Forum Discussion

justme22's avatar
justme22
6 years ago

*SECURITY ALERT*

Not one to All Caps a title but this is pretty important.

According to Sims Community, there's a pretty nasty scam going on where someone (or some group) is hijacking Origin Accounts then giving them away (with all packs/games) as a "friendly gesture".

https://simscommunity.info/2019/05/10/secure-your-account-malicious-origin-account-giveaways-have-started-surfacing/

Check your account, change your password, enable two-factor authentication (so if you log in from a different computer you'll have to enter a code sent to your phone or email), and unlink from Origin any credit cards (sure, it's a hassle to have to enter your card number every time you make a purchase, but better a few extra keystrokes than to have your card pilfered).
  • janyses's avatar
    janyses
    Seasoned Spectator
    6 years ago
    "So_Money;c-17061079" wrote:
    "IceyJ;c-17061071" wrote:
    "Simpkin;c-17061070" wrote:
    "IceyJ;c-17061066" wrote:
    "So_Money;c-17061058" wrote:
    "IceyJ;c-17061052" wrote:
    Someone in Russia keeps trying to log into my Origin account. I know because EA keeps texting me the login code in Russian. I removed all payment info years ago, but I still added two-factor authorization just in case. Didn't change my password; I like my password, lol.


    If the hackers are making it to the 2-factor stage, they already know your password.


    Obviously. Not changing it; I like my password, lol. As long as they can't get in, I don't care. I have various passwords all over, so I'm not concerned about the possiblity of them using it elsewhere.


    tbh you're asking for them to get in with this.


    Really? Are they coming to take my phone? What's the point of two-point authorization if it doesn't work.


    There is already a tool out there capable of bypassing 2FA. As @ChelleJo said, it’s not bulletproof.


    So? If they've gotten all of my previous passwords, you think they can't get the next one? And the next one? And the one after that? So I'm relying on the additional security measures. Either it'll work, or it won't. That's all.

    I actually waited before adding two-factor because I'm tired of changing passwords and just don't care to continue. I'll get my account back if I need to.
  • janyses's avatar
    janyses
    Seasoned Spectator
    6 years ago
    "drake_mccarty;c-17061096" wrote:
    "IceyJ;c-17061071" wrote:
    "Simpkin;c-17061070" wrote:
    "IceyJ;c-17061066" wrote:
    "So_Money;c-17061058" wrote:
    "IceyJ;c-17061052" wrote:
    Someone in Russia keeps trying to log into my Origin account. I know because EA keeps texting me the login code in Russian. I removed all payment info years ago, but I still added two-factor authorization just in case. Didn't change my password; I like my password, lol.


    If the hackers are making it to the 2-factor stage, they already know your password.


    Obviously. Not changing it; I like my password, lol. As long as they can't get in, I don't care. I have various passwords all over, so I'm not concerned about the possiblity of them using it elsewhere.


    tbh you're asking for them to get in with this.


    Really? Are they coming to take my phone? What's the point of two-point authorization if it doesn't work.


    It does work most of the time, but that doesn’t mean it will work 100% of the time always. In the event that your account is compromised, good luck getting it back without a mandatory password change.


    I'm fully aware of the risks. :) I'd rather do that when necessary than have to change it every day.
  • janyses's avatar
    janyses
    Seasoned Spectator
    6 years ago
    "Simpkin;c-17061102" wrote:
    "IceyJ;c-17061085" wrote:
    "ChelleJo;c-17061072" wrote:
    "IceyJ;c-17061071" wrote:
    "Simpkin;c-17061070" wrote:
    "IceyJ;c-17061066" wrote:
    "So_Money;c-17061058" wrote:
    "IceyJ;c-17061052" wrote:
    Someone in Russia keeps trying to log into my Origin account. I know because EA keeps texting me the login code in Russian. I removed all payment info years ago, but I still added two-factor authorization just in case. Didn't change my password; I like my password, lol.


    If the hackers are making it to the 2-factor stage, they already know your password.


    Obviously. Not changing it; I like my password, lol. As long as they can't get in, I don't care. I have various passwords all over, so I'm not concerned about the possiblity of them using it elsewhere.


    tbh you're asking for them to get in with this.


    Really? Are they coming to take my phone? What's the point of two-point authorization if it doesn't work.


    You're an grown adult (I'm assuming, if not, you are still in control of your own decisions) if you choose not to change your password, that's one you, but I hope you wouldn't be one of those people that will be complaining that EA didn't do enough to protect your account when they do finally get in. I guess the term of 'hacker' doesn't register with you. Two-factor isn't bullet proof. It's suppose to be a warning system to alert the user to change their password and better protect their account. It's as much your responsibility to keep your account safe as it is EA's.


    Nothing is bullet-proof, so why are you all bothering? Why do any of this if a hacker can get in anyway??? It's not the first password I've ever had. I've changed passwords many times for many reasons. I'm just choosing not to change it this time. I'll let you know how it goes.


    not everyone is so careless, that's why.


