Twiebie Posted November 14, 2012 Share Posted November 14, 2012 Not sure how serious this is, but I see a lot of tweets about it today. EA Origin accounts are being hijacked. Numerous people including Digital Foundry's Richard Leadbetter have been emailed by Origin with news that their account's password or email address or both have successfully been changed. Thing is, nobody asked or gave permission for them to be. A thread on NeoGAF highlighted a handful of similar cases from the EA support forum. The thread also documented what happened next: people were locked out of accounts and had a frustrating time with EA support trying to get them back. Richard Leadbetter told me he spoke to EA support but the helper didn't know anything about the issue. Nevertheless, EA support is "escalating" the matter. One GAF member took things a step further and discovered the .ru (Russian) email address now associated with his account. Searching for that email address in Origin turned up user Jekas77CsP's sparse and mostly private profile. EA UK passed on my request for comment to the Origin team. I'm waiting to hear back. http://www.eurogamer.net/articles/2012-11-14-ea-origin-accounts-are-being-hijacked 2 Link to comment Share on other sites More sharing options...
SuperTaz Posted November 14, 2012 Share Posted November 14, 2012 That's why Origin fails. They can't even keep their security protocols in check, even for something as Origin. Origin was the biggest problem from day 1. You would think they would scrap it and go back to the old ways. I lost faith in EA. Until they start getting rid of the people who came up with stuff like Origin and people that ordered the lockdown of server files, they will not be #1 any time soon. If I was CEO of EA, there would be a lot of people fired for their lack of common sense and their ridiculous decisions. 1 Link to comment Share on other sites More sharing options...
Chaos1907 Posted November 14, 2012 Share Posted November 14, 2012 With that said, lets send the CEO a letter or create a petition to make Origin more secure. Link to comment Share on other sites More sharing options...
HSMagnet Posted November 14, 2012 Share Posted November 14, 2012 if you were CEO of EA, you would have to fire yourself, Taz Link to comment Share on other sites More sharing options...
SuperTaz Posted November 15, 2012 Share Posted November 15, 2012 if you were CEO of EA, you would have to fire yourself, Taz Nah. I have to make my millions from the taxpayer bailout. :P j/k 1 Link to comment Share on other sites More sharing options...
LtMatt Posted November 16, 2012 Share Posted November 16, 2012 One things for sure, origin is a pile of chud. Link to comment Share on other sites More sharing options...
surfy Posted November 16, 2012 Share Posted November 16, 2012 One things for sure, origin is a pile of chud. Any programme that makes you sign into it before you can play a game is crap imo, that includes steam. Both are turning PC's into consoles. 5 Link to comment Share on other sites More sharing options...
HSMagnet Posted November 16, 2012 Share Posted November 16, 2012 yeah steam used to be optional, but they are getting away from that Link to comment Share on other sites More sharing options...
Crotan Posted November 16, 2012 Share Posted November 16, 2012 so cause for concern or just some users with crappy passwords? Link to comment Share on other sites More sharing options...
HSMagnet Posted November 16, 2012 Share Posted November 16, 2012 if their systems for security are bad, then cause for concern Link to comment Share on other sites More sharing options...
Benway Posted November 17, 2012 Share Posted November 17, 2012 another "reason for concern" are for instance YouTube-posts linking to deadly undetectable cheats; http://is.gd/dZo8yU / http://al.ly/QDH (interesting parts are always "DNS Queries" and "Communication" paragraphs bottom of page) ... resulting in, among other things, 'cheat submissions' http://rghost.net/38281939 (just ignore rghost, its trojan-hosting); more info: http://ddg.gg/?q=ufr-stealer Link to comment Share on other sites More sharing options...
LtMatt Posted November 17, 2012 Share Posted November 17, 2012 Does Ben come with a translator? 3 Link to comment Share on other sites More sharing options...
HSMagnet Posted November 17, 2012 Share Posted November 17, 2012 where is my LART...... Link to comment Share on other sites More sharing options...
LtMatt Posted November 17, 2012 Share Posted November 17, 2012 (edited) where is my LART...... Hmm google tells me this. LART "a laughing fart, when you laugh so hard and uncontrollably that you squeeze one out, by accident." Edited November 17, 2012 by LtMatt Link to comment Share on other sites More sharing options...
HSMagnet Posted November 17, 2012 Share Posted November 17, 2012 i am quite certain the proper acronym was displayed prior to the one you chose to display Link to comment Share on other sites More sharing options...
LtMatt Posted November 18, 2012 Share Posted November 18, 2012 i am quite certain the proper acronym was displayed prior to the one you chose to display I still like to think you meant the second one. Link to comment Share on other sites More sharing options...
vinnie1thumb Posted November 21, 2012 Share Posted November 21, 2012 my account was hacked on Monday also and PBBans fail to acknowledge that fact and lift my ban. bastards. I provide a great deal of supporting documentation, to no avail. the hacker was Igoreme15, so watch out for him. I contacted EA and the only thing I may be able to do to get back on the game is do a persona transfer and start all over from ZERO. I can't believe that PBBans would not be more helpful in reviewing documentation and background info such as hackers IP vs mine as well as gaming location. seems like an abuse of power to me. Link to comment Share on other sites More sharing options...
vinnie1thumb Posted November 21, 2012 Share Posted November 21, 2012 With that said, lets send the CEO a letter or create a petition to make Origin more secure. agreed, I would be all for that Link to comment Share on other sites More sharing options...
