test content
What is the Arc Client?
Install Arc

Account got h acked

erikmodierikmodi Member Posts: 144 Arc User
This morning, I couldn't log into my account. When I tried the "Forgot Password," it says my e-mail isn't registered for an account. Had to make a new account to submit a ticket about it, then found e-mails in my Trash folder (some in Russian) about changing my e-mail address.

Here's hoping I can get this resolved before whoever did this destroys the years of effort I've put into my STO characters.
«1

Comments

  • risian4risian4 Member Posts: 3,711 Arc User
    Just curious, were those e-mails an advice that you should change your password or that it had been done (by someone)?

    Either way, there's little any of us here can do. If you have contacted support, I'm afraid you have to wait for them. If not, you may also want to try and contact @ambassadorkael#6946 - he may be able to get you in contact with support directly.
  • erikmodierikmodi Member Posts: 144 Arc User
    I have a ticket up, hopefully I'll some action there. Didn't expect anyone here to have a magic solution, just wanted to vent some frustration and fear :)

    The first e-mail was a "New Computer Saved" e-mail, the login time at 2:15am (even if that's Pacific time, I was asleep). Then there's two e-mails in Russian, one of which mentions a location of Matawan, New Jersey. I live in Minnesota. Then there's the two e-mail change request e-mails.

    I've changed the password on my e-mail account, since apparently they were able to get those e-mails to change my e-mail address and password. Now all I can do is hope Support can return my account to me swiftly (or at all), and that whoever TRIBBLE it hasn't wrecked all the work I've put in.
  • evilmark444evilmark444 Member Posts: 6,951 Arc User
    This is why I wish Cryptic had an authenticator app we could use ...
    Lifetime Subscriber since Beta
    eaY7Xxu.png
  • erikmodierikmodi Member Posts: 144 Arc User
    Would be nice.
  • starmanjstarmanj Member Posts: 719 Arc User
    Accounts are pretty much Secure -via- Each computer must submit a code from email in order to get on
  • evilmark444evilmark444 Member Posts: 6,951 Arc User
    starmanj wrote: »
    Accounts are pretty much Secure -via- Each computer must submit a code from email in order to get on

    Except when your email is compromised, which is how all my previous account h.acks have occurred. A system like what blizzard offers, where you can link an authenticator to your account (primarily through the app now) and require a continuously changing code from that authenticator on every login, is much more secure.
    Lifetime Subscriber since Beta
    eaY7Xxu.png
  • erikmodierikmodi Member Posts: 144 Arc User
    Like account keys in Star Wars: The Old Republic.
  • legendarylycan#5411 legendarylycan Member Posts: 37,284 Arc User
    and since apps are on devices that all have internet connections, the app can just be TRIBBLE instead

    that's why physical authenticators that can be plugged into USB ports are the best bet​​
    Like special weapons from other Star Trek games? Wondering if they can be replicated in STO even a little bit? Check this out: https://forum.arcgames.com/startrekonline/discussion/1262277/a-mostly-comprehensive-guide-to-star-trek-videogame-special-weapons-and-their-sto-equivalents

    #LegalizeAwoo

    A normie goes "Oh, what's this?"
    An otaku goes "UwU, what's this?"
    A furry goes "OwO, what's this?"
    A werewolf goes "Awoo, what's this?"


    "It's nothing personal, I just don't feel like I've gotten to know a person until I've sniffed their crotch."
    "We said 'no' to Mr. Curiosity. We're not home. Curiosity is not welcome, it is not to be invited in. Curiosity...is bad. It gets you in trouble, it gets you killed, and more importantly...it makes you poor!"
    Passion and Serenity are one.
    I gain power by understanding both.
    In the chaos of their battle, I bring order.
    I am a shadow, darkness born from light.
    The Force is united within me.
  • leemwatsonleemwatson Member Posts: 5,504 Arc User
    This is why I wish Cryptic had an authenticator app we could use ...

    There is of sorts. But it's through Arc that it happens.

    Suprisingly, this isn't the first case I've heard of this week.

