CHECK YOUR ACCOUNTS!

[Petra Fyde]

Please everyone, check that the email address associated with your UO account is the one you expect to see.

 

[Connor_Graham]

Uh...ok. I did and it's correct. What's up?

 

[Duskofdead]

Me too. Is there some site security problem that might have affected us?

 

[Smokin]

Please everyone, check that the email address associated with your UO account is the one you expect to see.

Um perhaps you could tell us why and not scare us all, also tell us how to do so.

 

[Petra Fyde]

It's a bit complicated, but maybe this will help:
http://vboards.stratics.com/showthread.php?t=124025

 

[Petra Fyde]

How? well, log in to account management and check that it has the email you gave them.

 

[Hemisphere]

Seems a bit alarmist - is this happening to lots of people or just the guy referred to in thread?

 

[Smokin]

I still dont understand it.

 

[Petra Fyde]

I'll try to explain simply:
1. The poster found a wrong email address on his account
2. he sent an email to the address.
3. the email bounced. Address does not exist
4. he registered the email himself and found other accounts with that email address.
5. On the assumption that these accounts belonged to a would-be hacker he accessed one, moved some stuff and waited to see who screamed.
6. Which lead to the thread you just read. Trouble is, that email doesn't belong to the person who's account he accessed, and nor do the other accounts! Somewhere there are other accounts with that dodgy email address on.

He has offered to supply a list of the usernames, but I'm thinking posting that wouldn't be a terribly good idea?

 

[drakost]

Apperantly I may have stumbled upon a hackers attempt to steal several accounts, including mine and freelsy. At least that is the theory, which seems to be panning out thus far. As you read in the post that Petra linked to I found that my account was hacked and information changed, including the email address. There are currently 10 accounts linked to this email address. We were forunate enough that the hacker was not that bright and never registed the email that he was using on the accounts. I will be forwarding all the information gathered from petra and myself to EA so that they can take the appropriate actions.

 

[drakost]

Sorry petrawas writing that up before your last post made it on.

 

[Petra Fyde]

np, I just hope we manage to alert the other 10 users before they lose anything.

 

[Crysta]

Best question now would be "have you downloaded anything recently that you probably shouldn't have?". I don't necessarily mean a cehating program of any sort for UO, but anything.. perhaps something from a download site linked to on a public spot online or such? In cases like this the usual culprit is a file that each person involved downloaded that infected their system.

Of course, if that IS the case i'd advise changing your information again using another computer you know to be safe or at least clean and not logging in with your current again for the time being.

 

[Duskofdead]

Apperantly I may have stumbled upon a hackers attempt to steal several accounts, including mine and freelsy. At least that is the theory, which seems to be panning out thus far. As you read in the post that Petra linked to I found that my account was hacked and information changed, including the email address. There are currently 10 accounts linked to this email address. We were forunate enough that the hacker was not that bright and never registed the email that he was using on the accounts. I will be forwarding all the information gathered from petra and myself to EA so that they can take the appropriate actions.

I read over the previous exchange.

I find it extremely odd--- perhaps unbelieveable, that someone would go to the trouble of somehow hacking, trojaning, or otherwise acquiring the ability to log into MULTIPLE players' accounts, change the contact e-mail to a fictional e-mail address and then.... drop the ball.

For you to find that you could go register this fake e-mail and take over where the original attempt left off.

That's bizarre to the point of stretching credibility.

It sounds like you're just holding some innocent accounts hostage now and blaming someone who had nothing to do with it. If you were hack victim. Maybe you weren't.

 

[christy1221]

I wonder if it's the same guy that got me last year. The email they used wasn't a real email. I didn't even think to register it myself.

All my accounts are closed so i don't have to worry about them taking anything unless they reopen them.

I'm not quiting I just can't pay for them right now. Almost our whole town doesn't have electricity so we need all the money we have for food and supplies. I hate not having electricity LOL.

 

[Faeryl]

Well, I checked my info when I read this to be safe, and both of my accounts info is as it should be

 

[Maplestone]

all clear. (for me)

 

[TheScoundrelRico]

Still not hacked...la

 

[Oriana]

Thanks again Petra for that heads up. Hopefully the information can lead to a catch. Checked all ours and we're good here.

 

[Tina Small]

Petra and Drakost, I really hate to say it but the problem may be larger than you think. When you use the "Lost Account Name" option to have account names sent to a specified e-mail address, the e-mail you receive only gives you the names of up to 10 accounts associated with that e-mail address.

In other words, more than 10 accounts could have the bogus e-mail address on them.

