Account was stolen and CrossFire Support won't help.

Sogeking2019

Simply put, my main account was stolen (even though I kept my information safe). The person who stole it could even change my email without me authorizing it.

Before you people start criticizing, I have been playing since 2010. I never shared my account, I regularly changed passwords, I know that I can't share my info, and I DIDN'T. However, someone managed to get my info and steal my damn account.

I went to Support and provided TONS of information to prove full ownership of my account. Their response?:

"Hello,

Thank you for contacting Z8Games Support Center.

The registered email address on any Z8Games account can only be changed once every 90 days. As the email address on this account has been changed in the past 90 days, we kindly ask you to submit a new request after this duration has ended.

If your account was compromised since the last email change through the support center, you will need to wait until this duration ended as well.

We thank you for your understanding and we apologize for any inconvenience this may have caused you.

Regards,


[GM]Sharingn"

This is something that surely people must know. So, basically, the person who stole my account can keep changing the email every 90 days and I WON'T RECOVER MY ACCOUNT, ever, due to CrossFire's dumb policies regarding account recovery. Hell, I don't even know the exact date because I didn't play for several days until I discovered I was stolen.

I literally have ALL INFORMATION TO PROVE OWNERSHIP. I have been purchasing ZP since 2015 and I have more than 15 VIP guns. I have screenshots, payment info, original creation email, even the email when I transferred my account from CF ES to CF NA.

I am literally begging CF to let me recover my account. I sent the ticket three times and I received the same copy-pasted reply. Didn't even bother to edit it.

Please, CF, hear me out and provide actual help. I tried reaching you through social media and NO REPLY whatsover.

SirPanoCFES

Somehow, someone else had access and entry to your Crossfire account. If you gave someone access to your account (login information), in this way, you are fully responsible for the consequences that occur with your account (any resulting use).

That will take 90 days to change it again, especially because the process was done via ticket. These are Z8Games Support Center policies. You must submit a new request after this duration has ended. If it were by mail, in a hypothetical case, you could try to recover the account now. But we know that this was not the case because of the support response.

Utmost

I wouldn’t know how someone gained access to your account, specifically by the way you pleaded your case. Even so, I find it astounding that you’d have to wait 90 days to be able to try again recovering it. Giving the intruder a full 90 days to do whatever he likes with the account. And what if he changes the email again once the 90 days passed? Though it might be CF policy, this is crazy..

Other than that, did you specifically wrote your ticket in the account recovery section, not the email change section? You never know, you might get a different response in doing so.

CopyCat3

Most likely your credentials from some other service where you have the same username and password (or multiple that were cross-attempted) got leaked.
Try searching your information on google and see if it comes up in some wild pastebin or such.

You can also test it on https://haveibeenpwned.com/

If I were you I would also change my password for any service where you have used the same password as your account here.

SirPanoCFES

Utmost wrote: »

I wouldn’t know how someone gained access to your account, specifically by the way you pleaded your case. Even so, I find it astounding that you’d have to wait 90 days to be able to try again recovering it. Giving the intruder a full 90 days to do whatever he likes with the account. And what if he changes the email again once the 90 days passed? Though it might be CF policy, this is crazy..

Other than that, did you specifically wrote your ticket in the account recovery section, not the email change section? You never know, you might get a different response in doing so.

CrossFire West has a vulnerability. The hacker or the user who had access to that account can get more information — data that is supposed to be protected — by simply logging into that account (login info / ID user and password).

All the above means that the user/player or hacker who submitted a ticket — via support — must have had access to that account, and then that one got the other information from the page.

Utmost

SirPanoCFES wrote: »

CrossFire West has a vulnerability. The hacker or the user who had access to that account can get more information — data that is supposed to be protected — by simply logging into that account (login info / ID user and password).

All the above means that the user/player or hacker who submitted a ticket — via support — must have had access to that account, and then that one got the other information from the page.

Well yes, the hacker/intruder could see the e-mailadres and tickets that were send from the account to support. But those tickets don't necessarily contain information to be able to recover the account, making the hacker/intruder owner of the account, unless the original owner of the account specifically put that information in tickets to support.

Other than that I wouldn't know what other information you'd be able to get once you have the login to a account.

SirPanoCFES

Utmost wrote: »

Well yes, the hacker/intruder could see the e-mailadres and tickets that were send from the account to support

I don't mean the support page or the ticket responses at all, whatsoever, and I don't mean old tickets or ticket information (account details) either. I'm talking about vulnerabilities. Vulnerabilities.

Utmost wrote: »

I wouldn't know what other information you'd be able to get once you have the login to a account.

The Z8Games page has a vulnerability where [players] can steal accounts by simply accessing with ID user and password (they can't steal an account if they can't access it. It's logic) using special scripts.

Z8Games support doesn't ask for much information to recovery an account. With 3 or 4 account data (account details), someone can recover an account. And since they can get that information — info that is supposed to be protected — that's why there are so many stolen accounts.

Utmost

SirPanoCFES wrote: »

The Z8Games page has a vulnerability where Arabs can steal accounts by simply accessing with ID user and password (they can't steal an account if they can't access it. It's logic) using special scripts.

Z8Games support doesn't ask for much information to recovery an account. With 3 or 4 account data (account details), someone can recover an account. And since they can get that information — info that is supposed to be protected — that's why there are so many stolen accounts.

That's crazy... How did you figure this out?

SirPanoCFES

Utmost wrote: »

That's crazy... How did you figure this out?

That is something that the [players] have been doing for some time. Remember that on the Internet and other means of information (forums, telegram, social networks, WhatsApp groups), there are guides on how to hack CrossFire, download hacks, coding, programming, etc.

There are videos on YouTube, and someone can get all that info on the Internet (in Arabic language). I know naïve players who have been stolen with this method, merely because they have given access (details account like ID user and PW) to scammers. I just want you to understand that there is a vulnerability in CFWest.

Utmost

Well best to keep your info safe gamers!