    "You don't want to patrol!? You don't want to escort!? You don't want to defend the Federation's Starbases!? Then why are you flying my Starships!? If you were a Klingon you'd be killed on the spot, but lucky for you.....you WERE in Starfleet. Let's see how New Zealand Penal Colony suits you." Adm A. Necheyev.
  • thevampinatorthevampinator Member Posts: 637 Arc User
    edited March 2017
    Hmm, the other day password would not work for the launcher but it worked for the forums, what fixed it was basically, erasing the user name and then rewriting your username and it went through once again. Basically I think its some glitch with the launcher. Pretty much try that and I think it would work for you. It would keep saying incorrect password each time, but yeah erasing the user name and rewriting it fixed it so it worked again. I don't think your account was TRIBBLE its just the launcher got bugged out somehow for some weird reason it can't recognize your user name thus password won't work.
  • evilmark444evilmark444 Member Posts: 6,951 Arc User
    Hmm, the other day password would not work for the launcher but it worked for the forums, what fixed it was basically, erasing the user name and then rewriting your username and it went through once again. Basically I think its some glitch with the launcher. Pretty much try that and I think it would work for you.

    Umm ... you must have missed this part of the OP's post:
    [...] then found e-mails in my Trash folder (some in Russian) about changing my e-mail address [...]

    Lifetime Subscriber since Beta
    eaY7Xxu.png
  • evilmark444evilmark444 Member Posts: 6,951 Arc User
    Hmm, the other day password would not work for the launcher but it worked for the forums, what fixed it was basically, erasing the user name and then rewriting your username and it went through once again. Basically I think its some glitch with the launcher. Pretty much try that and I think it would work for you.

    Umm ... you must have missed this part of the OP's post:
    [...] then found e-mails in my Trash folder (some in Russian) about changing my e-mail address [...]

    I see, well thats a problem I did not see that post. But yeah I imagine account would not be at risk, unless he bought from gold sellers and they managed to get ahold of his passwords. Thus leaving his account vulnerable. Hopefully it can be resolved, but its possible arc got **** last night and they stole accounts, that could be another thing to consider since it went offline for some wierd reason. Pretty much nothing we can do about this would have to be taken to support hopefully they can fix it. Advice change your password for your email account since they seem to have it then tell them about your account being **** all you can do really.

    It can actually be pretty easy to have your account compromised if you don't take the right precautions. Years ago I got selected for the beta for StarCraft 2: Wings of Liberty. One day I went to login and found that my password had been changed and an authenticator added (I didn't use them at that time).

    It turned out that I somehow got infected with a keylogger, which gave the h.ackers my email address and email password, which was all they needed to take over my blizzard account and attempt to clean out my then unused WoW account (had unsubbed at least a year prior when it was revealed they would be removing my favorite spec, Death Knight Blood DPS). They used a prepaid card and stole what little gold I had, which really wasn't much, but ever since that happened I always use an authenticator whenever a game offers it, and haven't been h.acked since.

    What's funny is that free time from the h.acker's prepaid card is what got me playing WoW again, lol.
    Lifetime Subscriber since Beta
    eaY7Xxu.png
  • leemwatsonleemwatson Member Posts: 5,504 Arc User
    Hmm, the other day password would not work for the launcher but it worked for the forums, what fixed it was basically, erasing the user name and then rewriting your username and it went through once again. Basically I think its some glitch with the launcher. Pretty much try that and I think it would work for you.

    Umm ... you must have missed this part of the OP's post:
    [...] then found e-mails in my Trash folder (some in Russian) about changing my e-mail address [...]

    I see, well thats a problem I did not see that post. But yeah I imagine account would not be at risk, unless he bought from gold sellers and they managed to get ahold of his passwords thats one possible reason. Thus leaving his account vulnerable. Hopefully it can be resolved, another reason its possible arc got **** last night and they stole accounts, that could be another thing to consider since it went offline for some wierd reason. Pretty much nothing we can do about this would have to be taken to support hopefully they can fix it. Advice change your password for your email account since they seem to have it then tell them about your account being **** all you can do really. Hopefully this gets resolved.
    But yeah, one major thing never to do is buy from gold sellers thats one way to risk your account, they can get your passwords that way and this is how they get ahold of player accounts.

    My Email password is unique amongst mine. Every thing I use password-wise is different. It's common, but stupid that people use the same password for everything.