(I checked all my accounts and they are all showing the correct info.)

 

[drakost]

This is the letter I just sent to EA:

Not sure this is the correct area to be sending this.


3 days ago, I logged into my account (account name ******). And noticed my account email and some other information had been changed. The email that was put in was ********************. I sent an email to this address recieved a message that the account did not exist. I then registered the email and requested for uo to send me the accounts associated with the email that was added to my account without my knowledge. In the hopes that I could flush the person out, I accessed one of the accounts that were associated with this email and aquired several items in the hopes that the person would start screaming everywhere that he was hacked. Sure enough he did. However after speaking with Petra who is a MOD at stratics it would seem that there may be an underlying situation. The person whoms account was associated with mine was not the only username. There were 10 accounts associated with this email account. After doing some looking into the player that responded to my plan I do not believe he was the hacker, but simply someone who was a victim of a larger situation It is petra's belief, and now mine that these accounts may be targeted by a hacker using this email address. The password to this email is *********. I have no use for it nor do I want it. The following account names are the ones associated with this email address. I understand that what I did was not exactly the right thing to do, however UO's track history with hacked accounts seems to be deal with it on your own. Don't take that the wrong way, however its kinda of difficult for you to say otherwise. I understand that my account will probably be banned which is fine, however I believe that the protection of these other accounts before they lose everything is more important.
I will be returning the goods that was retreived from the freelsy account as soon as I contact him.



Here are the accounts associated with this email



*********
*********
*********
*********
*********
*********
*********
*********
*********
*********

 

[AesSedai]

4. he registered the email himself and found other accounts with that email address.

- I'm not following this part of the scenario. The emails from other accounts were already sitting on this nonexistent email address?

x: nevermind

 

[drakost]

I understand you skeptisim. That is why I have been as straight forward and open as possible. I have sent Freelsy a PM with my home phone number so that we can arrange for him to pick up his stuff. I am not a hacker, nor would I destroy anything on someones account even if they did hack into mine, which I do not believe freelsy did, and for that I apologize to him for the aggrivation.

I read over the previous exchange.

I find it extremely odd--- perhaps unbelieveable, that someone would go to the trouble of somehow hacking, trojaning, or otherwise acquiring the ability to log into MULTIPLE players' accounts, change the contact e-mail to a fictional e-mail address and then.... drop the ball.

For you to find that you could go register this fake e-mail and take over where the original attempt left off.

That's bizarre to the point of stretching credibility.

It sounds like you're just holding some innocent accounts hostage now and blaming someone who had nothing to do with it. If you were hack victim. Maybe you weren't.

 

[Viper09]

This is the letter I just sent to EA:

Not sure this is the correct area to be sending this.


3 days ago, I logged into my account (account name *******). And noticed my account email and some other information had been changed. The email that was put in was ********************. I sent an email to this address recieved a message that the account did not exist. I then registered the email and requested for uo to send me the accounts associated with the email that was added to my account without my knowledge. In the hopes that I could flush the person out, I accessed one of the accounts that were associated with this email and aquired several items in the hopes that the person would start screaming everywhere that he was hacked. Sure enough he did. However after speaking with Petra who is a MOD at stratics it would seem that there may be an underlying situation. The person whoms account was associated with mine was not the only username. There were 10 accounts associated with this email account. After doing some looking into the player that responded to my plan I do not believe he was the hacker, but simply someone who was a victim of a larger situation It is petra's belief, and now mine that these accounts may be targeted by a hacker using this email address. The password to this email is *********. I have no use for it nor do I want it. The following account names are the ones associated with this email address. I understand that what I did was not exactly the right thing to do, however UO's track history with hacked accounts seems to be deal with it on your own. Don't take that the wrong way, however its kinda of difficult for you to say otherwise. I understand that my account will probably be banned which is fine, however I believe that the protection of these other accounts before they lose everything is more important.
I will be returning the goods that was retreived from the ******* account as soon as I contact him.



Here are the accounts associated with this email



*********
*********
*********
*********
*********
*********
*********
*********
*********
*********

Nice. Keep us updated on this. I'm curious to see what EA/Mythic will do here

 

[The Craftsman]

Hi drakost,

Just a thought .. have you tried sending an email to the bogus address but with a .co.uk suffix instead of .com ?

.co.uk is the default in britain and the would be hacker may have registered that address then by accident put .com on the UO accounts. Ive seen this happen before with the incorrect suffix so its worth trying out.

