Attempted Account Hack

[Nebu]

Hey everybody.
I did a pretty stupid thing today. There was a guy offering the NRF program on a german EU Forum, but he had a link to rapidshare instead of the homepage. It seemed fishy, so I downloaded the prog to check it with an antivirus and warn the others so they wouldnt downloaded. I did find a keylogger and deleted the files immediately, but it seems the damage is done. The hacker tried logging in to my EU account, but didnt get anywhere since I have a Gold Card. So they logged in to the EU page and wrote a support case saying that I lost my Gold Card and that I need a new one.
After seeing this, I immediately requested an account reactivation and made a new password. Then I updated the support case saying that I have not lost my Gold Card and that my account got hacked. My Gold Card is locked as the hacker attempted too many logins without the correct number.
Unfortunately, as if it wasnt enough, they managed to get into my email account and change my password. I am still logged on to the EU homepage, so they cant change the password there.
But now I am clueless, what next???

[Pheonix]

Ring MA and tell them to lock down the acount for the time being until you can get it sorted. maybe have a code word so that they can authenticate it is you, when you want to reactivate. Asking MA to change the email acount connected to the acount would help, though i dont know if they would do that, but maybe if you send them a copy of your birth certificate they would change it. just make sure that they know that you still have a gold card, so they make sure that the goldcard is not canceled from the acount

[whiteknut]

That sucks!! I would send support case to ask them to lock my account until i have send them photocopy of my ID.

[safara]

Sorry to hear this Nebu

If your gold card and account are locked for the moment, this is a good thing. No further harm can come of it I suppose.

Until you contact MA on Monday and go through the real ID thing to get your account unlocked again....

[LedEye]

cant you call them at supportcase?
Ok, seems like you dont live in sweden but it might be a smart thing to do because you have skills and lots of peds ingame in skills and so on..

[Frigid]

LOCK it down! It's better to NOT play than to have it hacked and stripped.

Issuance of Gold Card should require more than just a support case, I hope...

Good luck and kep us informed. How MA handles this sticky-wicket will speak volumes on how secure we really are.

[Solaris]

DAmn - thats mean!!

I would find that logger and get it deleated asap.

And then I would get totally paranoid and close all creditcards and subscriptions, as well as phoning supports to email-servers to block access for 48 hours, and then let you resign... after that Id have my computer wiped with something very strong. Like a total deletion of all drives.

Could you post some names maybe. Of the keylogger and program used. Im sure the anti-virus companies would love to get good hold of any info.

[Nebu]

Originally Posted by LedEye

cant you call them at supportcase?
Ok, seems like you dont live in sweden but it might be a smart thing to do because you have skills and lots of peds ingame in skills and so on..

This is my support case about it:
Note that the first part was NOT written by me, I have not lost the Gold Card.

Originally Posted by support case

27 Oct 2007 You wrote:
Hello.
I lost my gold card today. Could you do anything, so that i can buy new one ?

Best regards,
xxxxxxxx

27 Oct 2007 You wrote:
Hello,
it seems that someone has tried to login to my EU avatar with my account data. Because I have a Gold Card, they could not log in.
It seems they did log in to the EU page though, and wrote the above support case.
I have NOT lost my Gold Card. I reactivated my account already and changed my password, but I still cannot access EU, because my Gold Card is locked.
I have found a keylogger on my Computer which I removed.

I have tried to lock the account by attempting to log in a couple times with a wrong password, but it seems it only locks it for 30 minutes now.
I also dont think any harm can be done, as the Gold Card is locked.
I found this on the support page:

If you have forgotten the password and/or login, you may reactivate your account. If you cannot remember the Email address, you need to send us a copy of your passport together with the request that you want to reactivate your account. You also need to state a new Email address.
Please send this information to:

MindArk PE AB
Jarntorget 8
SE 413 04 Gothenburg
Sweden

As soon as we have changed your Email address, you will be able to reactivate your account.

Seems I will have to make a new email account after I have got rid of the keylogger and send them the info.

[Nebu]

Originally Posted by Solaris

DAmn - thats mean!!

I would find that logger and get it deleated asap.

And then I would get totally paranoid and close all creditcards and subscriptions, as well as phoning supports to email-servers to block access for 48 hours, and then let you resign... after that Id have my computer wiped with something very strong. Like a total deletion of all drives.

Could you post some names maybe. Of the keylogger and program used. Im sure the anti-virus companies would love to get good hold of any info.

I dont have any cc's registered on the EU page so I wouldnt worry about that.
Here's the keylogger, unfortunately its in german:

http://www.entropia-forum.de/modules...078&fullsize=1

[Bones]

That really sucks mate ... are you sure they dont have your EntropiaForum password also?

How can anyone be sure you are who you say you are?



Bones