I don't click emails, in fact I ignore all blizzard emails and send them directly to spam folder. When I have a problem I go directly to the account management page. This was most likely from that flash vulnerability that I didn't get updated for a while because I didn't know about it. After addind authenticator I made a new email address, just for wow. I will never log into it from home, only from my phone. Hopefully after blowing up my HD and reinstalling everything that will be enough security. I've also decided to not browse WoW related sites from my WoW computer.