ESO Server Issues Jan. 13-15

ZOS_JessicaFolsom

Hi everyone,

Between Friday and Sunday, the North American ESO megaservers suffered intermittent DDOS attacks. While brief, the attacks caused disruptions in connectivity and ability to log into ESO on the affected servers at different points over the weekend. We also discovered an unrelated technical issue with the Xbox One North American server on Sunday (Jan. 15) that resulted in login errors and inability to connect to the game.

We worked through the weekend to mitigate the DDOS attacks and resolved the Xbox One technical issues – thank you all for your patience.

Trinity_Is_My_Name

Thank you!

Doctordarkspawn

Well, at least it wasnt' technical issues this time.

DigitalShibby

Lol @ all those sh!t talkers.

will_rob87

Why was the PS4 EU servers running poorly if it was only the NA servers that were attacked?

o0Velius

Why are you just now posting this; instead of letting us know during the weekend while it was happing? I lost a vSO HM instance and no news on forums on why my team of 12 lagged out, all at one time.. thank you for resolving this issue as I was fearing it was going to stay this way tell after the update.

brandonv516

I'm guessing it wasn't posted while in progress because you didn't want the culprits to know you were on to them?

Ra'Shtar

I thought so, i hate people who waste their time doing cyber attacks when they could be doing something more productive.

GreenSoup2HoT

Lizard Squad at it again!

Messy1

Thank you for working hard to fix the issue. Also, it's really sad someone would do that

Enodoc

MrsVelius wrote: »

Why are you just now posting this; instead of letting us know during the weekend while it was happing?

Probably because it was the techies that were working over the weekend, and not the community team.

AcadianPaladin

Thanks for the info/update, Jessica!

Saucy_Jack

I just don't understand what the point of a DDOS attack is. "We overwhelmed some servers. Yay us!"

From what I can tell, a DDOS doesn't DO anything for the hacker except...give them the satisfaction of being a complete douchebaggler, I guess? But surely there's easier/faster ways to be a douchebaggler in life than a DDOS attack, no?

skiptomyluau

Thank you for the communication. Was this related to the Dyn attack?

Sigma957

This will explain the lag spikes and timed out disconnects, ty for explaining @ZOS_JessicaFolsom .

prelude386ub17_ESO

DigitalShibby wrote: »

Lol @ all those sh!t talkers.

it only took them four days to tell us what they know right off the bat.

Rohamad_Ali

Any security breach that might effect customers ?

xRIVALENx

Glad to hear that it is all fixed, will unblock Zenimax addresses and see what sort of traffic I get this evening.

MasterSpatula

Great, so all my Cyrodiil deaths this weekend were the fault of script kiddies and not me.

That's my story, and I'm sticking to it.

Publius_Scipio

Rohamad_Ali wrote: »

Any security breach that might effect customers ?

I hope that in this day and age Zenimax/ZOS is using the best of what's available to protect and ensure their customers' privacy and data.

Bandit1215

MrsVelius wrote: »

Why are you just now posting this; instead of letting us know during the weekend while it was happing? I lost a vSO HM instance and no news on forums on why my team of 12 lagged out, all at one time.. thank you for resolving this issue as I was fearing it was going to stay this way tell after the update.

Well if you knew the game was lagging so much, maybe it wasn't a smart idea to get into a vSO HM run. I agree that the statement should a came out earlier but if you had been in game for 30 minutes you would have known the game was having issues. Sounds to me like it was poor planning on your part.

Rohamad_Ali

Publius_Scipio wrote: »

Rohamad_Ali wrote: »

Any security breach that might effect customers ?

I hope that in this day and age Zenimax/ZOS is using the best of what's available to protect and ensure their customers' privacy and data.

Everyone hopes that but many times the denial of service attacks are followed by a theft of credit card information . I change my passwords after each time it happens just in case account info gets stolen .

DDOS attacks are nerd rage attacks against decent people playing a video game . They nerd rage against Ps4 all the time and it's annoying . They think stealing is justified because they got bad customer service or some mumbo jumbo about "the man" and "corporate greed" . Later when one gets arrested and rats out all his buddies , we get to see the tears and stories of not knowing it was a crime as they panick over being locked up with real criminals and their needs for companionship .

Hers the latest 19 year old goofballs to get some time in the pokey for trying to DDoS Pokemon Go .

https://nakedsecurity.sophos.com/2016/10/13/lizard-squad-poodlecorp-members-arrested-in-ddos-for-hire-bust/

will_rob87

Saucy_Jack wrote: »

I just don't understand what the point of a DDOS attack is. "We overwhelmed some servers. Yay us!"

From what I can tell, a DDOS doesn't DO anything for the hacker except...give them the satisfaction of being a complete douchebaggler, I guess? But surely there's easier/faster ways to be a douchebaggler in life than a DDOS attack, no?

In fairness, you dont even need a ddos attack to overwhelm the ESO servers, all you need is 10 people at the same wayshrine

Publius_Scipio

Rohamad_Ali wrote: »

Publius_Scipio wrote: »

Rohamad_Ali wrote: »

Any security breach that might effect customers ?

I hope that in this day and age Zenimax/ZOS is using the best of what's available to protect and ensure their customers' privacy and data.

Everyone hopes that but many times the denial of service attacks are followed by a theft of credit card information . I change my passwords after each time it happens just in case account info gets stolen .

