Account stolen last night at 2:53 AM EST

[Pyree]

So it seems as though IE and Firefox are both vulnerable, but I've heard no reports of Opera. Personally, I haven't had anything strange happen on Opera, and I'm not infected, but I'm curious if anyone else that uses Opera has.

[Jerseyprophet]

In the chance a SE employee is reading this (specifically a GM who maybe, just fucking maybe, cares about their players and not just a paycheck for spouting out hand book lines):



Does SE, who had a F Rating on the BBB if I recall, realize that the player base they have is the remaining die hards that pay their bills after the rest migrated to WoW and other MMOs, or simply quit altogether? They need to rethink this silly bullshit.

They know damn well that this girl, a victim of fraud, is the original owner, and their policies are testiment to their overall attitude - which is; "fuck the players. We'll do what we want, you'll like it." Way to bury your heads in the sand, yet again, SE. Your players are blatently SHOWING you what you NEED to change to keep what dwindling numbers you have left.

Im sorry. I loved FFXI, the time I spent in Vana'diel and my friends in it deeply. But the reason I gave it up is the reason she can't get her account back. Their blatent ignoring of players requests.


I wish you the best. I sincerely hope it works out for you - and all players who've repeatedly had this happen to them. And I also hope SE wakes up.

[pinkie]

I think I am going to hook up my 360 and play on that until this is all resolved soo afraid to log on my pc. I have 3 accounts all have pretty lvled characters. My gear is mostly rare /ex but still.. kinda creeps me out.

[Spekkio]

I think I am going to hook up my 360 and play on that until this is all resolved soo afraid to log on my pc. I have 3 accounts all have pretty lvled characters. My gear is mostly rare /ex but still.. kinda creeps me out.

wouldn't matter. an RMT can flip a naked account w/ a couple of 75's for a significant sum alone.

this actually brings up an interesting question i was wondering. i don't frequent RMT sites. i don't know what the market rate for any of this stuff would be, but this interests me. what is an average "heist" worth? what would a 100 crafter be worth? a 75 job? a relic? what about other stuff? what's an average account worth? 500 dollars? 800? 1,000? what's a high end account worth? 10,000?

virtual worlds are picking up in their presence and value. FFXI, second life, WoW, and many others have a thriving, albeit often underground, market for in-game items and currency, estimated to be larger than the actual monthly fees associated with the game. (can't find reference offhand) the economy is so strong that the US government is contemplating (although i'm sure this will crash and burn) attempting to levy a tax on virtual transactions involving real world currency. (reference 1)

use of keyloggers and other malware to steal credit card numbers and bank account logins are a well known threat. a great deal of effort is put into securing them from harm, and yet game accounts see little to no such protection. this is madness when "there is more store value on their MMO characters than there is on the credit card with which they pay for the account." (reference 2) despite the obvious nature of this fact to the majority of us within the community, many MMORPG providers fail to realize the value of digital goods, offering less recourse for recovering your account than if you had your wallet stolen. no effort whatsoever is made to assist the customer, treating them instead as less valuable than the criminal who has stolen their account.

merely because these items have no physical presence does not mean they lack value. this point has been upheld time and time again by the millions of dollars RMT trafficking sites draw in annually and yet the environment fails to react to the increasing threat of theft as a means to acquire material. as financial institutions and credit card companies further secure their electronic transactions, MMORPG accounts will increasingly become the low hanging fruit. if no action is taken to stem this trend, these few dozen accounts that have been stolen will only be the tip of the iceberg as the value and sophistication of attacks increase in the future.



1:http://games.slashdot.org/article.pl.../10/16/1747235
2:http://it.slashdot.org/article.pl?sid=06/08/15/139206

[Ryko]

what's an average account worth? 500 dollars? 800? 1,000? what's a high end account worth? 10,000?

Maybe 2 years ago, I can't imagine an average account sells for more than 150-300 tops, with a high high high end account floating around the high 2 thousand mark. In may 2006 someone offered me 5k USD for my account and it was nowhere where it is now

[Wallslide]

Call me ignorant.

But in order to copy/paste for a text file you would need to type your password there in the first place.
Correct?

Also. I wasn't aware that copy/paste made any difference with a key logger. I understand that it records what keys you press. But can it not see text that is copy/pasted?

All this crap worries me.
Considering my friend who i was helping pay for his account. Had it stolen shortly after he signed up for Linkshell community beta website. (good fucking job SE)
Once we found the account online we confronted this person who stated they bought it from IGE. So we called a GM because 10mo ago there still existed "stolen account investigation".
Now they just refer you to internet crimes.

