WoW accounts getting hacked

[zanthor]

To brute force the authenticator you'd first have to brute force the user's password (or find it some other way). Only if you get the password right does it even allow you to type in the authenticator code.

This is incorrect. You present username/password - it will always ask for the code next unless it's patch day and you aren't patched.

I have not tested what happens if you fail typing in the authenticator code however, but the smart thing to do would be lock the account out until the authenticator switches to a new code.

You go back to logon/password prompt.

The chink in this armor is the wow forums. They don't use the authenticator, only the u/p of the account. So you can brute force the password there assuming they could handle the number of attempts and not get flagged (which I doubt). All said and done, it will take an act of god or raw stupidity to lose access to your account in WoW now.

In fact, I'm so confident in this that I'll post this:

Username: zan6715b
Password: el571ai#7
Current Authenticator Code: 723123

Good for about 45 more seconds, enjoy .

[spoiler]Oh c'mon, like I'd REALLY post that as real info.[/spoiler]

[Toned]

I've been playing MMOs for about 12yrs now starting with EQ1... Never had any issues with EQ however I have been hacked more than once on WoW. Dec of last year my g/f's account and 2 of mine were hacked with that flash exploit. I have been using Firefox with noscript / noad etc... now days it doesn't really matter if some one is determined they can get your info. With the most recent Wowhead issue they got 2 of my accounts some how ( this is how I know it is a program and not a person). They hacked 2 out of 9 accounts all have similar usernames... but they were all on the same password. This time they actually managed to change my emails, transfers chars off, etc... I really only go to 2 WoW related sites dual-boxing.com and wowhead, but can never be too cautious.

Both times this has happened Blizz has been really prompt about restoring any damages caused etc... About 2 months ago I think some one attempted a hack on one of my accounts and blizzard detected it. They ban the account for 24hrs to let me secure my computer/accounts etc... They must have been watching IPs or soemthing and when I log in everyday in California... then suddenly in Taiwan I'm logged in they are like ban hammer !

[zanthor]

Since then I've ordered 9 authenticators and I need to go buy a labeler lol.

You know you can associate a single authenticator with 9 accounts right? no labels, one button, one code...

[Toned]

Since then I've ordered 9 authenticators and I need to go buy a labeler lol.

You know you can associate a single authenticator with 9 accounts right? no labels, one button, one code...

Ha no ~ good to know. $7 it is vrs $63

[Hachoo]

I've been playing MMOs for about 12yrs now starting with EQ1... Never had any issues with EQ however I have been hacked more than once on WoW. Dec of last year my g/f's account and 2 of mine were hacked with that flash exploit. I have been using Firefox with noscript / noad etc... now days it doesn't really matter if some one is determined they can get your info. With the most recent Wowhead issue they got 2 of my accounts some how ( this is how I know it is a program and not a person). They hacked 2 out of 9 accounts all have similar usernames... but they were all on the same password. This time they actually managed to change my emails, transfers chars off, etc... Since then I've ordered 9 authenticators and I need to go buy a labeler lol. I really only go to 2 WoW related sites dual-boxing.com and wowhead, but can never be too cautious.

Both times this has happened Blizz has been really prompt about restoring any damages caused etc... About 2 months ago I think some one attempted a hack on one of my accounts and blizzard detected it. They ban the account for 24hrs to let me secure my computer/accounts etc... They must have been watching IPs or soemthing and when I log in everyday in California... then suddenly in Taiwan I'm logged in they are like ban hammer !

Why....why did you buy 9 authenticators? The fact that you can use 1 authenticator on multiple accounts is plastered all over the blizzard FAQ and the blizzard store, and 9 authenticators is no more secure than 1 authenticator.

[Starbuck_Jones]

I work in the enterprise space. Like server 2k3 and stuff has when you open a web browser, it wont go to a site until you enable it on a trusted list. If your this paranoid about your game account, Dont browse the p0rns on that computer! As for the guy who tossed his HDD because of a virus... unplug the nic when you do a reinstall.

[Prepared]

[/url]

The authenticator is wonderful for one account. Any tips how how best to manage five or more accounts with an authenticator? Seems like it would be a very painful process just to be able to log in, or if you game on the road taking 5 authenticators with you is very annoying and increases the potential for misplacing one.[/quote]

I use the Blizzard Authenticator on 38 accounts. Just use maximizer from either Keyclone or Octopus or whatever other software that allows start up of the application and keyboard entry to all client applications. Once the same authenticator is associated with multiple accounts, the same number can be entered to all account logins at the same time. Keyclone and Octopus allow that keyboard entry at login so it saves a ton of time logging in any number of accounts at the same time.

[Tonuss]

I work in the enterprise space. Like server 2k3 and stuff has when you open a web browser, it wont go to a site until you enable it on a trusted list. If your this paranoid about your game account, Dont browse the p0rns on that computer! As for the guy who tossed his HDD because of a virus... unplug the nic when you do a reinstall.

The problem I am seeing is with ads that get served from other sites to the site you are visiting. I run Firefox with AdBlock and NoScript, so that nothing runs on a site I visit until and unless I enable the originating sites. Some sites will pull in scripts from more than a dozen additional sites! That's just sickening. You are visiting a site you trust, and you are also "visiting" 2-15 other sites that you have no clue about (and if you're not using some form of tracking, such as NoScript, you're not even aware you are visiting them!). Most of the virus/spyware infestations we get at work are from these ads. It's a real problem these days.

[Bloodcloud]

Running the Authenticator on 5 accounts without problems.

Only thing is, You need it for EVERYTHING, me it posting on the WOW forums, or assigning toons to your account on Amory ...

Figured out the hard way, when I was @ work without the authenticator

BB

[Svpernova09]

Running the Authenticator on 5 accounts without problems.

Only thing is, You need it for EVERYTHING, me it posting on the WOW forums, or assigning toons to your account on Amory ...

Figured out the hard way, when I was @ work without the authenticator

BB

It has never asked me for the authenticator to post on US forums.