lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 7 Aug 2007 18:08:51 -0300
From: "Ashley Wilson" <amwilson85@...il.com>
To: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject:  Xbox live accounts are being stolen

Hey there,

I'm so very frustrated with Microsoft and went on a search to see if anyone
else has had the same issue and low and behold, I came across you're article
of sorts.

Its been over a month now, since I was hacked. I woke up on a Sunday
morning, check my email as I do everyday. I had 4 emails from Microsoft
stating I purchased 20000 Microsoft points and a year subscription. As most
people would, I panicked and wondered what kind of insane thing happened.
When I turned on my Xbox and attempted to log into my account, I couldn't.
My boyfriend shortly after that, recovered my account on the Xbox and we
came to find out that my username had been changed, all my friends had been
deleted off my list and my motto was changed to "LOL I got jacked."

I was furious to think someone could do such a thing. They not only stole my
account but over 400 dollars was spent on my credit card.

I called Microsoft support shortly after that. I got the "run around."
Transferred to one agent and then another. They basically accused me of
giving out the information. I eventually got to speak to a supervisor, who
assured me that everything would be taken care of. They even said they would
catch the individual that did this and assured me a phone call in a few
days, as they had to send in a full investigation the next day.

3 weeks later and I was still waiting for a call.

I decided it was time for me to call them, since obviously I as a customer
wasn't important to them. Again, the "run around." I spoke with again,
another supervisor who informed me that they hadn't even sent out the
investigation yet. He assured me that he would send it out that very day and
I should receive a call within 3 days.

I sat home waiting to receive a call for 3 days.

Again, I never received a phone call.

By the 4th day, I called again.

Speaking with an agent who assured me, I will receive a call. "Its under
investigation now, you have to wait for a phone call."

Now, 2 weeks later and I called again today.

I'm told that they attempted to call me today and I have to wait to speak
with them because there is nothing they can do. I paid for a subscription
that I am not getting to use and apparently won't be able to use. I'd also
like to mention when he said they tried calling today, he said they left a
voice mail message. I don't have voice mail, so I got concerned. Then he
read "my phone number" It wasn't even my number and I had never heard the
number in my life. Slightly odd, since I gave them my phone number the
previous time I had called.

Now I'm suppose to receive a call this Thursday. We will see.... I won't
hold my breathe.

I am so very frustrated that Microsoft as huge a cooperation as they are,
doesn't even have the decency to call me or reimburse me for a 50 dollar
Xbox live account.

I apologize for this longwinded email and I'm not even sure if you still
care about this issue but I was quite overjoyed to see I wasn't alone.

Sincerely

Ashley Wilson

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