Keylog Attack ~How My Story Ended~Follow

I think no matter which way you do, you just going to have another problem. Sometimes know you can do that, you can boot yourself offline while away from home and still can access your character.

So it works both way.

SE policy for password reset is of no help to someone whose account got hacked. I told them mine did and provided all the info and then said that whoever has my account changed the CC info. I told them I can provide previous CC and even tell them the old password but nope. I need the current credit card number is what the guy told me. So what are you supposed to do if someone changes your credit card. Why is there no security vertification when changing billing information? Some wrote that in here "When your account gets hacked SE basically tells you tough ****."

2nd call yielded nothing. The woman I talked to this time was far less educated and fluent with XI than the previous one. She gave me no information about my status and pretty much just blew me off...which wasn't exactly pleasing. None the less she did give me the information that if this is indeed a large scale issue, and they receive many GM and Support calls on it, they will do something about it. That sounds like my best bet~ so it seems like for now I just need to be patient, and call once/twice p/day until they draw a conclusion for what they'd like to do.

Thank you Kata for your response. I'm working towards what I can to get this resolved. I'm not entirely sure what I'll do if I can't get Hiro back, but I plan on being the squeakiest wheel SE's ever dealt with until I get a definite answer. Until that time, I'm just fighting the battle, and I plan to win if it's possible. I thank everyone again for calling, and I urge you to do GM Calls and/or SE Support calls to help not only myself, but anyone/everyone that was afflicted by this Keylogger.

I remember hearing stories of people selling their account and taking their account back from their account buyer with some info besides their cc #. Something about name, address, b-day, ss#, account registration #, and what not. So you can try that.

This truly sucks no one can argue that one bit however where has internet common sense gone?

I am sorry but if I see a link to a random link I will not go to it simply for this reason. It is very easy to drop keyloggers and torjan horses on to a remote desktop providing the end user opens or executes anything.

I am not insulting you at all, I am sorry it happened however in the future run a virii scan on items you are not sure of, or plain don't visit those sites. If you are curious do it from another machine that you don't care about to much if you have one as then redoing the OS is no big deal.

Good Luck to you in the future and again sorry you were struck down.

ANy video or pic can be seen on youtube or a picture site. But I would have knowen what Mrwildrabbit is already. Its probubly the actual working program, with the keylogger hidden inside.

If it was a keylogger... changing the password actuly allowed the hacker to get it. Asuming you set autolog in on. In which case you would have to run some spywere program, or maybe firewall program would stop it.

That realy stinks, Hope you can at least get account back, tho the money and dynamis coins be long gone.

ps: only download 3rd party programs from origanal maker sites.

Edited, May 16th 2007 3:56am by Mariox

Sorry to here about your loss Hiro. I hope you can get the character back, but I've heard some pretty awful stories...

As to the how this happened, it was a total lack of simple precautions on your part. It could have easily been avoided. To help out anyone else, here is a short list of things to do.

01. Get some Antivirus software. If you don't want to spend the money on it, you can get free Antivirus software from www.grisoft.com. They have a free version and a paid version, both are reliable. The free version can be a little tricky to find, but if you look around for it, you shouldn't have any problem navigating the site. It's actually a very good way to go if you don't have the money or are just unwilling to spend it.

02. Keep it up to date. Your Antivirus software should do this automatically and daily.

03. Run daily virus checks. Most software will do this automatically, you just have to set a time for it to happen.

04. When you download anything from a source you don't 100% trust, scan it. Even then, if your software isn't up to date you could still get a virus. If you don't know what something is and you don't know and trust the source, just don't download it.

I have two PCs with the game installed and access to log in 4 completely seperate accounts.

I can say beyond a shadow of a doubt that you can log in from a 2nd machine and kick the person/machine that was logged in first.

I've done this once for my own amusement to a RL friend... and several times on my own character for the simple sake of swapping machines for various tasks.

Ouch,

I am sorry to hear this has happened to you and I would wager to others who havn't come here and said anything.

While yes it is the responsibility of every player to watch for possible threats and to avoid them I do not understand why SE doesn't put a bit more protection on changing passwords and CC info.

I wouldn't think it to be very difictult for them to add a security question for both changing CC info and password. They could do a POL update to add this and make all of us add the information before we were able to log into the game again.

By this simple step it would make if very dificult if not nearly impossible for a key logger to get enough info on your account to do anything but log into the game.

It would not be info you typed in just for a nomal log in so it wouldn't give anyone the ability to take your account. They would still be able to log in and possibly sell or transfer your items and gil but it is much easier to get those items back then it would be to start from scratch.

I am no programmer but i'm sure that someone here has a pretty good idea of how long it would take SE to impliment this, I just don't see it taking them long with the team of devs they have.

Thank you for posting this, I was not on during this so I did not recieve a /t but I will inform my friends to watch out for this and anything in game of them being asked to visit a site or look at something.

I hope things turn out well for you but you know as well as I that it is SE, given that it is not an isolated incident might be your only small hope.

This thread was made a while ago on BG, I'm guessing it's probably the same guy. They say they hacked into the keyloger program and got into the guys computer. His rl name is in one of the posts.

http://www.bluegartrls.com/forum/viewtopic.php?t=18918

Edit: Wrong Link


Edited, May 16th 2007 6:33am by Cookiemonkey

It's things like this that sometimes tempts me to forget I believe in human rights and decide to fly a few hundred napalm bombs over China or wherever these RMT losers are.

These economic leeches and the government that covers for them make it really hard to believe in humanity.