Craftsman

 

[Sarsmi]

I checked mine, they are good. Thank you guys for the heads up (and drakost for doing what you can to get things sorted out), what a bizarre situation!

 

[sablestorm]

When I was hacked a few weeks ago, something similar happened. The hacker changed the passwords but also added their own email address. They changed the information all back to mine, but the EA customer service agent I dealt with had a record of the changes that were made so he could go search for other accounts with that email address.

 

[Capricious]

My main and current account is fine. Will check the closed ones later since really the worst they could do to those is delete characters. Thank you for the head's up.

 

[soulstoner]

ANOTHER ASPECT TO CONSIDER WITH YOUR PROFILE INFORMATION:
A quick story - 2 friends/roommates - both played WOW at home at same time (and with friends over with laptops - quite a scene ). Friend number 1 played much longer, had very high levels and was very much into the game and their achievement of extremely high levels and whatever else the wow'ers are into. Player 1 introduced Player 2 (roommate/friend) to game and helped him along. In time (keeping story short) Player 2 wanted to do something bad to Player 1. Given the friendship and roomatey scenario - Player 2 had Player 1's username and passcode and email address and such and sold Player 1's WOW account on ebay. (did your jaw just drop!!??)

I knew both people (player 2 more). I (and a few others) were told the story by player 2 on Vent one evening (Player 2 also plays UO) as they boasted and laughed about it. I/we were flabbergasted and relatively paralyzed and so appalled at the deed (double checked the reason why immediately via telephone - no reason at all - very trite - just being a dink/di*k) - trust should be a long time in the earning - even then .......... Asked him to leave our little UO guild as none would ever rust him in the future - He didn't even 'get it.'

 

[Banner]

All clear here I checked both of my acct's and all ok...

 

[Zodiac19]

Every time I access my account info EA sends me an email saying my account has beed accessed. That should be the first clue that your stuff got hacked and be on the horn to EA.....

 

[Ovrkill]

Another thing to think about and make sure it doesnt happen to you.

If you have your UO account pointing to a hotmail account, please remember to log onto that account at least once a month (cant remember if its one or three months). If you do not do this, the email account becomes available for anyone to register.

I have seen this happen a few times, and i was able to get an email account that was previously used by someone else (not game related).

So be very careful with what email accounts you do use.

I suspect this may have been what happened, the hacker hasnt used the email account in over a month, and didnt know it would be released, and stupidly thought the email account was still standing when they changed the uo account email address.

 

[sablestorm]

Every time I access my account info EA sends me an email saying my account has beed accessed. That should be the first clue that your stuff got hacked and be on the horn to EA.....

In my case, the hackers got into my email first and changed the passwords on me. From there, they were able to get a list of some of my UO accounts, then were able to get my UO passwords.

 

[Basara]

ANOTHER ASPECT TO CONSIDER WITH YOUR PROFILE INFORMATION:
A quick story - 2 friends/roommates - both played WOW at home at same time (and with friends over with laptops - quite a scene ). Friend number 1 played much longer, had very high levels and was very much into the game and their achievement of extremely high levels and whatever else the wow'ers are into. Player 1 introduced Player 2 (roommate/friend) to game and helped him along. In time (keeping story short) Player 2 wanted to do something bad to Player 1. Given the friendship and roomatey scenario - Player 2 had Player 1's username and passcode and email address and such and sold Player 1's WOW account on ebay. (did your jaw just drop!!??)

I knew both people (player 2 more). I (and a few others) were told the story by player 2 on Vent one evening (Player 2 also plays UO) as they boasted and laughed about it. I/we were flabbergasted and relatively paralyzed and so appalled at the deed (double checked the reason why immediately via telephone - no reason at all - very trite - just being a dink/di*k) - trust should be a long time in the earning - even then .......... Asked him to leave our little UO guild as none would ever rust him in the future - He didn't even 'get it.'

While bad, that doesn't even begin to rank up there with the Chinese player whose roommate stole his sword in an MMO, sold it on line for about $750 US. The person whose sword was stolen then MURDERED his roommate in retailation - IN REAL LIFE (not in the game).

Take whatever moral you want from that...

 

[Morgana LeFay (PoV)]

Take whatever moral you want from that...

Keep your hands off that guy's double whopper with cheese?

 

[Anon McDougle]

again this is not hacking someone some where gave up thier email and or account info to someone or registered at a less than stand up site and used the same email/password as in game IF emails and such were this easy to "hack" they would be after much bigger fish than us in the UO pool i am not discounting anyones loss or the need to keep your stuff private and safe