Interesting Alla thread on accout hijacking

[Akashimo]

Re: Interesting Alla thread on accout hijacking

Makes me glad i didn't install realplayer.

[Ellipses]

Re: Interesting Alla thread on accout hijacking

As found in another Alla thread, avoid Somepage if you have RealPlayer installed, and patch RealPlayer if you do.

[Aksannyi]

Re: Interesting Alla thread on accout hijacking

FFXIAH.com asked me to run an add-on when I went there, but I refused and navigated away from the site. I have good virus protetion and all that, but I'm still not going to run something off a site that used to not require me to. I have been back and the add-on hasn't come back up (that little banner underneat the menu bar that asks me to download stuff for certain sites) so I don't know whether or not it's fixed. Regardless, I still have my account. People need to be more cautious. If you've been going to FFXIAH.com for 6 months and you never needed to install anything before, why should today be any different?

[Lunaryn]

Re: Interesting Alla thread on accout hijacking

The idea of someone methodically brute-forcing passwords across every account like you suggest is absurdly unlikely. I think there are already two much less far-fetched explanations:

1) Multiple compromise vectors: While the effort to steal accounts is clearly concerted, this does not mean that they all must be accomplished the same way. If a massive effort is being made to turn accounts, it only makes sense that those involved would try multiple methods at their disposal to try to obtain account access. People may well be falling victim to several different methods of obtaining account credentials.

2) Central security failure: If there is no connection between the way people access FFXI among all compromised accounts, it is possible that the exploit in use takes advantage of a failure in server-side security, possibly allowing attackers their pick of accounts without any concern over the methods players use to access them, or even whether they do at all. While this strikes me as less likely than the previous suggestion, it can't be ruled out.

[Akashimo]

Re: Interesting Alla thread on accout hijacking

Only one solution I see we take.
Find some mercs and place hits on all RMT locations and players.
Problem solved.

[Neomage]

Re: Interesting Alla thread on accout hijacking

Well, we have Xbox 360 and PS2 users getting hijacked, People who never use FFXIAH, LS Community, etc. I know people who regularly use computer and FFXI AH and stuff like, that, and as of now, have O.K. accounts.

Only logical explanation I think, is the good old-fasioned guess-and-check. Sure, it isn't efficent with a standard person getting 3 tries every minute, but if someone runs a script to test a password on every account on said server, exevtually one or two account will match up with that password.

Example: Script checks every person on Ashura for the password AAAAAAAAAAAAA. Then it checks for AAAAAAAAAAAAB. Then it checks for AAAAAAAAAAAAC. 15 minutes later, it repeats with AAAAAAAAAAAAD.

Eventually, something will turn up.

Either that or I don't know shit and am talking out of my arse, I'm not sure which. If someone will inform me, that will be apprieciated.

[Lunaryn]

Re: Interesting Alla thread on accout hijacking

They might have used both formats then, unless they now make Trojans that can hack your 360 account from your PC. If a console account gets stolen, 99.9% of the time it's because they shared their account info and don't admit it.

While there's certainly a lack of hard evidence, which most people do take as an invitation to apply their own worldview and personal biases as obvious explanations, most of what I have read suggests to me that there are probably at least 3 different ways in which accounts are being compromised here, with the keylogger suspect being merely one. There hasn't been more than an off-hand reference to one suspected source of Xbox360 compromise so I'd consider that one up in the air, but the majority of the BG accounts have cast their suspicion on the Linkshell Community site, with a few going so far as to suggest that characters are being targeted directly by way of endgame LS affiliation and equipment owned. Again, no proof of anything, but more than enough attention is directed this way to raise concerns.

[CroweMidgard]

Re: Interesting Alla thread on accout hijacking

The "safest" way I found to not get these viruses is to just get a completely worthless laptop that pretty much can only do Webpages. Pick one up for 100-200 bucks from budget bin in a local computer show or garage sale. Expect to reformat it every so often (may want to even ghost it to make the process fast)

While I have never seen a FFXI targeted virus I have run into probably a few hundred WOW ones, which may also apply to FFXI. Generally they are very basic, Crash game, run key sniffer for a time period and send the results. I have gotten them all from banners of pretty popular WOW websites too, which is sort of scary.

[Callisto]

Re: Interesting Alla thread on accout hijacking

They might have used both formats then, unless they now make Trojans that can hack your 360 account from your PC. If a console account gets stolen, 99.9% of the time it's because they shared their account info and don't admit it.

[Lunaryn]

Re: Interesting Alla thread on accout hijacking

That's funny, the same solution I'd suggest to stop cheating in FFXI would work for this as well. Maybe not smart or plausible, but I garauntee it'd be effective. >.>

I refer you back to the first bluegartr link, this is not just affecting PC users but some Xbox360 users as well.

[Callisto]

Re: Interesting Alla thread on accout hijacking

Haha, like I said, wouldn't be a good business move, but you've never heard of anyone getting their account jacked from an ad in XBL Marketplace or Behemoth spawning purple to someone using a GameShark.

The PC has been responsible for most of the good stuff that players have learned about the game, but also for the bulk of the problems not caused by S-E themselves.

[Akashimo]

Re: Interesting Alla thread on accout hijacking

That's funny, the same solution I'd suggest to stop cheating in FFXI would work for this as well. Maybe not smart or plausible, but I garauntee it'd be effective. >.>

Drop the PC?
Here's my response for that...

/ma Sleepga Callisto
/ma "Sleep II" Callisto
/ma Dispel Callisto
/ma Silence Callisto
/ja Chainspell <me>
/ma "Fire III" Callisto
/wait 2
/ma "Fire III" Callisto
/wait 2
/ma "Fire III" Callisto
/wait 2
/ma "Fire III" Callisto
/ja Convert <me>
/wait 1
/ma "Fire III" Callisto
/wait 2
/ma "Fire III" Callisto
/wait 2
/laugh

<_<;

[Callisto]

Re: Interesting Alla thread on accout hijacking

That's funny, the same solution I'd suggest to stop cheating in FFXI would work for this as well. Maybe not smart or plausible, but I garauntee it'd be effective. >.>

[Akashimo]

Re: Interesting Alla thread on accout hijacking

Don't remind me of Norton >.>;
On my desktop i still has the quarentine files from when I had system works and caused blue screen of death of when I unistalled it, making me install XP again. I'm still annoyed at their service as of buying off PQ Magic, and now not having thier vista compadible update for 9.0 -.-;
I'd need a full free week just to make copies of ~160gb of data just to wipe my HDD clean of those files x.x; Now if only bluray was dirt cheap....

One hand surf ftw!

[Jarre]

Re: Interesting Alla thread on accout hijacking

I got Kerpersky labs internet suite for £21.99 from amazon, it has an advanced hueristics system that can identify and quarantine any file it finds which has suspicious code and could be a virus. it has doen this to my machine when surfing normally (i.e. not doing any one hand surfing or warez downloads) and it quarantined 4 files, 2 were normal cookies the other 2 were viruses, it didn;t know them on the data base so it emailed them to kerpersky labs and deleted them off my system then ran a background scan to make sure they were gone.

Virus detecting software is getting better especially with preventative heuristic scans. in recent poles Macafe and Norton have been near the bottom of the top 10 virus prevention software.