1
Forum Settings
       
Reply To Thread

My account got hacked ;;Follow

#27 Nov 25 2007 at 8:01 PM Rating: Decent
Yasher wrote:
CaldorDarkKnight wrote:
Hmm. That's why I've been wondering how I could have come into contact with a keylogger in the 1st place. I know I haven't downloaded anything. Looking for recipes and stuff surfing on random websites featuring FFXI contents but no downloads at all.

BTW: It looks like there is at least one more with exactly the same problem.

http://ffxi.allakhazam.com/forum.html?forum=29;mid=119588689074441781;page=1;howmany=50#m119589023983216149

That's the link to another thread regarding the same matter on the FFXI Feedback forum.

He never said if he was or wasn't using 3rd-party tools though.


That's true. But recently a post was deleted. The 2nd post telling someone not to troll his thread was the response of him to someone who just told him not to use cheat tools. And that answer kinda gave me the impression he didn't do what the missing thread writer suspected.
#28 Nov 25 2007 at 8:22 PM Rating: Decent
Damn that guy is really starting to **** me off now. I just noticed he started buying stuff on my main character O.o

1 * reraise earring
1 * gold beastcoin(which in a way makes my suspicion about Fenlo even stronger because he bought gold beastcoins as well)
and a stack of Lightning Crystals(maybe using my character right now to farm gold orcmasks since I got goldsmithing at 58?)

If anyone happens to be on Fenrir some kind of report of what he's doing with my character right now would be nice.
#29 Nov 25 2007 at 8:33 PM Rating: Good
***
2,955 posts
There really should be a way for someone to put their account into dispute, and lock it out completely temporarily.

SE has the original account registration/billing info, the owner could just verify that and have the account temp locked/banned until whatever is sorted out.
#30 Nov 26 2007 at 1:19 AM Rating: Decent
Just called the EU support and since I got an US account they can't access it. Got to wait another 7 hours to get the account thief out of my account ;;
#31 Nov 26 2007 at 1:29 AM Rating: Good
****
6,424 posts
Doesn't the account get locked if you log in 3 times with the wrong password?
And to unlock it, you need to provide the original address and CC info you used to make the account?

Also, you could have asked someone over the phone to call a GM to lock your FFXI account.
#32 Nov 26 2007 at 1:37 AM Rating: Decent
****
6,424 posts
Brisko wrote:
There's something not being said here. The odds of someone downloading a keylogger that reports information to someone interested in FFXI while not downloading stuff related to FFXI must be astronomical. And as we all know, virtually all account thefts related to keyloggers involve third party cheat tools, or at the very least fraps.


The odds aren't that bad. All you need to do is to visit a FFXI-related website that has an infectious advertisement. Any site that has banner ads for RMT is highly suspect. Hmm.. probably add WoW and LotR to that category as well, since some players play more then one MMO (even if accounts are inactive, they still occasionally check websites and forums regarding that game)

#33 Nov 26 2007 at 3:28 AM Rating: Good
***
1,888 posts
Caldor, everyone at Europa is very sad to hear this happen.

For the record, the person controlling your character has been removed from the shell by concensus. The player does not respond to tells and was in Kuftal Tunnel all morning.

Best of luck in returning to the character with minimal damage.

EDIT: The issue was raised with a GM early in the morning by a LS sackholder. The account was apparently sold on Ebay to a buyer in Kuwait or something.

EIT #2 Confirmed the player claims to have bought accnt on ebay. EU GM has contacted US staff. Give em a call when they open.


Edited, Nov 26th 2007 6:59am by OneFromSilverLight
#34 Nov 26 2007 at 4:43 AM Rating: Default
*******
50,767 posts
There're computers in Kuwait?

Edit: I R EDIT AFTUR DE FACT.

Edited, Nov 26th 2007 7:50am by lolgaxe
____________________________
George Carlin wrote:
I think it’s the duty of the comedian to find out where the line is drawn and cross it deliberately.
#35TirithRR, Posted: Nov 26 2007 at 4:47 AM, Rating: Sub-Default, (Expand Post) There's electricity in Kuwait?
#36 Nov 26 2007 at 4:56 AM Rating: Good
Scholar
***
1,457 posts
Damn Caldor, LONG TIME no see! I am sorry to see you this way and if there's anything I can do in-game that can help, let me know.

Maybe I'm blind to hackers or whatever but stories like these sometimes make me glad I am on a lolps2.

