HELP....I've been HACKED!

#0 - June 18, 2010, 11:40 a.m.
Blizzard Post
1. Was totally unable to login to my account yesterday morning. (80 hunter)

2. Was "finally" able to get through to Battlenet and get my password changed.

3. However...was STILL unable to access my account "too many login attempts:" and got a message my account would remain locked until 0745 UTC.

4. This morning...i'm able to login...BUT...ALL my gear/gold is gone....they took EVERYTHING...bank, empty...auction house...everything...GONE

5. There IS a letter in my mailbox...which I have not yet pulled ... from the smart*** that took my stuff...leaving me 10g as a tip...

6. Can I get it back?? "if" I can...I'll get the authenticator...which I just discovered existed yesterday while surfing all the bad news of this happening to everyone else.

7. I have already scanned my computer...cancelled the Curse client and the two addons i got there, and changed my password....help me

thx for any help
#1 - June 18, 2010, 11:46 a.m.
Blizzard Post
Well, I don't think that tip was from your compromiser :)

Anyway, looks like you are back in control and in - that's good.

What you need to do now is make certain of your system and email security - and get this reported so an investigation can be done. We are at a few days on those, but that will get it into queue.

I'll post fuller instructions below - the security and recovery bits are the important parts of this one.

----------------

If an account has been merged to a Battle.net, or if an email has been changed, or an authenticator added to the account (not the player's own) one of your first stops is going to be Billing. They need to get those sorted out first so the rest of the processes can continue.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available 7 days a week, 7am to 8pm Pacific Time
E-mail Support - [email protected]
    Players in Australia should call 1-800-041-378
    Players in Singapore should call 800-2549-9273
    Players in Chile should call 1230-020-5554
    Players in Mexico should call 001-888-578-7628
    Players in Argentina should call 0800-333-0778
    All other international players should call: (949) 955-0283


Now, it's very very important to figure out where the security breach occurred. If they CAN get back in, they WILL be back. That, unfortunately, you can count on.

These two stickies should prove helpful.

Account Hacked? Security Issue? Look Here!
http://forums.worldofwarcraft.com/thread.html?topicId=24702231244

Account Compromise Info Center
http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep them out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

I do wish you all the very best on a speedy recovery.
#5 - June 24, 2010, 11:40 a.m.
Blizzard Post
Q u o t e:
....will my account be locked by Blizzard while their working on restoring it?.....I wonder

...and my understanding is .... they'll eventually contact me by email when it's ready...

....wringing hands....


We don't normally lock an account unless we have to, Amaralla. Either from activity that was done by the compromiser, of if a player isn't sure of their security yet.

And yes, they should contact you by email once an investigation is completed.
#8 - June 24, 2010, 2:03 p.m.
Blizzard Post
Q u o t e:
Alright....if Blizzard has not locked me.....then....whoever the original hacker was....has obviously stolen my whole account...and assigned his own email and password....

...I am totally frustrated ... if my account should still be accessable to me....sombody at Bliz...pleeeeze help me.


....soooo bummed


This was sent to investigations on 6/18 - we would have reset your password at least once then.

Are you certain you are using the newest one?

This email looks like it was assigned back in April, not changed since then.
#11 - June 24, 2010, 2:05 p.m.
Blizzard Post
Q u o t e:
....also fwiw....earlier this morning....I filled out the page to request a new PW.....and the screen said I'd get an email......I've not received it....

....i think it went to the hacker


waaaaaaaaaaaaaaaaaaaaaaaaaa..


Not unless the email on the account was changed by them back in April.

Have you checked your spam and junk folders?
#14 - June 24, 2010, 2:58 p.m.
Blizzard Post
Q u o t e:
Same thing happened to me. Tried logging in this morning and someone linked my account to a mobile authenticator. The hacker is still logged into my character as we speak.



Please check your email for further instructions, Safin.