I got hacked.

[Mudd]

Lost well over $1250 worth of items/gold. Didn't pick up any viruses on my computer, I don't go to stupid ass websites, I am always on the lookout for hackers. No one has my info to anything... no one. I do use ICQ, but I didn't open a link or look at any pictures. My account name and password were very good, but who knows. They specifically targeted me because they got both of my accounts. I called EA support and after a little bit of button mashing was able to talk to someone I could half understand, enough to get him to email me my new password. He told me to email customer support to see if I could get my items back, so I emailed Jeremy with pretty specific information as to the time of the hacking. So uhmm... change your passwords? I don't know really what to say so you guys can protect yourselves, cause I am always looking for hacking websites/links/emails.

 

[Nine Dark Moons]

that really sucks. it's scary that it seems to be happening a lot lately...

 

[christy1221]

I'm sorry. I know how you feel it happened to me a couple of months ago. They got all seven of mine and one that had been closed for over a year, of course they couldn't get anything off it but I thought it was strange they got it. They took several of my things including my complete assasins armor set which I can't afford to get another one. but they didn't take my keep which I thought was strange. They left my characters naked at skara brea inn. They took all my saved unclaimed vet rewards and some of my rares. I wish it was more secure so this wouldn't happen. And they won't get your items back either. I am now afraid of being hacked again and check my email over and over all day. It sucks.

 

[Desperado]

dam that sucks hope you recover well

 

[lucitus]

It is not a joke its a crime, so when you get hacked go to police to lodge a complaint. with their help you can get the log data ip adress and thinks you need to find the person who logged in with your accounts and steal the your items. thats not much i can do for you, but i hope you get your things back.

and dont be so angry or unhappy life is going on and uo is a wonderfull game so try to make the best thing of it, for instance try a new think you never have done before in uo and have fun.

 

[Saris]

Icq dont use it .

How many times have ppl been hacked from icq and still want to use it.

It is the worst messeger possible, I tell all my guild mates not to use it also.

I saw someone hack my freind while taqlking on icq btw

run microsoft software removal tool and I bet you find a back door.

 

[Blesh]

had you implimented the account security question? If you haven't, i would.

Sorry for your loss.

 

[Manticore]

Icq dont use it .

How many times have ppl been hacked from icq and still want to use it.

It is the worst messeger possible, I tell all my guild mates not to use it also.

I saw someone hack my freind while taqlking on icq btw

run microsoft software removal tool and I bet you find a back door.

Saris, can you tell me how to run the microsfot software removela tool and how can i tell what is a back door program? Thanks

 

[Nine Dark Moons]

i'd like to know too, Saris

 

[HeathBar]

had you implimented the account security question? If you haven't, i would.

Sorry for your loss.

How do you do this? I couldn't find the option in acct management.

 

[christy1221]

had you implimented the account security question? If you haven't, i would.

Sorry for your loss.

As far as I know you can only do the security questions on new accounts and they don't do much good I was able to change my password and email and it never ask me the question.

 

[Lord Drakelord]

had you implimented the account security question? If you haven't, i would.

Sorry for your loss.

How do you do this? I couldn't find the option in acct management.

Information was posted how on the old forum, I'm not sure if I remember it but it was something to do with going into account management and then putting in the security question answer.

Maybe one of the younger kids here will remember it

 

[Lord Kotan]

I wonder what the odds are someone could break in and get a list of user names and passwords?

 

[Lord Drakelord]

Icq dont use it .

How many times have ppl been hacked from icq and still want to use it.

It is the worst messeger possible, I tell all my guild mates not to use it also.

I saw someone hack my freind while taqlking on icq btw

run microsoft software removal tool and I bet you find a back door.

Any other messager out there that is better? And is simple to sit up? I used icq for so long that I'm really used to it.

 

[Beerman72]

My best advice to the OP is to put a block on the accounts until you are able to redu your OS. If you are sitting on a keylogger it could not only be hard for you to find, but also easy for the thief to exploit again. (a keylogger is more than likely the culprit, so better safe than sorry at this point, fresh install after a thorough formatting.)

