So My acc was hacked...

cstk

Like in the topic, my acc was hacked today. I managed to retake it using secret password. But hey, all of my gold is gone. My items not bound are gone. Well... yeah, that sucked. Too bad I did not take a screenshot of the guy in my contacts, who I DID NOT have yesterday. I bet he was the one responsible of that hack. Jeeez. Anybody had similiar issue since ESO launch? Or am I the only one?

felixgamingx1

Make your password harder to hack add a bunch of lower case capital &numbers.

cstk

i did, but damn. Its the first acc hack in my gaming history. Leaves a bad taste. And now again I'll have to grind to get gold ;(

SirAndy

Time to clean out my friends list ... Now that i think of it, i did get a couple of random requests that i ignored.

Kortak

strange...because if they access your account from diff IP they have to enter a code

Evergnar

Kortak wrote: »

strange...because if they access your account from diff IP they have to enter a code

My thoughts exactly.

Rapscallion74

Kortak wrote: »

strange...because if they access your account from diff IP they have to enter a code

Was just going to say that as well. Not only did they guess his password, but they spoofed his IP? Sounds a little fishy.

mcatchlovb16_ESO

Send them an email, they can restore your gold and items and probably even see who it was sent to.

Putok

I'm pretty sure the, "IP check" is not actually an IP check, but rather a computer check. My GF recently got a new computer, and needed to enter an email code despite the IP being identical, and the prior computer having logged in that day.

If it works the way it appears to work, a would be hacker need not spoof an IP, but only spoof the trusted computer tag.

That is, unless my experience was a really, really well timed coincidence.

cstk

well idk about that stuff. But I changed my mail password too just in case. In Addition, I got an e-mail from ESO at 10:21 that my pass was changed. what is strange I was at work at that time. oO

ijRoberts

Putok wrote: »

I'm pretty sure the, "IP check" is not actually an IP check, but rather a computer check.

This hasn't been the case for me. I only have one computer I play this on and I've been asked twice now to verify my account.

casselna_ESO

Before I had to authenticate my computer, I was once hacked too. Luckily, I was online and was booted out because: "Someone else has logged into this account from a different computer."

I quickly relogged in, which I hope booted them out. Then I went to the website and quickly changed my password. Shortly after that, I had to authenticate my computer, which I assume is due to people hacking into accounts. It was the first time I have EVER been hacked, ever, and I have used the same password for many a games in the past. Games notorious for being hacked and hacked often. I was never hacked, not once.

Also, I never ever have gone to suspect websites, I do not, nor will ever buy gold.

This is the first time, which tells me that their servers are not as secure as they would like. I still play and I have had no further attempts since I changed my password.

Still, this is disconcerting.

Putok

cstk wrote: »

well idk about that stuff. But I changed my mail password too just in case. In Addition, I got an e-mail from ESO at 10:21 that my pass was changed. what is strange I was at work at that time. oO

Pretty sure they need to be into your email or need your secret question answer to change PW.

Is your userid for ESO the same as your email? Ie: cstk@gmail? If so, I'd change your userid.

cstk

No, its different. Well whatever happened. I just hope that no one else will have similliar issues.

Klarick

did not happen

/thread

Fenbrae

Hacking someone else's password? That can happen.
However, since the hacker used a different IP address than OP's computer has, he must also have access to his email account. How else would he know what code to use?
In which case, it isn't just a problem that he knew his password. In that case, there is something on his PC.

You might want to scan your computer.

Jessabella

I know this is a pretty far out thought, but with the IP check in place, is it possible you were hacked by someone you know in Real life that has access to your PC?

I say this because the only time I have ever been hacked on a game was when I was very close to a break up with a live in bf. When we did finally split I found my account for that game had been hacked. Password changed, char naked and all gold gone. He denied it but years later when we were both adult enough to have a civil conversation again, he finally admitted having hacked my account way back when.

Myth1184

so..how did they get past the IP authentication?

im calling bs to this unless his email was hacked as well

Myth1184

and you can not change your ESO email address without actually calling customer service

Sakiri

Jessabella wrote: »

I know this is a pretty far out thought, but with the IP check in place, is it possible you were hacked by someone you know in Real life that has access to your PC?

I say this because the only time I have ever been hacked on a game was when I was very close to a break up with a live in bf. When we did finally split I found my account for that game had been hacked. Password changed, char naked and all gold gone. He denied it but years later when we were both adult enough to have a civil conversation again, he finally admitted having hacked my account way back when.

This is sadly common.

Or a pissed off sibling. I even saw once some guy's dad did it.

Roommates.

Ick.