DDOS attacks are nerd rage attacks against decent people playing a video game . They nerd rage against Ps4 all the time and it's annoying . They think stealing is justified because they got bad customer service or some mumbo jumbo about "the man" and "corporate greed" . Later when one gets arrested and rats out all his buddies , we get to see the tears and stories of not knowing it was a crime as they panick over being locked up with real criminals and their needs for companionship .

Hers the latest 19 year old goofballs to get some time in the pokey for trying to DDoS Pokemon Go .

https://nakedsecurity.sophos.com/2016/10/13/lizard-squad-poodlecorp-members-arrested-in-ddos-for-hire-bust/

Yes, in the world we live in it is best practice to change passwords rather frequently actually. MMO's actually have quite a bit of personal info of its players (we're talking thousands and millions of people) stored. Maybe people think that because it's a video game the security and defenses won't be that tough. I hope that's not the case.

Maybe ESO will be served well by ZOS implementing two-factor authentication. You type in your password and a randomly generated one-time login code is sent to you through either email or a text message based on your chosen preference.

Edit: For both account and game login.

umagon

Rohamad_Ali wrote: »

Publius_Scipio wrote: »

Rohamad_Ali wrote: »

Any security breach that might effect customers ?

I hope that in this day and age Zenimax/ZOS is using the best of what's available to protect and ensure their customers' privacy and data.

Everyone hopes that but many times the denial of service attacks are followed by a theft of credit card information . I change my passwords after each time it happens just in case account info gets stolen .

DDOS attacks are nerd rage attacks against decent people playing a video game . They nerd rage against Ps4 all the time and it's annoying . They think stealing is justified because they got bad customer service or some mumbo jumbo about "the man" and "corporate greed" . Later when one gets arrested and rats out all his buddies , we get to see the tears and stories of not knowing it was a crime as they panick over being locked up with real criminals and their needs for companionship .

Hers the latest 19 year old goofballs to get some time in the pokey for trying to DDoS Pokemon Go .

https://nakedsecurity.sophos.com/2016/10/13/lizard-squad-poodlecorp-members-arrested-in-ddos-for-hire-bust/

I would suggest to people to always have multiple banking accounts one for each different use to mitigate any loss from stolen card information. And to use debit cards. One of my accounts is only used for online transactions and the card is only loaded with money when I about to purchase something. And I have another I only use for in person swipe and smart chip transactions. Along with several other accounts for different uses.

nine9six

will_rob87 wrote: »

Saucy_Jack wrote: »

I just don't understand what the point of a DDOS attack is. "We overwhelmed some servers. Yay us!"

From what I can tell, a DDOS doesn't DO anything for the hacker except...give them the satisfaction of being a complete douchebaggler, I guess? But surely there's easier/faster ways to be a douchebaggler in life than a DDOS attack, no?

In fairness, you dont even need a ddos attack to overwhelm the ESO servers, all you need is 10 people at the same wayshrine

lol

LrdRahvin

will_rob87 wrote: »

Saucy_Jack wrote: »

I just don't understand what the point of a DDOS attack is. "We overwhelmed some servers. Yay us!"

From what I can tell, a DDOS doesn't DO anything for the hacker except...give them the satisfaction of being a complete douchebaggler, I guess? But surely there's easier/faster ways to be a douchebaggler in life than a DDOS attack, no?

In fairness, you dont even need a ddos attack to overwhelm the ESO servers, all you need is 10 people at the same wayshrine

^ True story.

Rohamad_Ali

umagon wrote: »

Rohamad_Ali wrote: »

Publius_Scipio wrote: »

Rohamad_Ali wrote: »

Any security breach that might effect customers ?

I hope that in this day and age Zenimax/ZOS is using the best of what's available to protect and ensure their customers' privacy and data.

Everyone hopes that but many times the denial of service attacks are followed by a theft of credit card information . I change my passwords after each time it happens just in case account info gets stolen .

DDOS attacks are nerd rage attacks against decent people playing a video game . They nerd rage against Ps4 all the time and it's annoying . They think stealing is justified because they got bad customer service or some mumbo jumbo about "the man" and "corporate greed" . Later when one gets arrested and rats out all his buddies , we get to see the tears and stories of not knowing it was a crime as they panick over being locked up with real criminals and their needs for companionship .

Hers the latest 19 year old goofballs to get some time in the pokey for trying to DDoS Pokemon Go .

https://nakedsecurity.sophos.com/2016/10/13/lizard-squad-poodlecorp-members-arrested-in-ddos-for-hire-bust/

I would suggest to people to always have multiple banking accounts one for each different use to mitigate any loss from stolen card information. And to use debit cards. One of my accounts is only used for online transactions and the card is only loaded with money when I about to purchase something. And I have another I only use for in person swipe and smart chip transactions. Along with several other accounts for different uses.

My girlfriend and I pay for a service to monitor and repair everything for Us . My father insisted after opening the new business last year . Your idea is good too though and probably cheaper .

LegacyDM

So the Ddos is over then? Mysteriously stopped after the maintenance? Not saying it wasn't a Ddos but it is odd that these problems seem to occur on weeks where you skip maintenance. Regardless, Are you guys going to take steps to enhance your availability? Can't imagine Ddos is good for business...

[Deleted User]

The user and all related content has been deleted.

Publius_Scipio

GrumpyMuffin wrote: »

This 'DDOS' seems to happen with a worrying frequency compared with other games. Suggests bigger problems with the network set up/security. I'm sure other games get attacked as often (if not more so), but they seem to defend themselves much better

Disgruntled PvPers no longer with us in Tamriel seeking revenge.