    Um, okay? So, what happens when a hacker gets into your account anyway? You'll have to contact EA just like I would. Only difference is you kept changing your password to 'stay safe,' although multiple people in this thread are admitting that none of it is all that safe.
  • janyses's avatar
    janyses
    Seasoned Spectator
    6 years ago
    "Simpkin;c-17061109" wrote:
    "IceyJ;c-17061104" wrote:
    "drake_mccarty;c-17061096" wrote:
    "IceyJ;c-17061071" wrote:
    "Simpkin;c-17061070" wrote:
    "IceyJ;c-17061066" wrote:
    "So_Money;c-17061058" wrote:
    "IceyJ;c-17061052" wrote:
    Someone in Russia keeps trying to log into my Origin account. I know because EA keeps texting me the login code in Russian. I removed all payment info years ago, but I still added two-factor authorization just in case. Didn't change my password; I like my password, lol.


    If the hackers are making it to the 2-factor stage, they already know your password.


    Obviously. Not changing it; I like my password, lol. As long as they can't get in, I don't care. I have various passwords all over, so I'm not concerned about the possiblity of them using it elsewhere.


    tbh you're asking for them to get in with this.


    Really? Are they coming to take my phone? What's the point of two-point authorization if it doesn't work.


    It does work most of the time, but that doesn’t mean it will work 100% of the time always. In the event that your account is compromised, good luck getting it back without a mandatory password change.


    I'm fully aware of the risks. :) I'd rather do that when necessary than have to change it every day.


    yes, when you have unusual activity on your account, it's time to change. It does not happen every day. I didn't rea one post here saying you need to change it every day.


    How do you know it doesn't happen every day to me? Or every week, or every month? Our experiences will not be the same.

    Regardless, it's too often as I have hundreds of accounts spanning approx. 15 years of websites. I choose my battles. If there is unusual activity on my bank account, I'm changing that one immediately.
  • janyses's avatar
    janyses
    Seasoned Spectator
    6 years ago
    "drake_mccarty;c-17061117" wrote:
    "IceyJ;c-17061104" wrote:
    "drake_mccarty;c-17061096" wrote:
    "IceyJ;c-17061071" wrote:
    "Simpkin;c-17061070" wrote:
    "IceyJ;c-17061066" wrote:
    "So_Money;c-17061058" wrote:
    "IceyJ;c-17061052" wrote:
    Someone in Russia keeps trying to log into my Origin account. I know because EA keeps texting me the login code in Russian. I removed all payment info years ago, but I still added two-factor authorization just in case. Didn't change my password; I like my password, lol.


    If the hackers are making it to the 2-factor stage, they already know your password.


    Obviously. Not changing it; I like my password, lol. As long as they can't get in, I don't care. I have various passwords all over, so I'm not concerned about the possiblity of them using it elsewhere.


    tbh you're asking for them to get in with this.


    Really? Are they coming to take my phone? What's the point of two-point authorization if it doesn't work.


    It does work most of the time, but that doesn’t mean it will work 100% of the time always. In the event that your account is compromised, good luck getting it back without a mandatory password change.


    I'm fully aware of the risks. :) I'd rather do that when necessary than have to change it every day.


    If you are getting two-factor alerts every day then you have a serious problem somewhere. Are you sharing your account with someone? Online? Hackers don’t just guess your password they get it from you, one way or another. You should always have anti-virus software on pc.


    Nope, not sharing with anyone. There are multiple ways for a hacker to get a password. (Yes, they can guess it too, but that's for the common passwords you should never use.) I did find out that that particular password/email combo was found on the dark web. How it got there, I'm not sure.

    I used to fix computers in my spare time, so I'm not unfamiliar with how to care for one. The alert is coming from the same place in Russia. Repeated attempts.
  • janyses's avatar
    janyses
    Seasoned Spectator
    6 years ago
    When I say 'every day,' I don't mean every single day and I'm not referring to only Origin. What I mean is I have many, many, MANY accounts and subscriptions by being a long time Internet user so the effect is multiplied.

    I'll bother with the accounts that are more serious and important.
  • janyses's avatar
    janyses
    Seasoned Spectator
    6 years ago
    "Seera1024;c-17061136" wrote:
    "IceyJ;c-17061110" wrote:
    "Simpkin;c-17061102" wrote:
    "IceyJ;c-17061085" wrote:
    "ChelleJo;c-17061072" wrote:
    "IceyJ;c-17061071" wrote:
    "Simpkin;c-17061070" wrote:
    "IceyJ;c-17061066" wrote:
    "So_Money;c-17061058" wrote:
    "IceyJ;c-17061052" wrote:
    Someone in Russia keeps trying to log into my Origin account. I know because EA keeps texting me the login code in Russian. I removed all payment info years ago, but I still added two-factor authorization just in case. Didn't change my password; I like my password, lol.


    If the hackers are making it to the 2-factor stage, they already know your password.


