ORIGINALLY POSTED ON ANOTHER FORUM ON MAY 4TH.....

My Full Tilt and Pokerstars account was hacked last night and approx $12,000
drained out of my account. You guys are at risk so please read my whole story. I know this is very long, but I have a lot of information about this guy and he plans on attacking other people....

At about 9-10:00 last night I wasn't able to get into my e-mail. I tried my password several times and it appeared my password was incorrect. I thought it was very odd. I then logged onto Full Tlt because I wanted to play poker, I couldn't log into Full Tilt either. I thought at first something was wrong with my firewall so I tried a couple different things, tried logging in on a new computer and wasn't able to log in. By now I'm thinking something is up. I log into Full Tilt from a friends account and notice myself playing 25/50 Heads up NLHE, however it wasn't really me. I sent an email immediately to Full Tilt security and in the mean time watched as the hacker lost over 2 full buy-ins to PXFACTOR.

I received an e-mail back from Full Tilt that they had locked my account (surprisingly replied very quickly) and that they would investigate the situation, however I WOULD NOT be reimbursed my money, even if it is found that the I had indeed been hacked. They also verified that they noticed I was logged in playing from an IP address that I had never logged on from before. I was able to recover my e-mail addres by answering my secret questions in the lost password option.

In the mean time, I got an e-mail from the hacker! The first e-mail said "enjoy the lost amount", I replied saying "huh, what are you talking about", acting dumb like I didn't know what was going on and he replied back saying "your FTP account is down". At this point the account was locked and he was no longer to do anything else. He replied back "lol, I hack a lot. I could be back in within 12 hours. Will you give me some money." After a couple other meaningless e-mails he asked me to talk to him on MSN messenger, which I did.....

I talked to the guy for over 4 hours, no joke! By acting like I wasn't pissed at the guy and almost becomming his friend in a sense, I was able to get a lot of information. The "guy", or "kid" claims he is 16 years old, from Australia, very "depressed" and appeared and said he was very high at the time...

He said he hacked my e-mail first (which was obvious and I had figured out already) and that him and his friend are very experienced hackers who can hack any hotmail or live e-mail account that they want within 12 hours. I asked how he got my e-mail address and he said that he got it on the Full Tilt forums and that he had collected many hotmail or live e-mail accounts from the forum and planned on hacking many more in the future. He told me he has already hacked a couple peoples account by resetting the poker passwords via their e-mail. Additionally, he said he had OTHER WAYS of hacking people, yet also said he is not able to hack Full Tilt poker directly. When trying to get the screen names of other people he has hacked, he said "he couldn't remember but he thought it was something like "blitzballnz or something" and he said he took about 16.5k from him. He said he had another one that he wasn't sure but thought had "god77 or something" in it." When trying to find out his friends name on Full Tilt, he said "well i know its got like cheese in the name".

He first asked me to send him $1000 when my Full Tilt account was active again and he would leave me alone. I tried to trick him by agreeing asking him where to send the money however when I asked he then changed his story and told me he would give me all my money back and leave me alone if I HELPED him launder money. I asked him why he would need me to help him if he had his buddy and he told me that his buddy is hardly ever online and he needs someone thats around more.

Before you guys go looking for PXFACTOR, this kid claims to me that he does not know PXFACTOR. He said that he got into my account and his buddy whom he works with was not available so he played on my account for awhile "just for fun", and simply LOST my money fair and square to PXFACTOR. I asked why he didn't just wait and he said because he had noticed that I reset my hotmail password and wanted to play while he still could.

Sorry this is so long, I just wanted to provide as much detail as possible. 1) Full Tilt says there is absolute no way for me to get my money back because they were lost in fair hands. Even if it is "determined" I was hacked, there is nothing they can do because it is not a Full Tilt security issue, 2) The guy has other peoples email addresses and plans on doing more damage to people in the future. I want to make sure everyone is aware that they could be in danger. This kid is not worried at all about Full Tilt catching him because he says he is "very well protected on a virtual private network".

Does anyone have any advice? Is there anything I can do? Should I contact the police or something (assuming they would do nothing). Please let me know if you have any questions.

sucks...i would suggest using a more secure email...as for the hacker...hopefully he dies a slow death....sorry for your loss

yeeeeaaaaaaaaa so about those security tokens...

Hopefully he commits suicide

stars should get MAD PROPS for security tokens

Whats the deal with these secuity tokens?

