Yet another exploit: Characters are being forced to buy items from the marketboards.

[Korialstrasz]

SE done fucked up (again). There's apparently an exploit going on where people are able to buy items via your character with you logged in. Multiple threads are popping up on the official forums about it (yeah yeah I know).

Some of the threads in question:
http://forum.square-enix.com/ffxiv/t...50#post1533850
http://forum.square-enix.com/ffxiv/t...e-market-board

Moonrune edition:
http://forum.square-enix.com/ffxiv/threads/116556-リムサで製造中に赤ログでマーケッ

[Seravi Edalborez]

Short version for now: avoid afking (being?) in towns if you can help it.

And before someone asks: no the maint in a couple hours isn't for this. It's for world transfer stuff. So expect this to still be here barring lightning-quick emergency maint.

[Fievel]

Put your gil on retainers <_>

[Raineer]

Put your gil on retainers <_>

I keep almost all mine there, however...

They likely are scanning for playernames in any crowded area (near bells anyone?) Which is the same way they send RMT tells. If you get a tell from RMT, you can likely find the person who sent it near you. So they are probably pushing packets through that only try $million+ transactions. Most people are safe, but not all...

Like Seravi said, I would stay out of cities full-stop for the time being.

[arus2001]

I've noticed some obscenely priced items on the AH the past few days and just kind of thought it was some retard being cute like people did with roses in bazaars in XI. Looking back, however, I could see these being the items people were forced to buy. Either way, popped in before maint to send some warning mails to my friends. Think only one's a millionaire other than myself, but better safe than sorry.

But yeah, at this rate I'm expecting people to just randomly be able to set your HP to zero or break your gear with but a click.

[Korialstrasz]

A few people have mentioned seeing the "insufficient gil" message while in Dragonhead, but nobody has mentioned actually losing gil there or randomly obtaining items. I call BS on this one personally, but could you imagine?

[Korialstrasz]

Put your gil on retainers <_>

It's almost not even worth trying to do this. People are saying they're trying, but by the time they make it there everything is already gone.

The only safe option now is to just not even log in at all.

[Chamaan]

It'd probably be safe to hit the retainer in an inn.

[Kincard]

emergency maintenance incoming, in b4 rollbacks

http://yourstruly.bostonbiker.org/fi....happening.gif

[popsiclestix]

They started maintenance on Tonberry at 1718 japan standard time (5 minutes ago). No warning.

[blowfin]

A few people have mentioned seeing the "insufficient gil" message while in Dragonhead, but nobody has mentioned actually losing gil there or randomly obtaining items.

The "insufficient gil" message is basically someone trying to put through a transaction that's larger than the amount of gil you have. You see the same thing at the MB if you tried to buy something you can't afford. If you have enough gil to carry out the transaction, this message won't show, your cash would just vanish (barring the log message for a real transaction). Interesting if it's happening in DH too, people are speculating that it's related to proximity to the MB, but that would blow the theory straight out of the water if it's true.

I'm borrowing someone else idea here, but It does seem to be centralised in Limsa. The interesting thing there is the MB is not only in the same zone as the main Aetheryte (unlike Gridania), it's much closer than the MB is to the Aetheryte in Ul'Dah. Theoretically, Limsa would have the highest rate of foot traffic in close range to the Market Board. So if proximity to the MB is a factor, it makes Limsa the best target.


This account fits pretty well with that theory actually:

1. Fighting Garuda HM when computer crashed.
2. Try logging back in, get 3102 error.
3. Manage to log in after approximately 3 minutes.
4. In party with FC members trying to queue for Garuda, wouldn't work.
5. Teleport party to Limsa Lominsa aetheryte.
6. Exit game and log back in. Everything works.
7. Die in Garuda HM multiple times. Exit duty finder.
8."Not close enough to make purchase" pops up on screen near aetheryte in Limsa Lominsa.
10. Walk towards market area to check retainer.
11. Chat log suddenly says I purchased one bone chip.
12. Look at my gil and realize 5 million gil was missing.
13. Players in the area are also experiencing the same thing.

[Shenrien]

We have found a security issue on the Market, and are currently performing an emergency maintenance on Nov. 8, 2013 12:15 a.m.

We apologize for any inconvenience this may cause and apologize for the late notification.

Along with the maintenance, we are stopping World transfer services. Users will not be able to use or transfer to Worlds until the maintenance is completed.

[Date & Time]
Nov. 8, 2013 from 12:15 (PST)
* The completion time may be subject to change. We will notify you as soon as we find more information.

