Getting suspicious links in game now...

Someone sent me a /tell today with a link to a "forum post" telling me to not support SE on the upcoming update "at such a sensitive time".

But it wasn't to a SE site. It had an extended name. Looked up the character, they seemed legit, but I assume it was a hacked account from someone who did open the link.

I didn't click on it, because I am not an idiot. But it generally needs to be put out there to NOT CLICK ON THESE LINKS. Just report the players sending them and move on with your day.

Quote:

---

Originally Posted by AnimaAnimus

Someone sent me a /tell today with a link to a "forum post" telling me to not support SE on the upcoming update "at such a sensitive time".

But it wasn't to a SE site. It had an extended name. Looked up the character, they seemed legit, but I assume it was a hacked account from someone who did open the link.

I didn't click on it, because I am not an idiot. But it generally needs to be put out there to NOT CLICK ON THESE LINKS. Just report the players sending them and move on with your day.

---

Those links are being perpetuated by compromised accounts, usually the same ones who made the mistake of following the link in the first place. Sadly it seems a fair number of people are falling for it given how prevalent the spam happens to be on some servers.

I got the same message today! The link starts with the https://forum.square-enix.com but adds another domain to the end of it. Not going to catch smart people, but it's clickbait enough to catch a few people for sure.

Smart thing to do is just never ever look at links sent to you by people you don't know, and be mildly suspicious of links from people you do know.

Got the same thing, reported the dude for phishing, proceeded to look up the added domain on google out of curiosity.

it's xv . xyz added to the end of the normal forum domain, which seems to be a money clickbait thing. Then again, from the other two people in this thread that have received it, we're all in different worlds and I'm not sure how likely it is that one guy from cact is hopping everywhere in aether just to get click bucks.

Quote:

---

Originally Posted by Afilitaria

Got the same thing, reported the dude for phishing, proceeded to look up the added domain on google out of curiosity.

it's xv . xyz added to the end of the normal forum domain, which seems to be a money clickbait thing. Then again, from the other two people in this thread that have received it, we're all in different worlds and I'm not sure how likely it is that one guy from cact is hopping everywhere in aether just to get click bucks.

---

It's not the same user, there's been multiple reports of this over the past week or two. Seems a lot of accounts have been hijacked.

Edit: To clarify it's probably the same user(s) doing the botting, but it's not been the same player account they've used.

The person I was PM'd by was from Adamantoise so they're seemingly scripted to server hop during their spam sessions.

I sent in a report and said it was likely a phishing thing, but all I got back was a cut and paste "oh so sorry about the RMT spam, please blacklist them" response. I assumed they have gotten this often enough not to investigate, but with the GMs in this game you never know. One is amazing, the next one...isn't lol

I always report them as "Phishing scam from probable compromised account". Hopefully it gets the account banned quicker until such time as the real owner contacts Customer Support for account recovery.