After the hack still suspicious activity

#0 - Sept. 18, 2010, 12:59 p.m.
Blizzard Post
Last week this account was compromised for the first time ever for me since release. Simply unbelievable and a mystery still how it happened. Anyways, everything has been restored and I am helping protect my account with a mobile authenticator and thank goodness. Yesterday and today I have over 40 emails (some with attachments lol) that seem to be from Blizzard as notifications and return failures from several different addresses on attempts to change and or log into my Battle.net account I would assume. It went as far as Google forcing me to change my password due to suspicious activity. I would like to forward these to Blizzard to have this handled so nothing happens again. What should I do? What do you think?

And yes I have changed my Bnet password since, and have scanned my computer for viruses, malware etc etc.
#1 - Sept. 18, 2010, 1:18 p.m.
Blizzard Post
Hi Thíngtwo,

Did you check to see if these e-mails were in fact by us? The only e-mails I see are in regards to character item restoration.

If possible, you may want to check out the header information.

How do I access email header information?
http://us.blizzard.com/support/article/25133
#3 - Sept. 18, 2010, 1:28 p.m.
Blizzard Post
Q u o t e:
Thank you for your response. I guess the emails aren't "from" Blizzard but are return notifications from google regarding emails that "seem" to have been sent to you from the suspicious emails and are responses as delivery failures. Make sense?
If i'm reading everything correctly it sounds like someone has been using your e-mail account to send out phishing e-mails. Did you change your e-mail password yet?