Anyone have this happen recently? hacked

jaggster_ESO

Yesterday I attempt to log into the game after a while and password wasn't working..same one I had used for this game in the past. Reset it and got in. Played a newer character for a bit then logged out. Today I tried to log in and same issue...new password wasnt working. Reset it and go in. My character was standing in front of the bank...not on the quest I had left him. Checked back and all items/gold was gone. Went into older characters and found not items/gold in bags. What the f***! I have since reset my ESO password, security question and email password even but now I have no way to trust this game's security. :-( Do I have any recourse?

lolo_01b16_ESO

Most likely someone managed to hack your mail account and got to your eso account that way.
Every time you log in the game from a new computer you will have to insert a code that will be sent to your email account. So even if someone would have stolen your eso password, he would have to get into your mail account for this code.

Another possibility would be that zos servers would be hacked, but in this case most likely a huge amount of players would be affected which is not the case.

NewBlacksmurf

If you've had a compromise, go ahead and report it here: https://help.elderscrollsonline.com/app/home

I don't know your situation but more than likely, if you're password is being accessed right after you change it, you will need to thoroughly clean off any key-loggers, add-ons, virus', etc. on your computer.

It sounds like its a problem with you and not on ZOS' end.
Maybe even time to change your email address, and other personal things because you are being compromised

---

From another companies suggestions

---

1. Scan your computer for malware, keyloggers, and viruses.
2. Get Antivirus protrection
3. If the anitvirus fails...see other options like Anti-Rootkit,
4. Stop downloading add-ons from untrusted sites...or just stop using add-ons all together until you resolve any potential comprises and do not download things that should come at a cost but are free on the internet.
5. Beware of emails


Antivirus

Viruses can damage your files, registry, and hardware. Viruses are hard to detect, easy to spread, and difficult to remove. The most common way to get a virus is via email or downloaded attachments.

Anti-Spyware/Keylogger

Spyware monitors the actions of a computer user and can affect the performance of your computer. This software will attempt to send any gathered information to a host server, which can affect latency or may reduce your internet speed.

To assist your anti-spyware program in finding spyware that targets our games, bring up the login screen and type gibberish into the login fields while the anti-spyware program is running. Ignore these instructions if you are using ComboFix, as you do not want to run any other programs while ComboFix is running.

http://www.bleepingcomputer.com/download/combofix/

http://www.malwarebytes.org/

Anti-Rootkit

A rootkit can help hide other malicious programs such as viruses, trojans, and keyloggers. Finding and removing rootkits with ordinary anti-spyware or antivirus software can be very difficult.

http://www.avast.com/eng/avast_4_home.html

http://www.bleepingcomputer.com/download/combofix/


Suspicious Emails

Phishing emails try to get you to reply to the sender with personal information. They may entice you with offers like rare items, beta access, or they may threaten account suspension.

One likely sign of a fake email is simple grammatical mistakes, as well as spelling or capitalization errors. Another indication would be the promise of a beta key, since we don't typically send beta keys out via email.

The safest approach is to never reply to emails that ask for your account information.

Fake Websites

Scammers make fake websites that look official to collect players' login information. We host our websites on two domains: blizzard.com and battle.net. If you're asked to log in to a site that isn't on these domains, do not continue.

Enable your internet browser's phishing filter to help identify malicious websites. If you're not sure if a site is legit, check PhishTank to see if it's been reported as a scam.

jaggster_ESO

Thanks for the info. I did change my email password in case that was the issue but find it strange that someone randomly hacked my email. Would think they would need access to my ESO account to find out what email I used for that game. The account name has nothing to do with my email address.
Anyway, I did at least create a support ticket to report it. Not sure what that will do. Cant really trust this game now. Why start over if they cant ensure that I wont be hacked again. Very upsetting to say the least.

NewBlacksmurf

jaggster_ESO wrote: »

Thanks for the info. I did change my email password in case that was the issue but find it strange that someone randomly hacked my email. Would think they would need access to my ESO account to find out what email I used for that game. The account name has nothing to do with my email address.
Anyway, I did at least create a support ticket to report it. Not sure what that will do. Cant really trust this game now. Why start over if they cant ensure that I wont be hacked again. Very upsetting to say the least.

I'm not trying to be rude but its not the game.
You're the only person having the comprise issues, so its safe to say that their servers aren't hacked. Its also safe to say you aren't being hacked. I doubt someone is hacking into your local network to steal only your information, as that is more of a TV and movie type of thing. Its more logical that you have programs running, that track and send your information to someone else that you have unintentionally installed.

