Account locked again

#0 - Aug. 25, 2010, 9:32 p.m.
Blizzard Post
I just started playing World of Warcraft again after not playing for over a year, and within my first few weeks of playing again I have had my account locked due to suspicious activity about 3 times and had someone get in my account and spam several times as well. I am at a loss to how this is happening, please help me (and please no sarcastic remarks like "Don't be a noob and click on phishing emails").

Here is a list of things I have done multiple times now:


  • * Changed password to battle.net account
    * Changed password to email account
    * Switched emails 3 times now, still happened despite different passwords on all of the emails and different providers
    * Ran anti-virus and spyware removal numerous times and found nothing
    * Avoided clicking on any links in emails referring to battle.net or World of Warcraft in general


  • The only thing I haven't tried is adding an authenticator, which I don't want to do because it costs money and my account should be secure without it. It kind of bothers me that it is free for iPhone and android users but I have to pay to use it with my phone (N95 8gb).

    Also blue, why is the password to your battle.net account not case sensitive? I mean with all these security problems that users are having why not just add the ability to have a more secure password (even if that isn't the big problem). Also, maybe add a feature that marks down the IP that last logged into your user account, similar to how gmail does it so that way we would know if someone else logged in (and also have their IP address).

    Does anyone know how I am continually getting hacked? Also, does my account being locked due to suspicious activity mean they actually managed to log in, or could it be that they tried logging in unsuccessfully numerous times?
    #17 - Aug. 26, 2010, 12:51 p.m.
    Blizzard Post
    I'm glad to hear you think you've found the source of this, Spike.

    Some of these little devils can be hard to find - and some even harder to root out of your system.

    Also, don't forget to check the security of your email account (and make sure no one has put a forward on it).

    We often see email accounts compromised at the same time accounts are.

    I recommend every user get an authenticator. It puts an extra layer of security on your account. As you've found, not every scanner will pick up every infection - and until a new infection in the wild is identified NO scanner is going to pick it up. The authenticator just gives you an extra security buffer.