Converted to Battle.net and got hacked

[Void]

well i got my account back but still waiting for all my gear back. blizzard is taking their sweet ass time. i just want my 3 pieces of pvp so i can get my 5v5 going again ugh

[Khatovar]

but people can and do put keyloggers in just about any ad. the chances of getting one for wow without visitin wow sites is extremely low, it is possible.

Those two sentences are contradictory. Keylogging MMO accounts, not just WoW, is business, not entertainment. These keyloggers aren't coming from some jerk in your English class looking to watch you have a nerdrage event. They are coming from companies that make money off of selling gold from MMOs, fake or stolen credit cards, money from bank accounts, ebaying crap purchased via compromised bank accounts. To them, there's no difference between a WoW account and a Bank of America account. The people using your WoW account are probably no more than 3 cubicles away from the guys selling your aunt's credit card numbers.

[izuel]

Blizzard hacked your account in order to get you to buy an authenticator. Its true, my mates dad read it on the internet. Were going to write a book about it centitled "Blizzard: The real truth."

...

Sorry i thought this was the shit conspiracy theories forum.

[Drizhal]

Blizzard hacked your account in order to get you to buy an authenticator. Its true, my mates dad read it on the internet. Were going to write a book about it centitled "Blizzard: The real truth."

...

Sorry i thought this was the shit conspiracy theories forum.

Blizzard and the Art of Gold Selling....

World of Warcraft Account Sales and You: Who Really Buys Your Accounts?

Hacked?! Find Out By Who: The Secret Blizzard Won't Tell Us!

Ni Hao, The True Gold Sellers.


>.> <.< *Places tinfoil hat on head*

Blizzard and NCSoft, What they won't tell you.

I'm done I promise... Glide Bot: The True Masterminds Behind the Bot Program!

[Noids]

Blizzard hacked your account in order to get you to buy an authenticator. Its true, my mates dad read it on the internet. Were going to write a book about it centitled "Blizzard: The real truth."

...

Sorry i thought this was the shit conspiracy theories forum.

Heh, funny you should say that, when I told my wife about it (she understands very little about online gaimng let alone boxing :P) that was the first thing she came up with :P

I guess I have been lucky really in that I never actually lost control of my accounts, they were just scraped cleaen when I logged in. I immediately logged out and changed all of my security settings etc.

My problem with the keylogger/virus theory is that this is basically a quarantined computer. All of my email, web browsing etc. is done on my laptop. The only site I had been to in the past week had been the battle.net site. Other than that I run isboxer, innerspace and curse client as executables and thats it.

Either way, I have taken the opportunity to finish my water cooling system today, clean my hdd and install Win 7. The cooling is up and running I have had a bit of fun overclocking and feel a little calmer about the situation. Hopefully for me it is just a matter of them rolling my accounts back to Monday night (do they roll the whole account back or just the toons you request) and all I will have lost is a couple of days worth of raiding and dailies.

Cheers

[Ogloo]

i got mine hacked. I emailed, i did all this stuff but it took them forever to respond.. friend told me to call the blizzard number.. so i was like fine..
SURE ENOUGH!!!

in around 5 minutes my accounts were restored, the ban lifted from them, and all my stuff was back to what is was before i was hacked (they can set it back like 10 hours or even like 12 months, to where u last played before getting hacked.. easy simple,.. seriously around 5 min.

[jettzypher]

Those two sentences are contradictory.

not really. the point is that you can get keyloggers from alot of different places. however the possibility of getting one thats trying to catch your wow account info from a site for say cars is very low. people dont do this just to get ANY information. they focus on specific things...

[Noids]

Actually ordered one during my account conversion process, but living in Australia it is still in the mail. My main issue is that if I hadn't had to convert to goddam Battle.net it seems very unlikely that this would have happened...

Does that mean this needs to be posted again? :P

[Moorea]

I'm wondering how many people will get hit by password brute force attacks now that the login is easy == your email

ie harvest email addresses from forums and other sources; then brute force dictionary attacks against said email... I wouldn't change to bnet unless you have an authenticator (sw or hw) or a really strong totally random password (and not keyloggers/viruses/...)

[Noids]

Yeah I guess that was my main issue. I have had my email address for over 15 years now and god knows I haven't always protected it as well as I should previously. Saying that the password I used was a 10 digit random combination of alphanumeric characters that I can't see would be susceptible to that sort of attack.

My only other mistake I guess was that this password was one that I had used on one of my accounts prior to converting. So if they had previously had that but not the username, it was now fairly simple to put the two together.

On a sidenote, I have had one donotreply email response from blizz saying they got the message and another one saying they had reset my B.net password and that is it. Any idea how long it normally takes for them to restore my gear and if this is a fairly straightforward process?

Cheers