As I said elsewhere, a close friend of mine got hacked somehow...

He noticed it when he tried to log in (he plays every day) and he doesnt check his email account all that often tbh.

He did notice that he received an email from blizzard saying that they had merged his account with his battle.net account and gave his email address login name as XXXXXXX@yahoo.cr.

I said to him that it sounded like he had been hacked so we checked his armory profile for his level 80 toon and checked on wow-heroes.com to see what had happened to his toon... he only had a few epics left (mostly pvp and badge stuff, they didnt DE those). I had logged in to try and draw the attention of a GM to it because my mate doesnt get in until after 6pm GMT every day. I still had my mate on the phone talking to him as I logged in and shortly after logging in, I got a system message that [character] has logged in.

Told my mate that and he was going 'that aint me'... so I really ramped up trying to get hold of a GM and I think that I did get a GM who was playing his normal toon on a different server because I told him my mates toon's name and he came back and said that it looked like it was a bot.

Next thing that I know, my mates account has been logged out and new passwords have been sent to his email address. It appears that they didnt manage to compromise his email account.

I logged in to check and see if the hackers had got into a GB banker that he has and fortunately they didnt even try and access the low level toon... because everything was still in the GB.

In the end, he came out of the whole experience a wiser and (in game) richer man... they had been using his lvl 80 as a mining bot and he had about 100 stacks of saronite ore and 20 stacks of titanium ore. He got all his gear back minus the gems and chants.

I do believe that he has now setup his own battle.net account, but I dont know whether he has gone for an authenticator as well... next time I see him, I will talk to him about it