Noticed I only had 30 MS Points,

then my purchase history is:
PREMIUM GOLD JUMBO Game Consumable 4/22/2012


I didnt even have my Xbox ON on that day.

funny this comes after i accidently set Origin to Sync my XBL Friends list.

Ok, the Purchase doesnt show up on my console, just on Xbox.com

No new emails added to my account,

my password still works, i only had trouble signing into Zune Marketplace on Zune's Program last week.

MS Billing website has
4/22/2012 PREMIUM GOLD JUMBO -- Game Consumable -240 30
4/22/2012 PREMIUM GOLD JUMBO -- Game Consumable -240 270
4/22/2012 PREMIUM GOLD JUMBO -- Game Consumable -240 510
4/22/2012 PREMIUM GOLD JUMBO -- Game Consumable -240 750

Also Said I played FIFA12 on 4/22

Got of Phone with Tech Support,

Account is locked.

Damn, sorry to hear that skate. Hope it works out for you in the end.

Xbox support will take care of it, as im one of their beta testers and 11 year member of XBL, they pretty much kiss my ass when i call them, as soon as they type in my info and it comes up they forward me to a supervisor everytime.

i say its no coincidence this happens after in install BF3 and Link my EA account.

Sorry to hear that Skate, if you remember I was hacked by that same FIFA12 XBL hack back in Sept and it looks the same, they used all of my points and then bought more points using my linked credit card.

XBL helped me get back in and restored my points and I left a fraud lock on my account until just recently. When I called up to get the lock removed they said there were some new limits on what the EA FIFA12 points could be used for which stopped the hacking, but apparently XBL continues to be clueless/useless on this hack, sorry to hear that.

The way I avoided a re-occurrence is since I can't trust XBL to keep my account safe, I no longer have a working credit card on my XBL account and I also don't keep many points on the account, when I need to buy something I purchase a online points code on Amazon and then spend the points.

Ridiculous that MS XBL still hasn't solved this hack 6 months later, while it might be EA that is being used for the hack, XBL is the one I trusted my credit card to and they are the ones allowing the points purchases without appropriate authentication, apparently they must make so much money with these FIFA12 purchases that they don't want to disable the feature which would stop the hack.

I leave my Card on there for Zune Pass,

afaik my Xbox profile has the right card number and exp, but the wrong CV/Sec. Code, so purchases done from my Xbox Profile would be declined.

i think the hole is on EA's servers, as I didnt have an issue until i bought BF3 and Linked my EA Account with my Xbox Account.

Yeah the hack is on EA but XBL trusts EA implicitly. For me EA never had my credit card at all, only XBL did, and my only crime was installing FIFA12 demo on XB360 which creates the link between my XBL and EA accounts...

XBL know EA is being used to do the hack should disable or limit what the EA account can be used for or at the very least require some additional authentication or fraud limits on this activity (i.e. that the purchase is being done at a console that has been on the account for some time or is even in the same timezone! the douchebag that hacked me was in the UK and I was able to see him online in the UK during the hack, don't you think it might be suspicious that I would add a new console in the UK to my account and then rack up $400 of point purchases within the first 15mins??)

But alas XBL refuses to do anything to stop the fraud since apparently that would cost too much to their FIFA12 points profits...lesson learned, since XBL continue to trust EA's known hacked FIFA12 infrastructure there is nothing you can do to stop a re-occurrence, other than a fraud lock which stops you from buying more points on the account, or you can keep no points on the account and no valid credit card on the account.

Lots of examples of the exact same hack here:
http://www.hackedonxbox.com/

I have to say I am really surprised and disappointed at Microsoft's response to this, Sony may have got the bad press on their PSN hack last year, but actually I personally did not get any fraud on my credit card I used there, they admitted and owned up to it and even gave me a bunch of free games and ID protection.... Microsoft continues to ignore the hack after 6+ months.

its not really FIFA12, but more along the lines that something somewhere is storing your Windows Live ID info, and some how someone is getting access to those files/logs and exploiting them.

people use FIFA 12 because they can use your points and Credit card to get a mess load of team cards, send them to their account, and then re-sell them for real money.

the problem is how much some developers abuse making Paid DLC Content. which creates the scenario every is experiencing.

Along with the fact that XBL allows any developer that links their online servers to XBL (required to play the game) to clean out your XBL account with no other security/fraud checks and then gives their customers the ignorance and runaround XBL fraud experience.

funny thing is someone on my facebook said "thats why i have a playstation 3" when i said my XBL was hijacked.

Sony's crap is Waaaaaaaaaaaaaaaaaaaaaay worse.

Hopefully its resolved.

I know i wasn't phished and my PC is clean, the only place I even remotely logged into my passport.net outside of Xbox, Xbox.com, ZuneHD, Zune Application, Zune.net, Passport.net, GamesForWindowsLive, Live Mail (which i dont even use anymore), and Live Messenger was Origin. when it asked me to link my EA and Xbox accounts to display my Xbox stats on EA Origin for BF3.

Glad to hear the damage was light Skate, also the hacker didn't blow away your friend list like they did with me, I still see you on my friends list and I confirm that I see FIFA12 on your recent activities list.

For me the XBL support guy was actually helpful resetting my password a couple of times while we fought the hacker who kept changing my live account password and personal questions, and once we were able to take my account back over and lock out the hacker XBL support refunded my 6000 lost points and then put the fraud lock on the account. So thankfully I didn't lose my gamertag for 6 weeks of fraud investigation as was a possibility and happens to many. I then worked with my creditcard to cancel the card and get a refund on the hundreds of dollars of points charged (they were the ones who alerted me to the possible fraud).