____________________________
Alliam
95 WHM/SMN/RDM/BLM/MNK
Fenrir
#37 Nov 26 2007 at 5:53 AM Rating: Decent
dude man this sucks, this happened to another friend of mine as well ;; hope you get it back miss you on the ls lol
#38 Nov 26 2007 at 9:18 AM Rating: Decent
The name of the one selling my account on EBay would be useful. Might be of some use to the police I reported the crime to.
#39 Nov 26 2007 at 9:45 AM Rating: Default
37 posts
Hey caldor, really sorry to hear about this mate, it wasnt til early hrs of monday morning i found out about this when i see reig's post on the ls webby...

Anyways you was signed it at the time so i sent a tell asking how things were going and was getting very strange replies >.> The guy/girl went on to tell me that "they m m m buy acc just OK!" I asked him where and he said on ebay, i kept him talking for a while and called a GM and explained what had happened the prev 24 hrs to your acc... after talking with him for a few few mins and passsing on the link to your post on alla to the GM explaining what had happened on your acc he said it had been passed to the U.S dept. and they were investigating as we spoke. I know alara also was also in talks with a GM at the time about this... I dunno what he/she was up to but in the short time i was on he had made his way to ssg joined up in a pt, and then 10 mins later disbanded and seemed to remain in the area.. anyways keep in touch and if you wanna get in touch my emails on the ls webby, p.s got screenies of the chat with him/her and the GM if you want them ? dunno what use they would be but yeah.

GL on the acc, ttys i hopes

Nt.
#40 Nov 26 2007 at 9:55 AM Rating: Decent
***
1,067 posts
TirithRR the Mundane wrote:
I don't think Trial and Error works, isn't FFXI anti-"brute force"?


After your third incorrect password entry, PoL will boot you and tell you that you must wait a while before allowing you to attempt password entry again; I believe it is a 10-15 minute period. I experienced this while I tried to install and register my roommates expansion for them while they were at work because I couldn't read their handwritting and they couldn't answer their phone at work.

I doubt it was brute force, most likely you have a keylogger.
#41 Nov 26 2007 at 10:17 AM Rating: Good
***
1,017 posts
Looks like your character is part of the RMT gang to fish up angel skin ; ; Can't believe how low RMT have gotten. Only way they can make money is to steal accounts. I hope you get your account back.
#42 Nov 26 2007 at 10:29 AM Rating: Decent
Thank you for the information Ntfc. I guess if I ever get my account back it will be a long time. I already called the customer service but it was useless.
I'll post the whole communication with him so that others know what kind of ******** they got to expect if they ever get into this kind of mess.



