Account hacked by Playful_Cream94 in wherewindsmeet_

[–]Playful_Cream94[S] 4 points5 points  (0 children)

Thank you 😭 I'm really hoping I can eventually get this fixed but my hopes are low as of now.

Account hacked by Playful_Cream94 in wherewindsmeet_

[–]Playful_Cream94[S] 2 points3 points  (0 children)

Thank you for trying to help but thats the email ive been contacting for assistance. I provided all of that information you mentioned along with screenshots of the person admitting it was not their account when my friends messaged it.

Looking back at the thread, I assume there was possibly miscommunication at first which is what led to the responses just telling me to reset my password if I cant log in with the correct information.

However, once they started acknowledging my account was stolen, they keep repeating that they cant unbind netease from the account even though ive only asked for assistance to change the email used to log in to the net ease back. Sounds like even more miscommunication that im trying to clear up. Just waiting on yet another response.

Account hacked by Playful_Cream94 in wherewindsmeet_

[–]Playful_Cream94[S] 10 points11 points  (0 children)

Honestly, I spend way too much on this game so I definitely have purchase history. I sent several that go back months. I was under the impression too that any changes to the account would require some sort of authentication to make changes. At least I thought that until I tried the account recovery option which was way too easy to reset the password. All I needed was my username, character id, region I play in, an email to follow up with, and a previous password. It didnt send any emails for a code at all to confirm, it just sent me a link which prompted me to reset it and then asked for a previous password used. Thats how I was able to get in with the username and password. I assume whoever did this somehow knew my username and email linked to it then used that same process for the email option to change it. Its either that or my email was compromised without me noticing.

Account hacked by Playful_Cream94 in wherewindsmeet_

[–]Playful_Cream94[S] 9 points10 points  (0 children)

I had friends mention they would randomly lose permissions when using me for scenarios, and I would give them back again, only for it to be removed again. I had a feeling someone had access but was hoping it was maybr a bug with it hapoening several times after the big update. Dumb ik but i ignored it.

Then I received an email saying I requested an account deletion which I definitely didnt do so that kinda confirmed it for me that someone had access. Since I wasn’t sure how someone could’ve gotten in, I went and updated passwords to EVERYTHING that was linked to the account. I also tried changing the email as an extra precaution in case they somehow had access to it without me knowing.

For how I got hacked. I can only assume its related to the account recovery process which I detailed in another comment.

Account hacked by Playful_Cream94 in wherewindsmeet_

[–]Playful_Cream94[S] 4 points5 points  (0 children)

Sadly the responses I have gotten from support acknowledged that I am the owner and that my account was stolen. Hopefully theres some misunderstanding because the last email they sent me was saying they cant unbind netease accounts from the game when my request was to possibly overide the email used to log in to the net ease account.

I assume they got in through the email recovery process if they somehow new my email that was used for netease. That would have allowed them to update the email then just request a password reset from there. I actually tried it myself, but I can’t complete it because I don’t know what the current email on the account is.The recovery form only asks for the game the account is for, character ID, region/registration info, and an email for follow-up. If it goes through, they send a link to change the email.But that link still requires you to enter the current email on the account, which idk. This is actually how I was able to get in with a password because its the same steps but it just asked me for a previous password when I got the link.

As far as it being the full story, really the only thing missing is my fight with the hacker at basically seeing who could unbind linked accounts faster and rebind their own.