Xbl hacked?

[Kaylia]

Well, my bank don't even use security questions (thank god) because most, if not all websites that use it, have absolutely retarded questions.

I'm fine if you can enter your own secret questions; but the options thye provide are ususally retarded.

Just create a fake name that you can easily remember rather than a string of nonsensical letter that are impossible to remember (unless you write them down somewhere).

What I was trying to say is that getting hacked because your secret question is weak isnt that common unless someone targeted you specifically. Most account thefts are the result of keylogger, and they will happen regardless of your question. Because keyloggers are the common methods, not having a proper secret question that can be used is probably going to cause you more trouble (unless there is credit card involved).

[Dominico]

Still don't understand how people browse the net without NoScript. That thing works better than an antivirus.

[hey]

can always lie and just remember the lie

That. Using a random headbash for it is silly.

[Apelila]

My mother's maiden name has been "gigantocock" for about 8 years now. I look forward to one day being able to deliver the line with a perfectly straight face to see/hear the reaction.

[Qalbert]

brb hacking yo shits

[Apelila]

Well I didn't include the family title, naturally.

[Kaisha]

Find out your pornstar name!

Please provide the following: Your mother's maiden name. Your first pet's name. Your date of birth in the form of letters.

[Uzor]

Hmm, this is strange. I have 3 charges from Xbox Live, too, and I don't even have Xbox Live. Hell; I don't even have an Xbox.

[Kaisha]

Do you have a GamesForWindows Live account? They're one and the same.

[Uzor]

Well, yes. I do. I already filed a police report about it. It's kind of fun, actually, because I got a mail about it from Xbox Live, and went and filed a police report within a minute and also called my bank about it. The money isn't even removed from my account yet, either, since any Internet purchases made from my account (and most accounts in Sweden) get put on a "reserved" status until the end of the week. The lady I talked to said that if I just go to the bank in person tomorrow and file a report I should get the money back fast.

Luckily I barely have any money in my checking account since I transfer it all to my saving account which no card is tied to, and whenever I make a purchase I transfer money from my saving account to my checking account in case something like this ever happens, so no real harm done really. Just slightly annoying since I've never had anything like this happen before - and I do surf with noscript and have an anti-virus. Hell, when I surf for porn I even use a sandbox so any eventual viruses doesn't infect the computer

Now to figure out how it happened. I haven't logged in to my Microsoft account in several months, so it can't be a keylogger, and I use a secure password (and a separate password for every account, so it can't be through my mail). I've also checked the activity on my mail account, and no one but me have logged in to it, either. So I'm kind of stumped.

[6souls]

The days of naively believing your Xbox 360 account was somewhat more secure than any other network are very, very over.

Not too long ago, there were reports of players’ Xbox LIVE accounts being hacked en masse, somehow related to FIFA 12. And while we still get new comments on these stories telling us of new hacks in that way, Microsoft responded to the issue with a healthy bit of denial.

Well, yesterday a post on PC Mag provided evidence of a security compromise that might be kind of tough to explain away. According to the story, a post called “xbox dump” was found on Pastebin.com, a site that plays host to a variety of seemingly illicitly gained information like usernames and passwords. Nearly 100 gamertags, passwords, and e-mail addresses are listed in the posting—and thankfully, mine isn’t up there.

Here’s the listing, so you can check and make sure you’re NOT on there. DISCLAIMER: Machinima does not condone the use of any of the gamertags or passwords on the listing if they are not your own.

It’s not yet known how the information was gotten, and Microsoft has yet to respond to PC Gamer’s inquiries about the compromise.

No matter what, though, it’d probably be a good idea for everyone out there in gamer land to change up your password right about…NOW.

http://www.insidegamingdaily.com/201...posted-online/
http://www.pcmag.com/article2/0,2817...id=KK2K76ZZDJW
http://www.insidegamingdaily.com/201...-of-fifa-love/
http://www.insidegamingdaily.com/201...fifa-12-hacks/

Microsoft responded to our request for comment with the following statement from a spokesperson, which indicates that the company regards the "xbox dump" user information as a minor phishing incident, not a major network breach:

"We do not have any evidence the Xbox Live service has been compromised. We take the security of our service seriously and work on an ongoing basis to improve it against evolving threats. However, we are aware that phishing attackers will occasionally post small lists of victims on public channels, and we will work directly with the impacted members to resolve any unauthorized changes to their accounts. As always, we highly recommend our members follow the Xbox Live Account Security guidance provided at www.xbox.com/security to protect your account."

btw, pastebin linked in the IG article has already been nuked.