[Affected Services]
-FINAL FANTASY FFXIV

http://na.finalfantasyxiv.com/lodest...a461e650062567

[Qeomash]

Square at least knows about it:

We have found a security issue on the Market, and are currently performing an emergency maintenance on Nov. 8, 2013 12:15 a.m.

We apologize for any inconvenience this may cause and apologize for the late notification.

Along with the maintenance, we are stopping World transfer services. Users will not be able to use or transfer to Worlds until the maintenance is completed.

[Date & Time]
Nov. 8, 2013 from 12:15 (PST)
* The completion time may be subject to change. We will notify you as soon as we find more information.

Will probably be fixed before maintenance is over.

Edit: Damn you!

[Edelweiss]

Well, hopefully at least people who did get mugged by the RMT have everything made right in a short period of time, since they clearly know about the problem and it likely hasn't been going on for much more than a day or so.

Edit: On the plus side, if they can bust the RMT banks again, that'd be decent compensation for this whole thing. Gil prices were getting close to 24-25 dollars again on Midgard so soon after the latest STF sweep.

Edit 2: It's Leddit, but whatever: http://www.reddit.com/r/ffxiv/commen...ver_rollbacks/

Quick summary, no rollbacks. Give me a moment while I read through and translate while subverting the bosses' watchful glaze.

Regarding the exploited.

We received reports earlier of people misusing the marketboard and illegal access and fake identities. Only a few people have been affected but we are taking the servers down ASAP to prevent the infection from spreading.

For the players that have been affected, please rest assured that we have secured your data and will reset everything for you. (ie, no server rollback, only character rollbacks)

The exploit only affects people in some words, in a particular zone. Those not logged in will not be affected.

The rest is unimportant PR talk.

Regarding the exploiters.

We have traced their routes and will be going after them through legal means.

[Rocl]

The official statement translated from the Lodestone:

Here is a message from Producer/Director Yoshida regarding the current security issue and action that will be taken from this point on for Market.
-------------------
This is Producer/Director Yoshida.

This is a thread, but I would like to mention the current situation and actions that we are going to take from this point on.

First of all, a few hours ago, we have received several reports about fraud in certain features of the Market operated by an outside source.
There are not many reports of casualties due to this, but to prevent any further cases, we performed an emergency maintenance.

We apologize for the inconvenience and that this has affected many of our players.
We are verifying the data and promise that everything will be kept safe.

This issue can only be seen in certain Worlds, Zones and circumstances, so it will not affect players that are not logged in.

Once we resolve the issue and assure the safety of the situation, alongside the recovery of the game, we will take action towards the outside fraud source and take security countermeasures.

Again, we apologize for the inconvenience that this may have caused.
-------------------
We are not planning to do any sizable data roll backs at this time for this case.
We are basically planning to correspond to the players whose data was affected.

We have obtained information of the route and IP address of the source and we are planning to take legal actions of this fraud.

[Rocl]

Seems like the best place to notify, but servers are up according to the Lodestone. Actually, they went up at 7 Eastern, so i'm slow as fuck here.

Also to assuage any lingering worries: http://na.finalfantasyxiv.com/lodest...44ed6710551152

More Yoshi-P

This is Producer/Director Yoshida.

Please note that we will not be posting more detailed information on this issue as this could potentially assist similar fraudulent activities or attacks. Also, there are several posts in this thread and some users could get lost in the text, so we’ve put together a basic explanation on the emergency shutdown below.

Current Status

No. of affected cases: Approximately 200
Prerequisite: Those who were logged in.
Affected Locations: Parts of certain worlds only
Affected Area: Only portions of zones players were in
Only affected those who possessed more than several hundred thousand gil (Excluding gil deposited with retainers)

Only those who fulfill these conditions and have been targeted by fraudulent third parties have been affected.

Review policy: No large-scale roll backs/Each case will be individually addressed by the operations team.


Details on the Emergency World Shutdown

This current emergency maintenance seems to have been confused with the other recent scheduled maintenances. Please accept our apologies for the confusion this may have caused.

Immediately after the escalation of this incident reached me, the operations team proceeded to announce the shutdown procedure as a ‘scheduled emergency maintenance”.

This was going to notify players of the shutdown in advance. However, as this was an external attack, and so much more urgent, we decided that a world shutdown notification in this case could have actually increased the frequency of third party attacks and initiated an emergency world shutdown.

As this is an urgent matter, we will post further announcements on this thread and on the NEWS, and we have prepared an emergency flow. Thank you for your patience and understanding.

[Chamaan]

The game's entire security structure was built around an Honor System approach.

[Yugl]

Closed until someone has new relevant information (PM an admin or moderator). You fuckers get way off topic whenever you start making comparisons to XI. Stop that shit.