Regarding hacked accounts (READ)

[Vertago]

http://us.battle.net/d3/en/forum/topic/5149539239#4

Just saw this posted on the D3 Forums:

An exploit was discovered by duplicating a session ID basically, if you join a public game with people, they can view your session ID and spoof it to login as you without need for a password or email or anything if you play with people, try not to play in public games bro, only with people you know

And Blue Responds and Locks the thread...

Hey guys,

We are very aware of these reports and are taking them very seriously. Please keep an eye on the General Discussion forums as Community members will be posting something soon.

If you have been hacked, please contact Customer Service as soon as you can. In addition, using an Authenticator can help secure your account even more.

 

[Snipeye]

Hah. Called it. Playing in pub games with other people you don't know or can trust increases your risk of being a victim. Personally, I rather play solo or with friends. At least then I can communicate with them.

 

[Havic]

I saw this on reddit and was going to post about it too. I wonder if this has anything to do with those people that join your match and sit afk in town the whole time. They could just be getting session ids as people join. :/

 

[Mr.SaJoRa]

thanks for the warning.

 

[Korea_xD]

Good thing that I never played in a public game, I only played solo and mostly coop

 

[Logic Overflow]

IMPORTANT!

If you have an authenticator, you MUST enable the option to prompt you for the authenticator code at every log in. If you have this disable, it will only prompt you once a week which pretty much renders the product useless!

Additionally, the Battle net SMS Alerts are an extra nice feature with added security as well.

I personally recommend using both of them enabled.

Finally, I suggest turning off Real ID so folks won't see your real name and such.