Sigh, someone's trying to steal my account.

#0 - April 6, 2009, 7:13 a.m.

So I've had my account taken twice over the last two months. Had it retrieved twice. I may have been careless and got my account stolen originally, but I've been fairly cautious since.

I've got new passwords. I'm running firefox with noscript and keyscrambler. I'm using avira antivir personal, ewido anti-spyware and I use a virtual keyboard to log into WoW.

But today, one day after I get my account back, I get an email " Account E-mail Change Request Completed". So now my account is linked to some random email address. They didn't change my password, so I just requested through account management to change the email address back. Waiting on that to complete now.

How does this person have access to my account so they can change the email address attached to it? They MUST have my password right? If I just change it again from some remote computer and reformat this computer I shouldn't have any trouble? Am I being cautious enough?

Any help will be GREATLY appreciated.

#1 - April 6, 2009, 7:18 a.m.

Q u o t e:
So I've had my account taken twice over the last two months. Had it retrieved twice. I may have been careless and got my account stolen originally, but I've been fairly cautious since.

I've got new passwords. I'm running firefox with noscript and keyscrambler. I'm using avira antivir personal, ewido anti-spyware and I use a virtual keyboard to log into WoW.

But today, one day after I get my account back, I get an email " Account E-mail Change Request Completed". So now my account is linked to some random email address. They didn't change my password, so I just requested through account management to change the email address back. Waiting on that to complete now.

How does this person have access to my account so they can change the email address attached to it? They MUST have my password right? If I just change it again from some remote computer and reformat this computer I shouldn't have any trouble? Am I being cautious enough?

Any help will be GREATLY appreciated.

If that email change doesn't work, you just need to call billing to get that part sorted out, Riot.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available Mon-Fri, 8am to 8pm PST
E-mail Support - [email protected]

It's entirely possible you still have an infection. Not all scanners are going to spot all malware. You might want to give this sticky a read, might prove useful.

Computer Security Recommendations
http://forums.worldofwarcraft.com/thread.html?topicId=1778038509&sid=1

Also, did you change your email password when you were compromised before? It's entirely possible they got directly into that. They don't need physical access any longer if they can dip straight into your inbox. I'd recommend a deep scan, and changing of your email password once you are certain your system is secure.

Do let us know if we can be of further assistance.