Thechemicals

Maybe someone in the household did it.

kirnmalidus

Putok wrote: »

I'm pretty sure the, "IP check" is not actually an IP check, but rather a computer check. My GF recently got a new computer, and needed to enter an email code despite the IP being identical, and the prior computer having logged in that day.

If it works the way it appears to work, a would be hacker need not spoof an IP, but only spoof the trusted computer tag.

That is, unless my experience was a really, really well timed coincidence.

It's an IP check. I've used the same computer on multiple IPs and had to do the code. It's likely you have a dynamic IP with a low lease time.

Socratic

Using the same password with other games, or using it on other non official forums isn't a bright idea. Different password for everything, try different usernames, get a pad and write them down.

Jessabella

eq2imora_ESO wrote: »

Or a pissed off sibling. I even saw once some guy's dad did it.

Parents doing it, does not surprise me at all! Neither would a sibling

And I can totally see a jealous spouse doing the same, especially when all your free time goes into the game!

Sakiri

Socratic wrote: »

Using the same password with other games, or using it on other non official forums isn't a bright idea. Different password for everything, try different usernames, get a pad and write them down.

Ex father in law worked for IBM.

Finding out you wrote your password down anywhere was grounds for firing.

I don't write any of mine down anywhere. It's a terrible idea. Especially when you have scenarios like siblings and parents that can and/or will get into your stuff.

Like said roommate's mother. If she had his passwords when he was still living at home you can bet your butt she'd have cleaned him out to get him to quit WoW because "just put it on pause and come do this" didn't work.

Myxril

This happened to me last night/this morning, just after midnight. Then again a few hours later. While I was sleeping.

I have tons of folders in my email account, and as of the time I logged out, many of those folders had many new emails. One such folder contained the emails I've received from ESO.
So, if my email was hijacked, then someone had to have spent a lot of time rifling through folders to see which one of the many containing new emails had the code verifications. And on top of that, they must have reset the messages to Unread when done.
Assuming my email was accessed.

I'm suddenly thinking back to D3, and how that very same thing happened to me repeatedly. All because session IDs were being spoofed, leaving no need for actual account hacking. I wonder if that's what's going on here, too.

All I know is I'm out like 12k gold, my CE treasure map urns for AD/DC, my sack of questionable meat, tons of runes, alchemy ingredients and cooking ingredients. Also, 4 mails with gold from items sales were pillaged but not deleted (pretty sloppy).
And to top it off, there was some n'wah(s) in my guild who powerlooted almost all of the non-binding blues from the guild bank. The majority of which I personally deposited.

Regardless of whether this was my email being rifled by a super folder sleuth, or if this was some kind of direct account hack, one thing is for certain: Today was an incredibly *** day for me when logging in to ESO.
Barely even 2 weeks. smh & fml

Wrekkoning

Kortak wrote: »

strange...because if they access your account from diff IP they have to enter a code

Not true at all. I log into multiple guildies accounts and that stupid email thing never even pops up. Not the first time and not the 10th time. Don't rely on that.

Mailmann

IP address authentication isn't functioning properly right now. A hacker could simply get lucky and just log in if they had your password. I've had the same IP address for a long time and sometimes the log in asks for IP address authentication and sometimes it doesn't. I never enter the code that gets emailed to me (if it gets emailed to me in time). I simply wait until it recognizes my computer again and then I can play.

YourNameHere

There has been a strange rash of random friend and group invites. I ignore them all and urge people to do so as well.

And don't think you can't be hacked through it. Happened to my sister in WoW. She got a random tell in game and answered. She was hacked literally a minute later and lost everything. I don't think it was a coincidence.

I think I shall make my PW a bit longer and stronger.

Also I encourage people to NOT keep themeselves logged into their account page (you know when you log into the main site, you enter your Username and PW? Unclick the save info thing.) Don't be surprised if sniffers get your stuff through there.

Reignskream

SirAndy wrote: »

Time to clean out my friends list ... Now that i think of it, i did get a couple of random requests that i ignored.

Exactly. I got a couple of these myself, ignored em. I havnt had issues with a hacker at all (knock on wood).

Eris

I use a different password for every website, every game and every PC on my home network. It's not hard to do, especially if you mostly log on from home. Just write them down in a journal. Nobody is gone to break into your house to steal your password so they can steal your gold, well probably nobody.

I realize businesses don't like people doing that, but at home, it's your personal information you're keeping safe, so use different passwords.

If you use the same username and password across the internet, chances are someone will eventually hack you.

As an FYI, passwords stored on most non-commercial websites and forums are not encrypted. I wouldn't trust that even the commercial websites are using encryption for passwords, but it's a toss-up because they might. Working for 20 years in IT I know just how often a programmer trying to save time compromises security.