My hacker

#0 - June 17, 2010, 12:20 p.m.
Blizzard Post
Hi,

umm ok.....so i haven't played wow and cancelled my account over 5 months ago. however a guildy PM'd me on the guild forum and said my toons were logging in and out all day (today). i didn't even think that was possible if the account had been cancelled!

anyway i read up on this and it seams to be a common thing that's happening so i changed my password and then tried to get into acount management, however there is now a authenticater code thingo that i did not purchase and it's stopping me from logging into the game even though my toons shouldn't even be able to play lol.

when logging in to post this message it asked which toon i want to be and i notice a level one toon that was not mine and is also on a different server to my other toons.

could you please reply and also stop the hacker....thank you very much

as i have not logged into the game for at least 5 months i have no idea how they hacked in i have doen virus and malware scans with various programs and nothing comes up....i can only think that somehow they found out my email adress? also since i have stopped playing i've been getting spam emails from WOW (obviously fake) the wierd thing is, they go to an email of mine that i rarely even use and wow or battle.net wouldn't even know it.

oky doky i think that's about it
cheers

and please reply i'm kinda freaking out because although i cancelled my account i will be resumming it next year and would like my account the way i left it
#1 - June 17, 2010, 12:38 p.m.
Blizzard Post
This does indeed look compromised, Dollyp - but it's very new.

That's good, age is an enemy of restorations.

I've asked this be locked up for the time being until you can make certain of your security. An email has been sent with further instructions. You want to be certain your system and your email are secure.

Also, I'd recommend following up with this for a full restoration investigation NOW. Waiting till you wish to come back at a later date may not have as good an outcome later. The sooner a compromise is investigated, the better the chances of a recovery.

I'll post fuller instructions below. You won't need to contact Billing on this directly if you have your lastest passwords, just follow the directions in the email - work on your security - and then look for damages.

---------------------

If an account has been merged to a Battle.net, or if an email has been changed, or an authenticator added to the account (not the player's own) one of your first stops is going to be Billing. They need to get those sorted out first so the rest of the processes can continue.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available 7 days a week, 7am to 8pm Pacific Time
E-mail Support - [email protected]
    Players in Australia should call 1-800-041-378
    Players in Singapore should call 800-2549-9273
    Players in Chile should call 1230-020-5554
    Players in Mexico should call 001-888-578-7628
    Players in Argentina should call 0800-333-0778
    All other international players should call: (949) 955-0283


Now, it's very very important to figure out where the security breach occurred. If they CAN get back in, they WILL be back. That, unfortunately, you can count on.

These two stickies should prove helpful.

Account Hacked? Security Issue? Look Here!
http://forums.worldofwarcraft.com/thread.html?topicId=24702231244

Account Compromise Info Center
http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep them out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

I do wish you all the very best on a speedy recovery.
#3 - June 17, 2010, 1:33 p.m.
Blizzard Post
Q u o t e:
thanks for the quick response....and yes my guildies notified me as soon as they saw my toons logging in and new it wasn't me because i didn't chat to them lol.

just another question by 'damages' do you mean gold stolen and stuff like that? because i do not know if my gold was taken as i can't log into the game to see all of that is there a way i can check it out without loggin in to see?

cheers


There is almost certainly going to be some kind of damage. I'd go ahead and report this. If you can't login, you can also report this via email at [email protected].

If there are restorations, be aware those normally get returned through ingame mail as attachments. You'd want to retrieve them from the mail. Your specialist will email you with the results of the investigation when it's complete.