fozzer Posted November 22, 2012 Share Posted November 22, 2012 my account was hacked on Monday also and PBBans fail to acknowledge that fact and lift my ban. bastards. I provide a great deal of supporting documentation, to no avail. the hacker was Igoreme15, so watch out for him. I contacted EA and the only thing I may be able to do to get back on the game is do a persona transfer and start all over from ZERO. I can't believe that PBBans would not be more helpful in reviewing documentation and background info such as hackers IP vs mine as well as gaming location. seems like an abuse of power to me. The one thing to remember about any ban issued by PBBans, is that we ban pbguids that have been used to cheat with ... alias / ip / or anything else does not come into it. If EA have helped you recover an Origin account that has been hijacked by someone other than yourself, ask them for a new game cd key which will in turn generate a new, clean, pbguid, because the one you have now is "out in the wild" We do our best to help folk on here .. even those who use weak passwords for everything Origin related or use the same weak password on numerous other forums that are a lot less secure than Origin is. Being accused of an abuse of power ... excuse me .. what power :unsure: is a sure fire way to get a lot less support than what you are getting at the moment. Is anyone else offering advice ? Is anyone else responding to your queries ? Has anyone else explained anything in detail as to why your pbguid is banned ? A bit of advice, don't kill the messenger. Remember this; http://www.pbbans.com/forums/banned-from-bf3-t165908.html That sure looks like power abuse doesn't it. 1 Link to comment Share on other sites More sharing options...
HSMagnet Posted November 22, 2012 Share Posted November 22, 2012 my account was hacked on Monday also and PBBans fail to acknowledge that fact and lift my ban. bastards. I provide a great deal of supporting documentation, to no avail. the hacker was Igoreme15, so watch out for him. I contacted EA and the only thing I may be able to do to get back on the game is do a persona transfer and start all over from ZERO. I can't believe that PBBans would not be more helpful in reviewing documentation and background info such as hackers IP vs mine as well as gaming location. seems like an abuse of power to me. i think you are mistaken on a couple of things 1. we ban GUIDs that were used to cheat. yours was. no doubt. doesn't matter who did it. 2. please do not confuse PBBans with Even Balance the developers of PunkBuster software. your GUID triggered a violation on an IP in the Ukraine. here is their response to your appeal 11/20/2012 14:47:20 - "Alex J" Note #3: We do not find this violation to be triggered in error, and it will not be removed. It is at the discretion of the third-party ban list administrator to remove any ban given as a result of this violation. we are the 3rd party ban list administrators and we do not lift bans on valid violations. period Link to comment Share on other sites More sharing options...
LtMatt Posted November 22, 2012 Share Posted November 22, 2012 (edited) Would this person be allowed to stream to pbbans? (if he so requred) If would seem harsh to me if origin fucked up, your account got hacked the said hacker uses a cheat on your guid. You get your account back, origin confirm this, but still you have the conviction on your name forever having done nothing wrong other than origin allowing someone to hack your account. I know people that have had their origin accounts hacked using secure passwords. Its a worrying thought tbh. Edited November 22, 2012 by LtMatt Link to comment Share on other sites More sharing options...
surfy Posted November 22, 2012 Share Posted November 22, 2012 If the GUID continued to be used from same IP area I would suspect that the origin hacking is a "good excuse". It would probably be fairly obvious on the MPI information if someone had genuinely got their account hacked. Link to comment Share on other sites More sharing options...
LtMatt Posted November 22, 2012 Share Posted November 22, 2012 If the GUID continued to be used from same IP area I would suspect that the origin hacking is a "good excuse". It would probably be fairly obvious on the MPI information if someone had genuinely got their account hacked. So assuming the IP's were different you wouldn't be calling for his head on a platter? Link to comment Share on other sites More sharing options...
surfy Posted November 22, 2012 Share Posted November 22, 2012 So assuming the IP's were different you wouldn't be calling for his head on a platter? I would need to review it as of course dynamic IP's play a part. Anyway I don't think I need to divulge our ways of checking on these stories. If anyone claims this has happened to them the accounts staff will check it out. We had a few appeals in the past claiming their steam account had been hacked, amazingly enough though they're house and IP had been hacked too. Case by case basis. Link to comment Share on other sites More sharing options...
fozzer Posted November 22, 2012 Share Posted November 22, 2012 Would this person be allowed to stream to pbbans? (if he so requred) Yes If would seem harsh to me if origin fucked up, your account got hacked the said hacker uses a cheat on your guid. You get your account back, origin confirm this, but still you have the conviction on your name forever having done nothing wrong other than origin allowing someone to hack your account. Origin did not allow anyone to hack an account .... the account creator did. The onus is always on the player to ensure a strong password that is unique to their Origin account is used. I know people that have had their origin accounts hacked using secure passwords. I know a fair few claim that their accounts have been hacked into and used to cheat with .... problem is that in 99.9% of cases we come across their pbguid has only been used from the same IP address (EB and EA do not track player details, the PBBans MPI does). I know of some that have a nice secure password on Origin, and also use the same nice secure password on forums/blogs etc that are a lot less security conscious than Origin. There are also the scenarios Benway posted earlier whereby keylogging malware is used to steal game cd keys and probably a whole lot more. Post a lovely youtube video of cheat use ... put a link to were you can get this undetectable wonder cheat ... hey presto, you get a load of fresh cd keys etc. Ever wonder were the cheat coders get their inexhaustible game keys from :P And lastly. Its a worrying thought tbh. Only if you fit one of the categories/scenarios listed above :) 1 Link to comment Share on other sites More sharing options...
Recommended Posts