Security question (elite look here)

[Starfinder]

Hello.
Recently I have had some, ehem, major issues with my security on my msn messenger.
It seems that on 09/08-2008 my password was cracked and person X logged in on my messenger. Cursed be me for sorting my contacts in to groups because all (more or less) in my "Entropia Universe" group was contacted by this person X asking to borrow some stuff.

He said that Starfinder had been locked in Entropia Universe, and that he would like to borrow some stuff, but it had to be on a new account he just made. Since the chat came from my msn one guy agreed to lend out some stuff. (Needless to say - high end)

The only reason we "caught it" so quickly (the following day) was that I asked this person to come hunt with me, which he thought was strange cuz my account was locked.

So ofcourse he filed a support case.


Now, disregarding the actual scam - since we are working on solving that, I have one simple question....
How the #¤""#"#@£@£$ could this person get a hold of my msn account.

Here's how "I work" online.

1) dont trust anyone.
2) never click links in mails or in messages.
3) never use the same password two times.
4) scan my computer every 24 hrs for virus.

(The msn password has been stored on my computer for the last 1½ yr, I havent typed it in the last 1½ yr - which leaves out keyloggers)

When i became aware that my msn was getting cracked I scanned my computer with like 10 diffrent av / spyware scanners they found nothing.
I looked at my processes with HijackThis - nothing unusual.

So i thought - shi*, prehaps I did use the msn password somewhere else.
So i changed it to something rather "overkill" (25 chars, upper / lower case, numbers, special chars).

This morning I woke up to a "Unknown password" when i signed into messenger. tried it 3-4 times - prehaps i had mistyped the password.
Then i tried my old password - and i was back in. A guy on my msn said the scammer had logged in on my messenger again (Lucky me Ive told everyone on messenger not to trust me anymore since my account is compromised).

So I have one simple question. How the #¤%# did this happen, and what can I do to stop it?

[Tigerman]

I cant find a way to subscribe without replying... Atleast now I do :p

[aridash]

how do you stop it? dont use MSN. theres obviously a bug in there and someone is exploiting to to very good effect. as you describe it they've managed to revert your password to an old one which might suggest some sort of MSN server access. or put another way, this needs addressing at security/MS msg boards.

[~ thebuzz ~]

Bummer - and yea U also told me not to trust me in any way through MSN.

Now let me go further...
Don't trust ME anyway at all, don't give persons pointed by me anything, don't trust me on MSN, EF, IGM or other stuff.

Just only lend me things to a person in game named Tom thebuzz Christensen - scan me and see if Im at least 75 Laser Pistoleer Hit, maybe then its me that U lend an item..

Now who wanna lend me a MM or Mod Fap?

[Tussi]

Through a quick chat with starfinder i think we found out how the password was resetted, he's currently busy to plug the hole.

Tussi

[Joker]

interesting... will be fun to see how this pans out

[Lykke]

A lot of shit is going on with messenger. There's also that Worm thing or whatever virus it is. I get it all the time. I see friends log in and then they pm me a link to something called "becool" and then they log off shortly after. I got the same link from several friends - just NEVER FOLLOW ANY OF THEM. I don't. I close down window as soon as I see it ... but I wonder how they can send from my friends messengers?

Good luck solving this starfinder!

[Etopia]

Originally Posted by Tigerman

I cant find a way to subscribe without replying... Atleast now I do :p

Top o f thread => thread tool => subcribe

[kosmos]

thanks for the info starfinder give alot to think about...

[Starfinder]

The stupid thing about this "investigation" im doing is... everyone who can provide a little insight to who did it always respond with:
We can not give that information out.

Ive spoken with hotmail (surely they must be able to see which IP's "ive" connected to messenger from)

Ive spoken with MA (Still speaking with them - the guy im speaking with is busy getting ready for the Leipzig game convention)

Tomorrow ill speak with a guy from google (via my work - prehaps he can help)

The reason for the google guy is that I found the email the scammer used to obtain my password for messenger, which is a gmail account.

But without mindark doing something quickly im afraid the item is lost.
I fail to understand how hard is it for them to simply see in their logs which IP did the original trade... and then cross check with the other account who logs in from that IP as well... and lock the entire bunch until the investigation is over. For all i care they can lock me while the investigation is ongoing.

Its a serious problem with MindArk that they seem so afraid to help the community as they are in those matters.

Im not saying they should treat me or the scammed person diffrently than other players, but at the same time I must point out that both me and him have been with MindArk and Entropia Universe since 2001 in my case and I think the scammed person has been with Entropia Universe since beta.

In other words we are very old players. Heck, ive been visiting MA HQ... Ive been out eating dinner with them privatly.

Yet when it comes to issues like this they just shut the door.
I called them on their home phones as well as soon as we found out what had happend. But still nothing. Its troubling that a game with such a massive amount of money being transfered each and every day, that there seems to be a policy about "If the trade has happend inside entropia universe, its legal no matter what".


And on a side note - if someone yells out im a scammer, which has already happend on a competing forum. Jesus.. Please have the balls to say it to my face!!!!!