This is bull.
 

So i need a serious boost. And i decide to get hitched, Don't know the girl, Don't care, We both needed that love buff. Everything works out pretty well.

But then one day she says she wants to gift me something, And asks my ID, naturally, I saw no danger, It wasn't even my e-mail.

I give it to her, Unsuspecting that this girl was the most devious hacker i've ever dealt with.

So i try and log on the next day, Get the "wrong password" routine.
So i go to the site and file for a stolen password, Get the email and change it back.
Well, As i get on my char. about 15g+ missing from my storage, But nothing else. Not all my +9 equips, Not the godly 70 gear, Nothing.
The question is, Could a keylogger be the reason my password got figured out, Or is there more to it?
Perhaps some place you go to insert ID and obtain the password for it?
I dunno, I'm just glad to have my acc. secure again.
What do you guys think?

Good thing to this is that in-game money can be replenished, but the REAL money involved in getting your gears to +9 didnt got stolen. Consider yourself lucky. I had a friend who got stripped right down to the skin when he gave his account to somebody he thought he could trust.

And if im going to be the hacker-wanna be, i would start guessing on the IGN name (passwords are closely related to it), trial and error (guessing), or whatever.

Well, lets just be thankful it didnt go from bad to worst for you. Lesson learned you might say:smarty:

Perhaps, But it gives me this sinking feeling that ID stealing could become very common among acc. stealers.

And as for my SC items, YEah, thank god THOSE weren't taken, I could easily remake 15g just by selling that axe.
And i have 30 day extenders, outfits and all that too.

Just change your password constantly like I do. Mine is every 2-3 days or whenever I get a random gift (happens often).

People will never need your email for your ID. They just need your ID. You can sign onto the game using your email or ID, but when sharing info with other players, only use your ID.

It is possible for keyloggers to get your info. If you think that's it, I'd scan your computer thoroughly to see what you get. Cuz if its a keylogger, they could just get your email again. lvra had an issue like that.

Then there was some person on here who claimed he could highjack peoples accounts.

Scanned with my uber-Antivirus, No keyloggers or anything.
I'm gonna take a guess and say that if you have the ID, you can work from there to obtain more info.
I guess It's just not the safe, fun Fiesta it used to be. -Sigh-
Luckily, My 60$+ worth of CS items are still intact, in a third item bag, I guess they did'nt notice it. Because an Iron Case is pretty darn expensive. ($20, If my math is right)
Apparently, The hacker had me since thursday, And i had not logged on again until sunday morning, Around 11:00 AM, When i did, after fixing all the passwords and info, I found my gold was gone, I was no longer in Valkjestic (The best guild in the Apoline, No joke) And that i had almost FIVE HUNDRED kill points. Do you know how many i had when i left? Hmm?

SEVEN.

Seriously messed up hacker.
But they leveled me up, lol. I won in the end.

The hacker must have a consious. "Ill hack your account, but I feel bad for doing it so ill take you money and nothing else"

Maybe they thought the items could be traced back to them. Since if you see your items being vended you kindda know who it was.

If your at risk of getting caught for hacking take what you need and delete the characters. Wouldnt that make more sense.

Anyway might as well change your e-mail and info, since they got you once they can get you again

Yeah, changed everything, Though apparently my "Wife" has been caught hacking as many as 6 other players, So i'm kind of hoping the GM's return what she took, As she has been reported by multiple people, It's kind of undeniable. The problem, Of course, Is whether they CAN return all the stolen items.

What was your previous password? How long was it? If you made it 4-5 characters long, they may have brute-forced their way into the system.

My old password (Because it's no longer used)
was

98765432198765gg
(This is an example, As a lot of my passwords revolve around this)
It's pretty hard to just up and guess it.
But then again, It's pretty easy to get the info you need from people, With that much money and +9 garbage that was stolen >.>

16 characters... okay, brute-forcing is out, since it would take a couple of centuries to crack that.

Hmm... I know this is kinda obvious, but did you ever give your pass to anyone?

Did you receive any strange emails with links?

Do you have your email listed somewhere on Outspark forums, or did you give it to someone before the incident?

I made it that long for this very reason, lol
No, Never, Just My ID for gifting. If anyone figured it out, It'd have to be an act of god, OR some form of Hacking.
No, Not to MY knowledge. And I never really click the links in E-mails anyway.
It's very possible that i have it listed, In fact, My E-mail is listed here on FiestaFan as well, But i don't see how that singles ME out, and even then, How did they figure this stuff out?

On FF, your email isn't listed. You can contact people by email, but their actual email address will not be revealed to you. And you don't have MSN/Yahoo, etc. contacts listed here either... But even if you have your email listed on Outspark, your contact email is different from login email, correct? That's why she had to ask you.

As for the pass... well unless you went to some website that says "We'll give all prems and make you lvl 199, just give us you login info" (I think you know better than that), I guess we're back to the keylogger theory. Turn off your internet connection (or pull the plug), and scan again. Some crafty loggers change their signature to make them invisible by contacting their home server during scans.

Hrmm.
I tried the scan while disconnected. Got nothing.
So i can only conclude one of two things:

1. Somehow, My password, As large as it was, Was figured out, Could have been a contact, could have been a guess from anything i post in any other numerous amounts of sites.
2. There is a Client that can help you find the password, Or a lost passowrd, Insert ID here kind of thing. In that case, I need to switch e-mails entirely.

I dunno, My acc. is safe now, But it still baffles me.

Hang on... recovery! Did you by any chance give her the answer to your recovery questions? Like if your question was "Mothers maiden name?", did you ask you in a convo something like that?

No, But i told her my real name, And I think that's just what did it.
Dang, it's sad when not even your own name is safe T_T
Brb, going to change some stuff.

Doesn't the password that you recovered get sent to your email?! So unless she has access to your email too, she shouldn't have been able to get your password via password recovery....?