Friends Account Hacked, Need an Explanation :<

[Dosiden]

So one my friends just had his account with a minecon 2013 cape stolen, and i'm extremely concerned for the security of my own capes accounts without TID. As it turns out the person who hacked my friend has done it before, made blatantly obvious since the kid literally changes the account name to brag.

My friends account: https://namemc.com/s?darkay
Another victim: https://namemc.com/s?painfulpvp

I'm really just curious to see if anyone knows what methods that are used for this kind of thing. I really want to protect my higher value accounts :I

 

[Doge]

So one my friends just had his account with a minecon 2013 cape stolen, and i'm extremely concerned for the security of my own capes accounts without TID. As it turns out the person who hacked my friend has done it before, made blatantly obvious since the kid literally changes the account name to brag.

My friends account: https://namemc.com/s?darkay
Another victim: https://namemc.com/s?painfulpvp

I'm really just curious to see if anyone knows what methods that are used for this kind of thing. I really want to protect my higher value accounts :I

Well, since the account was migrated, it has to have been a RAT (Remote Access Trojan) or a Phishing Site.

 

[Jake]

Well, since the account was migrated, it has to have been a RAT (Remote Access Trojan) or a Phishing Site.

Or a certain type of cookie that gets in your backlits, they basically don't exist anymore though cx

 

[Dosiden]

Oh the guy thats doing this is social engineering mojang support pretending to be them. He pulls it off because he uses their dox and uses all their information to pose as the owner of the account
More examples of the same guy who hacked that account-
https://namemc.com/s?Bestle
https://namemc.com/s?nyalon
https://namemc.com/s?mineagepvp

Well now that I know what it is, the more important question is how can this be avoided. If the hackers use the dox of the victim, would using fake information on the account help prevent this?