Spammer/Hacker logged into my account and created a character to gold sell?

[Felis]

It's weird because I was online today for a while why does the game allow multiple characters online at the same time? I have a JP character online while he is online the NA servers!!

Yes, it is possible to be on multiple characters on the same account, if the characters are on different datacenters.
One reasson why it was possible during beta4 to play on JP servers while the character on the NA/EU servers got hit from the "your character is still loged in" bug.

Don't forget to scan your OS for keyloggers

[CrystalWeapon]

Not trying to be an ass, this is an honest question.

Are the people getting hacked using the same username for their account management as their character in game? I don't get how they'd get both your username (which should not be displayed anywheres to the public) + brute force your password without having some sort of keylogger on your computer.

[Aseral]

I have a firm belief that these people who are "hacked" tend to be the people who bought power levelling lol

[Jennestia]

And therin lies the rub as it were. SE doesn't allow strong passwords. 16+ characters, both uppercase and lowercase letters, numbers, and symbols (including spaces).

SE allows strong passwords - I'm currently using one that's 14 characters long and a full mix.

[Demetirus]

Given the likelihood that the OP visited a gil seller's website I think it's pretty fair. One does not simply guess random people's account names and passwords out of the blue. If the OP did visit a suspicious site then I say they deserve it. If they did not and are innocent, then I wish you good luck in getting your security back, OP.

Let me get this straight: Because the guy may or may not have done this to himself, it's cool for the guy I responded to, to come in and complain about the fact that the op used the word 'gold' over gil? Are you serious? How in any way does that make sense? "Since you might have done something bad, we can just pick apart anything you say because... petty reasons."

I'm seriously baffled. Explain this to me, please.

[Kahlane]

I usually am very security conscious. However, I've been on this game so much, I forgot about updating passwords, running bot checks etc,etc.

I DO NOT buy gill, nor have I gone to their sites. (Even if I wanted to, I couldn't afford it). Yet after reading this thread, I installed my security token from 1.0. I check my account and I had three new characters, all level one on different servers.

I remember a few days ago, I was unable to log into my account, until I reset my password. (which I did. but it was only an alpha numeric 9 letter password. I usually use a 14 combo).

Now I know a lot of you won't believe me, but how else besides visiting those sites can they get your info? Is it possible, they have set up a forum, with info on the game? I'm just trying to make sense of it.

On a side note: i've reported this activity to SE.

[Vod]

You will probably be banned. Enjoy buying a new game.

[CrystalWeapon]

snip...

I am still curious about my earlier question. How close is your se account name to your character's name? Not asking you to post your username obviously. I'm trying to figure out how they are getting both the username and password for your account, when the username for your se account should not be displayed anywheres public. Especially if your username is really different from your character name in game.

I don't see how they would be able to brute force both in order to steal an account.

[Seregil]

Add your security Key now. It will cause a relog.

Just wanted to mention that adding a security token to your account will generally NOT cause a re-log. I added mine yesterday while I was still in-game, and continued to play for many hours until I manually logged myself off last night.

That said, I can't stress enough the importance of securing your account with the token (keyfob or free app).

[Kahlane]

do you mean my SE Login ID?. No, It's not. alpha numeric login ID

Is it possible, (now I do sound like a newb) it came from an email? you know the ones that look like they are from SE?
I'm just trying to secure my system.

I've contacted SE and told them what happened.
I changed my password (14 charcater)
I've added the keyfob.
scanned computer with malewarebytes, adware, spybot, cccleaner and avg.
And finally, get enough sleep, so brain functions at it's normal capacity.