HELP! I GOT HACKED! GAMEMASTER HELP?

[Katalyn]

That's definitely disturbing, whether they've "hacked the IP" or gotten into your information some other way. Do you use your game password for things other than FFXIV? What else might they have gotten into?

Question to everyone: if the scammers got the IP address from the victim visiting their site, would they potentially start poking around in it on the assumption that anyone who would fall for the scam also probably has poor internet security overall?

I would say it's much more likely they could be using their phishing website to push malware to unsuspecting people. You don't have to download anything they could install it to the victim's system by exploiting software vulnerabilities. I don't know if that's what they do or not, but it would be a far easier way to infect and gain access to someone's machine than trying to use the IP address to penetrate it.

[Selova]

Why in the name of the twelve would you ever click on any link whispered to you in-game from someone suspicious? I hope they sort everything out, but this should be a learning lesson. Do not EVER click on any links from a source you are not familiar with, ever. It will save you a headache (like this one) in the long run.

[AduroT]

My wife once told me that her corworker came in late to the office, he was on the phone wit hthe FBI saying his taxes were done incorrectly and they'll put out a warrant for him unless he can pay the difference... in Walmart gift cards. I'm glad my wife was able to talk some sense into him.

Got a phone call I’d won a free cruise, just needed to give them my credit card info.

[Curisu]

A while ago I used the same ID and Email on a other platform I forgot about.
Then I received a email that random persons worldwide tryed to log in into this unused, worthless account.

When I got home from work, I was not able to log into my SE account because of to many false log in attempts.

That was the moment I activated 2f.

Btw, is it possible to change the login ID?

[AduroT]

Where i work, we have regular announcements warning customers about fake tax calls wanting to be paid via itunes and other gift cards.

We even have signs around the place warning people about it. It baffles me how people can fall for it so hard that we actually need to do public announcements and ram the warnings down their throats.

Here’s the thing. All those phishing attempts that you hear about and wonder how could anyone falls for that? They keep doing them because people keep falling for them. Like, I feel bad for the person who lost their stuff, but That Exact Tell and others like it has been posted about on This Very Forum multiple times for the past month or more. People will still continue to click random links that people send them. Enter my password? Sure, why not.

[Rasikko]

SE always uses tiny URL versions of links, never the full really long ones.

[Reinha]

SE always uses tiny URL versions of links, never the full really long ones.

Yup. And people on PC can access the Lodestone from the launcher and the Mog Station and the forums from the Lodestone. There is never a need to copy links from anywhere. Streams and other events are also announced in game as a system message, not a /tell.

I have had the URL too, and at first glance it looks legit, then it took me to a legit looking login page, I double checked the URL and reported the account that sent me the URL.

The link will actually take you to a real forum post if you remove the "-st.xyz" in the middle, because the format is otherwise correct. It's quite clever.

[MsMisato]

To be honest, get 2-factor authentication. They can't log into your account unless they have your token. worst case is your account gets locked due to many attempts and you have to follow the instructions SE sends you.

[Cinno]

To be honest, get 2-factor authentication. They can't log into your account unless they have your token. worst case is your account gets locked due to many attempts and you have to follow the instructions SE sends you.

Apparently on the phishing site's login page it has you put in your token. They then instantly use that token to log into your account in game, before the token changes. So I dont know if it will help in this situation..

[Klaleara]

Apparently on the phishing site's login page it has you put in your token. They then instantly use that token to log into your account in game, before the token changes. So I dont know if it will help in this situation..

Which is why push codes are far superior imo. At least for the majority of users.