You have been connected to ICR Wynbert N.
ICR Wynbert N: Hello, Dennis, thank you for contacting the PlayOnline Information Center. Just a few moments while I review your question, please.
ICR Wynbert N: In order for us to more accurately address your issue, we will require additional information. Please give a brief explanation of the issue you are having and please include any error codes or messages you are receiving.
Dennis Vullriede: My account has been taken over.
Dennis Vullriede: I got kicked out of the game on sunday around 4:30 AM GMT+1
Dennis Vullriede: I kept logging in for about 4 hours but eventually the thief was able to change my password and locked me out completely.
Dennis Vullriede: According to my sources(people from my LS) the account was sold on Ebay.
Dennis Vullriede: Furthermore I've noticed on www.FFXIah.com that a character called Fenlo is obviously selling all of my equipment.
ICR Wynbert N: For security reasons, we are unable to address your account issues without first verifying your identification. Please respond with the following information:
ICR Wynbert N: PlayOnline ID
Full Real Name
Birthdate
Complete Mailing Address
PlayOnline Registration Code
Current Credit Card information, first 4 and last 4 digits only.
Dennis Vullriede: Playonline ID but removed for security reasons
Dennis Vullriede: Full
Dennis Vullriede: real
Dennis Vullriede: name: Dennis Vullriede
Dennis Vullriede: Birthdate 03/03/1980
Dennis Vullriede: Street information but removed due to security reasons
Dennis Vullriede: Credit Card 1st 4 digits 9999 last 4 digits 9999 (credit card changed for security reasons
Dennis Vullriede: /p
Dennis Vullriede: unfortunately I don't have the registration code I used a few years ago atm
ICR Wynbert N: The address, and the credit card on file does not match the information you have provided. I'm sorry, but I would not be able to assist you with this issue unless we can get that information verified.
Dennis Vullriede: The reason is that they have been changed
Dennis Vullriede: According to EU gamemasters the account was sold to someone in Kuwait as far as I've been informed
Dennis Vullriede: Is it possible to recover the old data before it had been altered recently.
ICR Wynbert N: Unfortunately, no. We can only see current information, and this is what we need verified on the account.
ICR Wynbert N: If you believe that you are the victim of an internet crime, contact your local law enforcement agency. You may also report internet crimes to the FBI. Laws may vary from state to state so you will need to confer with your local law enforcement agency for guidance.
ICR Wynbert N: In about 99% of these cases, accounts are compromised by someone giving their login and password out to a friend, room mate, Linkshell or family member. Please remember to never share your PlayOnline ID or password information.
Dennis Vullriede: I've already informed the police about this matter.
Dennis Vullriede: I never gave my information to someone else and don't know either how he figured them out.
Dennis Vullriede: Can you contact the player using my Character Caldor and ask him? My LS friends told me he already confessed that he bought the account.
ICR Wynbert N: Again, I'm sorry, but we would not be able to assist you with resetting the password for this account unless we can verify the necessary information. Without full verification, we are unable to further assist you with this matter.
ICR Wynbert N: Are there any other issues I can assist you with right now, Dennis?
Dennis Vullriede: I'm not asking to reset the password but get into contact with the player controlling my account right now.
Dennis Vullriede: Can't you check the logs. It should be easy to figure out that 2 different IPs were trying to get into the accounts for a long time.
ICR Wynbert N: I'm sorry, but the only thing the Information Center can do is to reset the password to accounts, and the only way we could do that would be through full verification.
ICR Wynbert N: If you have reported this to the local authorities, then we would need to wait until they come and contact us to release any further information in regards to this matter.
Dennis Vullriede: Can you do a full verification then?
ICR Wynbert N: I already asked you for the information we need, and you could not provide me with the credit card, or the address on the account.
Dennis Vullriede: I provided you with my address and credit card
Dennis Vullriede: I
Dennis Vullriede: I can't provide you with the recently changed information though
Dennis Vullriede: since it wasn't me who changed it
ICR Wynbert N: That's the information we need, the current information on file.
ICR Wynbert N: Again, without this information, I can not assist you any further.
ICR Wynbert N: Are there any other issues I can assist you with right now, Dennis?
Dennis Vullriede: How can I provide you with the credit card information of someone else?
Dennis Vullriede: Can't be true there is a backup of the old informations
ICR Wynbert N: Dennis, I have already provided you with a resolution to this issue. As it seems you have no other new issues I can assist you with, I will be removing you from chat at this time.
ICR Wynbert N: Thank you for visiting our PlayOnline Chat line, Dennis! Take care and hope to see you online!
Thank you for visiting our PlayOnline Chat line. Take care and hope to see you online!
Your session has ended. You may now close this window.

I figured out that the registration key I was missing is on my credit card charge information so I got that one now too but don't think this would change anything.
#43 Nov 26 2007 at 10:37 AM Rating: Good
***
1,888 posts
Ah Caldor that really sucks.

You should always keep your registration codes though, its one of the first things they ask for.

I honestly dont know how this crap happened, and its one of those strage things as just the other night you were stating how against 3rd PT tools etc you were.

As the character was in Kuftal for most of the day I assume its now RMT controlled. Which is dispicable.

If there is no other way you can get your character back I will help you with a re-roll, as im certain other LS ppl with too mate.
#44 Nov 26 2007 at 10:44 AM Rating: Decent
*
131 posts
This is a bit off topic but, I was surfing ffxiah.com and found an ad for a RMT site. I snooped around the site and found a link "LVL your chr from 1-75 for $$$" I clicked on the link and it’s just a text box asking for you ID and password. I can't believe people fall for that stuff >.<
#45 Nov 26 2007 at 10:53 AM Rating: Decent
*
177 posts
im sorry to hear about this it must really suck >< i really hope you get yor account back and your stuff (most)
#46 Nov 26 2007 at 10:59 AM Rating: Decent
37 posts
Yeah im with reig, i think there lack of co-operation is fkin discgraceful. Basically, were still getting paid for the acc so meh!

Hope it gets sorted soon man
#47 Nov 26 2007 at 11:20 AM Rating: Decent
ntfc wrote:
Yeah im with reig, i think there lack of co-operation is fkin discgraceful. Basically, were still getting paid for the acc so meh!

Hope it gets sorted soon man


It's really sad SE doesn't put any work into this as long as someone keeps paying the monthly fees. I mean I didn't expect them to change the password right away or anything but some kind of research on the matter especially since I tried to give as much details on the matter as possible shouldn't really be a problem. If the German police can't do anything about this mess I'll probably end up informing the FBI like that help desk guy suggested. I'll keep you updated on any changes regarding this matter.

