Hacked. But How?

[Lanthanum]

My account was hacked this weekend. I am not complaining, it happened and Blizzard sorted it all out. What I am interested in is how my account was comprimised.

I will preface this by saying that I do not yet have an Authenticator (one is winging its way to me from the Blizzard Store as we speak).

When I got home yesterday, the first thing I did was make sure that my Norton was up to date and working correctly and it was. Next, I downloaded MalWareBytes which is a pretty good spyware/trojan finder and did a full scan of my hard drive. It didn't find one single infected file. So how did someone "steal" my information? No-one knows my log-in details apart from me. The computer I play WoW on is used fairly exclusively for that purpose, with only mild browsing going on (usually to check Wowhead, EJ etc.).

Any thoughts?

[Knot]

week password?

[nvrsbr]

I will preface this by saying that I do not yet have an Authenticator

You answered your own question...

[Deleted]

Been there, once i got hacked, and i reinstalled my operating system, deleted everything. I was hacked a few hours later with fresh operating system/virus scanners.

[Resentful]

Do you use no script and adblock+ OP?

[Juneah]

Phishing? Did you log onto www.worldofwarrcraft.com or something to that effect?

[Jaese]

Stop going to phishing sites?

"cupcake" does not a strong password make.

[Edison]

You answered your own question...

No authenticator huh? Was your password easy or hard?

[Juneah]

My account was hacked this weekend. I am not complaining, it happened and Blizzard sorted it all out. What I am interested in is how my account was comprimised.

I will preface this by saying that I do not yet have an Authenticator (one is winging its way to me from the Blizzard Store as we speak).

When I got home yesterday, the first thing I did was make sure that my Norton was up to date and working correctly and it was. Next, I downloaded MalWareBytes which is a pretty good spyware/trojan finder and did a full scan of my hard drive. It didn't find one single infected file. So how did someone "steal" my information? No-one knows my log-in details apart from me. The computer I play WoW on is used fairly exclusively for that purpose, with only mild browsing going on (usually to check Wowhead, EJ etc.).

Any thoughts?

Also, why did you order an authenticator when you can easily get one for your phone & even your computer?

[goneloco]

theres plenty of ways.
what i believe the most is that its something norton couldnt find. after all its not the most epic anti virus program in the world.
u may have the same password for ur mail, if so they might have gotten ur mail acc info from another wow related site.
it could be something old. they might got ur info a long time ago but never did anything until now.

[Coldpro]

First of all, I highly recommend you get an authenticator. Second, if you have any other computers on the same network as your computer, then its highly possible that your secondary computer became infected and the virus somehow got to your main PC. Note that just because an Antimalware/Spyware/Virus program is up to date, it doesn't mean that there's something thats not in its database that it may have missed. Definitely stay away from fishy sites on all computers, at least until you get an authenticator.

[De Lupe]

You answered your own question...

Authenticators aren't nessicary to keep your account safe.

<---Four years playing and never had one... Never hacked, not even a close call.

As long as you're not stupid about the places you go, you'll be fine...



OT: Weak password?

[Sterilize]

Been there, once i got hacked, and i reinstalled my operating system, deleted everything. I was hacked a few hours later with fresh operating system/virus scanners.

The time this happened to me they're changed the security question / backup email to reset the password to my gmail account so even though I reformatted and all they got me a few hours later ><

[Vyce223]

Also, why did you order an authenticator when you can easily get one for your phone & even your computer?

I donno about you but i like my token authenticator just encase my phone is not around or something.

[Deleted]

You answered your own question...

If you are not an idiot who visites corrupted sites you don't need one. And I've know plenty off people who got hacked with an authenticator aswell.

Ontopic, you can just be unlucky. There is not a program in the world that is 100% hackfree. You shouldn't worry to much unless you get hacked again soon.

[link064]

Maybe this?

Hello Player,

Yuo haev bean involved in teh despootid trnzaxshuns AND if u dont go to http://www.wow-europe-usa-stealurpas...urpassword.php then will close ur Account PERManenTLY.

Thank,
Blizzard Entertainment

[3DTyrant]

stop downloading porno :P (bad joke, sorry)

[Stormtov]

You answered your own question...

Not really, having an authenticator does not magically stop some one from getting your password, all it means is they can't get on your wow account with it. The question was how did they get his password.

Now to the op, you seem to have scanned for keyloggers. Other then that it could be got from a phishing site, a site that looks like the wow logon page but isn't. Usually given to you via email saying your account has been compromised. Another posibilty is signing up to a not so legit website with the same password as you use for wow.

Make sure to change your email password, and maybe even secret question if you think it's too easy. They may not of ever gotten your wow password, just got your email and went from there.

[dabs]

dont go to fishy websites

simple as that

[Deleted]

Since you don't have an authenticator it's completely possible though unlikely your password and username were guessed.