hacked

Another thread about someone who got hacked. This time, by yours truely. I received an email saying my account may be compromised and went to check it out. Turns out, all of my characters except the one I made on a JP server have been deleted, and I assume stripped of any gear or Gil before being deleted. The irony here, 4 days ago I ordered a security token and it has yet to arrive.... I'm hoping the support staff can restore deleted characters cause I am not looking forward to another level grind to get to where I was (36 paladin) so if anyone received rmt spam from makior sirtalis on Shiva lately, I'm sorry, it wasn't me. Anyone know wether or not support can restore deleted characters? I'd ask but they are closed on the weekend.

watch out, I made a thread about this and everyone started calling me a liar and blaming me and saying SE did nothing wrong and that its 100% my fault that my account was compromised, even though I had a security token...

Quote:

---

Originally Posted by Eternal_Arcadia

watch out, I made a thread about this and everyone started calling me a liar and blaming me and saying SE did nothing wrong and that its 100% my fault that my account was compromised, even though I had a security token...

---

That would be because these forums have the highest concentration of zealot-like white knights ever seen, all willing to throw themselves upon their own sword in defense of this game and Yoshi-P.

Hey man at least you got an email.... Im sitting here at day 3 with no email stating why my account has been suspended..... At least you know whats going on with your account.

Quote:

---

Originally Posted by Lucidisomnis

That would be because these forums have the highest concentration of zealot-like white knights ever seen, all willing to throw themselves upon their own sword in defense of this game and Yoshi-P.

---

This is a mentality I'll never understand. It's possible to both like the game and admit that there are some serious flaws that need to be addressed. "White Knights" are actually a detriment to the game because if we listened to them, a single problem wouldn't get fixed because "It doesn't happen to me so it's not an issue." People need to be able to see outside their personal narrative.

Quote:

---

Originally Posted by Eternal_Arcadia

watch out, I made a thread about this and everyone started calling me a liar and blaming me and saying SE did nothing wrong and that its 100% my fault that my account was compromised, even though I had a security token...

---

Not everyone is calling you a liar, it just seems that way because of a few vocal people. Just ignore them.

It's important that people report what is happening to them without fear of being victimized.

I have a question? Is it solely PC players ho are experiencing the hacking, or have both PC and PS3 registered accounts been compromised. I ask because I know the codes are registered based on pc or ps3 and haven't heard any distinguishing remarks on if one or both are at risk.

Quote:

---

Originally Posted by Eternal_Arcadia

watch out, I made a thread about this and everyone started calling me a liar and blaming me and saying SE did nothing wrong and that its 100% my fault that my account was compromised, even though I had a security token...

---

Woah! Am I reading this correctly? You got hacked even though you have a security token?!? How is that possible? Now I\\'m even more paranoid...

dont buy gil
and your account will be fine
end of story

I love how everyone just assumes that because we lost access to our accounts that automatically means we bought gil. Im a legacy member, do you honestly think id be so stupid as to buy gil when I dont even need any?

Quote:

---

Originally Posted by Alkalord

Woah! Am I reading this correctly? You got hacked even though you have a security token?!? How is that possible? Now I\\'m even more paranoid...

---

look at this thread for more info: http://forum.square-enix.com/ffxiv/t...90930-I-m-done.

Quote:

---

Originally Posted by Eternal_Arcadia

watch out, I made a thread about this and everyone started calling me a liar and blaming me and saying SE did nothing wrong and that its 100% my fault that my account was compromised, even though I had a security token...

---

Ignore those pointless posts to save your posts. Your posts are limited (20 posts) per a day, I am lurking and I don't know how to help you but I would like to know. This isn't just for me but I am worrying about my friends.

No need to reply this post unless you can edit your post to reply it.

Quote:

---

Originally Posted by Alkalord

Woah! Am I reading this correctly? You got hacked even though you have a security token?!? How is that possible? Now I\\'m even more paranoid...

---

Is it possible to hack SE's servers? Yes, many times even SE shutdown their NA online store last year. If SE servers got hacked then hackers probably already have our all account and password information in their computer and not sure about security token. Even happened to PSN and we all were forced to change our password.

