Hacked account, how did they do it?

[Tehmuffinman]

Authenticator question... W/ 5 accounts, how fast can I log in? a new code is generated w/ the push of the button? or is there a "cooldown" on how fast codes are generated?

I have my 5 accounts across 5 separate battle.net accounts. The same authenticator can be linked to all 5, and then I can broadcast the same single code to all 5 when logging in.

If you have 5 accounts on 1 battle.net account, then you have to wait for a new code to generate every 30 seconds for each account.

[Korruptor]

I have my 5 accounts across 5 separate battle.net accounts. The same authenticator can be linked to all 5, and then I can broadcast the same single code to all 5 when logging in.

The only reason I wouldn't do it this way myself is that if you don't log in with all your accounts every time you type in your authenticator code you leave the idle account(s) open to attack.

[alcattle]

The only reason I wouldn't do it this way myself is that if you don't log in with all your accounts every time you type in your authenticator code you leave the idle account(s) open to attack.

Once you put the authenticator on each account, it cannot be logged into without one. There is no "idle" risk.

[Targ]

Once you put the authenticator on each account, it cannot be logged into without one. There is no "idle" risk.

If you log on to 2 of your 5 accounts, and the hacker is key logging you.
The hacker can log on to the remaining 3 "idle" accounts using the just typed authenticator code.

There is a risk, pretty small risk IMO but a risk.
The hacker has to know your a multiboxer and the relationship of the accounts.
I doubt Multiboxers are a large enough population for hackers to target.

[Alemi]

I last played in December of last year, before RL decided to slam me down and punch me in the kidneys. All 5 of my accounts were reactivated and hacked in April. I hadn't been playing and the accounts were frozen. Someone paid subscription on all 5 to strip them. I did get an email from Blizzard notifying me of a password change to which I responded in early April and got the accounts at least secured. No idea how they got my password since I hadn't bothered to even access, or pay for the accounts in 4 months.

Now I'm trying to get shit restored and one of the accounts unlocked since I'm thinking about coming back.

Needless to say - I'm ordering an authenticator on Friday if all goes well with Blizzard. I would highly recommend it.

[jinkobi]

The only reason I wouldn't do it this way myself is that if you don't log in with all your accounts every time you type in your authenticator code you leave the idle account(s) open to attack.

Why wouldn't you log into your account once you typed in the authenticator code immediately?

Authenticators are a layer of protection and we've hashed it out on these boards time and time again. You're safer with an authenticator than without one.

There's been like 1-2 claims ever of someone being hacked with an authenticator on their account. Those claims weren't even verified to be real or if that's how they were hacked. There seem to be an anti-authenticator army that goes around that spread lots of nonsense.

Bottom line buy an authenticator and be safe or run without one and take your chances.