If you receive any helpful informations about this feel free adding them to this thread as I'll check on it frequently.
#48 Nov 26 2007 at 11:28 AM Rating: Good
**
261 posts
CaldorDarkKnight wrote:
ICR Wynbert N: For security reasons, we are unable to address your account issues without first verifying your identification. Please respond with the following information:
ICR Wynbert N: PlayOnline ID
Full Real Name
Birthdate
Complete Mailing Address
PlayOnline Registration Code
Current Credit Card information, first 4 and last 4 digits only.
Dennis Vullriede: Playonline ID but removed for security reasons
Dennis Vullriede: Full
Dennis Vullriede: real
Dennis Vullriede: name: Dennis Vullriede
Dennis Vullriede: Birthdate 03/03/1980
Dennis Vullriede: Street information but removed due to security reasons
Dennis Vullriede: Credit Card 1st 4 digits 9999 last 4 digits 9999 (credit card changed for security reasons
Dennis Vullriede: /p
Dennis Vullriede: unfortunately I don't have the registration code I used a few years ago atm
ICR Wynbert N: The address, and the credit card on file does not match the information you have provided. I'm sorry, but I would not be able to assist you with this issue unless we can get that information verified.
Dennis Vullriede: The reason is that they have been changed
Dennis Vullriede: According to EU gamemasters the account was sold to someone in Kuwait as far as I've been informed
Dennis Vullriede: Is it possible to recover the old data before it had been altered recently.
ICR Wynbert N: Unfortunately, no. We can only see current information, and this is what we need verified on the account.
ICR Wynbert N: If you believe that you are the victim of an internet crime, contact your local law enforcement agency. You may also report internet crimes to the FBI. Laws may vary from state to state so you will need to confer with your local law enforcement agency for guidance.


A friend of mine had an account stolen from him nearly the same way it was from you. He proceeded to get his account back by informing SE's Customer Service Rep, that when he hung up, he was going to contact the police and his CC company of the "suspicious" charges on his card to something called Playonline for the past 3 years.

If there was no record of said charges that SE can confirm, then it's something that he, the police, SE, and Visa would have to do some serious talking to sort out the problem of hundreds of dollars being siphoned out of his pockets for something he "obviously" didn't purchase, as they (SE) have no record of it.

Oddly enough... they were able to verify past info after he mentioned that.

It's a course of action you can take. There is no garauntee it'll work... but if SE refuses to accept that the info was JUST changed from something it used to be constant with the past 3 years, and refuses to admit they have that info on hand... then you would have the capability of claiming your CC was used for something innocuous that you just noticed taking $12+ a month for the past three years.

It's not like SE could dispute it... they 'don't have that info.' Besides... you'll get either $432+ or your account back.
#49 Nov 26 2007 at 12:23 PM Rating: Decent
**
555 posts
"ICR Wynbert N: The address, and the credit card on file does not match the information you have provided. I'm sorry, but I would not be able to assist you with this issue unless we can get that information verified."

This is the exact same thing the a-hole told me on the chat when my account was taken over. I played the game for almost 4 years when it happend, don't you think they would have a record of my Name/Address/CC number etc...
#50 Nov 26 2007 at 12:31 PM Rating: Decent
Lofi wrote:
"ICR Wynbert N: The address, and the credit card on file does not match the information you have provided. I'm sorry, but I would not be able to assist you with this issue unless we can get that information verified."

This is the exact same thing the a-hole told me on the chat when my account was taken over. I played the game for almost 4 years when it happend, don't you think they would have a record of my Name/Address/CC number etc...


Yeah they have that information for sure. But I guess as long as the new account owner pays the fees they don't care. Fenlo is currently selling Angel Skins. Guess he's farming them with my thief now to make more money for RMT ;;

I've sent an E-Mail to ebay.com now to check if my account was actually sold or if the one who stole it is just telling that he bought it and is actually using it to make more money to RMT.

I got the suspicion he just added that Fenlo character on my account. If anyone can confirm this or can confirm they are using different accounts due to being logged on at the same time lemme know. Every bit of information I can get will help.
#51 Nov 26 2007 at 12:43 PM Rating: Good
**
316 posts
Hey Caldor i´m feeling with you and hope you´ll get your char back. If there is anything i can do for you let me know !

Kopf hoch !

Gun
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 691 All times are in CST
Anonymous Guests (691)