It Has To Be One Of The Private Servers

I really didn't want to start more private server nonsense, but you can't tell me this isn't pretty obvious.

Where else are 10+ accounts that used to play XI 10 years ago and used AH.com going to get hacked.

Like what are the odds that whatever other random site has a data leak and it has a dozen decade old AH accounts in the memberlist.

if its a product someone wants bad enough, they'll ignore damn near anything to not have to admit said product is dangerous or bad.

Y'all know how dirty the ice cream machine is at McDonalds, yet McFlurries still sell.

What are we talking about? More details please

The string of scam link threads being made, all by people who either havent posted and/or even played since 2010~ minimum i think, if its an xiah leak its odd its just these older accounts with little/no post history

They get removed decently quickly, but been spam posts to scam website for like "free phones" or "crypto exchange" the last week or so. He's essentially saying a certain Private server recently in the spotlight has a security breech that's causing this issue.

if it were Ah then the accounts wouldn't all be a decade old. They're all accounts that hadn't posted since 2010-2012.

You mean leak or keylogger?

This makes no sense, It clearly is AH because it is coming from their accounts. Probably gets hacked when click the link then posts here if they have a account here.

To post you need to verify in the game, which makes it hard to create problems on the forum. However someone has been able to get users login information to spam cryptobro scams.

The most obvious way this would happen is people made accounts somewhere else and used the same email/password on both. When this other place was compromised they got access to the username/password database, which is usually useless...unless these people use the same passwords on lots of other places (a lot of people do this). If they did, they will be having serious problems now and may even be losing access to their steam accounts and stuff.

If it was a few it would be nothing, but when it's so many it implies the source of the leak is XI related and taking timing into account you can make assumptions.

If it was someone targeting XI players exclusively the links would have better bait (they may still be and the scammer is smart, but I doubt it).

Given the nature of the crap being posted, and a few websites recently closing it's probably likely someone working at the webhosting places got access to the databases of those closed websites and sold them to crypto scammers.

Nekosentai, ffxidats are potential sources if they didn't wipe everything before closing as well as private servers (but I'll give them the benefit of the doubt they are smart enough to properly protect their database)

Having said that, lack of trust in private servers is one of the reasons I personally didn't risk downloading it. My account is worth more to me than whacking a few crabs on some rando server.

This is almost absolutely the issue. Older, mostly-abandoned accounts haven't had their password changed in years and years, and password re-use is HILARIOUSLY common. It's entirely possible and even likely that what got compromised wasn't an XI resource at all, we're just seeing thee Venn diagram overlap of "people with accounts on some compromised site" and "people with AH accounts".

Don't re-use passwords.

Yeah, it's skeleton passwords, but where would this many old FFXI players all go.

The overlap of a person who played XI a decade ago and all being in the same place has to be essentially zero.

Except a place that specifically targets those people... like a classic server.

probably rhymes with corn pub

If a porn site, reddit, youtube, steam, facebook, twitter got breached it wouldn't be just 10 year old abandoned accounts.

People need to stop reporting these guys. I'm missing out on my 1000%...

Im gonna keep reusing my password! No way someone would put in Knuckledragger69420!

Unfortunately, if you google the pump name...you'll see its not just FFXIAH, nor even just video game forums theyre spamming.

Yes, but where is it originating. A hack anywhere opens you up everywhere if you make all your credentials the same.

Most people if they use UserA/PassA in one place, they use it everywhere so if you hack their facebook, you got their gmail, their youtube, their bgwiki, their online banking, their reddit, their discord.

Yeah, I know how that part works. I mean it has to be more than just stealing the information and brute forcing it on every known message board on the internet to spam their telegram. Theres no rhyme or reason to where they're spamming. Its not like its isolated to video game boards or whatever.

Like they've gotten access to their Lastpass or google passwords and using that information to spam their stuff.

Take your pick
https://haveibeenpwned.com/PwnedWebsites

Also one of the spam links this morning was from someone who has a very recent XI activity:
https://www.ffxiah.com/forum/topic/57082/i-am-looking-for-ls-that-is-not-an-elitist-mindset#3652139

Theres a good chance you could find them on Asura still. Might be worth asking if they've ventured to a certain private server?

Sialeed.Asura isn't necessarily Sialeed.whichever

All different bob (presumably)

/sea all Sial
/t Sialeed Hey, you the guy who posted on ffxiah about looking for a LS

If they answer yes: "by chance, have you played on Horizo"
If they answer no: "alright, cool, just wondering"

You probably lose more time of your day reading forums.

Without answering something related to sub-human IQ levels, wHy would someone post in the Asura forums using a certain name ask about looking for a LS if they werent using their name or played on Asura?

The one that posted the scam was Sialeed.NotAsura

Sialeed.Pheonix or Sialeed.Valefor, I forget which

Sialeed.Carbuncle (is probably also) Sialeed.Asura

https://www.ffxiah.com/user/sialeed#forum

Unfortunately the link is gone, because the post was removed. But that post was among that list of forum posts.

I didn’t see any of the scam posts and now I feel like I missed out on the drama lol.

I've put in a couple of counter-measures. We'll see how effective they are.

Yes it most certainly is them, the ad push comes with crap like this. I've gotten even crap on youtube comments on videos related to the private server, "thanks for your support click here for telegram"

Is what happens when someone pays for fake views or ads

lol here we go again

so incredibly cringe, no idea why this kid isn't banned