The problem was bad enough that they had a whole setup for stolen accounts. And its gotten so much worst that they refer you to internet crimes lol.

So now my account is banned. And i can not play because i helped my friend pay for his account and they banned it after being stolen.. GG LINKED CREDIT CARDS.

[Naramaska]

Call me ignorant.

But in order to copy/paste for a text file you would need to type your password there in the first place.
Correct?

Also. I wasn't aware that copy/paste made any difference with a key logger. I understand that it records what keys you press. But can it not see text that is copy/pasted?

If the systems of these players were compromised somehow, it appears to be a vector that attacks specifically FFXI--most "hackers" wouldn't really give two shits about the account for an MMO. In this case, it's been shown there is a .BIN file in the FFXI directory which, if you store your password instead of entering it each time, can simply be snatched up by an RMT and will yield your account info.

While a keylogger would indeed see you copy/pasting text, it can't distinguish one copy/paste from another...although if you have a keylogger on your system in the first place, they've probably compromised your computer with a lot of other shit too, so you're really screwed either way.

[Sepuku]

check your system with Spybot Search and Destroy.
If you are really experienced with PC i recommend hijackthis.exe

For unexperienced pc users i recommend the 30 day trial version of kaspersky labs

http://www.kaspersky.com/

Google will help you find these.

Firefox with the newest updates is popup safe.

For the time being i still suggest not using ffxi AH and linkshell community.
And pray to god that the lazy SE admins find a safer way to protect our game access data.

Enjoy ffxi

[pinkie]

Whats a link to spybot?

[nekura]

Whats a link to spybot?

Here you go.

Also Pyree, I use Opera 9.23 and haven't been infected with anything either. I'm so so sorry for the people this has happened to though, I hope SE gets their act together and straightens everything out for you. :(

[Xrave]

I've gotten that ActiveX control popup on ffxiah.com

However if you have IE7, the default settings will block the installation (or at least prompt you to install) unless you ahve it set to automatically install all ActiveX scripts....which if you do have your browser setup like that you deserve to get your shit stolen.

[ronin sparthos]

which if you do have your browser setup like that you deserve to get your shit stolen.

Shit like this helps no one.

[Izzy]

which if you do have your browser setup like that you deserve to get your shit stolen.

Shit like this helps no one.

He's right though. If you're dumb enough to allow all activex controls to run unchecked, you're asking to have MUCH MORE than your FFXI account stolen.

[Mikayla]

My friend's account was stolen as I was on the account... Although I'm going to make sure she doesn't tell SE that when she calls. x.x I was logged on it last night/early this morning, and all of a sudden I got booted and it said someone else logged on. I was in the middle of besieged, and my Xbox froze (I was on Xbox, friend's account on PC), so I didn't pay much attention to it at first. By the time I said to reconnect, they had already channged the password. -.- Haven't seen her logged on since that time. But if anyone sees Foxfire logged on on Caitsith, let me know. >.< She can't log herself on because her PS2 is having issues...

Yay! She called SE and they reset her password, looks like they started to move her to send things but realized she had nothing worth taking, lol. So one account's been saved, haha.

[aceofspades]

survey up on playonline .com now about gm policies and information center policies

[Xrave]

Yay! She called SE and they reset her password, looks like they started to move her to send things but realized she had nothing worth taking, lol. So one account's been saved, haha.

What did they do to convince SE to reset the password?

[Jeny]

which if you do have your browser setup like that you deserve to get your shit stolen.

This thread was created to help people solve an issue, not make them feel worse than they already do with that kind of attitude.

Nobody here deserves to get their "shit" stolen.

All I ask is if you could atleast be a bit more considerate of your wording.

[Izzy]

Ronin, did she have her password saved in her POL so she doesn't have to type it every time, or did she type it every time she wanted to login?

I've asked like 20 times Q_Q.

[Sepuku]

which if you do have your browser setup like that you deserve to get your shit stolen.

This thread was created to help people solve an issue, not make them feel worse than they already do with that kind of attitude.

Nobody here deserves to get their "shit" stolen.

All I ask is if you could atleast be a bit more considerate of your wording.

agreed

Additionally i am willing to help people on my Server.
If you have lost your stuff and need to redo quests and other painfull things.
Send me a message ingame, i ll help you camp or kill stuff and get the needed drops.

[ronin sparthos]

Im pretty sure she had her password saved