This method of attack somehow allowed someone to reset the password without going through my email – I’m assuming that they logged in via an insecure or leaked password, then changed it via the online account settings and then linked it to their Xbox One.
So when I got an email saying that my password was reset and that I had successfully connected to an Xbox One – an Xbox One that I don’t own, I was concerned. That doesn’t mean my Epic Games account isn’t valuable to me or doesn’t have a plethora of either free games or other Epic Games attached to it that I don’t value. I’ve won two games and never played since. As everyone knows I love me some amazing Fortnite which so far I’m 2 and 0.
