RMT HIJACKER NAMING SCHEME FOUND!! (SE please notice)

[Ashira]

Ah, actually, think we can get Pikko and 6souls to sticky notices on Alla and KI?

The more people that read this, and the more people that report, the faster it's taken care of.

[Tajin]

I could swear there was a phenomenon like this not too long ago, ye olde shit, but its nice if the reports and the STFU can do something about it.

[wyred]

By the way, "Odi" is a legitimate JP player on Odin.

[Aselin]

Ah, actually, think we can get Pikko and 6souls to sticky notices on Alla and KI?

The more people that read this, and the more people that report, the faster it's taken care of.

I'm one of the Admins as well for KI. I could sticky a notice on there. I'd like this information to get out to everyone as much as possible. I'll make a post soon on KI or sticky Myrrial's post.

[Myrrial]

Interesting; I'll be sure to include them in my next message to the task force and advise everyone else to do the same.

As for the GM thing; my logic at the time was that the Task Force is much more likely to respond quickly to a report filed by a GM than to read one sent via email from some random player.

I do agree that since the creation of the Task Force; the GMs are much less "the police" and that they're certainly allowed to throw canned responses. There was a particular alliance of BLMs with gibberish names farming Boyahda Tree ages back that I GM called on twice. The first gave me a bunch of canned responses and dismissed me; citing that the players were not actually breaking the ToS and ignored me before giving me a chance to explain my case. Irritated, I filed a second report.

The second GM I got into contact with went to The Boyahda Tree and observed them after listening to my explanation of their strange AH histories and the fact that every single BLM there was from the same nation, Rank 1, Tarutaru, had the same underleveled sub at the same level.

Now the second GM actually flat out told me that I should absolutely report suspicious activity to them and the Task Force both. He also declared that they would open an investigation on the accounts in question on his own accord without me having to press the issue. He was enthusiastic, helpful, and genuinely interested in what I had to say and why I suspected the things that I did. The next mass banning saw those accounts wiped off the face of Odin; so I suspect that the investigation occured and turned up bad things on those BLMs.

Mileage is going to vary depending on which GM you get.

To Wyred: I've noticed at least two "Odi" players who seem legit. One is "Odindavid" who I tracked a bit today who's name just seems to be an unfortunate coincidence that he shows up on a /sea all Odi. As for Odindavid, he went and killed a Prime Avatar or two and seemed to have a much more regular movement pattern while I was watching him. There was another one that seemed okay but the name escapes me.

I completely believe in the Task Force's ability to figure out who is screwing around with massive sums of gil and who isn't.

Edit: Whoa, topic jumped while I was typing that up. I want to say thank you to everyone who is helping to spread the word and getting things stickied and helping seek out other suspicious accounts to add to the list. I'm really pleased to see that we may just be able to get these buggers back for what they've done to our game and our friends.

[Ashira]

The second GM I got into contact with went to The Boyahda Tree and observed them after listening to my explanation of their strange AH histories and the fact that every single BLM there was from the same nation, Rank 1, Tarutaru, had the same underleveled sub at the same level.

Now the second GM actually flat out told me that I should absolutely report suspicious activity to them and the Task Force both. He also declared that they would open an investigation on the accounts in question on his own accord without me having to press the issue. He was enthusiastic, helpful, and genuinely interested in what I had to say and why I suspected the things that I did. The next mass banning saw those accounts wiped off the face of Odin; so I suspect that the investigation occured and turned up bad things on those BLMs.

It could very well too, have something to do with how many reports each GM had waiting in their queue; never know what motivates some to work the way they do. Some just do what they can to get through as many calls as possible, prolly looks better at the end of the day; others probably go for hitting a balance and trying to actually get good feedback from players.

Someone said the one.. Subine or whatever, is pretty known for not being terribly helpful; maybe he's just tired of dealing with calls like this, I'm sure there are a lot of bullshit ones all the time these GMs deal with, with people trying to get people in trouble for 'botting' and whatnot.

/shrug

Just keep calling back, like you did, is the best you can really do, and hope to get someone who will actually get more info.

[jini]

I haven't been on this server long, but I'm sad to see these things regardless...

(List truncated...a search for "Rem" on FFXIAH/Remora yields a lot of accounts selling rusty items, ninjutsu scrolls, so those are probably poor legitimate folks, but who knows.)

Rembaihe
http://www.ffxiah.com/player.php?id=1253096
V.cloak, HQ staves, etc

Remchangmao
http://www.ffxiah.com/player.php?id=1256057
Lots of D.ingots, Hauberk, Haubergeon +1

Remdongbei
http://www.ffxiah.com/player.php?id=1255075
Least valuable of the items I've seen, but maybe its the last of some poor sap's account

Remwarcc
http://www.ffxiah.com/player.php?id=1261061&ig=1
More V.cloaks, HQ staves, P.ropes, etc~

Remmme
http://www.ffxiah.com/player.php?id=1258729&ig=1
HQ staves and assorted items

Other assorted names with a very recent history of valuable items:
(I am in no way accusing these people/players of RMT, only that their recent AH histories are suspect.)
Remshubian, Xiaoniu, Benxiong, Remhongking, Sxuxu, Delasu, Cacb, Smim, Eyenia, Rukia, Xinyi, Yunsisi, Aleyt, Ezgi, Myagi, Dsafon, and on and on it goes into forever...

