Full Tilt Account hacked for $40,000

[shahmat]

I was alerted to this when I received an email from Full Tilt saying that I had changed my email address. I had not done this, so I immediately logged into my account and saw that it was empty.

I contacted support(through email because for some reason their security department does not have a phone number). Their security team looked into it and found that over the last three days (Fri, Sat and Sunday) someone gained access to my Full Tilt account and used it to play high stakes games. They bought gift certificates and then redeemed them back to my account(which was very weird and I'm still not sure of the purpose of that). Full Tilt investigated the play and apparently the money was not dumped to anyone in particular but was lost to multiple legitimate players.

They determined that the logins came from foreign IP Addresses but were not able to recover any funds. They also do not reimburse players for fraudulent losses. I've conversed with them alot through email since this happened, here is a snippet of the most recent one:



"The Gift Certificates, as mentioned in the first email, were redeemed
back into your account. This is extremely odd, as I would have thought
that the infiltrator of your account would have redeemed it into a
different account. It simply makes no sense why this player would
purchase gift certificates only to redeem them back into your account.

That being said, your funds were then used within your account to play
on the tables. All of your funds were lost to legitimate players and
cannot be reimbursed.

Unfortunately, Full Tilt Poker is not like a credit card company, we
cannot be responsible for what occurs on your account and your funds are
not insured by Full Tilt Poker."



It appears that they accessed my email account as well and deleted the confirmation emails that were sent when they purchased the gift certificates. Because of this I did not realize what was happening until it was too late.

I had all windows security updates running, an anti virus program, a software firewall, a hardware firewall and I never downloaded suspicious files/executables. I am not sure what more I can do. I went out and bought vista and new firewall/anti virus software but I really don't feel much safer.

I am not sure what to do, I feel pretty helpless. I am going to contact the police today, but I'm not sure what their power is in this type of situation. Does anyone else have any suggestions or feedback?? Has this happened to many others?

man feels like every time I post here, I'm posting something crappy that has happened [img]/images/graemlins/frown.gif[/img].

sol.

[mikechops]

This sucks. Before doing anything to your computer I would replace your hard drive and keep it. It's kind of a long shot but possibly the hacker left some evidence?

[NoMeansYes_]

That sucks, try and find out how someone got onto your account.

[shahmat]

already formatted the two I use regularly, that is a good idea though.

[ilikeaces86_]

Get Keepass and you won't have to worry about anyone being able to hack your password.

[shahmat]

[ QUOTE ]
That sucks, try and find out how someone got onto your account.

[/ QUOTE ]

Ya thats the one thing that stumps me the most, I still cannot figure out how they got access. I am not sloppy at all with security measures.

[Grey]

Is there a FAQ for security measures?

[Broke Rounder]

wow sorry to hear about this man, I dont know if your rich or not but that is A LOT of money. Maybe it would be a good idea to keep less money in online poker sites from now on. Anyway, sorry to hear about that [img]/images/graemlins/frown.gif[/img]

[DMoogle]

I think it's a long shot, and I'm not sure what you can do about it, but is your FTP password the same as other passwords you use? For example, if you registered on some online site and used the same password as you did for FTP, then it's possible that the online site basically stole your identity. Most websites are reputable (2+2 for instance), but you never know.

They said that it came from a different I.P. address. ASK THEM WHAT IT WAS. You can find out the person's location, contact their ISP, and try your best to get the police to do something. $40K is a lot of money. Good luck.

[-zero-]

[ QUOTE ]
Is there a FAQ for security measures?

[/ QUOTE ]

http://forumserver.twoplustwo.com/showfl...p;vc=1&nt=6