Forum Discussion

ValRohen's avatar
ValRohen
New Rookie
5 years ago

Account hijacking and abuse of resources

Product: Star Wars: Galaxy of Heroes
Platform:Android Tablet
What type of device are you experiencing the issue with? Emulator / Phone
OS Version 7 and 10
Ally Code: (Find it here: http://bit.ly/AllyCode ) 777681168
What type of issue do you have? Other
How often does the bug occur? Every time (100%)
Summarize your bug Account hijacking possible via FB connect and emulators and/or phones
Steps: How can we find the bug ourselves? Not sure as this can be related to an unlucky coincident with the emulator, Phone and FB Connect
Connection Type Wifi
Please select your region Europe
Country Germany

Ladies and Gentlemen,
I would like to raise awareness to an issue with the Facebook connect and using emulators to play the game on your laptop or desktop computer with greater ease.
Yesterday I ran a setup on my laptop and used FB Connect to link a device. Strange enough I followed the steps to find myself linked to a different account that had already progressed a bit (lvl 85 ~650k GP) but obviously wasn’t mine. That account was even part of a guild and I could see members and chat messages.
Knowing this is not my place I disconnected and removed that machine to create a new one. There it worked and no issue was coming up. Several hours later I was closing the day with a few missions I got disconnected (Message like: Your session expired… due to recent login). You can imagine my mental condition at that time. The next hour I was going back and forth trying to prevent login to my account but in the end the other side spent all my crystals on shards which I don’t need. Left my guild robbing me of the TW participation and some loot of the hSTR. The real trouble was than as he continued to do logins and spend my arena fight causing havoc on my shard mates which I value highly.
My question therefore is simply – are you aware of such a thing? Can you help me to have again a guaranteed control over my account (to prevent any more damage like sold mods and stuff like that)? And a topping would be to get my crystals back with all the other changes revert of course (extra splinters removed in the process).
Looking forward to hearing from you on this serious security issue!
Thanks & Regards
Val
p.s.: Contact me please for details – I opened a support ticket already

6 Replies

  • Just had a chat with the live support which are completely ignorant to understand the situation of this problem and point me to change my passwords. I did that already, deleted the Facebook connect already but still the other account logged in and cause troubles ...

    Can someone with a technical background please get in contact with me - I am willing to help and not to be ignored by the 1st level suport and their limited capabilities.

  • Hi @ValRohen and so sorry to hear that.

    Edited Since your previous message wasn't showing up:

    We have locked your account for the time being to avoid any further access by an unauthorized person. Please provide us with the case number from our support so that we can have the right person look into it.

    As for the Facebook linking, we've recently changed that feature to make it more secure. Since it all started after you began using an emulator, that might be the cause (and the main reason we don't support emulators, since we don't have control over them).

  • ValRohen's avatar
    ValRohen
    New Rookie
    5 years ago

    Hi @EA_HighCommand ,

    thanks for the note, guess with the account lock - you scared the hell out of me with that and I have 2h left to get my dailies done before reset but I guess that is history and now I loose even more zetas tokens.

    The case nummer is: 

    62730909

    With that case number I already validated that I am the owner of that account using the live support chat.

    Can you get the ban lifted asap?

    Cheers

    Val

  • ValRohen's avatar
    ValRohen
    New Rookie
    5 years ago

    Thanks for the quick help. 

    A pleasure to deal with professionals. 

    Regards 

    Val 

  • ValRohen's avatar
    ValRohen
    New Rookie
    5 years ago

    Additional information I can provide:

    Talked to the other account owner, the one mentioned above, and he had a similar issue where has seen a different account that wasn't his - and he had the same decency to disconnect without any action. Guess I am not alone with that and evenmore interesting is that is it not bi-directional. He wasn't seeing my account but a third one.

    Thanks and Regards

    Val

About SWGOH Technical Issues

Get help and discuss troubleshooting for Star Wars: Galaxy of Heroes with other players.24,929 PostsLatest Activity: 4 days ago