RMT HIJACKER NAMING SCHEME FOUND!! (SE please notice)

[Distortion]

It's interesting that "dongbei" translates to North-East...

Jeuno, relative to the 3 starting cities, is North-East. Could this mean that they have a "North-West" mule in San d'Oria, a "South-West" mule in Bastok, and a "South-East" mule in Windurst on each server as well?

I'm not at home at the moment to have a look, but does doing /sea all Odi (while on Odin server, of course... but you could try it on any server with the first three letter of the server's name ("fai" for Fairy, "lev" for Leviathan, etc (lolbrackets))) bring up any results to confirm this?

Of course, there are other AH's as well, but these are the 4 easiest locations to reach the AH's at with a level 1 mule.



EDIT: I don't really know where I'm going with this, btw. I guess it's just in the hope of finding more names to report.

[Myrrial]

I fully understand that the GM and Task Force are completely seperate branches. I maintain my stance that anyone on SE's payroll who is aware of this in either branch is a step in the correct direction.

If the GM offices at SE are anything like they are for other companies than GMs talk and word of the day's more amusing/strange/interesting issues does travel. I don't intend to continually spam GM reports on the matter; but I don't think that letting them know really hurts anything. We all know how short GM conversations generally are. And considering that at other companies the average GM call amounts to "Can I has some money?" or "How do I mine for fish?" I don't really feel like I wasted anyone's time today.

Edit: Distortion; I appreciate it all the same. I agree that "dongbei" does imply some interesting things. And at least on Odin there are "Odis" at the Bastok and Sandy AHs that I've monitored. I've seen nothing in Windy yet; but I've been kinda busy with Sea and things since all of this came up. I'm not keeping a constant watch by any means.

[Dreampainter]

To my shock and great displeasure there is a caidongbei on caitsith. Thanks for the lead Myrrial, I will report as soon as i get home tonight as well as make a GM call to make sure i'm doing everything I can to report them. I worked for 5 months freelance with a company running an MMO as well (company and game shall remain unnamed for privacy), but I remember seeing the small room with people who were supposed to handle the "GM calls" and they were completely not taking it seriously at all other than offering the same 3 tired responses they are trained to give.

[altwight]

This weird encounter happen to me on the 31st of may as well...

[00:59:13]Dddrag>> hey
[00:59:19]>>me : hi>?

[00:59:27]Dddrag>> shall we trade?
[00:59:39]>>me : im sorry trade what
[00:59:55]Dddrag>> gil?
[01:00:07]>>me : I don't understand?
[01:01:26]Dddrag>> the rest 2000k .i will give u
[01:01:40]Dddrag>> do u want to have now?
[01:01:45]>>me : Grow up kid.
[01:02:41]Dddrag>> ...........
[01:03:30]Dddrag>> ..........
[01:03:31]>>me : You better hope that's on a totally different account with absolutely no linked information to your main

[01:03:35]Dddrag>> shall we trade?
[01:06:14]Dddrag>> thx for that ,..


I figured it was some fuck from these forums trying to get me banned/suspended for RMT activities by making a mule and accusing me of buying gil. Probably was but thought it was interesting that it happened on the 31st as you stated the other mules did.

[Myrrial]

I appreciate your support. When you send your report to the Task Force make sure you list Caichangmao as well as Caidongbei. These two appear to be working together across most (if not all) servers. This goes to anyone else to fills out a report for their respective servers.

[altwight]

if you ffxiah "first3serverletter"chang ex; ragchang you get the same thing as before with your Caichangmao Ragchangmao Ragdongw/e Caidongw/e that's a neat find.

[RKenshin]

@altwight

I've seen conversations that looked exactly like that, where an RMT gave the wrong person money. Mixed up the names and traded the wrong guy, then later tries to get it back saying how he's going to lose his job. It was all legit though.

[arshesney]

http://www.ffxiah.com/player.php?id=1255090 Valdongbai
http://www.ffxiah.com/player.php?id=1256148 Valchang

There was one on Valefor also... but active for only 2 days from AH history, checked a "/sea all val"
returned nothing at this time.

edit: second name

[Dragir]

"/sea all Fai" on the Fairy server turns up a Faiwaraa and a Faiwarcc with like suspicious Auction House histories at FFXIAH.com.
A search of "Fai" on FFXIAH.com itself turns up a loooooooooooooooooong list of what were almost all likely to be RMT accounts, past and present.

[Natallon]

ugh they are on shiva too

[Khrno]

Last 22 items sold by Cerdongbei in Cerberus include 4 HQ staves, Enfeeb Torque, Serket Ring, Hedgehog Bomb, Hellfire +1 and some other mage, bard and ninja items.

Recently some well known taru with top gear has been hacked, might have been this the mule selling his items? (Even tho if it weren't from that person I'm talking about, but the person that got all those items lost had a very good char it seemed.)

