Origin Account Security

[Goates]

So anyone else have had massive problems with their origin account security?

I went onto origin for the first time in around a year to purchase BF4 only to realise that someone had changed both the email address and password on the account. So I contacted support via phone and spoke to a nice guy called Mike. He confirmed that my account had been compromised and went through the process of resetting the information and getting me access to the account.

Anyway so I bought BF4 and all was fine downloading it then I got the notification that my password had been changed again. So I did the online chat support reset everything password, email and secret question and literally 2 minutes after I came off they changed the email address and password again.

So now I am talking to the third support person trying to sort it out and he has no clue what hes doing. No idea how they are doing it but thankfully I have never used any credit card details on origin or this could be a right mess.

 

[Goates]

I try to avoid EA games only have 3 games on two different accounts but it's such a mess wish I could move them to steam not had any security problems over last 5 years with EA though.

Mentioned steam to the chat guy and he just ignored me lol. I gave up on the last support guy he was so incompetent. Ringing them now to try and sort it. As for malicious software I initially thought this but it was the support guy that changed the details I never entered anything on my pc.

Ha ha this just funny now. Guy changed all my details again on the phone and literally 30 seconds after I re accessed my account they changed all the details again. These guys have some pretty nice hack on the go. I would recommend not having your cc details on your origin account.

The guy tried it again and they did the exact same thing. Put me through to a "specialist" was on hold for 30 minutes and I gave up no idea what to do now.

 

[Goates]

^

Maybe they linked your account to their PS3/Xbox account? Try asking Origin support if they can void any links to PS3/Xbox then let you link your own account again after.

No it still said my gamertag was linked to it. No idea how I am going to get this sorted now. I can't afford to sit on the 0870 phone line for another 1 hr+. Tried another non premium number and it didn't work and talking to most of the people on the online chat is like banging your head against a brick wall.

 

[Goates]

A hack on EA's end is pretty unlikely if something like that happened it would be pretty major.

More likely you have been compromised in some way. How have you confirmed your PC is clean, have you used the same AV you already had installed? I would use Kaspersky Rescue CD and boot from that and do a scan to make sure no root kits have been installed. The rescue CD is free to download via their support page.

You got EA to reset your email, is it the same email you've used previously? If it's Hotmail/Gmail they could be compromised. Perhaps look at resetting your password there and if possible enable 2 factor authentication. Check no mail forwarding has been setup.

Try and use a different password for each site, use a password manager if possible. Personally I use 1Password to manage mine, but there are others such as KeePass, LastPass.

Unfortunately now days cracking a generic password is relatively simple. Ideally you want to use a totally random password generated by a password manager, something over 10 chars long. Mine where allowed are all 21, hence the need for a password manager.

Hope you get this sorted out.

The way they are doing it makes it seem like a hack on EA's end which is very worrying. I've tried 5 different gmail accounts and very obscure passwords. The speed at which they get control of the account back also makes me believe it is a hack on their end rather than any software on my PC (which I have checked is clean multiple times). They change the details on my account and literally 30 seconds after logging in I get booted again and the password and email are instantly changed.

 

[Goates]

The thing about it is I don't even get the usual email verification through saying my password and email has been changed it just happens.

Lol the online chat has just reached a new low. The guy is now just ignoring me.

 

[Goates]

A linked PSN/Live account seems to be a good call if your PC/Email are clean.

If you go to http://www.origin.com and login there, under the "About Me" section you can see linked accounts.

I don't even get chance to do this. They gain access around 30 seconds after the change.

 

[Goates]

Explain the problem, don't suggest a reason why, let them figure out the solution.

Haha I'm not sure if you have used EA's online chat before most of them couldn't solve the problem of putting their underwear on the wrong way round in the morning. Some are good to be fair especially the ones over the phone.

Sorta stuck now and the only real way I'm going to get this sorted is another long expensive phone call to EA support

 

[Goates]

Finally got through to a specialist. It is a hack that can only be fixed with an update which is due to come out on Wednesday. Absolutely ridiculous to be fair and according to the guy on the phone there have been a number of people calling that have been affected.

 

[Goates]

Interesting. Is this a flaw in the password recovery for the Origin client, did he give any details?

No he was very hush hush about it. From what I understand they are simply able to reverse any changes that anyone makes on the account almost instantly whether it is me or someone at EA.