My Account was Hacked :(

[Xandy]

Sorry jussy for your account getting hacked and i hope you get it back

[Rorschach]

Not to derail or anything, but am I the only one who gets paranoid and HAS to check on their characters as soon as they see stuff like this. Its like when SE announces they banned people the hackers immediately check to see if they're hacked.

PS: I'm rating you up for your avatar jussy... /drool.

[beeznuts]

Kinda unfortunate that things like this are happening... To be honest, assuming this story is in fact true, this is as close to a hacked account as we've ever actually had, I believe. If true, I really hope this turns out well in the end.

That being said, hopefully this will be a wakeup call for many people regarding computer security overall... It really is important. Thankfully this was only a FFXI account. There are a lot worse things that can be stolen, and that's something everyone does need to remember at all times.

[Zoner]

Theres a thread on Allakhazam saying that malware tried to upload while visiting FFXIAH.COM, most likely coming from one of the ADs. Unfortunately the thread quickly degraded to a Internet Explorer vs Firefox flame.

[Xalioniaf]

Theres a thread on Allakhazam saying that malware tried to upload while visiting FFXIAH.COM, most likely coming from one of the ADs. Unfortunately the thread quickly degraded to a Internet Explorer vs Firefox flame.

I do get ocassional pop up pages asking me to download some program or other (it has an OK and a Cancel box). Might be it?

[Vandoura]

Sorry your account was hacked Jussy. Hope you'll get it back >.<

This is why i stayed Windower 3.26 D: i don't feel comfortable using newer version of windwoer. also visiting RMT site or any related to FFXI site can get your account hack too i believe.


Good luck Jussy

[Psylentcuda]

Sucks that happened, but I think we're noticing that accounts are getting hacked because the STF is destroying almost every way that RMT can make gil, so al they have left to do is steal.

[riZz]

I think Psylentcuda is on to something... RMT > new ways of making cash.

Taking that into consideration how easy could they send a logger to your computer when your going on their own websites buying gil? your clicking around, must be accepting things, downloading crap to your temp internet files etc... just a thought.

I'm not pointing fingers or implying Jussy bought gil but have to look at all aspects of possibility...

Theres been talk about the key logger been incorporated into parsers

[K. Ishitar]

even though it's not my first time seeing your avatar is awesome...

on topic- this may have happened to me and myself not realize it...this was back when i posted help on changing my credit card info and I couldn't remember my password...it was most likely changed by someone because i tried for a few hours off and on of every password i had...I finally got it changed by reaching the person who helped pay for my acct. when i didnt have checking and his info to change the PW...

btw I dont parse i only use windower, but i dl from a lot of sites like narutocentra, realitylapse and stuff for anime and manga

sucks to see this happen, I think changing passwords monthly may be the solution to the problem

[Jussy]

I really hope SE mans up and changes their policies very soon, the amount of accounts hacked recently is ricockulous.


Also, I'm not positive about this...Wouldn't a key logger only record strokes when they're typed in? So perhaps renewing a password is a double edged blade?

What I dont understand with this keylogger thing is how they managed to get my accnt number. You dont have to type that in to get online. I cant remember if you have to have it to access the PoL email or any of the other areas tho, maybe that's where.

P.S. Thanks for the avatar compliments lol. It's Jennifer Love Hewitt.

[Jussy]

Theres a thread on Allakhazam saying that malware tried to upload while visiting FFXIAH.COM, most likely coming from one of the ADs. Unfortunately the thread quickly degraded to a Internet Explorer vs Firefox flame.

And I check ffxiah.com the way some people check myspace or facebook lol. Speaking of which, there was a FFXI gil add on facebook of all places. Of course I had to click because I was amazed that rmt was targeting college social website kind of stuff. Man, I really hope to get my character back, and soon. Finding other things to do isn't the problem. The kicker is knowing that the PoL people devised a really screwy policy, and that someone is out there free-riding what I made. I mean seriously, they should have more freedom when dealing with these situations.

[Bret]

And I check ffxiah.com the way some people check myspace or facebook lol. Speaking of which, there was a FFXI gil add on facebook of all places. Of course I had to click because I was amazed that rmt was targeting college social website kind of stuff. Man, I really hope to get my character back, and soon. Finding other things to do isn't the problem. The kicker is knowing that the PoL people devised a really screwy policy, and that someone is out there free-riding what I made. I mean seriously, they should have more freedom when dealing with these situations.

I understand how you feel, the bullshit policy needs to be changed but not alot though, I have sent a suggestion e-mail to where if you are needing your password reset via phone or calling them to notify account being possibly stolen or hacked to just provide the original cc info along with the ffxi none expansion reg code with address and date of birth and all that other jazz.

But that is only my opinion.

btw i think it is a really fucking stupid policy they have right now with having to provide current cc info that could be the info of the person hacking stealing the said account.

[Langly]

It seems the generic idea here is that most people who were keylogged visited an RMT site at one time or another recently. Even just maybe loaded the page.

It's not in my version of the parser or windower. I'm clean. And yet my friend got keylogged. He DID view those websites. Seems they're now resorting to hacking/keylogging their potential buyers in order to get their gil back to resell. The character who sold all my friends gear is very RMTish "Sadnlaa".

This brings another topic to the table. What's really stored on your machine. As per POL's websites. Your POL ID and Password is stored locally on your machine. So it doesn't even TAKE a keylogger to get your info. Just a basic device to scan and send. Voila, POL ID is theirs. And now if they have an account on their RMT website, you can bet your ass they'll try that PW for your POLID. (Which admitted most people I know use the same password for -everything-). Voila, hacked account.

SE needs to consider storing some of this information data side. It seems the PW is the likely candidate, since in some situations people may need their POLID to login as guest elsewhere. And having it displayed at login screen is probably the most convenient location for it.

Of course the inevitable "They should also allow those with the key's to completely sieze the account." For instances like this. Get ahold of them, say "My key is blah-blah-blah can you please halt all actions for the account. I am afraid it's been compromised." This at least gives you a leway for the STF to investigate and find out what's going on.

[Canadiana]

happened to me once, sucks

[Jussy]

I understand how you feel, the bullshit policy needs to be changed but not alot though, I have sent a suggestion e-mail to where if you are needing your password reset via phone or calling them to notify account being possibly stolen or hacked to just provide the original cc info along with the ffxi none expansion reg code with address and date of birth and all that other jazz.

But that is only my opinion.

btw i think it is a really fucking stupid policy they have right now with having to provide current cc info that could be the info of the person hacking stealing the said account.

I agree with this 100%. Old CC info and registration codes should cut it.