[donnie]

might wanna add those 3 names :

1- Odinchangmao
2- Odinob
3- Odishubian

[Mizango]

Awesome find, sorry to hear about your account. That's really fucked up, they are seemingly everywhere. Thanks for sharing for sure, in the rare instance the STF gets back to you in any regards let me or anyone else know if there is something more specifically we can do to help. They may try to isolate it strictly to your server seeing as how you would know about it first hand.

It's a shot in the dark but its better than no shot.

[MaachaQ]

It's on Ramuh as well:

http://www.ffxiah.com/player.php?id=1255109 Ramdonbei (anyone know a Hume Bard who's been hacked?)

http://www.ffxiah.com/player.php?id=1252872 Rambaihe (this one's got all high lvl THF gears in history plus a couple HQ staves)

http://www.ffxiah.com/player.php?id=1256636 Ramshuibian (Female WHM gears from the look of this one)

Not just the Ram(chineseword) names, here's another for sure:

http://www.ffxiah.com/player.php?id=1245854 Rambmzh (more misc high priced gears)

http://www.ffxiah.com/player.php?id=1174662 Ramccv (Shihei craftbot)

http://www.ffxiah.com/player.php?id=1062084 Ramcdma (Bomblets anyone?)

http://www.ffxiah.com/player.php?id=1256825 Ramtkhj (misc high lvl gears)

http://www.ffxiah.com/player.php?id=1261110 Ramwaraa (lots of HQ mage stuff)

http://www.ffxiah.com/player.php?id=1245917 Ramxynx (lots of stuff, also has a longer history than most)

Judging from the histories on many of these, several have been banhammered already, but it also proves that one or more companies has been at the (servername)(etc) rmt mule name for a long time.

[AOPWarrior]

On Diabolos server aswell.

Diadongbei http://www.ffxiah.com/player.php?id=1255060

Diachangmao http://www.ffxiah.com/player.php?id=1255997

[lovehatehero]

They are also on titan as well http://www.ffxiah.com/player_search....3&search_q=tit

As a recent player to be hacked this needs to be adressed and fixed....still looking through the one on titan and fenrir( the server my char was moved to) to see which one has sold most of my gear...still waiting on well from SE about getting gaem rollback >.>

[evilpaul]

You Odin people are just paranoid. They ran out of names, so they started putting 'Odi' in front of them is all.

[Atsumi]

Found some on Unicorn too:

Unichangmao
http://www.ffxiah.com/player.php?id=1255991

Unijian
http://www.ffxiah.com/player.php?id=1139458

Unikka
http://www.ffxiah.com/player.php?id=1202542

Unilpp
http://www.ffxiah.com/player.php?id=1258520

Unimme
http://www.ffxiah.com/player.php?id=1202497

Uniosmile
http://www.ffxiah.com/player.php?id=1154030


The list got truncated, but thats a pretty good subset. You can also tell what type of character got jacked based on the AH history of those characters. Most of them have occured in the last 5 days.

Also missing, is all the fishbot/mining accounts, about half of the rest beginning with "Uni" looked like those.

[Ashira]

So now our RMT have to be more original in coming up with names?

At least we're finding something, that is definitely a good start. Stickying with big markers and retitling with CAPS LOCK in hopes that our SE reps notice.

Also, everyone fill out STFU reports, with all this info; and link to this thread as well. It's the only way to get things pushed forward more quickly, and maybe each weekly banning swipe will knock a few more out.


Also, let's keep the bitching at each other to a minimum so SE doesn't ignore this thread. Myrri, to be fair, dealing with the RMT issues isn't the GM's jobs. I'm sure he made his report for you, but I'm pretty sure that after the STFU was established, they basically told GMs to start spouting the response you got. Having worked on call center customer service and such myself, there are certain procedures you are told to follow in particular situations; and yes, people got angry if I couldn't make things immediate for them, but there are protocols people have to follow.

This is definitely a good start, let's hope anything found in the future is found as well, and hopefully more quickly... esp if our RMT continue to be so clueless as to have to name accounts in a particular similar pattern to keep things organized.

[Kailee]

There's also

Asuaragal, Alexgal, Bahamutgal, Bismarckgal, Caitsithgal, Carbunclegal , Diabolosgal , Fairygal, Fenrirgal, Garudagal, Gilgameshgal, Hadegal, Ifritgal, Kujatagal , Lakshmigal, Leviathangal, Midgardsgal, Odingal, Pandemogal, Quetzgal, Ragnarokgal, Remoragal, Ramuhgal, Seraphgal, Sirengal, Sylphgal, Titangal, Unicorngal, Valeforgal,

who are buying and selling the same things across all servers with makes it really suspicious.