Account Thievery

Most are based in foreign lands outside the jurisdiction of any international laws where they could be brought to justice.

How they operate is highly organized, last report that I saw in the media was trafficking in illicit virtual goods is a 5 BILLION dollar a year business.

It's a boil on the buttocks of the industry we lance every chance we get :)

Q u o t e:
Ahh, the ultimate scheme... It's weird, you'd think by now people would stop buying gold and powerleveling services, but with 11 million players I would say that informing every player would be a daunting task. I say that Blizzard comes up with Ingame Captcha or voice recognition for those who want to add even more security :P

Authenticators work wonderfully well. The only issue is not having one.

Q u o t e:
No offense please to the following statement. So much so that hackers figured a way to fool the client. And gain peoples information and the required Authenticator code to log in. Hence, why Blizzard now adds the Authenticator code now directly upon login .. rather than username, password then code. It allows for all 3 at time of login. However, please think how long til another hack is figured out to fooling the system again. And gaining said information once more. Upgrading Blizzards overall network security measures will ALWAYS outdo this temporary benefit of security from this device. For example coding a digital fingerprint system that takes into account the overall makeup of ones machine. Would only allow people from this machine to login. So logins from other machines unless they were also fingerprinted to that account. Would be denied access. There are far more options than this for such security. Only hoping Blizzard sees fit to actually think about them more.

Ultimately, what I feel is imposed. Is the cheapest form of gimmicks of security. Rather than designing one far more beneficial.

I'm not sure what you mean by this, Sünde. If you are referring to a man-in-the-middle attack, that's on the player's side and is still malware related. There is no 'fooling' the authenticators.