Being asked for an authenticator, never had

#0 - Jan. 22, 2010, 9:13 a.m.
Blizzard Post
I am trying to login but I am now getting asked for an authenticator code, I have never owned one so why would I be now asked for the code ?

I was logged in earlyer fine but now cannot get back in

Whats going on? I have a raid in a few hours fix it please !
#1 - Jan. 22, 2010, 9:14 a.m.
Blizzard Post
Q u o t e:
I am trying to login but I am now getting asked for an authenticator code, I have never owned one so why would I be now asked for the code ?

I was logged in earlyer fine but now cannot get back in

Whats going on? I have a raid in a few hours fix it please !


Sounds as though you've been compromised, Kreed. If you didn't add an authenticator and it's asking for a code - that means someone has obtained your account name and password and added one.

If an account has been merged to a Battle.net (not your own), or if an email has been changed, or an authenticator added (and it wasn't you that added it), one of your first stops is going to be Billing. They need to get those sorted out first so the rest of the processes can continue.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available 8AM – 8PM Pacific Time, 7-Day Support
E-mail Support - [email protected]
    Players in Australia should call 1-800-041-378
    Players in Singapore should call 800-2549-9273
    Players in Chile should call 1230-020-5554
    Players in Mexico should call 001-888-578-7628
    Players in Argentina should call 0800-333-0778
    All other international players should call: (949) 955-0283


Our Billing Support page can be found at http://us.blizzard.com/support/article.xml?locale=en_US&articleId=20606

Now, it's very very important to figure out where the security breach occurred. If they CAN get back in, they WILL be back. That, unfortunately, you can count on.

These two stickies should prove helpful. I'd also recommend doing your scans with the launcher open and some junk entry in the account ID. We've seen some nasty keyloggers pop up lately that don't want to show on scanners unless the launcher is active.

I also highly recommend changing your email password once you are certain your system is secure. They don't need into a system once they can dip into an inbox. Changing your email completely to a totally unrelated one isn't a bad idea either if you'd care to go to that length.

Also, if you have used the same password/ID anywhere else, that is a very dangerous practice - especially on websites, or social sites like Facebook or MySpace. Please do not reuse the same password you've used anywhere else.

Computer Security Recommendations
http://forums.worldofwarcraft.com/thread.html?topicId=1778038509&sid=1

Account Compromise Info Center
http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep anyone else out of your WoW account. Not to mention core hounds make adorable pets!

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

Even more core-hound goodness can be found here!

http://forums.worldofwarcraft.com/thread.html?topicId=21726114509&sid=1


I do wish you all the very best.
#3 - Jan. 22, 2010, 9:46 a.m.
Blizzard Post
Getting the authenticator off is why you need to call Billing.

The office won't be open for a few hours, they are based on Pacific time and are open 7 days a week from 8 AM to 8 PM. Roughly, 6ish hours from now.
#7 - Jan. 22, 2010, 12:09 p.m.
Blizzard Post
Q u o t e:
Well it looks like all my characters have had their gear sold, checked the armory

What I dont understand is the account is set to require an authenticator now, and yet the person who has hacked it is logging on and off right now. I got a friend to check on their account and they saw my character log on

So this must mean the hacker is using an authenticator of their own to log in somehow


That means you got compromised, they acquired your account name and password and added one of their own to keep you out temporarily, yes.