Hackers getting around 2FA.

[SerenaValen]

Hey there people. I was playing on 1st august and I got a tell from some random person talking about a raffle that I was invited to. Forgetting the golden rule of too good to be true. I decided to hop onto it and log in on what looked like the actual forums. Then my internet starts having an outage. (Conveniently)

I then come back 2 hours later when it returns to find that my account is now suspended and I did not receive an email as to why. I have never visited another world in my time playing however my friends tell me I'm now in Zodiark (Originally from Odin) on their friends list.

(Reason for edit. Friend found a picture of pretty much the exact tell I received)

[Caitlinzulu]

Banging my head on the table.
I never thought people actually fell for such an obvious scam.
i think you will be lucky if you got more then the clothes on the back of your character left zfter you finally managed to log back in.

On a different note its not hacking what they did but social engineering.

[Caitlyn]

I got a very similiar /whisper message a few days ago. But as soon I clicked a bit (not logging in of course, because I m always logged in the real offical forums), it turns out, that it was totally a scam. Even the link itself should proof enough, that something is not right.

The same message was posted in the novice chat weeks before.

It may sound hard, but never trust tells with a link in it.

PS: Hackers cant get around the 2FA, except you let them in ; )

[SerenaValen]

Yeah I'm aware it was stupid. I'm just trying to get my account back man.

[Voidedge_Ragna]

They log your char in steal everything and use it to spread the tells, so technically your char was used by someone else and spamed this message to everyone they could (likely) and then was reported by someone which caused you to be banned.

That way they can spam this trick w/o buying accounts, im not sure what can be done here but maybe a GM can still do something.

[SerenaValen]

I really do hope a GM sees this or something fella. I've sent email tickets and currently got no reply. Their phone lines are down due to the pandemic so I can't even call them. Just feel rather helpless right now.

[Kaelina30]

Do you have any updates ?

The exact same thing happened to me earlier today, with exactly the same message. I realised pretty quickly after trying to log in to their website that something was fishy since nothing was happening when I tried to connect and I immediatly changed my password and registered the 2FA app. I also had an internet outage right as it happened, just like you. The people who got my infos barely had 15 minutes with the account before I managed to reconnect thanks to 4G connection. They moved my character from Ragnarok's Limsa to Spriggan's Gridania, but I still had my Gil and my gear. I only saw one connection from Ireland (I'm from France).

I logged off to prepare diner and to play another game with friends for a bit, and when I tried to connect back to FF, 1h ago, I had a notification on the mogstation saying that my account was suspended. I really hope this won't take long to recover my account and that I reacted quick enough. Hopefuly the suspension is due to the connection attempt from Ireland and not from RMT stuff, which I assume would take longer to investigate. I hope I can get ahold of someone from chat support tomorrow.

I feel so dumb. I've never been fished during more than 20y on the internet. Spread the word, they seem to be very active and the website is a perfect copy of the SE forums and looks very convincing.

[SerenaValen]

Do you have any updates ?

The exact same thing happened to me earlier today, with exactly the same message. I realised pretty quickly after trying to log in to their website that something was fishy since nothing was happening when I tried to connect and I immediatly changed my password and registered the 2FA app. I also had an internet outage right as it happened, just like you. The people who got my infos barely had 15 minutes with the account before I managed to reconnect thanks to 4G connection. They moved my character from Ragnarok's Limsa to Spriggan's Gridania, but I still had my Gil and my gear. I only saw one connection from Ireland (I'm from France).

I logged off to prepare diner and to play another game with friends for a bit, and when I tried to connect back to FF, 1h ago, I had a notification on the mogstation saying that my account was suspended. I really hope this won't take long to recover my account and that I reacted quick enough. Hopefuly the suspension is due to the connection attempt from Ireland and not from RMT stuff, which I assume would take longer to investigate. I hope I can get ahold of someone from chat support tomorrow.

I feel so dumb. I've never been fished during more than 20y on the internet. Spread the word, they seem to be very active and the website is a perfect copy of the SE forums and looks very convincing.

Unfortunately no. No updates really, I've put in tickets and not really gotten anywhere as I believe they are rather busy right now with the mass amount of players that are joining the game. I've received emails saying they've got some of the tickets though that's about it. Still waiting though I feel the same way as you do friend. Never been caught out like this before either. I hope it gets sorted for us both swiftly. Good luck Kaelina.

[Iscah]

They "get around" 2FA by getting you to tell them your current one-time password (along with your other login details) as you attempt to log in to the forum.