YAY! Account Compromised.

Whiskey Tango

I made one post
Joined
Apr 12, 2012
Messages
25
Havent been on a website other than Reddit and Edge Gaming since I installed the game. And I just look at cat pictures on Reddit...

They are saying that it is nothing on their end but I find that hard to believe. Just from an IT security perspective. When you have hundreds, maybe thousands, of people all having the exact same issue at the exact same time, it is usually something server side.
 
Yeah, my WoW account has been hacked 2-3 times over the years even though I constantly sweep my PC for virii/trojans with 3 different tools, never log into a site from an email, and never share my account info.

Heck, in one of the hack cases, I hadn't logged into the game (nor used my info to log into the account) in over a year, then suddenly one day I get an email that I am banned for suspicion of RMT.

I tried to tell them they have a hole somewhere, but they declined, saying I needed a stronger password. Apparently a 10-digit jumble of seemingly random letters and numbers with no phrases, words or significant pattern to it isn't secure enough, and someone guessed it.

Anyway, hope the rollback doesn't roll you too far back and good luck getting your stuffs back. (Not sarcastic or anything)
 
Yeah, my WoW account has been hacked 2-3 times over the years even though I constantly sweep my PC for virii/trojans with 3 different tools, never log into a site from an email, and never share my account info.

Heck, in one of the hack cases, I hadn't logged into the game (nor used my info to log into the account) in over a year, then suddenly one day I get an email that I am banned for suspicion of RMT.

I tried to tell them they have a hole somewhere, but they declined, saying I needed a stronger password. Apparently a 10-digit jumble of seemingly random letters and numbers with no phrases, words or significant pattern to it isn't secure enough, and someone guessed it.

Anyway, hope the rollback doesn't roll you too far back and good luck getting your stuffs back. (Not sarcastic or anything)

I dont use an authenticator because I lost one once, I do use a digital keypad so they cant record my password even if I did have a keylogger. The fact that they can say for certainty that it wasnt on their end also makes me distrust them. There is no way that in less than 24 hours they were able to determine they had no holes in their security.
 
Lol yeah Blizzard is kinda gay like that. I use the authenticator app on my iPhone and it works great. My old WoW account got hacked after me not logging in for over 2 years, found out because one of my friends I played with saw me standing in Dalaran and sent me a text asking if I was playing again. I don't use the battle.net account anymore and I made a new one with the mobile authenticator on it.

I know that Vertago just posted something on the forums yesterday saying that there is in fact a hole that Blizzard is aware of (so they lied to you, basically) where you can watch session ID's of people in your game, allowing you to log into their account without even as much as a username or password. However, with an authenticator it will force them to have that code to get in (I believe).

Sucks you got hacked bro, hope everything works out!
 
Go check out the Diablo3 forums,there's all sorts of people with the same problem. There's a problem somewhere,I'm pretty sure of that. Luckily I haven't been hacked,but it could be because I've only played solo so far.
 
Lol yeah Blizzard is kinda gay like that. I use the authenticator app on my iPhone and it works great. My old WoW account got hacked after me not logging in for over 2 years, found out because one of my friends I played with saw me standing in Dalaran and sent me a text asking if I was playing again. I don't use the battle.net account anymore and I made a new one with the mobile authenticator on it.

I know that Vertago just posted something on the forums yesterday saying that there is in fact a hole that Blizzard is aware of (so they lied to you, basically) where you can watch session ID's of people in your game, allowing you to log into their account without even as much as a username or password. However, with an authenticator it will force them to have that code to get in (I believe).

Sucks you got hacked bro, hope everything works out!

As I mentioned in the post, you MUST be sure you have the option to the authenticator prompt at every login. If not it will prompt only once a week and render it useless.
 
As I mentioned in the post, you MUST be sure you have the option to the authenticator prompt at every login. If not it will prompt only once a week and render it useless.

This ^^

As for the authenticator and losing it, I use the phone app for 2 reasons;

#1 - It's free... can't get much better than that.

#2 - IT'S ON MY PHONE, I know I won't lose it. And from what I've read, the phone authenticator is a little more secure than the keychain fob or whatever you want to call it.

Get authenticators, people. If you have a smartphone, it's free, rendering you with absolutely NO EXCUSE for not having one. It's not inconvenient, or a hassle, it takes 5 seconds or less to punch in a code to make sure you're account doesn't get hacked. I've bee using it since they released it for WoW, and I've never had a problem with it.
 
If they make a BNet authenticator for Windows Phone, I'll get it. Otherwise, I'm not doing the physical. Too worried about lost/broken.

The way I found out my account had been hacked after I had been quit after 1 year was during Blizzard's big switchover to the BNet account system. There was a security hole being compromised during the process of merging a WoW account into an existing BNet account, letting anyone pick an account and attach it to their email.

Luckily, Blizzard saw that the email used was associated with RMT, so they shut that down fast and fired off an email. They flat-out denied the trouble was on their end. I told them I had bought two new machines since I last played WoW and had changed the password on the brand-new one before cancelling the sub.

