Microsoft claims to have found no security vulnerabilities on its systems in its investigation of Xbox Live account theft. But the company left out the possibility that its own helpdesk employees might be to blame.

Microsoft on Wednesday issued a statement that it has found "no evidence of any compromise of the security of Bungie.net or our LIVE network." Instead, the company suggested, gamers who had their accounts stolen must have inadvertently given up confidential information.

22 Mar 2007

Microsoft's explanation however doesn't cover all the issues that users have reported. The number of reports of stolen accounts for instance is far too high to justify a plain phishing attack. 

Some of the self-proclaimed account thieves in fact say that Microsoft's helpdesk is to blame. Provide with a sobby story, and they will happily cough up all the info that is needed to hijack an Xbox Live account.