Account getting hacked in progress

Q u o t e:
Thanks for the replies. Hopefully it can be restored.

Can you give me a character name/realm of one of the characters on her account?

There is very little that can't be remedied in this type of situation, it will likely take a bit of time.

Q u o t e:
Lucioustatas/Stonemaul

Thank you.

Thanks, Clotz.

They were still in doing their mischief so I asked this be locked up for her. I believe the authenticator was also removed, but she won't be able to get back in (or anyone else) till she answers the email to reclaim this.

In the meantime, she HAS to find out how they got her password and ID, that is vital to this not happening all over again. I doubt all damages were prevented, they seemed to have been at it awhile and it doesn't take them long, but perhaps some have been.

I'd also get the information below to her. The important parts will be the security bits and recovery portions in this case.

---------------------------------

If an account has been merged to a Battle.net, or if an email has been changed, or an authenticator added to the account (not the player's own) one of your first stops is going to be Billing. They need to get those sorted out first so the rest of the processes can continue.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available 7 days a week, 7am to 8pm Pacific Time
E-mail Support - [email protected]

Players in Australia should call 1-800-041-378
Players in Singapore should call 800-2549-9273
Players in Chile should call 1230-020-5554
Players in Mexico should call 001-888-578-7628
Players in Argentina should call 0800-333-0778
All other international players should call: (949) 955-0283

Now, it's very very important to figure out where the security breach occurred. If they CAN get back in, they WILL be back. That, unfortunately, you can count on.

These two stickies should prove helpful.

Account Hacked? Security Issue? Look Here!
http://forums.worldofwarcraft.com/thread.html?topicId=24702231244

Account Compromise Info Center
http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep them out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

I do wish you all the very best on a speedy recovery.

Q u o t e:
I have just been hacked right now aswell... please help

Looks like they were spamming on yours Metham and this is currently under a suspension. You should have a new password from the suspension, and this authenticator had been removed.

Now, while you may be able to get in, if you have active malware, or they are into your email chances are very high THEY will be able to get back in as well.

Please see the instructions I posted above - yours will be much the same. I'd take this brief window of time to scan your system and make sure it and your email are secure.

Q u o t e:
I also believe all my characters have been deleted, i went on one of the accounts linked to my battlenet and there is a bunch of level one characters and my mage that was level 71 has been deleted. Also my characters on wildhammer are no longer on my friends friends lists..

Yes, they were spamming and this is under a temporary suspension, that will lift in just a bit.

It's also not uncommon for there to be damages, you need to go over the instructions I posted above on security and reclamation procedures.