One of my accounts hijacked tonight, what to do?

[JoeWunsch]

Hey guys,

I was just sitting here reading something and I get a e-mail popup notification from thunderbird, I switch over and I see its from WoW saying my password was changed for my 5th account.

Weird, I try to log in and sure enough its changed..

So I reset it, and log in, and I notice the character I log in on is no longer guilded.....

well I check all the characters on that account and they all were stripped of gold. I log onto one of my other accounts and check the guild bank and yep just as I dreaded, completely stripped.

I have no clue how this happened, if it was a keylogger I would have thought he would have gotten all my account info, but he only got the info to one of the accounts. Strange.. I am scamming my computer now using adaware to be safe.

But anyway I filled a petition out in game (ticket) and waiting on them to get back to me. Is this all I have to do? Speak to them in game, or should I call in the morning?

Also is there any chance of me getting my bank items back? I had a few thousand gold and tons of mats in there...

Thanks =P

pisses me off.

[JoeWunsch]

Well somehow I did end up getting infected with a trojan, adaware picked it right up...

No clue how it got on there or why only one account was compromised.

[Vyndree]

But anyway I filled a petition out in game (ticket) and waiting on them to get back to me. Is this all I have to do? Speak to them in game, or should I call in the morning?

Yepyep, you're on the right track. Fill out a GM ticket saying your account was compromised, and explaining that you are trying to clear your computer in case there are any keyloggers/viruses present. Let them know that a large amount of gold/items are missing and that, now that you have resecured the account, you want to use one of your limited restorations to get your stuff back.

They should lead you from there. Keep in mind, depending on the amount of people hacked they could have a backlog of restorations to do. As I understand it sometimes takes a week or even two to get your account completely restored.

Until then, do your best to scan your computer and identify how the hacker could have gotten your information. Have you installed any new mods or signed up for any out-of-game websites using similar account information?

[JoeWunsch]

But anyway I filled a petition out in game (ticket) and waiting on them to get back to me. Is this all I have to do? Speak to them in game, or should I call in the morning?

Yepyep, you're on the right track. Fill out a GM ticket saying your account was compromised, and explaining that you are trying to clear your computer in case there are any keyloggers/viruses present. Let them know that a large amount of gold/items are missing and that, now that you have resecured the account, you want to use one of your limited restorations to get your stuff back.

They should lead you from there. Keep in mind, depending on the amount of people hacked they could have a backlog of restorations to do. As I understand it sometimes takes a week or even two to get your account completely restored.

Until then, do your best to scan your computer and identify how the hacker could have gotten your information. Have you installed any new mods or signed up for any out-of-game websites using similar account information?

Thanks vyndree,

Only thing I can think of is I clicked a link on the wow forums for a flash game.

I was watching the adaware scan and it found something in my temp internet files, its still scanning so I am not sure yet but right now thats the only thing I can think of. I don't really look at anything wow related besides this website and the official forums sometimes.

My ticket is already almost ready to be serviced status so that was fast.

I don't mind a 2 week wait if I can get the gold back, that was pretty much all the gold I have but a few hundred spread out on the other accounts.

Thanks again for the help

Joe

[daviddoran]

is this something that the blizz authenticator will prevent?

[JoeWunsch]

is this something that the blizz authenticator will prevent?

Yep this is exactly why it was made, if i had it he would not have been able to log into my account.

I;m gonna get one I think after this, they are cheap enough.

[JoeWunsch]

OK I just did the whole report thing in game, he asked me about 8 quests and then said there will be 2 reviews, one to see if anything can be restored at once, and another in case not every item was restored in the first investigation.

I think i caught it fast enough, i saw the password was changed like 30 seconds after the e-mail was sent so I know the items didnt go far before I got it reported.

Thanks for the help again vyndree, you are the best.

Joe

[zanthor]

Now go to http://www.blizzard.com/store/details.xml?id=1100000182

and buy

Attachment 87

And never have to worry again.

[BobGnarly]

btw, there is a chance that your other accounts were also captured, they just haven't gotten around to using it yet. I would also change those account's passwords, after you finish the scan.

[JoeWunsch]

btw, there is a chance that your other accounts were also captured, they just haven't gotten around to using it yet. I would also change those account's passwords, after you finish the scan.

Yeah just the name alone "account4" i would have thought they would have tried "account3" with the same password, but i changed the PW on all my accounts, did a quick scan and removed the trojan, now doing a fullscan and waiting for it to finish, then im gonna change the PW on all 5 one more time just to be safe.

I am just happy I didn't purchase anything from the internet today or that scumbag would have my credit card information as well.


Also yeah I am buying the authenticator, I have not gotten a trojan in years =/ Guess everyone can get hit sometimes.