    What everyone should do is go onto the Arc site and enable as much of it's security as possible. Arc Defender is reasonably good.
    "You don't want to patrol!? You don't want to escort!? You don't want to defend the Federation's Starbases!? Then why are you flying my Starships!? If you were a Klingon you'd be killed on the spot, but lucky for you.....you WERE in Starfleet. Let's see how New Zealand Penal Colony suits you." Adm A. Necheyev.
  • ambassadorkael#6946 ambassadorkael Member, Administrator Posts: 2,679 Community Manager
    Support should be able to help here, but let me know what happens.
  • crypticarmsmancrypticarmsman Member Posts: 4,115 Arc User
    I have a ticket up, hopefully I'll some action there. Didn't expect anyone here to have a magic solution, just wanted to vent some frustration and fear :)

    The first e-mail was a "New Computer Saved" e-mail, the login time at 2:15am (even if that's Pacific time, I was asleep). Then there's two e-mails in Russian, one of which mentions a location of Matawan, New Jersey. I live in Minnesota. Then there's the two e-mail change request e-mails.

    I've changed the password on my e-mail account, since apparently they were able to get those e-mails to change my e-mail address and password. Now all I can do is hope Support can return my account to me swiftly (or at all), and that whoever **** it hasn't wrecked all the work I've put in.

    You might also want to scan your PC with a couple of Malware detection products (like malware Bytes and Spybot) to make sure you don't have a hidden Keylogger installed and running on that PC.
    Formerly known as Armsman from June 2008 to June 20, 2012
    TOS_Connie_Sig_final9550Pop.jpg
    PWE ARC Drone says: "Your STO forum community as you have known it is ended...Display names are irrelevant...Any further sense of community is irrelevant...Resistance is futile...You will be assimilated..."
  • erikmodierikmodi Member Posts: 144 Arc User
    I'll run a Norton Power Eraser later today.

    Support got back to me, wants me to e-mail them from the original e-mail on the account. In the meantime, they've suspended it, so hopefully the h.acker's damage has been minimized.
  • evilmark444evilmark444 Member Posts: 6,951 Arc User
    I'll run a Norton Power Eraser later today.

    Support got back to me, wants me to e-mail them from the original e-mail on the account. In the meantime, they've suspended it, so hopefully the h.acker's damage has been minimized.

    Hate to say it, but they probably drained all your ec and any valuable unbound items you had in your bank within 30 minutes of compromising your account.
    Lifetime Subscriber since Beta
    eaY7Xxu.png
  • legendarylycan#5411 legendarylycan Member Posts: 37,284 Arc User
    that's what rollbacks are for​​
    Like special weapons from other Star Trek games? Wondering if they can be replicated in STO even a little bit? Check this out: https://forum.arcgames.com/startrekonline/discussion/1262277/a-mostly-comprehensive-guide-to-star-trek-videogame-special-weapons-and-their-sto-equivalents

    #LegalizeAwoo

    A normie goes "Oh, what's this?"
    An otaku goes "UwU, what's this?"
    A furry goes "OwO, what's this?"
    A werewolf goes "Awoo, what's this?"


    "It's nothing personal, I just don't feel like I've gotten to know a person until I've sniffed their crotch."
    "We said 'no' to Mr. Curiosity. We're not home. Curiosity is not welcome, it is not to be invited in. Curiosity...is bad. It gets you in trouble, it gets you killed, and more importantly...it makes you poor!"
    Passion and Serenity are one.
    I gain power by understanding both.
    In the chaos of their battle, I bring order.
    I am a shadow, darkness born from light.
    The Force is united within me.
  • erikmodierikmodi Member Posts: 144 Arc User
    that's what rollbacks are for​​

    I was hoping that was a possibility if things were too messed up.

