The sky is falling: player with token hacked? (lolIE)

[Flokk_9]

I've got all my Firefox and Noscript security settings closed up tight. AVG, SD, Adaware, the works, full scans 3-4 times a week, plus token. The only sites I visit are FFXIAH (a LOT), BG/KI, a pair of yourbb linkshell forums, my email and the news. And I've been finding multiple trojans a week for the last two weeks or so, for the first time ever.

My FFXI Linkshell profile was auto-logged out at some point last week after about five months of use. If I need to check my profile now I just use the general linkshell search function. I copy my email password into email and then copy my PO password from email before opening anything FFXI related. I'm also abandoning FFXIAH completely.

Linkshell mate posted a quote today from a GM (or CS rep, unsure) from a hacked friend with them saying that yes, security tokens have indeed been compromised. Warned another friend who also uses intense security setting and he's got trojans too...

Whatever is going around seems really nasty. Be careful.

[Dimmauk]

Weren't you freaking the fuck out earlier on in this thread and it turned out to be nothing then, as well?

Calm down, dude.

I'm Hispanic, we are naturally paranoid. I cant help it.

[Thiefami]

it's interesting that you can tell when the rmt find a new exploit, they send you a tell and gil is 20/mil then when SE catches on to their antics it jumps up to 40/mil

[Day]

I'm Hispanic, we are naturally paranoid. I cant help it.

Relax there are no immigration officers in your ffxi tubes.

[Hanyoko]

I want to doubt that this is just targeting FFXI. Is there any buzz from other MMO communities? Doesn't WoW use the same/similar token technology?

[Mafai]

on 8/3 there was a post about the most recent flash exploit on the blizzard wow boards.

World of Warcraft - English (NA) Forums -> Security Alert - Flash Vulnerability & keylog

[rekie]

Wow no rmt tell for like 30hrs =O

[solkanar]

Well after 2.5 hours of holding I finally got my POL password reset. Happy to report all gear and gil is intact on my main and 3 mules. Sucks that it had to happen on a weekend when I had nothing to do and it was rainy out, but w/e so relieved everything is still there. Pretty sure the security token saved my ass.

[rekie]

How did the security token save your ass if you got hacked whilst having one? Seems to me it didn't do much good.

[solkanar]

How did the security token save your ass if you got hacked whilst having one? Seems to me it didn't do much good.

Because they got only my POL password, if I didn't have SE account/Token they would have had full access to my chars.

[Spekkio]

a security token at the least should prevent them from taking full control of the account, changing the passwords and such. it will not stop them from looting your acct, but at least it won't get server transfered elsewhere and sold to the highest bidder. this will simplify the process of account restoration i believe.

[Saithorx]

I was just bored so I made a flooder for the RMT phishing site thats been getting spammed in tells to everyone.

I think the site is unresponsive for now... Could you maybe make the page automatically reload every 10 seconds or something for when they come back so we don't have to click Refresh. I'm lazy

[Quetz_Jamal]

I love my life...
http://i112.photobucket.com/albums/n.../fuckingse.jpg

[Aksannyi]

I have never once had anyone answer the web chat.

[Quetz_Jamal]

I have never once had anyone answer the web chat.

Had it on in the background at work, now I have to make the decision of wait here for them to answer or head to the back of the line at home...

[Khajit]

Welll... keep in mind your home is the one that has the keylogger probably. im just assuming you dont play at work unlike some people i know.

[Aksannyi]

I honestly think the phone line has a better response time. If you can get away with waiting on hold and doing your job at the same time, I'd call first thing in the morning when they open.

[Quetz_Jamal]

Welll... keep in mind your home is the one that has the keylogger probably. im just assuming you dont play at work unlike some people i know.

As noted elsewhere though, I don't have anything resembling any type of malicious software on the pc there either. I honestly think there's a loophole being exploited somewhere else.

edit:

I honestly think the phone line has a better response time. If you can get away with waiting on hold and doing your job at the same time, I'd call first thing in the morning when they open.

Thanks for the headsup...difficult for me to do but I can try.

[Corrderio]

I have never once had anyone answer the web chat.

I used it once after I constantly got kicked off XI due to that early DDoS attack or w/e. Long story short after waiting over an hour they only gave me 40 seconds of their time before kicking me.

[Quetz_Jamal]

Got pw reset, time to go home and find out if anything's missing...