• Anonymous User (Deleted)

Yeah so I'm making this as widespread as I can. Today, Skyllus' XBL account was hacked for his Halo 3 Recon Armor which had been given to by Bungie. The gentleman that hacked his account also came by our forums to "brag" about doing it. So it is VERY feasible for someone to hack accounts, despite Microsoft's claims that it can't and hasn't been done...His account has been hacked 3 times in the past 2 months. 18004MYXBOX has hung up on him, Windows Live Support has turned a blind eye to the issue, and I've found it impossible to contact anyone who can make a difference.

Here's the thread on our site that this guy came too (along with a few pictures and more explanation of what happened):

http://www.team-vbi.net/teamvbi/viewtopic.php?f=1&t=3826

Please, help draw some attention to this issue. It happened to him and it can happen to you as well unless Microsoft pays some attention to this.

You can help my posting here, posting in the thread on our site, and letting any news sources you know of get wind of the issue. I'd appreciate it if Bungie could do a report on this as well, as it is a rather serious issue.

This is not a joke at all, Skyllus asked me to post this because he obviously cannot log into the windows live ID because he DOESNT have his account. A number of MLG high profile players have had their accounts hacked in the past and Microsoft ignored the issue. The hacker posted on our site so we may or may not have the exact IP address (we doubt it). Help us out Bungie!!!!!

[Edited on 12.29.2007 5:53 AM PST]

• ICEMAN ASSASS1N
•  | 
• Fabled Heroic Member
• 
•  | more 
• groups
•   | 

LOL Microsoft tries to deny accounts get hacked? Lots of Halo 2 accounts got stolen (pros mostly and some known match making players.)

There are two ways to hack accounts- social engineering and Kernal IP logging. I'm assuming he used social engineering (calling XBL hotline pretending to be Skyllus and getting information required to recover the account.)

That's sucks. And it's pretty sad people are still stealing accounts. Lt Wasp (the first general) got his account stolen too. People need to grow up.

[Edited on 12.29.2007 4:25 AM PST]

• Anonymous User (Deleted)

((This is Skyllus on his Bungie forum account which I made after the issue))

We tried the IP thing. If someone is posting under a proxy, then all IPs they use will show as the fake proxied one. I think I might have caught his "real" IP before he started using proxies. No way to be sure though.

Note there were issues with this not too long ago which slowly faded away:

To this, I refer you to these articles:

http://blogs.zdnet.com/security/?p=134 "Microsoft: XBox Live account theft was social engineering attack"

http://www.shacknews.com/onearticle.x/46239 Xbox Live Security Compromised, Accounts Commandeered? (Updated)

http://www.theinquirer.net/en/inquir...olen-plundered XBox Live users see accounts stolen, plundered

http://www.news.com/2100-7349_3-6169060.html Microsoft probes possible Xbox Live fraud

http://tech.blorge.com/Structure:%20...-theft-claims/ Microsoft slow to investigate Xbox Live fraud and theft reports

In the last one, if you check the comments you'll see people posting who (possibly) are doing this sort of thing.

• ICEMAN ASSASS1N
•  | 
• Fabled Heroic Member
• 
•  | more 
• groups
•   | 

Posted by: Skyllus
The same guy who hacked my account also claims to have hacked the accounts of many of the 5 Star Generals on the unofficial Bungie leaderboards.

Probably the same guy who hacked Halo 2 accounts from the o Infamous o clan.

Could be anyone from "JustCallMeGod" to "HostGotBooted."

There was this one big time hacker (JustCallMeCody) who got arrested recently. Rest assured if this guy gets caught he's screwed.

• ZeroDefiance
•  | 
• Intrepid Legendary Member
• 
•  | more 
• groups
•   | 

Posted by: ICEMAN ASSASS1N
Posted by: Skyllus
The same guy who hacked my account also claims to have hacked the accounts of many of the 5 Star Generals on the unofficial Bungie leaderboards.

Probably the same guy who hacked Halo 2 accounts from the o Infamous o clan.

Could be anyone from "JustCallMeGod" to "HostGotBooted."

There was this one big time hacker (JustCallMeCody) who got arrested recently. Rest assured if this guy gets caught he's screwed.

Cody was arrested for using the CC associated with the accounts he jacked. Which is how he got caught. I believe he's 19, so the highest possible legal actions will be taken. If the guy who jacked your account is smart he won't do the same.

• served3
•  | 
• Fabled Legendary Member
• 
•  | more 
• groups
•   | 

Wow thats sad... Just for Recon...

• Anonymous User (Deleted)

It's funny because this guy really is getting a kick out of it. I don't understand it myself, look what the suicide brought you Sky!!

• WheelzthatKeelz
•  | 
• Honorable Member
• 
•  | more 
• groups
•   | 

I'm surprised that someone from bungie hasn't replied to this yet...

hmmm

• xianoa
•  | 
• Veteran Mythic Member
• 
•  | more 
• groups
•   | 

this is a huge hole in security, the phone call centres never actually ask for important information to confirm your identitiy and this is why they are giving out accounts [basically].

• NoobWithAGun
•  | 
• Absent Member
• 
•  | more 
• groups
•   | 

Microsoft is lame.

• Anonymous User (Deleted)

Yup, thought so.

Yeah, you should call Microsoft and demand action be taken. They screwed up big time (again.) This is how most people hack accounts because it doesn't require anything than knowing a couple things about the person then calling XBL hotline and getting enough information to recover the account.

And if he touches your Credit Cards then he's in realllll deep when he gets caught.

Yeah, I plan on calling 18004Myxbox again tomorrow. The main issue there is that the people you're talking to couldn't do anything about it even if they wanted to. And if you get to a higher up, they just pass you off as some moron who gave his password to a friend and got his account "stolen" that way. They'll do anything to pretend it was entirely user error.

• xianoa
•  | 
• Veteran Mythic Member
• 
•  | more 
• groups
•   | 

you can tell them there and then that someone rang their phone call centres, used information he no doubtedly got from google [internet detectives ¬_¬] and the incompitence of their staff lost you your xbox live account and has left your credit cards open to use.

• xianoa
•  | 
• Veteran Mythic Member
• 
•  | more 
• groups
•   | 

if you dont mind me asking, why did they give you the armour?