GM stole my wifes account

#0 - July 22, 2010, 6:22 a.m.

A GM by the name of Zellthaine was suppose to help fix a hacking problem but instead made it worse by taking my wifes account and changing user name and password i sure hope blizzard takes notice and fires peaple like this because her account is lost now she only has one email account and this GM told her to log out and check her email and change her password and im like omg, over like what seemed like hours of debating on doing this or not to make sure the person we was talking to wasnt a hacker it turns out we logged out to change everything but instead to find out her account no longer exists, i am so pissed off and i think that damn GM should be fired cause like i said the account no longer exists no email from blizzard of any kind and no battlenet account anymore. BEWARE OF GM's !!!!!

Orlyia

#40 - July 22, 2010, 8:08 p.m.

Let me see if I can shed a bit of light on this. A Game Master certainly wouldn't 'steal' an account :)

Here is how the timelline seems to break down.

Foreign malicious party gains access to account, friend notices, puts in a petition.

Player changes password, gets ingame.

As we are responding to that first report, we reset the password, etc.

Player changes it again - so far, everything is perfectly normal.

This is where it gets interesting. The very last, most recent password change, is again from the compromiser.

That is a strong indication there is either very active malware still present on a system - or the email attached to the account has also been compromised.

I'd do full security sweeps, I'd also highly recommend setting up another totally unrelated email and changing that on your Battle.net account.

I am asking yet another new password be sent out right now, it may take a few moments to arrive. I'd also strongly recommend thinking about adding an authenticator as an additional layer of security.

Does that help at all?

Orlyia

#47 - July 22, 2010, 10:16 a.m.

Q u o t e:
Unfortunatly, with the new system on changing passwords now, All they need is to figure out the informaton ( Account email - Name on account) and you can basically have a Tug- o -War for your account with the compromiser. Because nothing else is needed, he can go back with this saved info and change the password any time he wants because there is no security question to answer and such.

Well, unlike the old system, changing your email will go a LONG way to refreshing the security of an account.