Aion Stuff

Well,
Something really strange must be happening with NCSoft’s website. Let me explain.

I have been in IT for 10 years. I do not have spyware, viruses, phishing, or malware on our systems. We do not response to emails from hoax sites, click links and enter information etc etc.

Today at around 11 CDT in the morning my wife gets an email that actually is legit from support@ncsoft.com stating that her password has changed and if she didn’t do it to contact support. Before doing anything I go to NCSoft’s webesite and check. Sure enough, the password isn’t working and the forgot password section has had all the security questions changed by whoever hacked the account.

I sent an email immediately to NCSOFT support and didn’t hear anything for 20 minutes at which time I immediately send another email and get on the phone with support. I was #2 in line and it took about 10 minutes to get a live person on the phone… I explained what happened and they started with the fact that they would have to speak to my wife about it as its her account (even though its my credit card info etc). I didn’t mind that as its a security touch but I told them to immediately lock the account of which they did… After my wife got on the phone, the reset the passwords and emailed the information to her.

She reset the passwords (making sure the master and the game account are different just like before) and she logged in. In a matter of 40 minutes, whoever had hacked the account had sold all her gold gear and blue gear, removed 15 million in kinah and sold all her supplies that she had for crafting.

NCSoft had said if that had happened to email them and they will get her stuff back.

I would say that as far as speed, NCSoft did a great job of helping get this taken care of, sadly not quick enough to go through all this hassle…

Would it not be better to make a person enter security question answers at the time of resetting a password instead of just if you forget it?

Anyways, before you all say it, she does not go to gold selling sites, doesn’t use power leveling services etc… So my only conclusion is that NCSoft’s website must be compromised or someone is using a brute force attack against their database to gain passwords…

Be careful folks, and also, even though its a PITA going through this, I do think NCSoft did a FANTASTIC job so far in a very timely manner to get things started back to recovery!