Still finding XBL friends that got removed when the hacker deleted all my friends and messages when he had control.

Hopefully you are clean now, although if you still have a valid card on XBL I don't think there is anything to stop it from happening again as long as the EA account is linked to XBL.

i should clean my list, i still have people on my list from the Xbox Live beta testing in 2002, and havent been on since 2004,


its funny, cuz i have a few new people on my list that i dont remember, and one of them sent me a Redeem code for GR:FW that worked the day after the hacker used all my points. So he wont be deleted right away :-), guess he thought he was messaging his buddy, its also possible my brother added them while i was at work, as they seem to invite me to Call Of Duty and other games he plays on Live that i dont, I've limited myself to Forza on Xbox Live for the last 4 or 5 years since thats all i have time for.

its like they are changing their M.O. as i didnt notice it till a week later, when I was finally able to sign into Zune's software on my PC and my Profile ticker said i only had 30 MS pts when i know i had over 900.

Hrmm, does sunday count as a working day for them? or should i give them till Thursday night before i call them.

Wow, so can they hack you from ANY EA game linked to your Xbox 360? I have a STACK of games linked to my Xbox from EA... Not FIFA 12 though. I don't have a credit card on file with them thankfully.

i never touched FIFA or the demos for it.

but it happened 2 weeks after i linked with EA and BF3.


i wouldn't be surprised if it was the dumbest hole in the world.

but MS said they are good, and EA says the same. Some one isnt doing crap to resolve an on going issue, this all started with FIFA 10, escalated into people being hacked for XBL Arcade titles as well, and EA was voted worst company of the year.

im still waiting to hear back from MS, I'll give them till Sat. night, as I'll be setting up and abusing my Eyefinity setup.

got a email on my main email, stating that i added a alternate email (the email addy i gave the tech support guy).

at my alternate email i got a email saying i requested a password reset,

I had already changed my password, and that password didnt work, so i went ahead and changed my password again.

then got an email regarding the case,

the normal hoopla about passwords, plus 2 codes to download MS points, (600 pts), erm, the hacker spent 960.

Sorry to hear the fun continues for you Skate.

@Hogdriver, as far as I can tell the only way to be safe from this XBL hack is to not leave a valid credit card or Paypal on your XBL account, until XBL puts in some basic fraud detection or prevention measures that would stop this hack.

i.e. XBL could prevent this if they didn't allow a newly added console to clean out your points, or purchase hundreds of dollars of new points within minutes of being added to an existing account, without doing additional auth verification (email or private questions)... especially if that new console is located in a different city or country from the other previous consoles on the account.

Even my iPhone required additional validation when it was upgraded and added to iTunes and I went to make a new app purchase on my existing iTunes account. So this isn't rocket science, but XBL for some reason doesn't mind that their customers who trusted them with their credit card/paypal are being ripped off so easily by their "partners" like EA who can't keep their own security up to snuff, XBL even refuses to admit if the fraud was committed by a problem on XBL or EA.

Again it is ironic that Sony got all the bad press by being hacked, but they admitted it, did something about it and took care of the customers, yet Microsoft continues to ignore and deny and let the customers be ripped off.

Agreed, MS should put a Sec. Code on Xbox Accounts/Passport.net Accounts that isnt stored on the console or in the account to prevent people from signing in on another console and going nuts. if they dont know the sec. code they cant do anything.

my case is resolved according to MS, i have control of my account back, and they said they refunded me $4.99 + added 560 points back, plus download codes for a 400 pts, and a 200 pts in the email, no i gotta re-download my profile. but as of right now it still shows me as only having 30 points.

i dunno if i can take my card off, as its used for ZunePass. but i created a nice long random password with Upper, lowercase, and alternate characters... and the only place i've typed it is in notepad, Xbox.com, Zune's Software, and Passport.net.

Origin Application just asked me to update my Xbox Live login and password as it went to refresh/update my friends list and it was trying to use my old password.

Conclusion?
EA Origin is storing the WindowsLiveID and password on their servers when you merge/Link your Xbox Live account
(to merge your friends list).

This pretty much solidifies that EA is the leak to me.

Yeah I agree, the astounding thing to me is why Microsoft XBL continues to trust EA to access XBL accounts and allow authentication, profile changes and purchases.

I wouldn't be as disappointed with XBL if they just did what they needed to do to protect me from EA's crappy security since they have plenty of evidence that it cant' be trusted, unfortunately XBL continues to deny there is a hack or do anything to prevent it, 7-8 months since I got hacked you still got hacked the same way, they must make so much profit from EA game points purchases that it's worth it to allow their customers to be hacked and waste their time handling the resulting fraud.

Hopefully your hacker activity ended... for myself I just do Amazon points cards whenever I need to buy anything on XBL as I can't trust it with my CC, good reminder to add points as I saw a couple of the FM4 car packs are on sale.

MS is right in denying there's a hack, because they arent hacked, users are obtaining login info from another company's server and loggin into XBL using your account info.

True to a point but XBL are the ones giving EA the XBL account info via the EA<->XBL game linking, they should either force EA to fix the hack or stop allowing that.

well, one way is to not give EA permission to link accounts, outside of BF3 i wont be play any EA games anyway.