Matuz, they are these digital chips which provide a secure, dynamic code that frequently changes. It requires that you enter the code along with your password to accesss your account. It is a big boost in security for stars and we've been yelling at FT to get this started, but it's not a high priority for them.

Nielsio made a good thread about this if you want more info:

http://forumserver.twoplustwo.com/28...n-work-479616/

Help me understand this better.

Hacker got your email address from an FTP forum?
Hacks into your email account?

How did he get into your FTP and PS accounts?

Please get RSA Security tokens FTP, I snap buy it! I love my token for Stars!

Hacker hacked into my hotmail account, and then also proved to me he can hack any e-mail account within 12 hours, then he clicked on the "forgot password" option on which sends you a new password to your e-mail, therefore was able to get into my poker account via the "new password" send to the e-mail.

its kind of important for us to know how he got into your hotmail account so that we can avoid having it done to us. did you DL any executable files recently? direct AIM connection? was your secret question/answer for hotmail easy to guess? any other ways you think he "hacked"?

My thoughts as well. And why did he target you anyway? (OP)

Dude,

You are stupid. You probably had a weak password and it was same one used for all your accounts i.e 2p2 acct, pstars, ftp etc and aol.

Karma

Can't wait til this happens to morons like yourself, then make a thread called irony plz

If you have 12k in your acct and you're unable to secure it then you get no sympathy from me. It is a dog eat dog world baby. The one good thing about this is he will learn about computer security now...lmao.


I'll post again for the interweb n00bs like urself and others.

1. if you have 12k in your acct then you have enough money to spend $600 and have a workstation for only poker. Only poker = only poker. no web surfing, no pr0n, no email, no nothing. It has windows and poker clients only and thats it. You set the windows updates to occurr daily on this box and you are fine.

2. change your poker client passwords monthly and have them 10 characters min and have a capital letter, number and symbol contained in the password.

3. change your windows password monthly as well following rules from #2.

failure to do the above = no sympanthy from me because you're an idiot.

Karma

4. use gmail for email accounts and use same rules as #2 from above--which means changing password monthly blah blah.

Karma

Also, the OP could be trying to trap some n00bs here as well. For example, he has 5 posts and mentioned how dude that is scammer spent 4 hours talking to him on chat and blah blah. This could be a trap to get ppl to PM him to get the dudes IM to chat with him. All the while the other dude could be partner with OP---why you ask?

If there is a 0 day exploit in AIM/pidgin/trillian that is unpublished/unknown and you chat with the dude and he "sends" you a file or etc, you could become compromised without knowing anything about it and then YOUR poker accounts become compromised.

Karma

i was also wondering, what are op's account names that have been hacked? i know in hsnl the aim hacker was trying to confuse people into thinking he could hack into their aim just through chatting when really he was able to find out the answers to their security q's through casual convo before.

not saying matsu is lying, just would like some more info.

That sucks...

Checking PXFactor's sessions for the date in question on tableratings seems to verify OP, he had a +11k session on the 4th which corresponds to what the OP posted.

Just because a guy is naive about net-security doesn't mean he's deserving of being robbed; it just means it's more likely to happen, but it doesn't mean the guy deserves it. The fact that you're incapable of any empathy probably indicates larger problems of you own self. In fact, I'm sure it does. You may want to look into that...

Oh, and if you have an extra HD, a mobile rack system will only cost $30, and it's better than a separate system because you can take the drive everywhere you go.

This is nifty idea.

What alternate universe do you live in where crime victims are undeserving of sympathy or justice. You must live a pretty cold existence, devoid of human warth. Ironically, this is the same antisocial thought process that criminals use to rationalize their crimes.

Criminals are generally uncaring, selfish, callous, and lack empathic recognition for their fellow man. Nobody deserves to be a victim of crime. Some people lack technical skills, and even still try their best to secure their computer. All it takes is one cunning or masterful predator to thwart some of the most carefully implemented security precautions.

Instead of taking this issue seriously we blame the victim. This helps make ourselves feel secure and invulnerable. As mentioned before, some simply adopt the ideology of the criminal predator. After all, it's a "dog eat dog" world. The issue of online security is one that should not be taken lightly. It's in everybody's best interest to nudge the sites to be proactive in fighting internet crime. Not only for your own protection, but to protect depositors of all walks of life who participate in our game.

Jeff Oneye "Don't piss in the well that quenches your thirst."

Can I be on your show Dr. Phil?

QFT. Thanks for the fabulous, insightful post. The suggestion was useful as well.

Jeff Oneye "Don't piss in the well that quenches your thirst."