Ruined morning coffee / hacked account

#0 - June 10, 2010, 12:01 p.m.
Blizzard Post
I woke up at 5:00 AM EST and put on a pot of coffee and decided I was going to lvl my shaman. After doing a few things around the house, I poured myself a cup of Folger's and tried to log in.......

To my utmost surprise and disgust, discovered that my account has been hacked. I now have an authenticater attached to my account(which I have never purchased). Looked on wow-heroes to look at my lock and notice he doesn't quite have the 5211 GS he had after logging at 2AM EST. I don't buy gold, visit potentially harmful sites, and have Norton internet security and ad-aware installed on my PC. After reading some forums and support FAQ, I installed and ran Malware bytes. I ran all three of my programs and have found nothing on my PC. I am the third person in my guild to have this happen in the past week.

How in the hell can they put an authenticater on my account? Doesn't Blizzard have a way to track down and stop these arses from doing such things? They had to purchase an authenticater to do this to me. Track them down and prosecute, or give me their info and I will do it myself.

Now I have to wait until 11AM til I can call and have the authenticater removed from my account. Then I will have to wait a week or two before I can "HOPEFULLY" get my gear, gold, and lost items back. From what I am told by people who have had this happen, it isn't guaranteed you will get your stuff back. Where does that leave me? I am a raider and will now have to miss out on raids and what not because of this crud.

I apologise if my language here has offended anyone, but I am severely ticked off.
#10 - June 10, 2010, 12:38 p.m.
Blizzard Post
Well, you should have access now, Blakk, but damages are likely already done.

As to 3 guildmates compromised in a short period of time, there is often a common vector although it could be complete co-incidence.

Also, if any other system has ever been used, even to log into these forums, that system is suspect as well.
#12 - June 10, 2010, 1:36 p.m.
Blizzard Post
Q u o t e:
Ok. I am now able to log into my account. Thank you for removing the authenticator. I put a ticket into a GM for being hacked and all stuff from several toons gone. Is there anything else I need to do right now?


Just try to pin down how they got your information.
#14 - June 10, 2010, 1:55 p.m.
Blizzard Post
Q u o t e:
Have run all software I have to find the problem to no avail. Also just changed my email to help further protect myself.


That will also help.

There are so many ways this can happen, and they aren't all malware.

Social engineering in various forms is rampant. If you ever reused that pass/ID anywhere else, especially websites, that can be risky as well.