WoW asking for Authenticator

#0 - May 27, 2010, 8:12 p.m.
Blizzard Post
...when I haven't bought one.
What's up with this?
I can't log in now without and authenticator code.
I was able to log in just fine this morning.
Is this a bug or some new security measure forcing us to buy one?
#4 - May 27, 2010, 8:23 p.m.
Blizzard Post
Q u o t e:
...when I haven't bought one.
What's up with this?
I can't log in now without and authenticator code.
I was able to log in just fine this morning.
Is this a bug or some new security measure forcing us to buy one?


That would be someone adding one because you've been compromised, Vagnard.

Please check your registered email for further instructions.

It is absolutely vital to find out how they came by your password and ID to your account or they WILL be back. Looks like you are extremely fortunate here - normally an account is stripped and they are long gone before a compromise is noticed. There may be some damages here that need looked into once you are certain of your security and have access back to the account - but I think they weren't done :)

This sticky should prove useful.

Computer Security Recommendations
http://forums.worldofwarcraft.com/thread.html?topicId=1778038509&sid=1

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep them out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

#7 - May 27, 2010, 8:34 p.m.
Blizzard Post
Q u o t e:
Same thing happened to me about an hour ago, I put up a post on the Tech Support forums to have the authenticator removed, but it seems they aren't manned at this hour. I changed my account PW and am running a scan now to see if I can find the keylogger that caused this to happen.


Looks like yours was removed, Baldok.
#9 - May 27, 2010, 9:19 a.m.
Blizzard Post
Q u o t e:
Thanks for getting it removed. The scan just finished, no malicious programs found, so I have no idea how they got my info. Also, all my gear has been disenchanted or sold and my gold is completely gone. Put in a ticket, so now I guess I'll just wait and pray they can restore everything. Can't even level my warrior cause all HIS gear is gone too :\


What scanners did you use - and did you scan with the launcher open and a bit of gibberish in the fields?

Malware isn't the only way this can happen, but it's one of the more common ways. Email accounts can also become compromised. I'd recommend changing your email - perhaps do a bit more scanning.

Phishes are also a common way they trick players out of their information. Changing the email - as well as the password is a good idea on this.
#15 - May 27, 2010, 11:46 a.m.
Blizzard Post
Q u o t e:
I have also suddenly got an authenticator linked to my account.

I logged in a couple of hours ago and it was fine.

I can't even go to manage my account.

However, if I check the email address linked to my account I can't see any email indicating an authenticator has been linked to the account.

I have tried the number but it is after hours.

Meant to be in ICC in 30mins!


That is gone Jheremy and you should have a new password and further instructions in your email.

Whether or not your characters are playable at this point is another matter.

You need to find the source of this - and also check your characters for damages so you can get a report in.

I might also recommend an authenticator of your own.

Computer Security Recommendations
http://forums.worldofwarcraft.com/thread.html?topicId=1778038509&sid=1

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep them out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109
#16 - May 27, 2010, 11:55 a.m.
Blizzard Post
Q u o t e:
How the hell do i remove Authenticator‏ from my account i cant access my acount without a Authenticator‏ can a gm remove it from account?????????


You need to go over the directions below quite carefully, Yozzsh. You should have a new password in your email and the authenticator is gone. That doesn't mean they may not be right back if they still have access to your system - or your email. Security is a number one priority here - followed by recovery once you look over things for damages.

You shouldn't need to call Billing unless you can't access the account.

-----------------

If an account has been merged to a Battle.net, or if an email has been changed, or an authenticator added to the account (not the player's own) one of your first stops is going to be Billing. They need to get those sorted out first so the rest of the processes can continue.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available 7 days a week, 7am to 8pm Pacific Time
E-mail Support - Billing@Blizzard.com
    Players in Australia should call 1-800-041-378
    Players in Singapore should call 800-2549-9273
    Players in Chile should call 1230-020-5554
    Players in Mexico should call 001-888-578-7628
    Players in Argentina should call 0800-333-0778
    All other international players should call: (949) 955-0283


Now, it's very very important to figure out where the security breach occurred. If they CAN get back in, they WILL be back. That, unfortunately, you can count on.

These two stickies should prove helpful.

Computer Security Recommendations
http://forums.worldofwarcraft.com/thread.html?topicId=1778038509&sid=1

Account Compromise Info Center
http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep them out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

I do wish you all the very best on a speedy recovery.