Thing is, in 90% of the cases probably, it is the user's fault. I'm not saying any of you guys by any means. But the average WoW gamer knows little about computer security, and just instantly assumes they were hacked. So CS is told to stick to "not our fault" until their tech team discovers any issues, at which point it's announced somewhere. They are not qualified to gauge hack vs password steal.

It makes an unfortunate mess of their reputation when a security hole is present and people are all "toldja so!"
 
@Logic Did some research into it, and while D3 will only prompt for it once a week, if you try to log in with a different computer than the one that you did with the authenticator, it'll reprompt you to log in with an authenticator (or at least, that's how it's supposed to work).

For some of the people who's accounts were hacked with an authenticator, it appears that they were using a dial-up authenticator, which doesn't work with D3.

"Dial-in authenticators won't work with Diablo III. They're quite limited and do not take the place of a regular standalone or mobile authenticator at all. They're just a supplement to security; an added measure, but currently not for Diablo III."

http://us.battle.net/support/en/article/battle-net-dial-in-authenticator-faq#q-7

http://us.battle.net/d3/en/forum/topic/5270830422
 
1. My WoW account is Frozen, so you cannot access it. x3

2. I has Authenticator on it.

I think im good. :3
 
I have an authenticator so hopefully i'm safe, but i've heard joining public games can somehow result in a hacked account.
 
Nice, I woke up this morning to find my level 40 Barbarian naked & poor. Plus I have someone in my recently played list named "Angel". I find that odd considering I haven't ever played co-op. I think Blizzard has a serious issue on their hands. I know for a fact I wasn't keylogged either so I sent a support ticket asking them for a refund & to lock my battle net account, since this isn't an isolated incident, the D3 forums are full of people with the same problem.
 
Yeah my account Was Frozen do to suspicious Activity. This morning around 4 A.M this morning before i went to work. So i change my password as prompted by Bnet. Only to log on to see all my charecters gone. Not just the items All of my charecters. Waiting to here back from them within the next 6-12 hours -.-
 
Just a note if anyone doesn't have the authenticator I'd get it so your account won't get compromised.The sms authenticator doesn't work with Diablo3 apparently so you'll need the other one,it's free if you have a smart phone or ipod touch. I learned the hard way,& wouldn't want anyone here getting robbed.
 
I'm not throwing the idea out that it is on Blizzard's end, however we all need to remember there are zero day attacks out there so not all "harmful software" is in every antivirus/antimalware database. We are all connected to the internet and connect to websites and download files from outside sources which means right there we are all at risk. This is very real and is not meant to be paranoid. All you can do is surf safely by visiting legit sites manually instead of using links in emails, etc. So many fake emails are sent out regarding players accounts just to have you log into a website made to look like the official and now that you've entered your information, you've just given the thief your information. This information applies to everyone regardless of your expertise in computers or computer security.

Some simple tips to keeping your computer safe:

1. Keep your software up to date.

-This includes your operating system, virus definitions, java, flash player, browser and any other software you use like Adobe Reader. All of these items listed have in one way shape or form been under attack and have been used to exploit whatever the attacker is after.

2. Browse safely!

-Do not visit websites you don't know such as clicking on a picture on google that takes you to the website hosting this photo. Once you visit that site you're now connected to it and can be compromised.

-If you use Firefox you can use addons like noscript which blocks java and flash on websites but this does take some understanding on how to use this addon to allow you to see the stuff you only need to see. Another addon for Firefox is addblock plus which is pretty self explanatory by the name of the addon.

3. Email... yeah :mad:

-Email has been used to scare players into clicking on a link that is provided in that email body and logging into their accounts to verify them or save their account from being punished for some random negative deal. 99% of these are fake and is actually how your account is compromised. If you get one of these emails, it is best to log into your account by manually typing in the website information in the URL bar at the top of your browser and logging in the way the gaming company intended you to. You can go as far as submitting a ticket to customer service or call the customer service number provided for that gaming company if they offer it so you can be sure.

-Please be careful with links in your email guys!! Just because a friend sent you an email doesn't mean they actually sent it. Email accounts are compromised daily and are used to spam people on their contact lists with the information the attacker wants you to click on. If a friend legitimately sends you a link, it doesn't mean you can still trust it as they may not even know it is malicious. Same goes for file attachments. You as a user need to be responsible and take action to learn what is safe and what is not. When we drive our cars we don't just run into trees on the side of the road because we didn't know we were supposed to stay on the road. Be responsible.

I hope this information can save some of you from trouble at some point while being online. Another valid point you want to think about is you are not, generally speaking, safer by running more than one antivirus program at a time. You should choose one antivirus program and keep it up to date. You can still use an antimalware program to do scans and what not because those are not actively scanning your computer and won't conflict with your live scanning antivirus program. For example my choice of antivirus software if Microsoft Security Essentials (free from Microsoft.com) and I will use Malwarebytes to do additional malware scans in safe mod. I use a heck of a lot more tools for my removals but you can read about that stuff in the Tech Help section of our forums. If anyone should have questions about this stuff, I do it for a living and don't mind helping out. Visit me in the Tech Help forum or send me a PM as I try to log in at least once a day.
 
Last edited:

Similar threads

Back
Top