...
Quote Originally Posted by 'zanthor',index.php?page=Thread&postID=29397#post2 9397
...they run brute force attacks on the passwords... a guy in my guild had his account hacked/stripped 4 times with a complete reformat in between. He finally bought a new account, moved toons to it, and hasn't had a problem since.
blizzard doesn't have some sort of exponential log on wait period on failed login attempts? this really doesn't seem likely. brute force attacks are really only viable when the attacker can do an offline brute force attack by obtaining the hash somehow.