At my wits end

Comment below rating threshold, click here to show it.

Princess Urgot

Junior Member

02-27-2012

tldr; My account was compromised and everything I've done to reclaim and secure it has failed. Halp!


Okay, so Feb 4th I was browsing the LoL forums and clicked on something I shouldn't have. If memory serves, it was a link to some video or other, the video player spat an error at me and I allowed it to run Java. Stupid, yes. What can I say, I'm not at my best before my morning coffee. Anyhow, shortly thereafter, my LoL account was hijacked. Not a problem, I thought, Riot can reset my password and I'll be back playing in no time. (Oh, how naive I was. But let's not get ahead of ourselves.)

The first measure I took was running scans with Malware Bytes, MS Security Essentials, Emsisoft Anti-malware and a few other trojan hunting programs. I found a few likely things with MB and Emsisoft, so I figured that was that and it was safe to submit an Unrecoverable Account ticket. Two weeks later, after escalating my case to a specialist, Riot reset the account email address, reset my password... and less than an hour later (before I had even read the "password reset" email) my account had been hijacked again.

Well, hell, I thought, there must be a very sneaky keylogger on my system.

I downloaded several more AV programs, using free trials of full versions to try to find something, anything. Eventually Kaspersky found some suspicious temporary internet files that every other program overlooked, but I wasn't going to take any chances: might as well reformat and reinstall Windows. I further figured that if I used a different computer to swap the email from my main email address to a different email addy this time, and changed the passwords to both email accounts as well as my LoL account, I'd be safe.

So, from another computer -- a Mac -- I submitted a reply to my still open ticket explaining to Riot everything I had done to that point and was planning to do, and would they please reset my account email/password one more time (I also rather emphatically apologized for being ridiculously stupid). They did so. From that same Mac, I changed all my info, my email address, passwords -- everything I could think of. I didn't even log back into my LoL account because I had deleted my client just in case *that* was somehow infected. Yet, 3 hours later, my friends reported that the guy was back on my account and in queue. I still have no access.

During all this, the hacker had not removed anyone from my friends list despite some mild harassment from them, and was utterly unconcerned when told action was being taken by Riot. He even felt comfortable posting this thread: http://na.leagueoflegends.com/board/....php?t=1813982 to which there was, amusingly, a red reply. He continues to play ranked games on my compromised account.


So, here we are. I have no idea what else I can do. I even asked Riot to freeze email changes, something which they either can't or won't do. Other than that, have I overlooked something obvious? How is it possible he's doing this so effortlessly? Is it possible there's a security loophole in Riot's account system? I took every precaution with the latest account reset: new computer, passwords, and email accounts. Whatever originally stole my information is long gone, and still he was back into my account seemingly at will. Any advice at all would be appreciated here. Is anyone else experiencing anything like this?

I'm at a loss and would greatly appreciate any wisdom you guys may have. I certainly won't be wasting any more of Riot's time by asking for yet another password/email reset without some assurance that the account will not be immediately lost again.

I've invested roughly a year and a half all told into my account (and a little over $130 in skins, rune pages and such, but that's fairly trivial) and I can't imagine trying to start over from scratch. But at this point, if nothing can be done, I'm willing to go with a razed earth strategy and simply ask Riot to close the account and walk away from LoL rather than let this guy continue merrily playing away.

If you made it this far, thanks for reading and sorry for the giant wall of text.


Comment below rating threshold, click here to show it.

DreamLeviathan

Senior Member

02-27-2012

was very disappointed that this wasn't a clever pun thread


Comment below rating threshold, click here to show it.

Princess Urgot

Junior Member

02-27-2012

I debated for at least ten seconds about putting some sort of pun related disclaimer in the title. Sorry!


Comment below rating threshold, click here to show it.

Emperor Azrael

This user has referred a friend to League of Legends, click for more information

Senior Member

02-27-2012

I thought it was gonna be a pun thread :/

You should talk to your email provider's support, too. Maybe they can help restore your addresses.


Comment below rating threshold, click here to show it.

Maximum Can

This user has referred a friend to League of Legends, click for more information

Senior Member

02-27-2012

Quote:
Originally Posted by DreamLeviathan View Post
was very disappointed that this wasn't a clever pun thread
something something executioner's calling


Comment below rating threshold, click here to show it.

Princess Urgot

Junior Member

02-27-2012

Quote:
Originally Posted by iFinishWars View Post
I thought it was gonna be a pun thread :/

You should talk to your email provider's support, too. Maybe they can help restore your addresses.
My email addresses are fine. Whomever is responsible for compromising the LoL account hasn't touched my gmail passwords, so it's been fairly simple to ask Riot to change the account addy back to my main email address.

I have changed my email passwords several times myself, just to be sure. I don't know what else to do at this point, as nothing has worked.


Comment below rating threshold, click here to show it.

Phray

Junior Member

02-27-2012

Unfortunately I don't have any advice on how to fix this, I merely came to wish you luck in solving this issue! I know from experience how incredibly frustrating this can be, and how hopeless it may seem sometimes. Keep fightin for it.


Comment below rating threshold, click here to show it.

Wolf Un1t

Senior Member

02-27-2012

Is there a website you go to everyday that might be refreshing this keylogger/whatever this guy is with information?


Comment below rating threshold, click here to show it.

Jaerl

Senior Member

02-27-2012

GL dude. send in a ticket to the gm's?


Comment below rating threshold, click here to show it.

Princess Urgot

Junior Member

02-27-2012

Quote:
Originally Posted by Comatose94 View Post
Is there a website you go to everyday that might be refreshing this keylogger/whatever this guy is with information?
The only LoL related site I visit regularly is the CLG live stream page (handy list of awesome players). I can't imagine that's the issue.


And thanks for the well wishes, guys.