Caught Chinese hacker red-handed

#0 - Sept. 15, 2010, 4:32 p.m.

A strange thing happened to me this morning. I checked over my old e-mail accounts, including the account that led to be getting hacked at the beginning of the year. At the time, I created a brand new account and password, along with an authenticator (only have myself to blame for not getting one sooner), but the compromised e-mail I left alone ever since.

Fast forward to today, I logged in to the old e-mail account and lo and behold, it's been rather busy the past 2 days. What made me laugh is that this hacker didn't bother to change the password to my old compromised e-mail. In fact, according to Google mail, the sender was from China and he/she happened to leave behind their IP address too, along with WoW account password change notifications from several hundred accounts in the inbox.

Now I know if my old e-mail had that many account password notifications, this Chinese hacker clearly has been busy compromising all these accounts and taking whatever he/she can.

My question is then, who exactly do I contact to Blizzard about this? Is there a specific Blizzard Technical Support or Customer Service e-mail address I can send everything to, the list of all the compromised accounts this hacker has gotten into? I feel that although those people have already been hacked in the past several days, possibly a lot of them right here on these very forums, I'd like to put some help in to help Blizzard further investigate this and stop this hacker before he/she strikes again.

Google mail couldn't trace exactly where in China, but that it came from there, and the recent activity for it was 2 days ago on September 13th, 2010.

(This is the IP address that it came from)
China (59.174.112.123)

#5 - Sept. 15, 2010, 5:14 p.m.

Chances are, Xiana, the accounts mentioned in the emails have already been researched and actioned accordingly. If they are all password change notifications, the damage has been done I’m afraid.

You may wish to consider compiling a list of the accounts referenced in the emails and contact our Account Administration team. Advise them of the situation like you did here. They will review each account and take the appropriate steps from there.

Since you were able to access the old email address, you may want to change the password to this email address or perhaps contact Google to see if it is possible to permanently prohibit this email address from being used or accessed.

Account Administration: [email protected]

Good luck!