An other "I got hacked" thread

#0 - May 21, 2010, 6:40 a.m.

I've noticed that most people get hacked when they have stopped playing wow. After not playing for about 6 months i got an email from blizz saying the my password has been reset. so i went to the blizz site (not clicking anything from the email) and reset it. It got reset again while i was at work the next day. I came home logged in and all of my stuff was gone, gold, items, emblems, bags, they even raided my level 30 alt.

i also got a weird email saying that my account had been banned but it wasn't from blizzard.

The first thing i did after i got hijacked was run a full system scan using nod32 and absolutely nothing came up! wtf!!?

is it common for accounts to get brute forced?
Oh yeah the second time i reset my password my dumb self set it back to my old one thinking it was my ex who was messing with me.(pretty sure it wasn't now)

luckly they weren't able to hack my email and steal my accounts they just logged in cleaned me out and logged out.

My main question is, how long does it usually take blizzard to restore your items? It's been 4 days since i submitted my ticket.

Orlyia

#2 - May 21, 2010, 6:47 a.m.

Queue times on that varies, Sig - at the moment, those investigations are running just about a week-ish, give or take.

If someone else knew your information, they may have trafficked it to the compromisers.

It is important to follow this up and get it sorted now even if you aren't currently playing. You'll want everything in order when you come back.

And yes, never EVER just set your password back to what it was. I might also recommend adding an authenticator to your account as an additional layer of security. Using a unique pass/ID is also important. It's not terribly uncommon for players to use the same pass/ID everywhere - that becomes a crime of opportunity if those other sources become compromised. Brute force is just not something that happens. Malware and social engineering are two chief causes of compromises. By no means the only ways, but the most common.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

Orlyia

#8 - May 21, 2010, 7:55 a.m.

Q u o t e:
:head desk:

Case sensitivity is really only effective in helping to block brute force attacks.

That's just not the way WoW accounts are compromised - and the ways they ARE compromised, wouldn't do a bit of good.