Account Compromise - I think i screwed up

#0 - Nov. 11, 2010, 12:13 p.m.
Blizzard Post
Okay this morning i found i got hacked, checked email, did acc recovery.

Blizz was supposed to send me a link to a password reset but i never got the email, i wasnt sure if i was supposed to get it right then or after the account was recovered, so blizz restored alot of my items before i changed the password, and apparently the person was still on my account while the items were being restored... I think im retarded...

I have alot of in-game mails from blizz that are grayed out as if someone already opened them...

I think the person was still looting my account while blizz was restoring my items, because i didnt change the password yet because i didn't think about it, I sent in a second password recovery email and the 2nd time i got the email and now i'm on my account, realizing that im completely retarded...

is it possible to recover my items a second time or am i out for all of my gear...
#3 - Nov. 11, 2010, 12:28 p.m.
Blizzard Post
They most certainly did get in again.

Have you found the source of this? Looks like they changed your password and re-entered almost immediately after this was restored. That's very indicative of them actually being into your email account.

I'd recommend a full security sweep of your system, and making sure your email is secure.

This last access produced a ban on the account - but that can be dealt with. You'll want to first make certain of your security and then ask that this be looked into again and the ban reviewed.



You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep them out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109
#16 - Nov. 11, 2010, 1:24 p.m.
Blizzard Post
Swifty, the fact that THEY reset your password is what makes me think they are in your email.

I'm afraid we can't control someone else intercepting your mail - they probably forwarded or deleted it.

And yes, and authenticator would be a major boon to your security - although if you have malware or a compromised email, there may be far more important things at risk than just your WoW account. These guys aren't at all beyond grabbing anything they can make use of. Credit Card information, Bank information, personal information.

This can all be investigated for another remedy, but security has to come first or it WILL happen again - as you just saw.