ACCOUNT HACKED!!!! FTP quick action saves my BR
 

Phew, that was a close one...

This morning, I was in class from 8am to 11am. I played a short session during the diner break, ended it at noon. After that I had class up to 3pm, worked on some things until 4pm and then decided to take a break and play two turbo SnG.

I open FTP and click login... (I have "save my password" on)

I get an "invalid password" prompt...

I try typing it a couple time and realise what is going on. I immediatly e-mail FTPsecurity to let them know my password has been remotly changed and ask them to lock my account.

2min later : I get this e-mail :


[ QUOTE ]

>>From: Full Tilt Poker - Security <security@fulltiltpoker.com>
>>To: XXXXXXXXXXXXXXX <XXXXXXXXXXXXXXX>
>>Subject: Re: URGENT ACCOUNT HACKED!!!! (XXXXXXXXXXXXXXXXXXX)
>>Date: Fri, 30 Nov 2007 13:09:32 -0800 (PST)
>>
>>Hello XXXXXXXXXXX,
>>
>>This message is to confirm that your account, "XXXXXXXXXX", has been
>>suspended as per your request.
>>
>>We are currently investigating this issue and will respond to you
>>shortly.
>>
>>Regards,
>>
>>Heather
>>Security and Fraud
>>Full Tilt Poker


[/ QUOTE ]

I followed with a more torought e-mail telling them when I last logged in (basically the stuff at the top of this post) and my account balance this morning.

40min later :


[ QUOTE ]

From: "Full Tilt Poker - Security" <security@fulltiltpoker.com>
To: "XXXXXXXXXXXX" <XXXXXXXXXXXXXXXXXX>
Sent: Friday, November 30, 2007 4:56 PM
Subject: Re: URGENT ACCOUNT HACKED!!!! (XXXXXXXXXXXXXXXXXXXXX)


> Hello XXXXXXXXXXXXXXX,
>
> Thanks for your reply and patience while we looked into this matter.
>
> We regret to inform you that your account does show evidence of a
> 'foreign login', which occurred on a computer you have not utilized in
> the past approximately two hours after you last logged in. However, I'm
> happy to let you know that your account balance stands at $XXXXXX.
> Aside from the password change, no tampering occurred (email address
> changes, mailing address change, table or tournament play, etc).
>
> For security measures, we have suspended the basic functionality (play,
> chat, transfer, deposit) of the account at this time.


(rest of e-mail is security tips)


[/ QUOTE ]


Can't expres how relived I was to read this. I was very happy with the quick response to my mail action taken.

FTP rules!


-Happy [img]/images/graemlins/smile.gif[/img]

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

LOL! You run good dude!

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

[ QUOTE ]
LOL! You run good dude!

[/ QUOTE ]

Ironicaly, I did'nt this month. Guess it even out heh! [img]/images/graemlins/smile.gif[/img]

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

Any ideas as to how your security was compromised?

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

[ QUOTE ]
Any ideas as to how your security was compromised?

[/ QUOTE ]

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

[ QUOTE ]
Any ideas as to how your security was compromised?

[/ QUOTE ]

Actually no...

I have an up-to-date version of windowsXP, an up-to-date anti-virus, I run on a regular basis 4 deifferent anti-spyware software (spy-bot, ad-aware, AVG, SUPERAntiSpyware) and I always have an anti-keylogger soft running...

I study in computer technologie so I'm an above average user. I can garantie you my comp is safe... Maybe this one was so new that the virus/spyware/keylogger deffinitions were not up to date...

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

Kinda makes FTP's software look bad, but still - props to FTP's security staff?

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

this is a level imo

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

[ QUOTE ]


Actually no...

I have an up-to-date version of windowsXP, an up-to-date anti-virus, I run on a regular basis 4 deifferent anti-spyware software (spy-bot, ad-aware, AVG, SUPERAntiSpyware) and I always have an anti-keylogger soft running...


I study in computer technologie so I'm an above average user. I can garantie you my comp is safe... Maybe this one was so new that the virus/spyware/keylogger deffinitions were not up to date...


[/ QUOTE ]

If you haven't been using another computer to login to FTP, then barring some funky inside job (extremely unlikely, I assume pwds are 1 way encrypted, etc), or funky man in the middle attack (or something of that nature, also extremely unlikely), the breech is on your end. I would certainly recommend a reformat.

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

heh, your account prolly stays locked for like a month now

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

[ QUOTE ]
heh, your account prolly stays locked for like a month now

[/ QUOTE ]

no, I can reacctivated it with a temp password with no playing privilage, then change to a new password and be ready to play.

But i'm going to make a systeme clean up before that for sure.

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

2 minutes... that's extremely good to hear. A major improvement on their end, from what I've heard.

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

Mind sharing the security tips or were they the basic make ur password hard to figure out and dont give it out to anyone type tips?

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

Is there a direct e-mail address for the Security department?

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

OP, how old were you when you created your 2+2 account? Just wondering.

Onaflag........

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

On Ultimate Bet it says its not a good idea to have your password saved automatically...this is the only site I have seen with this warning

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

How much did FTP pay you to make this post?

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

"your account balance stands at $XXXXXX"

lol you know there is a brag forum. I believe jay used to be 1800gambler

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

[ QUOTE ]
2 minutes... that's extremely good to hear. A major improvement on their end, from what I've heard.


[/ QUOTE ]

Yes, I was very happy with the response time.


[ QUOTE ]
Mind sharing the security tips or were they the basic make ur password hard to figure out and dont give it out to anyone type tips?

[/ QUOTE ]

Was the usual tips. But i can post them if you want :

At this time, we strongly advise that you download and run the latest
anti-virus and anti-spyware software to rid your computer of any harmful
applications. Until you have cleared your computer of the malicious
program, please refrain from logging into any online accounts as doing
so could cause them to become compromised. Remember, it is important
that you change your password only after you have scanned and cleared
your computer.

The security of your account may have been compromised if you have
downloaded any 3rd party software from an unknown source (data mining
software, torrents, e-books, poker tools, etc.).

Another way would be if you visited a link being advertised/spammed on
the tables that claims sensational news or information. Oftentimes,
these sites will prompt you to download a video. Instead, it installs
malicious, keylogging software onto unsuspecting players computers when
they click what they believe is a video link. A keylogger virus records
your key strokes and may steal your login name and password.

We do encourage you to e-mail in should you have any additional
information to assist us in this matter. Ultimately this will help us
determine the best course of action to ensure your account security in
the future.


[ QUOTE ]
Is there a direct e-mail address for the Security department?

[/ QUOTE ]

security@fulltiltpoker.com


[ QUOTE ]
OP, how old were you when you created your 2+2 account? Just wondering.

[/ QUOTE ]

was 24 back then. So yeah... I'm 29 and still in school :P


[ QUOTE ]
On Ultimate Bet it says its not a good idea to have your password saved automatically...this is the only site I have seen with this warning

[/ QUOTE ]

Did'nt know that, I guess this make you less prone to physical attack, but I think a keylogger requires the user to tap the keys. A saved password prevent that.

I'm just guessing here, Not relly sure.


[ QUOTE ]
How much did FTP pay you to make this post?

[/ QUOTE ]

I got my BR saved by their quick reaction smartass. A little positive pub is the least I can do.



-Happy [img]/images/graemlins/smile.gif[/img]

Re: ACCOUNT HACKED!!!! FTP quick action saves my BR
 

public wifi is 10-1 fav as cause