 

[Blesh]

Jeremy Dalberg, Ultima Online Community Director, outlines the details here:

UPDATED 11:55AM PDT - Added a final step to the process for clarification.

In order to add an extra layer of password security, new accounts are required to choose a security challenge question and answer. However, existing accounts can also add this - and we strongly recommend that all our players do so. Instructions after the jump:

To add a security challenge question to your account, please do the following:

- Visit the Account Management page.

- Select "Create Account." (Yes, this is counterintuitive.)

- Select "Already have a member account" and log in using your EA member account. NOTE: this may be different than your UO account name - in particular, older accounts may follow the pattern "uo_youruoaccountname."

- The next screen should give you the option to select a security question. Follow all prompts to create a security challenge question and answer. Type carefully, and choose an answer that only you would know.

- Hit "Cancel" - unless, of course, you want to actually create another UO account The security question will be applied to your account.

This security question will be used whenever someone requests a password for that account. If you forget your answer, you will have to contact Customer Support to get it reset. We strongly encourage everyone to take advantage of this feature!

Remember to always use the best security practices to not only protect your Ultima Online account, but also your email and personal computer.

 

[envinyatar]

I am so sorry to hear about this. I think in addition to all the fixes and changes and items people have been asking the Devs for, increased account security should be numero uno on the list of important things to do.

 

[christy1221]

I wonder what the odds are someone could break in and get a list of user names and passwords?

I was wondering that too. They got an account of mine that was closed for over a year so I don't think it was a keylogger. Two of mine had been closed for about a month and the other five were active. I just don't see how they got the account that had been closed for such a long time. And some of my accounts had a different email and a different password but they got eight total of them.

 

[HeathBar]

I was wondering that too. They got an account of mine that was closed for over a year so I don't think it was a keylogger. Two of mine had been closed for about a month and the other five were active. I just don't see how they got the account that had been closed for such a long time. And some of my accounts had a different email and a different password but they got eight total of them.

Wow, that's kinda scary....

 

[ColterDC]

Icq dont use it .

How many times have ppl been hacked from icq and still want to use it.

It is the worst messeger possible

Yeah ICQ is crap.

Also I've changed the email address on all of my accounts to some nonsense like [email protected]

True you won't get any promotional emails from them, but it's better than risking your account.

 

[Wenchkin]

I'd also advise folks to remember that there are often threats to your computer security a lot closer to home. We're getting much better at online security, but offline can also have issues. Like family members who know passwords, or others who share the PC and aren't so careful. Let's just say I had first hand experience of a spiteful individual who very nearly got to my UO accounts after dropping a virus in my system Note to fellow UO players: don't tell your ex he has to move out before you get round to changing all passwords and pulling the network plug out the back of your PC LOL. That was an expensive brain lapse!

Suffice to say, I now keep a seperate hard drive and my linux and windows install discs in the hope I never have to use them as I did the last time. But I do recommend a spare, unconnected "clean" hard drive now small HD's are so cheap. At least then, if the worst happens to your PC, you can get online with a clean system and change all passwords safely if you think your security has gone.

Wenchy

 

[Loqucious]

Jeremy Dalberg, Ultima Online Community Director, outlines the details here:

UPDATED 11:55AM PDT - Added a final step to the process for clarification.

In order to add an extra layer of password security, new accounts are required to choose a security challenge question and answer. However, existing accounts can also add this - and we strongly recommend that all our players do so. Instructions after the jump:

To add a security challenge question to your account, please do the following:

- Visit the Account Management page.

- Select "Create Account." (Yes, this is counterintuitive.)

- Select "Already have a member account" and log in using your EA member account. NOTE: this may be different than your UO account name - in particular, older accounts may follow the pattern "uo_youruoaccountname."

- The next screen should give you the option to select a security question. Follow all prompts to create a security challenge question and answer. Type carefully, and choose an answer that only you would know.

- Hit "Cancel" - unless, of course, you want to actually create another UO account The security question will be applied to your account.