    Obviously. Not changing it; I like my password, lol. As long as they can't get in, I don't care. I have various passwords all over, so I'm not concerned about the possiblity of them using it elsewhere.


    tbh you're asking for them to get in with this.


    Really? Are they coming to take my phone? What's the point of two-point authorization if it doesn't work.


    You're an grown adult (I'm assuming, if not, you are still in control of your own decisions) if you choose not to change your password, that's one you, but I hope you wouldn't be one of those people that will be complaining that EA didn't do enough to protect your account when they do finally get in. I guess the term of 'hacker' doesn't register with you. Two-factor isn't bullet proof. It's suppose to be a warning system to alert the user to change their password and better protect their account. It's as much your responsibility to keep your account safe as it is EA's.


    Nothing is bullet-proof, so why are you all bothering? Why do any of this if a hacker can get in anyway??? It's not the first password I've ever had. I've changed passwords many times for many reasons. I'm just choosing not to change it this time. I'll let you know how it goes.


    not everyone is so careless, that's why.


    Um, okay? So, what happens when a hacker gets into your account anyway? You'll have to contact EA just like I would. Only difference is you kept changing your password to 'stay safe,' although multiple people in this thread are admitting that none of it is all that safe.


    Let's just say you should do everything in your power to increase the time it takes to break into your account.

    There have been instances in another game where the company couldn't figure out who actually owned the account. That company permanently bans accounts in which two people can present enough evidence to show they own the account.

    So you should do whatever you can to reduce your chances of that happening to you.

    So if someone has your password, you should change it.


    I'm sure they can't provide all of the receipts that I have for purchases. Doesn't matter what anyone says. Still not changing it. :p
  • janyses's avatar
    janyses
    Seasoned Spectator
    6 years ago
    "Seera1024;c-17061156" wrote:
    "IceyJ;c-17061150" wrote:
    "Seera1024;c-17061136" wrote:
    "IceyJ;c-17061110" wrote:
    "Simpkin;c-17061102" wrote:
    "IceyJ;c-17061085" wrote:
    "ChelleJo;c-17061072" wrote:
    "IceyJ;c-17061071" wrote:
    "Simpkin;c-17061070" wrote:
    "IceyJ;c-17061066" wrote:
    "So_Money;c-17061058" wrote:
    "IceyJ;c-17061052" wrote:
    Someone in Russia keeps trying to log into my Origin account. I know because EA keeps texting me the login code in Russian. I removed all payment info years ago, but I still added two-factor authorization just in case. Didn't change my password; I like my password, lol.


    If the hackers are making it to the 2-factor stage, they already know your password.


    Obviously. Not changing it; I like my password, lol. As long as they can't get in, I don't care. I have various passwords all over, so I'm not concerned about the possiblity of them using it elsewhere.


    tbh you're asking for them to get in with this.


    Really? Are they coming to take my phone? What's the point of two-point authorization if it doesn't work.


    You're an grown adult (I'm assuming, if not, you are still in control of your own decisions) if you choose not to change your password, that's one you, but I hope you wouldn't be one of those people that will be complaining that EA didn't do enough to protect your account when they do finally get in. I guess the term of 'hacker' doesn't register with you. Two-factor isn't bullet proof. It's suppose to be a warning system to alert the user to change their password and better protect their account. It's as much your responsibility to keep your account safe as it is EA's.


    Nothing is bullet-proof, so why are you all bothering? Why do any of this if a hacker can get in anyway??? It's not the first password I've ever had. I've changed passwords many times for many reasons. I'm just choosing not to change it this time. I'll let you know how it goes.


    not everyone is so careless, that's why.


    Um, okay? So, what happens when a hacker gets into your account anyway? You'll have to contact EA just like I would. Only difference is you kept changing your password to 'stay safe,' although multiple people in this thread are admitting that none of it is all that safe.


    Let's just say you should do everything in your power to increase the time it takes to break into your account.

    There have been instances in another game where the company couldn't figure out who actually owned the account. That company permanently bans accounts in which two people can present enough evidence to show they own the account.

    So you should do whatever you can to reduce your chances of that happening to you.

    So if someone has your password, you should change it.


    I'm sure they can't provide all of the receipts that I have for purchases. Still not changing it. :p


    All they would need is one to provide doubt.

    I would hope that your ability to play the games on your Origin account at any time you want would be worth doing whatever it takes to keep your account safe. But I guess not.

    You say you work on computers yet you don't do things that increase your security. That makes me wonder about the validity of you actually working on computers. Not saying you're lying, but that lack of basic internet security throws a nice big red flag.


    I don't care what you believe. I've been sick for a long time, and I'm choosing to use my energy elsewhere. Not changing it. That is all.

About The Sims 4 General Discussion

Join lively discussions, share tips, and exchange experiences on Sims 4 Expansion Packs, Game Packs, Stuff Packs & Kits.33,030 PostsLatest Activity: 10 hours ago