I love you blizzard - Amazing hack story

[Anakso]

So i left my paladin in STV waiting for the trinket thing to happen, I logged of 15minutes to when it spawns to watch tv, logged back on 3minutes to when it spawns to find my pally in dalaran, by the mailbox near the bank, Was a bit suspicious but just thought I might of auto-hearthed when logging as I sometimes do without thinking. I was missing no gold, or items and nothing was in my bags that shoudnt of been. Just to be kind of safeish i took my pally to the middle of durotar as I changed my pw. when i went back to wow I had been DC'D. I logged back in and saw that all of a sudden at the bottom of my charecter list was a level 1 rogue called cvav
......
........<my thoughts
I sped to the change pw thing

I tried logging back in with both old and new pw but both times got the 'put in your authenticator code' thing
I don't have an authenticator btw.

After that I looked up how to email bliz and sent a long email detailing basically the above as well as account specifics then logged on vent and told me gm
It was about 1:25am when I did that. at 1:40 I thought, what the hey and tried logging in

SUCCESS!
I logged in my toons and checked them all to see the only difference is that my druid has had his frost emblems spent on primordial saronites, and my toons now possess a core hound pup

I LOVE YOU BLIZZARD.
Thank you very much for your greatly improved and amazing response time.

Though right now I'm still completely stumped as to how I got a keylogger or virus or whatever they used, I ran a quick virus scan and only found a cookie, running a comprehensive scan now. To the best of my nowledge the only wow related sites I visit are this one, wow-heroes, worldofwarcraft , elitest jerks, maintankadin. All trusted sites

[Duncanîdaho]

Though right now I'm still completely stumped as to how I got a keylogger or virus or whatever they used, I ran a quick virus scan and only found a cookie, running a comprehensive scan now. To the best of my nowledge the only wow related sites I visit are this one, wow-heroes, worldofwarcraft , elitest jerks, maintankadin. All trusted sites

You can get a keylogger from any site, not just WoW related ones. Did somone maybe use your computer when you werent around? Did you open one of those many phishing emails? do you have a good firewall? Did you log into wow from a freinds computer at some point, ever? Did you look up porn? All some of the most common examples how how people get keylogged. Also use firefox not internet explorer, if you dont already

[huangzhong9]

I don't have an authenticator btw.

sigh. here's what you do. buy an authenticator. use the authenticator.

[Anakso]

You can get a keylogger from any site, not just WoW related ones. Did somone maybe use your computer when you werent around? Did you open one of those many phishing emails? do you have a good firewall? Did you log into wow from a freinds computer at some point, ever? Did you look up porn? All some of the most common examples how how people get keylogged. Also use firefox not internet explorer, if you dont already

No,yes but didn't click any links, yes, no, yes.
Didn't think opening up emails alone would give me a keylogger, though ty I'll instantly delete them from now on
I do use firefox.

[Talthaeran]

I don't have an authenticator btw.

This is the issue, sorry to be blunt.

[Odexy]

If you did all of this before finding the keylogger, you may be in the same position you were earlier 'cause the hackers are gonna have your new PW too.

[Alcsaar]

I don't have an authenticator btw.

And theres your problem right there.

Look guys, no matter how safe you are on your computer, no matter how elitist-sure you are that you've never visited any comprehended websites, and no matter how many times you scan for viruses with the most up to date software available, there is ALWAYS a chance you'll get infected ANY time you are connected to that which is the world wide web. Anti-virus software is updated to patch holes after they've been exploited. A lot of times that can be to late. Hackers are constantly working to find ways AROUND anti virus, which puts them a step ahead naturally.

Even now hackers have discovered ways to by-pass or hack the authenticator. But its HUNDREDS of times safer then not having one.

Loosen your change purse and buy an authenticator for $6.50, or use your phone and get it for a dollar or two.

[Daranus]

my friend has been hacked twice, and he has an authenticator on his account. If these people want to , they can always find a way.

[Deleted]

i got an authenticator, took me 2 weeks to get, havent added it to my acc yet cause of lazyness.

[hammybiter]

my friend has been hacked twice, and he has an authenticator on his account. If these people want to , they can always find a way.

Seems to me his wife, gf, jaded friend keep getting on, not some hacker..

[Ozzy Osbourne]

Get an Authenticator, next time you may not be so lucky.

ALLLL ABBBOOOAAARRRRDDDD!!!!

[Benihime]

I'd check your email account as well, a friend had his email account hacked as well. They set all email to forward to their email address so they could see when he changed his password, etc... He ended up removing the forwarding and then downloading the mobile authenticator for extra protection. And of course try not to use the same email address and password for your email, mmo-champion, etc... sites as you do for your battle net account.

[Deleted]

Just get an authenticator man.. its like 8 bucks.

..seriously.

[ampedd]

Anyone else think that it's extremely stupid to have to pay extra money to not have your progress stolen by some random scammers? They should probably make account security free instead of using those attacking their customers for profiteering. Seems kind of...bastardy >_>

[Malorajan]

To the best of my nowledge the only wow related sites I visit are this one, wow-heroes, worldofwarcraft , elitest jerks, maintankadin. All trusted sites

That doesn't mean you're safe. I'm pretty sure ElitistJerks was attacked back in the Naxx/Ulduar days.

[levitate]

Anyone else think that it's extremely stupid to have to pay extra money to not have your progress stolen by some random scammers?

In some ways yes. There are several online games out there and if you were to buy an authenticator to every single one of them you'd be spending a lot of money just to feel secure. Not to mention all other random online accounts that you would have to spend a few bucks on to get an authenticator for.

The best, cheapest, way is still to use your common sense and be cautious. It's not the end of the world if a WoW account disappears. Life goes on.

However, if you lose your e-mail account or lose your bank account because you can't keep your PC safe that would be a much more serious matter.

[archangelz]

I have been just informed that authenticators prevent all hackers and cannot be bypassed.
Thx guis, rly gud info.

[Killuhtin]

i dont have an authenticator i dont need it i wont buy it


ty bye bye


Oh ye and ppl dont need to buy authenticator

[Seregon]

i dont have an authenticator i dont need it i wont buy it


ty bye bye


Oh ye and ppl dont need to buy authenticator

Hehehe, this is what my old GM said. Until the entire guild was disbanded by a hacker.

[The Painkiller]

Threads like this that get me thinking, what if I start a trial account, give the info through some goldsellers scam, wait a week, call blizz and change the pass, get an authenticator, go into the account keep all the riches the gold seller put on that account, plus if they added a month.


Maybe one day...