[Full-disclosure] Xbox live accounts are being stolen (update)

[Kevin Finisterre (lists)]

Since boatloads of people are asking me about this I figured I would  
just give an update here

Here is an exhaustive list of people experiencing the problem as well  
as a possible source of the account theft (Clan Infamous)

http://www.oinfamouso.moonfruit.com/

They claim to be pretexting Xbox live employees...

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: StolenAccounts.txt
Url: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070319/99af4cc8/attachment.txt 
-------------- next part --------------
-KF

On Mar 17, 2007, at 5:21 PM, Kevin Finisterre (lists) wrote:

> There have been rumor going around that Bungie.net was hacked and
> that a portion of Xbox live has been taken over because of it. Some
> folks are having their Microsoft points stolen and or points
> purchased via their stolen gamer tag.
>
> I just got off the phone with a Microsoft Tech for Xbox live that has
> confirmed this to with me and they have stated that accounts are
> being stolen and that "Hackers have control of Xbox live and there is
> nothing we can do about it"
>
> If anyone else has experienced their Xbox live account info being
> stolen let me know. I am trying to archive as much info on this as
> possible. During the conversations I have had with Xbox live support
> I would certainly say that Microsoft  staff is more than negligent in
> dealing with this issue especially with regard to the potential theft
> of personal information.
>
> -KF
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/