    Fortunately, I don't think I had anything really valuable that was unbound.
  • shemlinshemlin Member Posts: 10 Arc User
    i just had the same thing happen to me, but on my PSN account. first got an email about an email address change, (while i was at work) and when i got home, i was unable to log into PSN. they were able to set my email address back, and near as i can tell, nothings missing , and no charges made to my card
  • edited March 2017
    This content has been removed.
  • garaks31garaks31 Member Posts: 2,845 Arc User
    edited March 2017
    something similar happened to my fleetmate at 20.02.17
    until monday 20.02.17 . i was able to use my acc. on sto now it says invalid passw. or this mail is not registered?
    Checking our source, this email address you are using (***) is where your StarTrek Online characters are registered. For you to set up a new password, you can simply check out this link: https://www.arcgames.com/sign/in/trouble.
    i am not able to login to arc page and cannot change my pw. getting this msjs. " You have provided an incorrect
    username or password. Please try again. " and " This Email Address is not registered for an Arc Games account. "
    When attempting to login, please make sure you are entering your email address. It is likely that you are attempting to login with your nickname, which is not used for login purposes. Your nickname is what is displayed publicly on ARC.

    Please make sure your password only has letters and numbers, with no special characters or spaces. Most of our games will reject passwords with special characters or spaces in them.
    , i try to connect like i always did. with the right data. there is nothing wrong on my end. you have my permission to access my acc. still getting the same errors. also tryed to type in the log in info. not only copie&past them
    Please try to "Force verify" the client files by following the short guide we've outlined below:

    1. Shutdown your PC and wait for a few minutes before restarting it.
    2. Shutdown all non-essential (including browsers, downloaders, instant messengers, gaming related software) applications running on your PC.
    3. Launch the game via Arc.
    4. Click the "Options" link located at the upper-right corner of the launcher.
    5. Check the option "Force verify".
    6. Click the "Save" button.

    If the issue persists, please try to completely uninstall the game, including deleting the game folder and reinstall from the same source as you have before. Again, please disable any antivirus and firewall software you may have running.
    didn't helped. still the same errors. also tried to connect page and game from different machine


    after this steps support wanted him to change his acc. mail .

    thanks again for the help support. however we found it very weird, that your suggested a force verify and complete reinstallation. since we also couldn't login to the arc page ...

    and for more security i would suggest a two steps verification to your mails https://www.google.com/landing/2step/
    Post edited by garaks31 on
  • jslynjslyn Member Posts: 1,790 Arc User
    that's what rollbacks are for​​

    I was hoping that was a possibility if things were too messed up.

    Fortunately, I don't think I had anything really valuable that was unbound.

    Yes, it definitely is. I had a glitch that erased a lot of my gear a month and a half ago. Support rolled back my account and th stuff had been returned. Just keep in mind that when you get your account back: don't play if you intend to get a rollback as you will lose everything after the date your game is returned to.

  • erikmodierikmodi Member Posts: 144 Arc User
    Right.

    Though I'm annoyed that I've missed at least one day. . . got into the Breach event late, and I had JUST enough time, if I ran it ever day, to finish the project.
  • jslynjslyn Member Posts: 1,790 Arc User
    I feel you, man. When my bug got me, the rollback cost me a bunch of Omega Upgrades and the new Lightning Kit Module. It was better than the alternative though, for sure.
  • garaks31garaks31 Member Posts: 2,845 Arc User
    my fleet mate lost last 1day of the event ship and some days from this event no biggi next time ^^
  • erikmodierikmodi Member Posts: 144 Arc User
    Well, got the account back under my e-mail, got the message to change my password so did that. Now just waiting for the ban to be lifted.
  • kodachikunokodachikuno Member Posts: 6,020 Arc User1
    never understood how an authenticator to a mobile phone was supposed to be more secure. People ha ck and clone phones all th time... and on the consumer end they go through phones more than they change underwear.
    tumblr_mr1jc2hq2T1rzu2xzo1_400.gif
    tacofangs wrote: »
    STO isn't canon, and neither are any of the books.
  • erikmodierikmodi Member Posts: 144 Arc User
    And I'm back! Got my account back, all my items and characters seem to be in good working order, nothing missing! Thanks for the prompt responses and assistance, Cryptic!!!!!
  • starkaosstarkaos Member Posts: 11,556 Arc User
    never understood how an authenticator to a mobile phone was supposed to be more secure. People ha ck and clone phones all th time... and on the consumer end they go through phones more than they change underwear.

    Depends on how the hacker got the password. Keylogger software wouldn't work due to not having access to the phone. So even if you have the email password, then you still need to get into the authentication software.
Sign In or Register to comment.