Interesting reports of Xbox Live hackings have been trickling in on the internet for the past couple of week or so, with users reporting that purchases are showing up on the credit card attached to their Xbox Live account. While the occasional isolated hack-report is expected, some believe a pattern is emerging, and a widespread security flaw is becoming evident.
Many of the gamers reporting hacks say that FIFA Soccer 11 or 12 has been played on their account, even though they don't own the game, leading to the speculation that there's some FIFA-specific hack going on.
Microsoft is denying they have any evidence of widespread Live compromise, issuing a statement saying:
“We do not have any evidence the Xbox LIVE service has been compromised. We take the security of our service seriously and work on an ongoing basis to improve it against evolving threats. However, a limited number of members have contacted us regarding unauthorized access to their accounts by outside individuals. We are working with our impacted members directly to resolve any unauthorized changes to their accounts. As always, we highly recommend our members follow the Xbox LIVE Account Security guidance provided at www.xbox.com/security to protect your account.”
Are we looking at a case of internet-connect-the-dots, where a series of random occurrences are seen as a pattern? (IE: FIFA is a popular game all over the world; it could be simple coincidence that the game is downloaded on lots of "traditionally hacked" accounts.)? Electronic Arts, has said, basically, that this is the case.
“With the popularity of FIFA globally, and the sheer number of players playing the game online, FIFA is an obvious target for phishers and frauds,” an Electronic Arts told Giant Bomb.
“It’s not a title-specific issue and is coincidental that FIFA has been tied to a number of compromised accounts,” a Microsoft representative said.
While both EA and Microsoft saying "coincidence!" is the best we can report, we'll keep an eye on this issue as (or if) it develops further. Until then, keep track of your passwords, purchases and logins and be safe out there.