Quote:

---

Originally Posted by Headfilter

I love how everyone just assumes that because we lost access to our accounts that automatically means we bought gil. Im a legacy member, do you honestly think id be so stupid as to buy gil when I dont even need any?

---

You would be amazed at the amount of lazy people display and would still buy gill. it is indeed a primary cause of account hacking but it is silly to assume every person hacked buys gill. but the people who actually do it will never admit it for obvious reasons.

What people don't seem to realize is it's the same for people selling them the gill as well. they have to visit those sites to do so and without people selling them gill they woulnd't have enough for people to buy. and wouldn't be people buying, this vicious cycle is why RMT are this aggressive. it's players who help them fault as much as them.

Quote:

---

Originally Posted by Lucidisomnis

That would be because these forums have the highest concentration of zealot-like white knights ever seen, all willing to throw themselves upon their own sword in defense of this game and Yoshi-P.

---

This statement is true.

Quote:

---

Originally Posted by DivineOracle

You would be amazed at the amount of lazy people display and would still buy gill. it is indeed a primary cause of account hacking but it is silly to assume every person hacked buys gill. but the people who actually do it will never admit it for obvious reasons.

What people don't seem to realize is it's the same for people selling them the gill as well. they have to visit those sites to do so and without people selling them gill they woulnd't have enough for people to buy. and wouldn't be people buying, this vicious cycle is why RMT are this aggressive. it's players who help them fault as much as them.

---

Wishful thinking. Do you actually have proof for any your assertions?

Quote:

---

Originally Posted by hola

dont buy gil
and your account will be fine
end of story

---

Also don't browse the internet and accidetnly pick up malware from an infected ad on a perfectaly legitmate site that you thousands of people vist daily

Oh. Wait. You can't avoid that can you aside from say adblock. Even the people with the best security still trip up.

I'm on PS3 and thought that since there is a 2-tiered password process we have to go through that it would be much harder to gain access. I guess not. There is a hole somewhere and the hackers are passing that info between them, gaining access to more and more accounts with a dumbfounded and understaffed CS team left to deal with all these issues. What a damn mess. I wish I had never become interested in this game, I really do. I'd be short a few headaches.

- This forum isn't secured, is it? On top of that, all of our in-game info is displayed for all the world to see. Might as well display our passwords while they're at it... >.<

Quote:

---

Originally Posted by Rezzo

This statement is true.

---

The English forums do. I was told that the Japanese forum don't suffer from this. I have no idea if that's true, but it's interesting if it is. Why would they feel the need to defend a corporation? Do they see it as the little cute corporation being picked on by the big mean players and rush to it's defense?

Quote:

---

Originally Posted by Alkalord

Woah! Am I reading this correctly? You got hacked even though you have a security token?!? How is that possible? Now I\\'m even more paranoid...

---

This is why everyone thinks hes lieing. There is no doubt he got hacked. But i guarantee you he did not have a security authenticator or he didnt have it set up properly

Quote:

---

Originally Posted by hola

dont buy gil
and your account will be fine
end of story

---

Unfortunately this is not true. My buddy's wife's account got hacked and she has not bought any gil. There's something seriously flawed with the FFXIV ARR's server's security. Whether it be something being exploited through the datacenters or from these forums... SE needs to address this shit quick before it gets any bigger. I would be srsly interested to know how they could have gotten through your security token though...

Quote:

---

Originally Posted by Monzcarro

Wishful thinking. Do you actually have proof for any your assertions?

---

Looks like you never played FFXI. it's common knowledge. Do you honestly think RMT don't infect their sites? In fact a few years ago a known gill seller to the rmt ended up getting his account hacked shortly after. he even admitted he was doing it..in tells when i asked what happend, not bluntly but his subtle hints gave it away. due to him saying he was talking to one of them and when i asked why he gave me the silent treatment, and then he said something about his screen going black and having to restart and then he lost his account, i don't remember full details. but it's the same ending. Sometimes proof is simply common sense.

To be fair nothing is a hundred percent secure, whether that security is provided by a company or no matter how strong or powerful your password is. If someone wants to hack your account they are going to hack it. Even if your password is different from everything else they'll do what they can. Blaming the company is the same as people blaming players. Even if they add stronger security, people who are willing to get gil or take over your account will still find a way. You want the real culprit then I would suggest actually pointing the finger at the right direction, towards the hackers. We should know by now with all the hackings that have gone on via ubisoft, nintendo, sony, steam, se, riot, exc. That nothing is 100 percent secure.

