Hacked this morning - Blue Tracker

#0 - May 29, 2010, 4:46 p.m.

So, this morning, my friend wakes me up and was like "WTF" and shakes my bed. Me being me, i was like "lol what" and hes like "where did the stuff in my guild bank go"

I'm a co leader in one of my guilds, and an officer in another bank guild. Oh f****. I log in and.. Well, i *try* to log in, but it asks for an authenticator.

/facepalm

I armory both my toons, one is in most of his gear (PvP gear, cant be DE'd or vendored) except his hilt sword, and offhand and wand. Alright, not too bad.

I go to look at my other toon. I armory the name twice, nothing. Deleted. Lol.

The estimated price of everything taken out of the guild was ~50k. (21k gold, 21 stacks of ebonweave, spellweave, mooncloth)

Im not too worried about my toons; I know they'll probably get restored and if they don't, thats fine too because ill just make new 80s if they fail to comply.

The only thing im worried about is if they'll restore my friends guild banks. They farmed hard for that gold. Not to mention that 50k is a lot of money.

Now to the point. Blizz's account authentication and recovery process retardedly requires the authenticator code, so i can't so much as log in on battle.net.

BACKGROUND INFORMATION: I am not stupid. I did not get phished, i didn't get keylogged, and im the only person who knows my password. I have no idea how this happened. I am confused as all hell.

-Slashy

Aredek

#25 - May 30, 2010, 2:44 p.m.

If an Authenticator has been attached to your account during the compromise, please contact our Account Services department to request Authenticator removal. They can be reached using one of the following numbers:

Billing and Account Services

Live Representatives are available every day from 7:00 AM to 8:00 PM PDT

Players in Australia should call 1-800-041-378
Players in Singapore should call 800-2549-9273
Players in Chile should call 1230-020-5554
Players in Mexico should call 001-888-578-7628
Players in Argentina should call 0800-333-0778
All other international players should call: (949) 955-0283

If you are unable to call, another option would be to create a post on our Technical Support Forum. The Account Services representatives working there would be happy to help. Before creating a post, however, please be sure to review their brief FAQ here:

http://forums.worldofwarcraft.com/thread.html?topicId=24702203177&sid=1

For more information on how to recover your account and request restoration, please review the following article:

What to do if Your Account Has Been Compromised
http://us.blizzard.com/support/article/30796

Q u o t e:
o yha and now he cant log in the to forums ither

It sounds as if your brother's password has been changed by our staff to help ensure the security of his account. Please have him check his registered e-mail address for more information.

Aredek

#28 - May 30, 2010, 3:13 p.m.

Q u o t e:
negivive his password woks just fin is says that his account has ben tempraraly locked

Hm. Has he received an e-mail regarding this lock, Laiden?

Aredek

#30 - May 30, 2010, 3:30 p.m.

Just before the e-mail you mentioned, an e-mail with the subject "Battle.net Account -- Account Security/Compromise" was sent, Laiden. Have him following the instructions therein. In particular:

Q u o t e:
STEP 2: RECOVER THE ACCOUNT
We now provide a secure website for you to verify that you have taken the appropriate steps to secure the account, your computer, and your email address. Please go to this site and follow the instructions:
http://us.blizzard.com/support/article/securitywebform

Aredek

#32 - May 30, 2010, 3:37 p.m.

Q u o t e:
he never reseved that email would it be posabule to resend that email to his email

One step ahead of you. :) It may take a little while to get there, though.

Aredek

#38 - May 30, 2010, 4:43 p.m.

Q u o t e:
ok this makes sence he just reseved an eamil

Thank you for contacting Blizzard Entertainment Support.

We hope that the information that was provided to you was helpful in resolving
your issue. Customer satisfaction is a top priority here at Blizzard
Entertainment, and we would like your feedback on the level of service you have
received. Your response would be very much appreciated.

wtf his issue is still not fixed and you lot want feed back on how the suport was ?

This e-mail is automatically and randomly sent when Game Masters send e-mails, Laiden. Please feel free to disregard this e-mail for now (unless you'd like to complete the survey now). Also, please be sure that your brother is checking his spam filters to make sure his e-mails are not being redirected there.

Aredek

#39 - May 30, 2010, 4:44 p.m.

Q u o t e:
You can add me to the list. Although I was hacked back on May 21. When I went to log in there was an authenticator on my account. When I finally got back in game all my characters were deleted and I found that the hackers had created a single character on as many servers as they could.

I have yet to get my toons back. I am at day 9 today.

You are ever so close to the top of the queue, Miniz. I encourage you to remain patient just a little bit longer.

Orlyia

#61 - May 31, 2010, 9:03 a.m.

Q u o t e:
Hacked and authenticated about 2 weeks ago, went through the email process taking about 2 days to have the authenticator removed as well as a 3 day suspension for some violation I was completely unaware of. 4 days ago, I have another authenticator on my account...I have tried the same process of calling during business hours to get the reject message, and emailing blizz about the situation. Only this time it's taking considerably longer and all I have been emailed back is a survey asking how blizz has done with the situation. I realize that the help needed for this problem is pretty extensive right now, so here's my post on the forums to help speed things up. I will be buying my own authenticator in the very future but right now I just need this dumb thing off asap please.

Bumbras - that means you are still compromised. You haven't found out how they are getting your information. They can't add an authenticator without your password and ID.

Please look over this sticky. While malware isn't the only way this can happen, if you are getting compromised repeatedly in a short period of time - it's usually malware or they are actually into your email itself pulling out the information.

Computer Security Recommendations
http://forums.worldofwarcraft.com/thread.html?topicId=1778038509&sid=1

Orlyia

#65 - May 31, 2010, 9:40 a.m.

Q u o t e:
Ya ive since gotten better hardware protection to remove malicious software and found there was a lot sneaking through. Ive scanned habitually since getting the new program, changed all my passwords, and have had the problems removed just need my new authenticator put on once this one is removed. Checked the email multiple times and definitely didn't miss any emails from blizz bout the latest issue. And like I said Ive tried calling blizz during business hours numerous times since to talk to a rep but everytime to no surprise the call volume is too high and I gotta call back later.

Looking more closely at this - your case is one I would highly recommend speaking to Billing about. This isn't a run-of-the-mill compromise and will need closer scrutiny.

It can be challenging to get through to Billing, but the best way is to immediately hit redial if you get the lines full message. Spots are constantly opening in the queue and that is really the best way to get a spot.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available 7 days a week, 7am to 8pm Pacific Time
E-mail Support - [email protected]