Got Hacked Thread

Ok, I understand that there is a ongoing issue of people getting hacked. So we can have one pinpointed place, I create this thread for all to use so everyone can be able to find and gather info.

I'll add more threads etc. along the way.

You can post your hack story, thoughts, etc. in this thread.

BG: http://www.bluegartrls.com/forum/80487-sky-falling-player-token-hacked-lolie.html

Other hack stories:

http://www.ffxiah.com/forum/?topic_id=4719
http://www.ffxiah.com/forum/?topic_id=4738

From search:

http://www.google.com/cse?cx=partner-pub-0209765201661192%3Arg9le0-4lve&ie=ISO-8859-1&q=hacked

No flaming, this thread is for information.

How about just info that will help you tell if it's a legit GM?

1- Only official SE / POL site is, www.playonline.com. If you get a tell in game, saying go to "www.anyother-site.com" rule of thumb, don't go there.

Add any other rules/guidelines to see if it's a real GM.

Why would any GM ask you to log onto a website anyway? Since you can file a complant from PoL viewer much faster and easier than on the PoL website.

I know they said "to file a complaint, go to www.playonline.com and go under Services....etc" but seriously, they also tell you to go to PoL viewer and follow their instructions there.

If a GM tells you to go to a website, don't do it.

GMs also will NEVER EVER EVER ask for your ID/Password, they already have it, why would they need to ask?

^^ This too

The thing I find more appalling is how people are falling prey to those people that do this

<name>!

[GMoron] HAI THUR I IS GMZ PLZ GO 2 WEBSITE www.istealzurpassword.org 2 FILEZ A COMPLAINT~

So, to those of us that got hacked without responding to a *** /tell, did we deserve to be hacked too?

I think coming out and saying everyone that gets hacked is stupid is a little much. lol If you peruse forums frequently like most of us do, you're probably well aware of the things going on, but many do not and may have never even encountered a GM, or made a call, so it isn't that outlandish to believe some are falling for it. Aside from that not all the hackings are from their site, rather the security token login sessions being "infiltrated" or what have you and being ganked for no reason other than having an active token, as far as I understand it given the info from the BG thread.

Edit: Saiht being a good example.

Supposedly it's not just the people entering data into the website that's causing problems. There seems to be a big push for stealing gil/items right now that's quite alarming.

People complain about SE but you need to remember, if the RMT companies had better/easier ways to obtain gil/items to sell they would be doing that. The fact that companies need to resort to this sort of thing does mean that SE has been doing a good job. The problem is SE can't baby every single user and can only provide the information that they have to people in order to stop things like this from occurring.

As most people will say, use Firefox or Chrome, have an up to date virus scanner, never give out your details and don't visit websites or perform actions that could result in you gaining a trojan.

This whole approach of "not even logging in" seems to be working pretty well. Hack-free and fingers crossed. lol If things don't settle down I imagine people will either resort to doing the same or just quitting altogether instead of risking all their work and fun on account of scams.

SE has been saying for years to never give your personal information out.

But people still get hacked. Why? Because they forget.

little old ladies lose their entire savings funds because they gave their information to a guy on the phone. Most people would automatically bash the guy on the phone, but you never stop to think about the old lady. Did she do it on purpose? No. She did a stupid thing, but thats because she forgot common sense.

People do not always act as rational beings, you just have to notice the times when you don't.

And what about the people who didnt enter info anywhere except onto POL, Dont have a keylogger/any type of virus, and yet still got hacked?

I know at least 3 on Cerberus, 1 whom I personally live with, that ended up hacked without any of the for-mentioned.. Where was the protection there?

I'd be trying to figure out where my game details are held. It's a reason why you shouldn't share your account with friends. You might be the safest person in the world but that doesn't mean your friend is.

The only thing I noticed about the token is that every 30 seconds, the first digit changes from 0 to 1, 1 to 2, 2 to 3 and so on... If I skip it for about a minute, it goes up by 2. Like from 6***** to 8*****. Other then that, I don't see anything else lol, I'm not a math specialist.

If that's the case, then you should be able to crack the algorythm in your head >< I hope SE isn't that stupid.

That was information. Like Cai pointed out, people who frequent sites like FFXIAH should be fully aware of all that Hackery that goes on, yet they still fall for the most simple of tricks to get hold of their personal information.

edit: Oh btw, those 'security tokens" can be cracked, so God help you people who ran out and got one.

Even if you could figure out the algorithm of the token, hackers wouldn't be able to figure out the next sequence of YOUR token without knowing the serial number on it.

{Serial Number Seed}*{Internal Clock Value}={Displayed Number}

If a hacker got one random number from your token its near impossible to know what the next correct value would be.

Ah, forgot that each one basically had its own set of variables. Don't own one lol

Am I in that 3?

Also, what type of information is this thread looking to garner? Not trying to flame, it's a serious question. The people on this board are just going to drown it out with "hahaha these people are morons" posts like this thread.

For anyone that's been paying attention for the last 2 years or so, this isn't some issue that popped up out of nowhere. Waves of hackings have been going on, like I said, for the past 2 years. Now all of a sudden SE releases their 10 dollar keychain they call a "security token" people are now starting to stand up and take notice, rather than dismiss them as "retards who bot/cheat/use windower/give out their POL info lulz?"

Just because people "took notice' to the hacking problem doesnt make them any smarter. Users are still stupid and will still fall for cheap tricks to get their information, its just a matter of WHEN.

security token "made in china" btw.. oh the irony

I lol'ed...

I think the chinese are setting us up for an epic server-wide FAIL!

That was the first thing I saw when I got my token. I /facepalm'd when I saw it too.

My point is, NOW it's becoming a "problem" whereas before it was "you're a moron, get off the *** game kthxbai."

What about the people that used Friends List Plus while it was compromised?

Or the Linkshell Community?

Or browsing ffxi-atlas? (Don't go there) If you weren't a frequent visitor to forums, you had no information that it's littered with viruses and the admins don't even update the site anymore. Or MysteryTour, same thing. All those victims were shuffled away as "ur dumb hahahaha."

I forgot malicious websites and IE being very prone to attacks was a new thing.

Yeah it sucks... but this is 2009, not 1997. People SHOULD be using Firefox Adblock+ and Noscript, or at the very very least using IE8 and have some type of internet script stopping software that most antivirus come with.

This has got me thinking, I rarely ever /logoff or /shutdown

I am curious if this poses a threat to my account or if that actually makes me a bit more secure (since I am not constantly putting in my password/OTP)

Going on a week and a half of non log off lol /flex (as if that matters any XD)

It won't matter. You'll eventually have to log in again for maintenance or your internet blips out. If you have a key logger program on your system you'll get hacked.

The ONLY way to prevent this is to have a security token and NOT log into a phishing website and give them your latest working token number. The token isn't 100% but it is your best prevention method at this time.

Kat, did your account get hacked? If so, when? i noticed i didn't see you in dynamis on saturday and thought that was wierd.