RMT HIJACKER NAMING SCHEME FOUND!! (SE please notice)

[Myrrial]

For starters; I'm quoting directly out of my most recent LJ entry as it gives enough background information to be a coherant opener.

One of our members got his account frozen mid-jack and when he got it back there was a Gil delivery caught in mid-transaction to an "Odidongbei" which is clearly an RMT account meant to fence stolen goods. A quick /sea all Odi revealed several players who use "Odi[insert-rest-of-name-here]". Nearly ALL of these accounts were /anon and in zones with Auction Houses. I went and tracked a couple of them down. Each one had no gear equipped whatsoever and had a number in their little boxes that pop up when you examine them.

Taking the "Odi" name to FFXIAH.com revealed that there were TONS of "Odi" mules in existance. Going a step further, others in my LS report that other servers have similiar mules that begin with the first three letters of any given server's name.

REPORT THESE PLAYERS. When asked why you're reporting them; cite their AH history. Most of these accounts literally never leave town and yet you can plainly see them selling Haguns and other very common, expensive items that they have stolen from real players like you and me. A great many of them are still level n00b with no subjob. The fact that they're carrying and transferring millions of gil should throw up all kinds of red flags if we push for an investigation on these accounts.

I haven't asked for permission to report the names of the stolen account (we had two jacked in my endgame shell) so I'll keep from throwing names around without having been given the okay. Unfortunately my ability to look into this is limited to just Odin; but I would love to see if there are indeed other mules doing the same things on other servers. Find them! Find them and help call enough attention to these bastards to help the Special Task Force get its eye on them. Sure they'll just crop up again under different names; but damnit. These victimized players deserve some form of revenge. We need another wave of mass bannings pronto.

I have no idea if this is really appropriate for the Advanced Players boards; but it seemed like the kind of thing that would be better off being shared on a wider scale somehow. I do hope this helps at least somewhat. Thanks for taking the time to read this.

[Raen Ryong]

http://www.ffxiah.com/player.php?id=1255880&sid=1

Bahamut's version of your Odidongbei, Bahdongbei. Likely to be on all other servers.

Doing a /sea all Bah gave me 0 results... I'd like to be optimistic and say the STFU are getting to the root of this problem in a timely manner but I'm not sure.

[Sakuraryong]

Just read my brother's post.
Checked Unicorn but found nothing since I was on Unicorn till I switched back this week.
Maybe different names or transfers the account to a certain server?
I know Sydelle from Cetra was hacked and moved to Ragnarok recently.

But yeah, if you see ---dongbei on best thing to do is report.

[Raji]

http://www.ffxiah.com/player.php?id=1255030
and Levdongbei (and a search for "Lev" revealed a good number of other gibberish names too, and my search ended up getting truncated)

These fuckers are practically walking around with huge signs that says "HAY GUYZ IM IN UR ACCOUNT STEALING UR GILZ!" and yet, for some reason, the STFU just can't find them for anything....

[Spira]

you're on to something for sure.. this is a good lead which could help remove this RMT seed from the game across all servers...

did a search on Ragnarok's ffxiah and theres a Ragdongbei as well. I'm guessing they have a mule on every server using the first 3 letters of the server name + dongbei..

may not be relevant, but dong bei means north-east in chinese...
dong = east
bei = north

if you're curious to know, or if it helps
xi = west
nan = south

edit: i did a simple search on a bunch of servers the first 3 letters of the server name and glanced thru for suspect names (those with chinese hanyu) and then checked their transaction histories...

you can add the following to the list.. these terms mean stuff in chinese..

baihe
baole
changmao
humao

not saying they all are RMT, but they are highly suspect... no harm reporting them as well if u see them

[Myrrial]

The fact that so many "dongbei" accounts exist makes me worry. I wonder if this is just an odd coincidence and that the "Odi"s are an unrelated group to the "dongbei"s or if they're all working together.

[Elipse]

report them for what they are right to the task force. saying they are level one selling big things means nothing. never sold millions worth of stuff on a mule? it happens all the time. just say they are the mules selling stolen items from hacked accounts.

[Myrrial]

That is a fair point that folks use bank mules and things to sell big-money items. The sheer volume of crap sold by these particular ones is pretty overwhelming; but I do agree that Elipse has the correct sentiment.

I do think its a fair counter-point that the average player's AH or LS's bank mules aren't named OdiGibberish or OdiChineseword though.