Best thing i could say besides using a different password from everything else, is to by game time cards at a store. Don't wanna risk loosing account info via credit or debit card.

Quote:

---

Originally Posted by Celestine

This is why everyone thinks hes lieing. There is no doubt he got hacked. But i guarantee you he did not have a security authenticator or he didnt have it set up properly

---

If someone wants to hack you they're going to hack you but most of these gil sellers will hit the authenticator wall and just move onto the next one cause they will be wasting time/money trying to bypass it.

Quote:

---

Originally Posted by DivineOracle

You would be amazed at the amount of lazy people display and would still buy gill. it is indeed a primary cause of account hacking but it is silly to assume every person hacked buys gill. but the people who actually do it will never admit it for obvious reasons.

What people don't seem to realize is it's the same for people selling them the gill as well. they have to visit those sites to do so and without people selling them gill they woulnd't have enough for people to buy. and wouldn't be people buying, this vicious cycle is why RMT are this aggressive. it's players who help them fault as much as them.

---

I know it was kind of like omg.. gil is worth how much? 10k for $6.50 on day 1. now its 500k for that price lol XD.
How many people got tempted to sell their 1.0 gil stash for a few thousdand dollars and are now getting hacked?

Quote:

---

Originally Posted by Celestine

This is why everyone thinks hes lieing. There is no doubt he got hacked. But i guarantee you he did not have a security authenticator or he didnt have it set up properly

---

How exactly could it not be setup properly, I was unable to log into the game unless I inputed the security codes every single time I wanted to log in. Otherwise Id get a message saying something along the lines of my password being wrong. My token was attached to my account properly, and I was using it since launch.

They aren't magicians. They can't pull passwords out of thin air. They have to get it from somewhere.

@Eternal_Arcadia : your character is still there http://eu.finalfantasyxiv.com/lodest...acter/2281678/ <-- either that, or the lodestone updates way too slow

@OP your too, http://eu.finalfantasyxiv.com/lodest...acter/4082719/ so I guess it's salvageable.

hacked accounts are not fun. @Eternal_Arcadia, if you used an app-based token, check your email - the password to reset that was sent there. if that one is compromised - you have your answer. @OP - best of luck with recovering your account. I'd post in the questions to the producer thread about hacked accounts and how they're planning to mitigate that. my account is OK for now, so better someone affected post that question

Update: after recovering my account through the automated process and checking back on mog station about an hour later, my deleted characters have been restored and I appear to have all my gear (according to my wife anyway, ill check it myself when I get off work) so either they have an automated system to restore deleted characters of suspended accounts, or they DO have customer service on weekends they just don't answer the phone. Anyway, I'm glad this got sorted out pretty quickly but I seriously want my security token to hurry up and get here.

Quote:

---

Originally Posted by Ispen

If someone wants to hack you they're going to hack you but most of these gil sellers will hit the authenticator wall and just move onto the next one cause they will be wasting time/money trying to bypass it.

---

The only way to get by an authenticator is to hack Squares authenticator servers. If that happened, we would be hearing a lot more people saying they got hacked with a security token. Now using Occam's Razor, whats the most likely explanation? That he didnt have an authenticator.

Quote:

---

Originally Posted by Makior72

Update: after recovering my account through the automated process and checking back on mog station about an hour later, my deleted characters have been restored and I appear to have all my gear (according to my wife anyway, ill check it myself when I get off work) so either they have an automated system to restore deleted characters of suspended accounts, or they DO have customer service on weekends they just don't answer the phone. Anyway, I'm glad this got sorted out pretty quickly but I seriously want my security token to hurry up and get here.

---

Well grats, i am very glad to see you got your characters back. just make sure you take extra security from now on, the token does not take long to arrive,. it's nice to see not all hope is lost. but to better help make sure you can determine any SE sites. They also work by making fake sites where you can put in your info. be sure to look at the URL carefully. and bookmark the real ones.

I would advice people this to avoid any type of hacks.
Keep in mind a good hacker will be able to get on your computer, but these guys aren't usually pestering mmo players.