[Francisco II]

http://www.ffxiah.com/player.php?id=538760 - miner (banned?)

http://www.ffxiah.com/player.php?id=605098 - quest / pos-hacker (banned?)

http://www.ffxiah.com/player.php?id=762277 - quest / pos-hacker (banned?)

http://www.ffxiah.com/player.php?id=787089 - looked to be getting ready for a Norg run (banned?)

http://www.ffxiah.com/player.php?id=1229838 - Mount Zhayolm miner (ACTIVE)

http://www.ffxiah.com/player.php?id=873375 - fisher (banned?)

http://www.ffxiah.com/player.php?id=1147191 - SOLD SEVEN LU SHANG RODS?? WTF?

http://www.ffxiah.com/player.php?id=1256195 - account thief (ACTIVE)

...it goes on like this....

[randomized]

anyone can explain this? lol

http://www.ffxiah.com/player.php?id=1152086

[Francisco II]

Best I can guess is they are duping items?

[Vucian]

i'm not on that server so i'm not sure if any of those players are legit or not, but from the buyers ffxiah history they all sell tons of fish, sushi, ninja tools, and lower level gear (possibly this is what they do with the less expensive gear that we never see listed in any of the changmao, baihe or dongbei sales histories?) i'm gonna assume its one rod being resold through rmt mules... but then again the price fluctuation is kind of misleading.

edited for some clarity.

[Papillion]

Phochangmao and Phobaihe are both on Phoenix with nothing but high priced items on AH.

Also a ton of other Phojibbrish names that may or may not also be RMT. Good find on these links. I applaud your efforts, keep up the good work.

[Spekkio]

http://www.ffxiah.com/player.php?id=1259967
suspicious kujatan selling gear that looks like it's from gutted accounts. may are craftable so it may be an RMT salebot or something like that, or even a legitimate player, but with a chinese sounding name and a fire sale mentality on moving vast quantities of kit, it does get my suspicions up.

[Mischa]

http://www.ffxiah.com/player.php?id=1255954 Ragchangmao.

My account was jacked right after my boyfriend's; he logged into mine after losing access to his up at the school to place a GM call. Sadly he didn't secure his comp and mine was gone 30 minutes after the GM call.. Don't give out your info, etc etc I know. Most of the things this mule is selling appear to have come from both of our accounts (HQ staves, +1 scorp, nq scorp, serket, hedgehog, mantle, woodsman to name a few). These, among many other things, were missing when we regained access to them after having the account locked June 2nd and 3rd. Here's a screenshot for reference and to avoid using ffxiah. The hack occurred on June 1. Unfortunately I'm unable to go back any further than the entries currently displayed to see if there were any more things sold from the 1st. I'm not sure if there's any way to report this to the STF without access to your account (trying for a rollback), if so please let me know.

Not sure if this has already been addressed or mentioned.. but I'll put this out there anyway. One of the things I've noticed in the other thread of current hacked players is that several others from different servers, with similar dates, were moved to Ragnarok beginning May 31st or so. I'm not sure what the deciding factor is with RMT focusing on a particular server during a coordinated "mass hack." But it's easy to see there's a pattern. Ragdongbei, Ragbaihe, and Ragchangmao are displayed as selling high end items over a specific period of time: May 30th or so to June 6th. Haven't been able to find a suspicious one past or prior to that date. If there is one, please correct me. Jefu, a friend of mine who is also from Ragnarok, was hacked about 2-3 weeks ago. He was sent to Shiva.

Few other suspicious names with the same stretch of time (Late May - Early June), though I'm not sure if they're a legit mule (probably not) or RMT:
http://www.ffxiah.com/player.php?id=1256670 Ragshuibian (most of that shit was from my main character)
http://www.ffxiah.com/player.php?id=1258138 Arnst
http://www.ffxiah.com/player.php?id=1256672 Csdingsi
http://www.ffxiah.com/player.php?id=1256904 Gghhhh

[gamez]

I'm hoping they flag these accounts and ban them as they come up suspiciously but don't ban the creation of names with coding like this, if they had a notice go up everytime somebody created a name initialed in these codes they'd probably be able to strike the accounts faster on all servers.

[Siefer]

Sylph~

Sylchangmao
http://www.ffxiah.com/player.php?id=1256020&sid=8

Syldongbei
http://www.ffxiah.com/player.php?id=1256025

This is interesting.

[Maimildre]

http://tinyurl.com/4jrnsv
silly rabbits...

[Gilanth]

wow at that last post :/ Wish i found that mule

[Niki]

http://tinyurl.com/4jrnsv
silly rabbits...

wow..

[Apelila]

http://tinyurl.com/4jrnsv
silly rabbits...

Wow. Just wow.