Please help, account hacked

[Mosha]

Yeah, the gil scam has you log into a copy of the forum. It's embedded with a keylogger that copies your information and the hackers access your account from there. He didn't log into the forums, he saw a link for free gil leading to the fake forum website and went from there. There's no other way to get access to that fake forum site aside from going to a link sent to you in tells.

And yes, it will take time for them to do anything. All you can do is wait and rebuild from here.

it's not always free gil, sometimes it's a fake forum link with "THIS MUST BE STOPPED FOR THE GOOD OF FFXIV" or something along those lines.

[Mosha]

Yes I understand that, but to remove it they need the confirmation which is only sent to the email which we got. I don't understand how they can remove it if they don't get the confirmation code to remove.

did he use the same password for both email and his SE account?

[LianaThorne]

it's not always free gil, sometimes it's a fake forum link with "THIS MUST BE STOPPED FOR THE GOOD OF FFXIV" or something along those lines.

I haven't ever seen any outside of the example I gave so wasn't aware. Just thought it was gil *shrug*

[LittleArrow]

did he use the same password for both email and his SE account?

Not at all. He just got the emails back to back saying it's been taken off and to put in a confirmation code. I had no idea you could take those off without putting in the confirmation code from the email. The hacker already took all FC bank gil. Still no response from GM.

it's not always free gil, sometimes it's a fake forum link with "THIS MUST BE STOPPED FOR THE GOOD OF FFXIV" or something along those lines.

This is what I was referring to. I was given a message just like this and ALMOST logged into it as well. It was asking me to sign a petition over something and I was curious to see the thread on the subject.

This is so heart breaking to see it happen in real time. The hacker has the power to destroy our FC house. I put in a ticket 2 hours ago. I know they're busy, but I had desperately hoped they would see this as an emergency.

[DanielNegreanu_Adamantoise]

So they got his email too?

[Lieri]

Change the email password. It's more important especially if it's work/business related.
It could be that they managed to get into the email but marked it as unread after reading it.
For the things that were stolen the GM will probably return it and ban the hacker. They have the logs.
I don't think the hacker will destroy the house or release the plot. If anything they will see it as $.

[Espon]

Yes I understand that, but to remove it they need the confirmation which is only sent to the email which we got. I don't understand how they can remove it if they don't get the confirmation code to remove.

They don't need the email. Logging into the account gives them the emergency removal code which they can then input to remove your OTP.

[DanielNegreanu_Adamantoise]

I really have a hatred for the use of secret words, they are a security anti-pattern.

What road did you grow up on? Mom’s maiden name? Impossible to figure that info out! Right??

Well I’m hoping having your email secured is enough to get everything restored.

It should always be secured by the email account and/or phone number. If you can change the password on an account without those… smh.. the SE should stop whatever they are doing and fix that. And ditch “secret words” while they are at it..

[BristolRuss]

I put in a ticket 2 hours ago. I know they're busy, but I had desperately hoped they would see this as an emergency.

Yeeeeah unlikely. These things aren't normally dealt with in hours, more like days. And if the character needs a rollback to restore gil/items then you are looking at likely weeks if not months.

[Aelin_Ashryver]

Yeeeeah unlikely. These things aren't normally dealt with in hours, more like days. And if the character needs a rollback to restore gil/items then you are looking at likely weeks if not months.

And they sadly will not fix any damage done to the FC