[Kaisha]

Someone/a group trying out username & password combinations scratched together from other locations (and possibly the PSN debacle) and other common locations = XBL hacked guize!

[Salodin]

The fact that they could do so with out microsoft going "hmm...this account has attempted to log in a few hundred times in the past hour" and not do something about it is more telling imo.

[Kaisha]

Makes you wonder if it was the same group Sony reported stopping on their end, and I believe Square Enix also on something else.

[hey]

The fact that they could do so with out microsoft going "hmm...this account has attempted to log in a few hundred times in the past hour" and not do something about it is more telling imo.

While i get your point, a few hundred times per hour is nothing to worry about.

[6souls]

http://farm8.staticflickr.com/7022/6...7bcd9279df.jpg

For months now, we’ve received tons of comments on our two posts about the Xbox LIVE FIFA hacking problem, where gamers would discover purchases made on their Xbox LIVE accounts, usually for the game FIFA 2012. Over 250 comments have been posted to the two main stories we posted about the issue, and the comments keep coming.

In fact, one Texas gamer, Susan Taylor, started documenting her experience with her Tumblr account, Hacked On Xbox. There, Taylor describes the crazy hoops she’s had to jump through in order to try and get Microsoft to investigate the hacks that her account has suffered, costing her hundreds of dollars in fraudulent purchases. At one point, a customer service representative said that her account would be blocked, meaning that no more purchases would be possible—except when Taylor found that more purchases had been made, customer service then told her that they couldn’t block her account after all.

Here’s the exchange between her and customer support, as she describes it on her Tumblr page:

“The fraud department was unable to block your account.”

“So why did no one contact me about this? You have my telephone number, you have my email address. You used my email address to tell me that you HAD blocked my account. Just what is going on?”

“They were unable to block your account, I don’t know. Have you tried changing the password online?”

“Yes, but whoever is doing this has changed my password and my security question. I am completely unable to access the account myself. That does not answer my question though. Why have I been told, twice, that my account was blocked, that an investigation had begun, when clearly none of that was true? Why is it you’re allowing someone to successfully steal money from me a second time when you were aware of the issue days ago? What the fuck is going on? I want my money, I need my money. Tell me what you are doing to help me.”

“You need to keep trying to log into your account.”

More issues ensued, and eventually Taylor explained her findings—that people of ill repute were getting her username and information, and selling accounts filled with Microsoft Points via online auctions to other users all across the globe. Eventually, after she made a huge fuss, Microsoft refunded Taylor the money, but the damage has been done.

Taylor’s main beef with Microsoft is the labyrinthine systems they use to handle customer fraud reports, and the overall lack of knowledge and helpfulness that the customer service employees seem to display.

It’s a rough story, and a compelling read, so you should check out her Tumblr and read the whole thing for yourself.

One of the most troubling aspects of this story, though, is the fact that it’s apparent that Taylor isn’t alone in getting her account hacked—the comments on our stories continue to trickle in every few days, and this is only on one gaming site. It seems that the problem is even more widespread than it looks. I’m thankful that my account remains safe, but I check my points and purchases pretty regularly…I’m kind of afraid that it’s just a matter of time…

http://www.insidegamingdaily.com/201...tion-problems/
http://www.insidegamingdaily.com/201...-of-fifa-love/
http://www.insidegamingdaily.com/201...fifa-12-hacks/
http://hackedonxbox.tumblr.com/
http://ingame.msnbc.msn.com/_news/20...service-hassle

[jmc]

Yea, I got hacked friday night as well.

4000 points towards fifa 2012, before I was able to change my password on my account.

Not looking forward to calling M$ in the morning.

[Ragnus]

So do you have to have played FIFA for this to happen or is this people hacking everyone?

[TacoTaru]

Happening to everyone.

[hey]

So do you have to have played FIFA for this to happen or is this people hacking everyone?

Anyone with an easily brute forced password.