This security question will be used whenever someone requests a password for that account. If you forget your answer, you will have to contact Customer Support to get it reset. We strongly encourage everyone to take advantage of this feature!

Remember to always use the best security practices to not only protect your Ultima Online account, but also your email and personal computer.

Typical freakin EA, I try to type in the account name and password that I have used many times over the years and of course it doesn't work. Yes, I checked for caps and every other possibility.

 

[Loqucious]

Lost well over $1250 worth of items/gold. Didn't pick up any viruses on my computer, I don't go to stupid ass websites, I am always on the lookout for hackers. No one has my info to anything... no one. I do use ICQ, but I didn't open a link or look at any pictures. My account name and password were very good, but who knows. They specifically targeted me because they got both of my accounts. I called EA support and after a little bit of button mashing was able to talk to someone I could half understand, enough to get him to email me my new password. He told me to email customer support to see if I could get my items back, so I emailed Jeremy with pretty specific information as to the time of the hacking. So uhmm... change your passwords? I don't know really what to say so you guys can protect yourselves, cause I am always looking for hacking websites/links/emails.

Mudd, were you running any anti-virus software?

thx

 

[Nails Warstein]

Mudd did you ever, I mean ever sign up on a UO trade forum or site other than stratics? I am curious to see if there are any connections.

 

[Hunter Moon]

Just a thought, but do you "save" your password anywhere or have them on hot keys? My husband is a programmer and he is nuts about not having passwords saved, cookied or remembered anywhere on our computers or by websites.

Hunter Moon [HOT] Atlantic

 

[packrat]

If they are getting account info that was over eight months old, im wondering if EA was compromised? That's kind of strange that these old accounts are being hit after 8 months of no use. Most times they hit accounts minutes after they acquire the information.

 

[Bardie]

Just so everyone knows it is very very easy to get account info, especially for someone you know...and i found out on accident by trying to reactivate a very old account.

 

[Kelline]

a freind told me he got an email telling him ALL the accts in his name, Even some he had just used for the free time to place,& he never requested it from ea

 

[Mudd]

Thanks all... I was running Norton at the time, and no I didn't have any passwords saved anywhere. I did sign up for uo-auction a while (WHILE) ago, never used it since then. Thing that really kills me is that I have never had any problems with account security until I started selling all my stuff.

 

[Mudd]

Oh and to all those asking about Microsoft Software Removal - I think this is what he meant, I ran it and found nothing.

http://www.microsoft.com/security/malwareremove/default.mspx

If the admins remove that website, go to google, type in Microsoft Software Removal, and click the link that goes to the microsoft website. (second one down)

 

[Petra Fyde]

until I started selling all my stuff.

How were you selling it? How have you been in contact with the buyers? My best guess is that somewhere in one of those transactions is the source of your security breach.

 

[Loqucious]

What is Jeremys email address?


thx

 

[Mudd]

I was having them PayPal me the money, then I would give them the items. I checked the PayPal on a different computer, and the email is totally different.

Jeremy's email is jdalberg (at) ea (dot) com

 

[Loqucious]

I just tried to add the extra security via the account management links at UO.com, but it wouldn't accept what I am almost positive is my long used account name and password. The site did not accept my password nor any of the other 8 or so passwords I have used over the years. With this in mind I decided to ask that the password be sent to my email address. I have had two email addresses in the last 12 years. Neither of these addresses has received the password email and I requested it almost an hour and a half ago. This is a little worrisome to me. Is it possible the UO.com site has been hacked?

 

[Mudd]

That would make sence. I recently typed in account information for both of my accounts seeing when their time would expire. Loq if you can't get into your account I'd suggest calling EA support and having them freeze your accounts.

 

[Mudd]

But did you try to add uo_ before your account name? Like uo_Mudd if your account name was Mudd.

 

[Mudd]

Another little thing, when I called support they told me my email was the same, but I didn't receive any email that said my password had been changed.

