A few days ago we told you about some users of the Xbox Live service who had been tricked with a phishing email scam. This had cost users money but also saw them locked out of their accounts. Now there is news that Microsoft is refunding Xbox Live customers after accounts were hacked.
The company has begun by sending out warnings or refunding some customers as it ramps up its investigation into the scam. This follows earlier reports of Microsoft stressing that the service itself had not been hacked, and users were tricked into sharing sensitive data via email.
According to The Guardian the company is suggesting Xbox Live customers change their passwords after many accounts being hijacked by the phishing scam. It is now thought that criminals in China or Russia are behind the attack, and have managed to gain access to accounts via a fraudulent email.
Microsoft has played down rumors of wide spread hacking as it tries to distance itself from what Sony went through earlier this year with its PSN service. The problem is thought to have affected less than one million users worldwide, but Microsoft hasn’t ruled out the possibility of this increasing.
Some users have been cheated out of multiple purchases of £42.50 in the UK, which are now being refunded by Microsoft. The company said in statement that they take security of its services seriously, and added “Very occasionally, though, we are contacted by members regarding alleged unauthorized access to their accounts by outside individuals”.
They advise gamers to follow the company account security guidance to protect their accounts, and that there is no evidence that user’s information had been sold or released so far. Have you received one of the fraudulent emails?
Also See: Xbox Live is down with data sync issues