Quote Originally Posted by Dor View Post
guessing the gold farmers are attaching all thier stolen accts to 1 auth?
Yep.

Keylogger then add an authenticator and they have plenty of time to clean out the account before the user can regain access.