1: Use firefox
2: Install no script and add block, give permission to sites.
3 Private browsing so it deletes your cach
4: Put flash player control on block everything from each site.
5: Virus scanner , personally I like Eset
6: Spybot

Most of all don't log in or be online while having a site with flash adds up, just avoid this.
I would even recommend you not going to ZAM.
Don't have a browser game up while playing ARR either.
The log in device SE has should help a lot as well.
Some sites don't look malicious at first but they can be even when the owner has no idea about it.


This will reduce your chance of being hacked


As for the PS3 I've no idea how they managed that.

I blame this on old tradition MMO thinking.
SE needs its own RMT service like EVE or Tera Online.
Convert crystal into gil or something similar to the effect.
A lot of us have the money to buy gils.
Is it play to win? Nah, I don't think so. And PTW isn't that big of a deal since it is a fricken PVE game in the long run.
Gil is only meant for repair, pots, and buying stuff to gear up for the next tier of dungeons.
Even when PVP is involved, only pots will play a part and those shouldn't cost that much either way.

Put out a vanity shop, let us sell costume for gil if SE doesn't like a straight RMT service.
Literally, no one should care if some of us use our money for "virtual" goods.
Just belittle us if you want since we are buying "stupid" stuff that doesn't exist, but at least it will improve our enjoyment of the game by never having to "farm" for gil.
My time is more valuable than my money supply.

Makior, did you call SE when this happened or did it happen this weekend? I just received an email from them stating that they cant do anything about it via E-mail and that id need to call. What did you do to get your account and characters back?

Quote:

---

Originally Posted by Lucidisomnis

That would be because these forums have the highest concentration of zealot-like white knights ever seen, all willing to throw themselves upon their own sword in defense of this game and Yoshi-P.

---

Actually no. It's because it's my job to run VPN servers that often have 2~3 methods of authentication for some very large customers and I know how complex and hard it is to compromise a 2 part auth system with a disposable token. But go on. Believe what you like. Play the victim.

Quote:

---

Originally Posted by Celestine

This is why everyone thinks hes lieing. There is no doubt he got hacked. But i guarantee you he did not have a security authenticator or he didnt have it set up properly

---

He could of had the software security token on his smart phone, which is rather easy to hack.

The hardware security token can't be hacked but you can figure out the algorithm that a persons hardware security token uses if you monitor his one time passwords via a key logger or other means.

Quote:

---

Originally Posted by Norack

He could of had the software security token on his smart phone, which is rather easy to hack.

The hardware security token can't be hacked but you can figure out the algorithm that a persons hardware security token uses if you monitor his one time passwords via a key logger or other means.

---

Yeah, the hardware tokens are still your best bet, but that doesn't mean they're perfect. There ARE still ways to get around them, however if you take care with your security on your computer and other such things, you often have little to nothing to worry about.

Quote:

---

Originally Posted by Docturne

You might want to go back to school and learn some grammar before calling someone an idiot...

It's you're, not your...

---

Is this really the time to be caring about peoples grammar?
Seriously curious here.

Well, I got the CE security token so I wonder if anyone who has the physical token got hacked yet.

Quote:

---

Originally Posted by Arriverderci

Is this really the time to be caring about peoples grammar?
Seriously curious here.

Well, I got the CE security token so I wonder if anyone who has the physical token got hacked yet.

---

I haven't personally, but I know ppl who have.

Mainly from social engineering tactics though.

Quote:

---

Originally Posted by Laume

Actually no. It's because it's my job to run VPN servers that often have 2~3 methods of authentication for some very large customers and I know how complex and hard it is to compromise a 2 part auth system with a disposable token. But go on. Believe what you like. Play the victim.

---

The pentagon got hacked, the DoD got hacked, the FBI got hacked, the white house was tapped.. and you think someone can't bypass a silly authenticator from SE?

Quote:

---

Originally Posted by Alkalord

Woah! Am I reading this correctly? You got hacked even though you have a security token?!? How is that possible? Now I\\'m even more paranoid...

---

If it is possible its extremely unlikely. I've never been hacked in any game where I had an authenticator. EVER. So anybody who does claim that has either been visiting sketchy sites, cheating, or los their cell phone / authenticator at the same time they were hacked by the same person. Or a hacker jsut got super lucky.