Currently the person/s that hacked my account are sitting online on a character on Zalera (NA) by the name of Sdf Ffh. My password has been changed, and I am currently waiting to at least see just how badly they have but until they log out I am completely locked out.
This is extremely frustrating, on a game the frustrations seem to come thick and fast (took weeks to finally get the game, which was meant to be a birthday present. When I finally did 60 bucks was spent on it to get the digital version with CE benefits)
please get the hacker off my account
Printable View
-
10-11-2013, 04:38 AMnixiplease get the hacker off my account
-
10-11-2013, 04:46 AMReinheart
From what I read turning on security token seems to kick them out.
Anyways aside from that I'm curious whenever I see this type of thread.
1) Was your password unique? Not used on other sites
2) Did your password have mixed alphabets, numbers, special characters?
3) Did you receive any fake e-mails trying to pretend as Square-Enix?
4) Which FFXIV websites did you visit? If you can list them would be nice.
These should help devs/STF investigate some more to block any future hacks. -
10-11-2013, 05:17 AMHargirI am not the OP, but I'm having the same problem. My account was hacked, and I could not log into the game. With the help of SE customer support, I got my account back ,but the hacker is still logged on, and I can't enter. Just turned on security token, but that didn't seem to have any effect :-(Quote:
Originally Posted by Reinheart
-
10-11-2013, 05:23 AMReinheart'Quote:
Originally Posted by Hargir
I think you have to wait like 10-15min after trying to login with security token to kick the other person off, I could be wrong. It was on one of the threads here... can't remember which one >< -
10-11-2013, 09:21 PMnixi
14 hours later the "person" there is no way its a person at this point is still on my account and no way to get them off, this is getting to beyond a joke.
SE also sent an email this morning to let me know my trial thing runs out and they will be wanting money soon, not the greatest time to be asking for money. I have been as patient as I possibly can be to this point but this is getting ridiculous. -
10-11-2013, 09:25 PMfixitman
The only way to remove them directly is to temporarily cancel the service account (using the Mog Station) until the session ID expires. This can take several hours from what I've read. Once they are off, you can activate the service account and login with your new password and OTP.
Edit: When I ordered my OTP device, SE stated it would take up to 10 business days to arrive. I received it 5 business days later (YMMV). -
10-11-2013, 09:51 PMHypnotic13371337
ive also got this problem
scanned for viruses 3 times, nothing came up
changed my password 2 times yesterday just to make sure
guy is still on my account probably getting it reported by tons of people D: -
10-11-2013, 10:41 PMHypnotic13371337
just to make sure im looking in the right spot
its Mog Station > Account Services > cancel service account? or is there some other button im missing? -
10-11-2013, 11:00 PMZohnoReecho
yes
-
10-12-2013, 12:07 AMnixi
Ok I have no cancelled it, and ordered a physical authenticator thingy. The second won't arrive i suspect for another week or so. (during which i trust SE will tighten their security, waaaaaaaay too many cases of people being hacked to be coincidence)
-
10-12-2013, 01:33 AMPronsolo
I really dont think this has anything to do with SE in most cases.......
-
10-12-2013, 02:17 AMReinheartReason why I'm asking to provide those informations in the 2nd post of the thread so devs can further investigate.Quote:
Originally Posted by Pronsolo
All these related posts mentions their account got hacked but there isn't much information to go by to figure out which sites to avoid or what to expect from these hackers.
For the most part if there was a simple IP check, I don't see this issue happening as often as I'm seeing recently on this forums. I do understand some have Dynamic IP and their IP changes frequently so there needs to be some extra security there, which can be the Security Token. I remember the IP check being there before, dunno what happened there.
However, from reading threads on this forums, right now you can bypass that passign some simple session_id information which doesn't expire...
If it was me, I would rewrite the code so that when a Security Token is used, it passes through the initial login THEN record the current IP address and if any one tries to login from outside the IP using sesssion_id it shoudl flag. Security Token is unique code that is updated every time it's used so unless the hacker is quick enoug hand is doing the man-in-the-middle hack at that exact timing, this should make it much much harder to break. Using the security token will update the IP every time so it won't affect the players with Dynamic IP or playing from different locations from time to time. -
10-12-2013, 02:25 AMfixitman
If websites can obtain your general location from your IP address, SE should be able to do it as well. A basic location check (instead of just an IP check) would likely do wonders for slowing down these issues, until they are able to do something about the session ID concern.
-
10-12-2013, 02:29 AMYoohre_WildRiverSE does a location check , i know this because i went to seattle to visit my brother, tryed to log on my account and it was frozen immediately for suspicious activity.Quote:
Originally Posted by fixitman
i live in miami
this was the ingame login. -
10-12-2013, 04:02 AMnecrosisYou don't have a keyfob. Get one.Quote:
Originally Posted by Yoohre_WildRiver
-
10-19-2013, 01:42 AMAvurach
Greetings all,
We understand that you are having trouble with a compromised account. However, we are not able to resolve any account issues through the forums. Based on the information you provided, this support article on the Support Center may help to resolve your concern. If it does not, it should help you get started in contacting the Support Center to resolve your concern directly. Thank you!