7 replies to this topic

[MechDuster]

Today was a regular day, i was playing GTA San Andreas..
Then,i wanted to check my E-mails and noticed something strange..

It was from EA.. Origin.. I GOT AN ACCOUNT THERE?BUT I DIDNT EVEN REGISTRED MYSELF THERE!
Also i got an account from BattleField Free 2 play.. also i didnt registred myself there..
Just good i didnt clicked in BattleField Free 2 play on the link to make my regestration sucessfull...

I immeditly thought i got hacked,i changed all my passwords to super complicated ones so that no one NEVER CAN FIGURE them out..

But at origin,without even a Application from MYSELF i got registred on it?
Than i called my friend.He sayed,you only need a E-mail and you get Registred..
He has BattleField hisself,he knows what he says..

I got frustrated..
What if a hacker goes into Origin and buys something,and i get a huge bill?!
I went on "Forgot password" and looked at my mails.. "Blablabla" Link to change password
Than,i changed it to a complicated super long one..

What now?
.. I dont want a bill coming to my house..
.. I dont want pay 1000€ or something like that..

HOW DO I REMOVE THAT ****?
Need help,seriously..

[Rorik Thrumsalr]

Did you ever use the EA Download Manager in the past when dl patches for their products like crysis or whatnot?

Origin evolved from the EA DL Manager and (at least for myself) the login/registration data was pulled from the older program. If not, Document everything. Contact technical support, make sure the software has none of your financial info stored. Contact your bank and warn them.

[Nukesnipe]

Calm the **** down man, we know you're 12, but screaming it won't help at all.

The odds of you getting hacked are astronomical unless you're famous or manage to personally **** off a particularly vengeful hacker-on that note, never go to 4chan, ever-and major DDS companies (EA's Origin and Valve's Steam) are pretty good at protecting their customers, and I know that Valve will help you out if **** hits the fan.

But uninstall Origin, never use it, changing your password will do exactly **** all because a password ******* can run through ten thousand words in a second, and making it long, complicated non-words will make the timer about... two minutes at the max.

Install Steam, buy Crysis Warhead (it's 5 bucks for the weekend), download Mechwarrior Living Legends, have fun, and grow the **** up.

[Rorik Thrumsalr]

Calm the **** down Nukesnipe, we know you're acting like you're 12, but screaming and cursing at the OP won't help at all.

OP is scared/concerned and is reaching out for help in a realm he/she doesn't really know. Telling him to grow the blank up and being rude isn't going to help anyone.

[Deadeye Flint]

Mechduster, calm down.

Mr. Anonymous just registered with your email adress so u wont pay anything because he dont have your bank account, credit card number etc.

But i would at least check my PC with a anti virus programm.

[tophersmith]

agreed rorik. OP, firstly, good on you to change the passwords. it's the correct thing to do. Feel free to contact any and all of the suspect emailers (NOT by clicking any link given in an email, but by visiting the site yourself and finding contact information there). Those companies are always more than willing to make sure that your name and cards aren't being misused on their sites. It's bad press for them, and a potential nightmare if they have to give back money. They will most likely be very understanding.

All that being said, keep an eye out on whatever cards you may have used to purchase anything from EA etc, just as an extra precaution.

rorik is right that Origin has some shadiness to work out as other players have complained about this on other forums (being invited to play other games, then getting charged by assuming the invitation is free).

As a side note, I am a professional penetration tester (white-hat only) and obtaining passwords is by-and-large hit-or-miss. Some attackers may go ahead and try to brute a hash, whcih they hope is a short password, but nowadays the time required to do simple attacks is painfully astronomical for passwords longer than say 9 characters due to what is known as salting. Even with the aid of GPUs (which is common now) the time vs payoff is worthless to an attacker unless you're famous or they know you're Scrooge McDuck. /PSA

[Henchman 24]

Nukesnipe, on 08 September 2012 - 05:24 AM, said:

Calm the **** down man, we know you're 12, but screaming it won't help at all.

The odds of you getting hacked are astronomical unless you're famous or manage to personally **** off a particularly vengeful hacker-on that note, never go to 4chan, ever-and major DDS companies (EA's Origin and Valve's Steam) are pretty good at protecting their customers, and I know that Valve will help you out if **** hits the fan.

But uninstall Origin, never use it, changing your password will do exactly **** all because a password ******* can run through ten thousand words in a second, and making it long, complicated non-words will make the timer about... two minutes at the max.

Install Steam, buy Crysis Warhead (it's 5 bucks for the weekend), download Mechwarrior Living Legends, have fun, and grow the **** up.

Your first post is to act like this? Nice work.

MechDuster, ignore Nukesnipe, as even his most sound advice is based on assumption. rorik on the other hand has a point about the nature of how Origin was built.

I would contact EA/Origin about this, cancel anything 'ordered' if any on your account, and if you want to keep an Origin acct for patches, new games later, etc...have them switch your account over to another email of yours. It sounds like someone scraped some basic info somewhere, which isn't hard to do really. They used it to create an account to farm a f2p game or whatever, or maybe intended to exploit something using a dummy account.

I would continue using passwords that are fairly complex, containing uppercase, lowercase, numerals and if it allows, extended characters as well. Good passwords using full length cyphers of whatever complexity requires the password, is the best way to go, and no, good passwords on systems with good encryption don't take 2 minutes to crack, ask the FBI...they will tell you that much. I have no idea what type of encryption Origin uses, but I hope it's enough to thwart the 2-minute-crack script kiddies.

Other than that, you should be fine.
It wasn't like the case where far too many people found their Hotmail.com accounts had been hacked due to M$ laziness, too late after their accounts spammed everyone on their contact list.

[Egomane]

1.) It was right to change your passwords.

2.) As Deadeye Flint said, you should also check your system for a virus or trojan.
2.b.) If you find something, change your passwords again after cleaning up your system.

3.) Contact EA about the matter and let them know that it wasn't you who created that account. You didn't agree to their terms of use and are therefor not bound by them. If you don't want that account, have them remove it and delete your personal data.

Edited by Egomane, 08 September 2012 - 08:51 AM.