "life" and I would expect that I could be assisted and assured that something would be done to correct this violation.

Regards
 
If you haven't already mailed the letter (which it appears you have), I would send it certified so they can't claim that it was lost in the mail. I had that happen to me in a dispute with a school and they told me that other than sending it certified, there is no way to prove that they are not telling the truth.

I admire the initiative that everyone has taken to change policies and not take no for an answer. Best of luck to everyone in this thread in regaining their property!
 
Also

That would be hilarious. Would be some serious crimes committed by said RMT's then.

Uzor it's interesting you bring this up. I have a RewardZone MasterCard from Best Buy that I use occasionally, mainly for buying gas for my car, they called me 2 weeks go (just thought of this just now) saying that one of the retailers that I used my card (or a retailer they believe I used my card at) with had their database hacked (they wouldn't tell me who) and they believe that my account number was one of the accounts that might have been stolen. They couldnt tell me what retailer it was until they gathered the facts but they immediately asked me if I made a purchase and they named what it was and I confirmed it. The purchase I made was at a restaurant I was at earlier that afternoon having lunch with friends. To be safe they canceled my other card and sent another.

This isnt anything to sneeze at anymore. People get crazy around the holidays :omg:
 
If you haven't already mailed the letter (which it appears you have), I would send it certified so they can't claim that it was lost in the mail. I had that happen to me in a dispute with a school and they told me that other than sending it certified, there is no way to prove that they are not telling the truth.

I admire the initiative that everyone has taken to change policies and not take no for an answer. Best of luck to everyone in this thread in regaining their property!


Thank you Arianelle as you are right I did send it but not certified, I will resend it certified when i go to work tommorow. By the way I bit of bright news for those who are in the same boat. At this link you will see that an attorney is taking up the case for all of us

http://www.bluegartrls.com/forum/viewtopic.php?f=2&t=27042&st=0&sk=t&sd=a&start=570

as for legal reasons that will help us all, you may or may not remeber it is the WOTG software that asks you disable your AV software:

file.php
 
Thank you Arianelle as you are right I did send it but not certified, I will resend it certified when i go to work tommorow. By the way I bit of bright news for those who are in the same boat. At this link you will see that an attorney is taking up the case for all of us

http://www.bluegartrls.com/forum/viewtopic.php?f=2&t=27042&st=0&sk=t&sd=a&start=570

as for legal reasons that will help us all, you may or may not remeber it is the WOTG software that asks you disable your AV software:

file.php

Never do that. It will not hinder the installation.
 
Thank you Arianelle as you are right I did send it but not certified, I will resend it certified when i go to work tommorow. By the way I bit of bright news for those who are in the same boat. At this link you will see that an attorney is taking up the case for all of us

http://www.bluegartrls.com/forum/viewtopic.php?f=2&t=27042&st=0&sk=t&sd=a&start=570

as for legal reasons that will help us all, you may or may not remeber it is the WOTG software that asks you disable your AV software:

file.php
I have to ask, though, what have WoTG asking you to disable your anti-virus software have to do with anything? Almost all games and software you install ask you to do that. A great deal ask you to close down all programs you currently have open.

And yes, I'd recommend you ignore it. But I don't see what that proves >.O that SE gave you the virus? That its their fault?
 
And yes, I'd recommend you ignore it. But I don't see what that proves >.O that SE gave you the virus? That its their fault?

Its because SE tells us that account security is our own responsibility, but then they turn around and tell us to turn it off. While its irrelevant from a common sense perspective, its a legal sticking point that can be used to prove possible cause.
 
They tell you to turn it off during the install, then it is presumed that you will turn it back on. They tell you to turn off everything running. You can't magically get infected by a virus during the 2-3 minutes of install time because you shouldn't have anything else new running aside from the installation process and everything else before and after that will have been done while your av was running.
 
They tell you to turn it off during the install, then it is presumed that you will turn it back on. They tell you to turn off everything running. You can't magically get infected by a virus during the 2-3 minutes of install time because you shouldn't have anything else new running aside from the installation process and everything else before and after that will have been done while your av was running.

{Nice to meet you} Common Sense.
 
They tell you to turn it off for a reason, as running other programs can potentially ruin the installation process. It is very rare, and is unlike to happen.
1) if you have many other applications running, the installation can take a lot of memory and basically make the computer freeze
2) Some anti-virus softwares can give a wrongful virus message while installing

First case, the installation will have been canceled half-way through if you turned the computer off, otherwise installation process can be very, very slow. Second case, it'll mess up the installation. In some cases, it can ruin your computer. As I said, though, it is rare and unlikely to happen, unless you're a computer idiot and don't know anything about computers. Which isn't all that rare, surprisingly. This is the same reason people working in customer service assume everyone calling is a complete moron and don't know anything, and that certain products have very stupid signs, such as giving kitchen knives to children not being recommended. This is also a way to avoid being sued.
 
Not to imply that the people who got hacked don't have any, as this is something that was (for the most part) unavoidable, but just because you may have the common sense to turn off and on your anti-virus software, doesn't mean that your neighbor does.

Example: http://en.wikipedia.org/wiki/McDonald's_coffee_case
My point exactly. A surprisingly large amount of people are just extremely stupid, and completely lack any form of common sense. That's why, when calling customer service, they ask the most silly questions, such as "Is the computer's electricity cable plugged in?" if the computer does not start, or "Is the network cable plugged in?" if you don't have access to internet.
 
My point exactly. A surprisingly large amount of people are just extremely stupid, and completely lack any form of common sense. That's why, when calling customer service, they ask the most silly questions, such as "Is the computer's electricity cable plugged in?" if the computer does not start, or "Is the network cable plugged in?" if you don't have access to internet.

Then they deserve to get hacked. Watch the movie Idiocracy: http://imdb.com/title/tt0387808/

Smart people ponder too much on plans for childbirth, while stupid people just go out and mate. 500 years in the future, the world is run by hick rednecks, the number one tv show is 'Ow, I got kicked in the nuts!'

If you're not smart enough to turn on virus protection after turning it off...chances are your not smart enough to handle a lot of other tasks and should be spending time bettering yourself rather than playing a video game. The hackers are doing a favor.
 
Back
Top