Currently being hacked

#1 - Dec. 28, 2013, 1:46 p.m.
Blizzard Post

My partner’s account is currently being hacked. We found out through a friend who send us a text wondering why he left the guild.

Password has been reset (both account and email) and we have been trying to get them to disconnect through Security page by removing trusted networks. Unfortunately, they have managed to enable an authenticator, so they were able to add their network as trusted within 5 seconds. Account recovery, using serial, didn’t help as we are unable to disable the authenticator. Ticket was submitted as soon as we found out. PC was scanned for malware but nothing was found.

Any advice on what to do next? It is rather painful to sit here and watch this Korean bot playing my partners characters while we’re unable to do anything about this. We were hoping to prevent any further damage by disabling access, but this is prevented by the authenticator.

#7 - Dec. 30, 2013, 7:50 p.m.
Blizzard Post

Or using the same password multiple places on the internet. You might want to contact CS using a new email carrier, with a unique password, so they can’t intercept your emails.

This is very good advice, and I suggest you do exactly this. The fact is, someone learned your friend’s credentials, and that means that hacker probably already has access to the e-mail account associated with the original ticket. Which of course means, the hakcer will be able to read the ticket and intercept it, or learn about the new credentials set by CS.

  • Assume the computer is infected. Secure it.
  • Assume the email account is compromised. Abandon it if you are not 100% certain that it no longer is accessible by the thief.

That is what I would advice.