 

[love2winalot]

Hail: Also remember, the account may not have been hacked, it may have been your e mail that was. If you know the account name, you can request, "For gotten password", and EA sends it to the e mail on file for that account. They open the e mail, get the password, delete the e mail, and you have no idea what just happened.

 

[Loqucious]

But did you try to add uo_ before your account name? Like uo_Mudd if your account name was Mudd.

Yes, this worked, but I still have not received any password email. And when did this uo_ thing come about?

thx for the help

 

[Loqucious]

Well, here is another stupid twist to this mess. I was just able to log into the account page about 10 minutes ago. I set up the secondary security stuff and hit the cancel button as suggested in the ealier post. Now I decided to try and log into the account management page again and sure enough it won't let me. So, I thought holy crap my account is having problems, but I opened UO with my password and was able to log onto my char.

I THINK THE UO.COM SITE HAS MAJOR PROBLEMS!!!!!!

 

[Loqucious]

Just in case can someone please help me with a phone number to EA customer support?

thx

 

[Loqucious]

K, so now I decide to try to log in using my account name WITHOUT the uo_ and this worked.

Unbelievable.

 

[Loquacious Wrath]

I think it is your keyboard. Is it wireless?

 

[TheGhostRaider]

I can fell your pain, I got hack twice in the pass year. I have a 16 digit password and twice they got in and have no idea how. To make it short, I try to get my stuff back even after giving the location of the vendor that have my stuff, because the thief never repair or change the color of my rare/artifact. I have call the police and it seen that not much can be done from they end. Look like a nice part time job to be a hacker because no one really look for then

 

[Pickaxe Pete]

That's awful, Mudd. Very sorry to hear that -- I know you had special plans for those funds too.

Maybe whoever stole your stuff will have some remorse, but probably not in this world.

Free email account or isp mail? I heard free email accounts are less secure.

 

[Mudd]

Gmail... :<

 

[Saris]

I cant name names but i know of one Icq hacker that is always reqruiting for a guild pretends to be ppl you know in game and will tell you he is a guild member that you know.

My freind got hacked by me right in frounts of me.

He was talking to the guy on icq told him to meet him by a moongate

He then recalled to the moongate and minimized UO

He talked to the guy for a few min the maximized his UO to play and was naked, spell book artis the pvp axe I gave to him, everthing was goon.

Norton found jack.

I ran the software too and got nothing as well but one day a few weeks later, I rebooted and when Icq opepend, I ran the Microsoft software tool It picked up a back door file used to contol host and has access to the remote desktop comands.

One thing I cant understand how did the guy empty my freinds char without logging on and disconnecting my freind, yes he was still connected when he maximized UO.


Also carfull of porn lol

I change my password every 6 months btw and only msg I use is MSN live, and I dont use it often as I do the ventillo thing.

I am still hack free, however about a decasde ago I got hacked in battlenet for my tal rasha set, guess what I got hacked though "icq".

If you are from atlantic I can maybey help out let me know.

 

[galefan2004]

This is the one and only place I have to give props to WoW. If you got hacked in WoW they simply restored a previous version of your character (before the hack) after they verified that you were hacked. If you get hacked, and it is verified that you were hacked then you should get all your items back.

 

[galefan2004]

Free email account or isp mail? I heard free email accounts are less secure.

ISP e-mails in my experience are normally much less secure. Good free e-mails are constantly scanning every single message you receive before they even allow you receive it and blocking those that might have viruses.

 

[Pickaxe Pete]

ISP e-mails in my experience are normally much less secure. Good free e-mails are constantly scanning every single message you receive before they even allow you receive it and blocking those that might have viruses.

From that perspective perhaps for users not familiar with how to handle email properly (most everyone), but I am talking about the password retrieval function for the user's email account, which is the most common hack approach. Much easier with free email, because the hackers can standardize their approach to hit a lot of marks, or exploit known weaknesses. This is akin to most exploits for web browsers being tailored for Internet Explorer because it is by far the most ubiquitous browser software. Hackers and malware writers always target the biggest userbase. Amazing what one learns on the job these days......