[Vucian]

looks like theres three main accounts on all servers selling stolen goods the dongbei, the changmao (looks like it could be someones mule selling one players account, so i cross referenced it with other servers: http://www.ffxiah.com/player.php?id=1256625 and http://www.ffxiah.com/player.php?id=1255950&sid=22) cerb mantle+1 for a mil x.x

and baihe.

[Epical]

Bahamut's versions...

http://www.ffxiah.com/player.php?id=1256009&sid=22
http://www.ffxiah.com/player.php?id=1253814&sid=22
http://www.ffxiah.com/player.php?id=1255880

How do we do something about them?

EDIT: Actually, a character exists for every server in that group of RMT. First three letters of the server name + "changmao" or whatever the suffix is (ex. Kujata = Kujchangmao).

[Titanss]

o-me-o-my what happened to the days of rmt wiping to LoO

[Myrrial]

http://i278.photobucket.com/albums/k...al/Subina1.jpg

http://i278.photobucket.com/albums/k...al/Subina2.jpg

http://i278.photobucket.com/albums/k...al/Subina3.jpg

My GM apparently wasn't paying enough attention to figure out quite what was going on here. I hope someone else can have better luck than me.

[Vucian]

gms probably wont do anything at all for this matter, probably best to just report to the STF in complete detail of what they're doing. but as for the gms this reminds me of when somepage was first hacked and someone was talking to luminous with all the info AND the coding from the iframe on somepage.. and the gm still said that said player didnt know what he was talking about, and he could guarantee it wasn't somepage causing the hackings.

[Myrrial]

It frustrates me because I have little reason to believe that the Task Force will take my calls seriously if the GMs don't. I mean---it is the Task Force's JOB to take care of these matters. I sincerely hope they'd be willing to listen. It kind of saddens me that they get paid to police this kind of stuff and yet the GM branch isn't willing to help share information to the Task Force.

[Jeny]

http://i278.photobucket.com/albums/k...al/Subina1.jpg

http://i278.photobucket.com/albums/k...al/Subina2.jpg

http://i278.photobucket.com/albums/k...al/Subina3.jpg

My GM apparently wasn't paying enough attention to figure out quite what was going on here. I hope someone else can have better luck than me.

Ah...GM Subina... world's second most useless GM on FFXI.

[Shuemue]

What the fuck is your problem? They told you the appropriate place to make a full report and even said they'd do it for you.

[Myrrial]

How dare I want help from someone in a customer service position.

Edit: I really want to be more clear. I've made my report and sent it. This is the extent of what I am capable of doing. The GM also said that they would put out their report on Odindongbei. They also ignored and dismissed everything that I said about the other Dongbeis in existence. I do not believe that this is right.

I hesitated to make this initial post because I knew that someone was going to get pissed off and that the whole thing would likely dissolve into a giant flame war by Page Two for some reason or another. Thank you so much for casting the first stone.

[Shuemue]

You cast the first stone by being critical of somebody who did their job.

[Myrrial]

Are your other 4400 and some odd posts as warm and fuzzy?

I'm trying to help get information about people who are potentially harmful to the entire playerbase out there for SE's Task Force to see. The GM helped in some degree with that, yes. But I do sincerely wish that they'd have said that they could place more than just Odidongbei on that report list. It isn't exactly difficult to find all of his clones.

But I'm an asshole. Look; the other posters are coming in and helping find these various RMT accounts. What did you add? Anger and hatred? Do you understand why I'm not in the best of moods?

You know, I have my hands in the MMO industry more than most folks that I'm aware of. Not with SE, obviously, but with Sigil, Mythic, and Flying Labs. I know how this sort of crap functions. I know how GMing goes. I don't think that wanting a tad bit more help from them is such a crime, with all due respect.

[RKenshin]

GMs != Special Task Force.

Unless you have some idiot running around shouting that they're RMT, a GM will almost never do anything at all. Quite simply, it's not their job to investigate these issues thoroughly and make those kinds of decisions, and there isn't anything they can really do about it.

If you want to get stuff done, write a comprehensive and well-written report to the special task force. It actually is their job to handle this stuff. Calling GMs and being surprised when they don't do anything gets nothing done.

Anytime I have trouble with RMT I just write them in a report, and within the next 1-2 bans they're usually gone like 90% of the time. I'm sure if people sent in stuff about this new discovery offering all the proof and reason we have available within the knowledge of this post, we could expect the same results.