Your information has been compromised, either by you downloading and or installing something on your machines or another device. Its also possible that there are programs running on your computer or device that is sending this info to the people who are taking control of your account.

Changing your password isn't going to do it.
...You need to start over with a brand new email account from another domain.
-Contact support to have you email address, account name AND passwords changed ASAP.


MOST IMPORTANTLY!!!!

Don't do any of this on the machine you play ESO on.

You need to figure out what has compromised you and eliminate this first.

Tandor

I doubt the email password alone was the issue, it sounds like you have a keylogger tracking your password changes.

Do you have an anti-virus program running constantly including definition updates? If so, which?

Do you have a separate anti-malware program running constantly or manually, including definition updates? If so, which?

Do you have any ESO mods running? If so, which site did you get them from?

I certainly wouldn't log into any game, bank account or other application requiring password authentication until you are completely satisified that your machine is 100% clean.

WalkingLegacy

jaggster_ESO wrote: »

Thanks for the info. I did change my email password in case that was the issue but find it strange that someone randomly hacked my email. Would think they would need access to my ESO account to find out what email I used for that game. The account name has nothing to do with my email address.
Anyway, I did at least create a support ticket to report it. Not sure what that will do. Cant really trust this game now. Why start over if they cant ensure that I wont be hacked again. Very upsetting to say the least.

Change your passwords from a device not normally used by you.

Example, if you never use your cellphone for logging in to mail, accounts, etc, change your password from that device...just in case your PC is compromised.

jaggster_ESO

Thanks everyone. I do have MalewareBytes Premium and Norton Anti-Virus installed. THey are set to scan regularly. Updates are checked regularly as well. Full Malwarebytes scan found nothing. Running full Norton scan now. Had a couple addons from Curse Skyshards/Lorebooks/MiniMaps and a few from NexusMods ...BagSpaceInd/Destinations/HavestMap/MundusMap. Have just removed those. How would I scan for keylogger?
Thanks.

NewBlacksmurf

jaggster_ESO wrote: »

Thanks everyone. I do have MalewareBytes Premium and Norton Anti-Virus installed. THey are set to scan regularly. Updates are checked regularly as well. Full Malwarebytes scan found nothing. Running full Norton scan now. Had a couple addons from Curse Skyshards/Lorebooks/MiniMaps and a few from NexusMods ...BagSpaceInd/Destinations/HavestMap/MundusMap. Have just removed those. How would I scan for keylogger?
Thanks.

Not putting any blame anywhere but when I Played WoW....I was hacked twice.

first time: This occurred specifically from using add-on from curse.com

What I soon found was that one of their widely marketed programs (Curse Client) was 100% the reason me and my guild a long with hundreds of thousands of others had our accounts, emails and computers compromised.

second time:
-This was due to using a Guild website that some of us thought to be a good idea to use our account email on which if you recall how Bnet works, email and password gets you in so...we gave our accounts away, basically


That was years back, so just sharing...I found it best to download the individual add-on and only use 1 or 2, but again...not blaming anyone site, just sharing that its likely a good place to start looking.

jaggster_ESO

Thanks. Have uninstalled Curse just in case. Good tip NBsmurf. Norton still running...nothing found yet. I just got this PC a few months again so other than ESO with addons and a few other games there isnt much on it....so hopefully that will help narrow down the culprit.

Shader_Shibes

Similar thing happened to me like 1.5 years ago or so on ESO. I logged into the game, few seconds later i was kicked out, tried logging in again and couldn't, password wasn't recognised, almost *** my pants.

However, ZOS were amazing and i got my account back the next day i think it was, along with a nice reimbursement for all the loot that the scumbag took.

Hopefully ZOS's umm.......depleted CS will get you back in game sharpish.

Good luck!

Oh and @jaggster_ESO you maybe better off posting a thread in Customer Support section instead of here.

jaggster_ESO

Thanks all. I have completed full scans using Norton and Malewarebytes and nothing found. Totally removed all addons including the Curse client. Have a Support ticket open so will see where that goes. Resetting passwords again just in case.

jaggster_ESO

Alsojust install SpyShelter...ani-keylogger..for extra measure. Yes I am paranoid!

jaggster_ESO

Oh, does anyone know of ZOS is planning to adding an authenticator service to this game? That would make me feel a little better as far as the game itself is concerned. Thanks.