BGForm Database is hacked or Admins are trying to steal accounts

[BobbyGunz99]

Hello i have had my account BG form account reinstated recently (my character name is the same as my account name on bg forms. )

The day i had my account enabled some one tried to log into my account in final fantasy 14. they where unable to figure out my password, luckly i use a different password for the forms as the game.


i spoke with Sonomaa [[email protected]] at customer support that i was using my wrong login, and he helped me login.

there is a documentary on RMT and the most effective way people steal accounts is through gaming websites.


So im sure Either one of the Admins ( Sonomaa or some one else that has access to the database ) of the forms are trying to steal accounts or a 3rd party is using SQL injecting to select username and password fields.


please guys make your password very difficult to figure out and never use the same one on the forms as the game you play.

[Grieverbk]

this is lols.

[Rocl]

return of the taj

[solracht]

there is a documentary on RMT and the most effective way people steal accounts is through gaming websites.

i think i saw this movie once

is it the one where the chinese kid dies at the end

[Vuitton]

http://img.gawkerassets.com/img/193i...f/original.gif

[Callisto]

Cat's out of the bag, Sono's been selling me peoples' account info since 2009

[Pharaun]

Rofl

[The Blackrose]

So you're telling me that your SE Account username is BobbyGunz99?

Psst: This guy is full of shit.

[shepardG]

Raging so hard right now @ "forms". Can we get a section name change. Garuda's "Howing" eye all over again

[SephYuyX]

Reading this thread, and looking at

http://img.gawkerassets.com/img/193i...f/original.gif

Made me lolirl

[Callisto]

This isn't even my final BGForm

[BobbyGunz99]

So you're telling me that your SE Account username is BobbyGunz99?

Psst: This guy is full of shit.

yes and i just installed 1 time password. now im paranoid

[Callisto]

lol I thought I remembered something: http://www.bluegartr.com/threads/620...=1#post2167633

[BobbyGunz99]

lol I thought I remembered something: http://www.bluegartr.com/threads/620...=1#post2167633

its no secret, just search for bobbygunz there is better reading about me then that one.



Fact remains what happened with the account.

[The Stig]

Strange. does the SE ID system even tell you if someone attempted (and failed) to login to your account? I wasn't aware that it was that clever.

[Grieverbk]

Strange. does the SE ID system even tell you if someone attempted (and failed) to login to your account? I wasn't aware that it was that clever.

No, the only time you get emails from the account management system is when changes have been made from the management page, or billing has been processed.

[BobbyGunz99]

Strange. does the SE ID system even tell you if someone attempted (and failed) to login to your account? I wasn't aware that it was that clever.

yes it does if some one trys to login at a different IP it says there was suspicious activity and i needed to reset my password.

This happened with in an hour of signing up at the forms im sure they are trying all of our logins.



watch this documentary about RMT at the end he admits the most successful are those that hack gaming websites.

[BobbyGunz99]

No, the only time you get emails from the account management system is when changes have been made from the management page, or billing has been processed.

this happens on the login screen in ff14 there is a message and it wont let you login unless you reset your password through the mogstation

[Deadgye]

No, the only time you get emails from the account management system is when changes have been made from the management page, or billing has been processed.

I've received an email about a follow-up for me contacting customer service for my account, when I never contacted costumer service. I figure my account would have been stolen that day if I didn't use a security token.

[Grieverbk]

Obvious troll, but no.
I've logged into XIV from at least 7 different IPs in the past 2 weeks, not once was it flagged and there was no notification of "Suspicious Activity"

If anything, you submitted yourself to a phishing scam when you visited the link in your email. Congratulations.