|
So this AM I get an email from battle.net saying my account password has been reset, and if this wasn't you you better call support pronto. It was a legit email from them, not a phish, had no links. Correct spelling and format etc.
I sigh and go to login to the client and of course password wrong.
So then I try the recovery form, and that tells me I need to call them instead.
I call them (15 minute wait time) and speak to a CSR and he says, well, you probably got a phish email and so ignore it. I say, no, it was a real email and for real my password was changed. He asks the security question I had setup and I answer correctly, and he generates me an email to reset my battle.net password.
I scan my PC with about 4 different anti-spyware/anti-virus programs and find nothing, then download the blizzard two-factor authentication app and login with my new password ok. Nothing changed in-game that I can see. I suspect the login and password change was done @ battle.net website.
so it is a puzzle to me. My password isn't guessable (and anyway you'd need to guess my email and password together to login at battle.net). My email account (gmail) was not hacked, and has a different password.
Any theories?
|
CSR already answered it. "you probably got a phish email and so ignore it"
|
No,
it wasn't a phish email. It was 100% real with good headers, **and my account had a new password on it**. Hence they had to reset it -- otherwise I'd be unable to use my account anymore and someone else was using it, or able to use it. (or looking for a linked wow product).
eg
Received: from smtp12.us.worldofwarcraft.com (ext-smtp12.us.battle.net [12.129.242.48])
by mx.google.com with ESMTPS id jq2si24064270icb.18.2011.03.23.17.13.20
(version=TLSv1/SSLv3 cipher=OTHER);
Wed, 23 Mar 2011 17:13:20 -0700 (PDT)
When I reset it using the CSR emailed link, I got another email, identical, saying password was changed again.
Now I have two factor authentication so nobody can login without looking over my shoulder at my iphone app.
|
And then he answered with "My password actually changed..."
Please read the OP. I don't have anything to contribute though sorry! Know nothing about hacking...
|
Only time I got hacked was my own fault with a weakish password, but I had changed it to something easy to remember after I quit WoW while I was waiting for SC2 to come out. Check the Blizzard support topics on account security would be my suggestion.
|
yeah I am reading them now. But they all say that you either shared your account with a friend (who obviously maybe not such a good friend) or your PC is shot through with keyloggers ..
if I have a keylogger it must be hero one that was placed by master chinese hackers using zero day exploits while they wait for new directives from the CIA to further attack the iranian centrifuges.
|
I used to get these all the time. The phishing email looks like it is coming from Blizzard.
Despite the headers and e-mail address which look like they are coming from Blizzard, it isn't.
Hackers can spoof e-mail addresses/headers and have found very clever ways to seem legit. You have to understand that this is a business and a very profitable one at that.
|
I have a wow account that was hacked. I didn't have an authenticator. I used a gmail account only for battle.net nothing else. I didn't log in anywhere but my home. i use no wifi. i live alone. My password was 16 characters letter/number/upper and lowercase and was still hacked.
My conclusion at that time was a brute force attempt. Thats the only thing i can come up with.
Even then i would think that blizzard has some sort of prevention towards people brute forcing passwords. and like you said. they would have to guess my email name as well. This was back in 2009 as well.
my only other guess. Is somehow they are reading my brainwaves.
|
So this shit is still going on?
I think Blizzard needs to come clean and admit they have some sort of leak. The reason why I say this is because about a year ago, I had similar issues with my WoW account. A WoW account I hadn't played in over 4 years. Furthermore, since I had last played WoW, I built an entirely new computer that never had WoW installed on it nor did I ever type any of my account credentials associated with my WoW account anywhere.
One day out of the blue I recieved an email saying the WoW account I hadn't touched in 4 years had been merged with a Battle.net account (this was back when the merger was first announced) that certainly wasn't mine. Sure enough, the email was legit and I had to go through their rigamarrole to get it back. When I got my account back, it turned out the hacker had already payed to reactivate it for a month. So I essentially got a free month of WoW courtesy of the hacker.
In any case the main thing to take away from that story is even if there was some sort of virus/keylogger/etc on my system, there was 0% chance my account information would've been compromised by it, as I had not ever touched WoW in any shape, form, or function in the 3 years I had my new system.
The only thing I can fathom is that somehow it was brute forced, or Blizzard has some kind of leak somewhere that is allowing for these kind of attacks. Either that, or somehow my information was compromised when I had my old system, and the hacker waited for 3 years to actually do anything with it.
|
It wasn't a phish email .. it was a notification of something that I would (and did) find out anyway: my account had its password changed, therefore, was owned by someone else.
the puzzle i have is how they got hold of the correct combination of email and password to login to battle.net without using a trojan or keylogger.
|
Funny how i got hacked too this AM as well, still waiting for email response from support -.-
|
I got hacked like this a few days ago, I don't even use my email that often so I know for a fact it was not because of a phishing scam. I also have anti-virus running (MSE) so that also makes me doubt it was any virus related problem. I had to answer my security question though (which i thankfully remembered) and I was able to get my account back.
|
I say ignore it, I play WoW and SC2.
I always get e-mails from all these phony lookalike blizzard e-mail everyday saying i've been hacked, my account asked for a password reset, you name it..
You should also read blizzard points on how to keep your account safe.
I personally been hacked almost a year ago, emailed blizzard right away and got a response a day or two later. With this happening, it got me doing research on how to keep my b.net account safe.
I have an iPhone and blizzard has the authenticator which is perfect, the authenticator gives me 8 random numbers I guess every 10-15 secs which is very good. When you see the number you have about 20-30 seconds to punch it in our you'll have to put in the number that you currently see.
Blizzard also has a key chain authenticator, I think you have to purchase this one though unlike the iPhone one which is free. This one is a six digit one, which is just as good as the iPhone one.
|
On March 24 2011 10:43 Naicella wrote:
I have a wow account that was hacked. I didn't have an authenticator. I used a gmail account only for battle.net nothing else. I didn't log in anywhere but my home. i use no wifi. i live alone. My password was 16 characters letter/number/upper and lowercase and was still hacked.
My conclusion at that time was a brute force attempt. Thats the only thing i can come up with.
Even then i would think that blizzard has some sort of prevention towards people brute forcing passwords. and like you said. they would have to guess my email name as well. This was back in 2009 as well.
my only other guess. Is somehow they are reading my brainwaves.
O_O really can't see a 16 character password with letter/number/upper and lower case getting brute forced t.t Would take a lotttttttttttttttttttttttt of years of non-stop brute forcing I would think.
But you can always try typing a password in here to see how long it might take http://unwrongest.com/projects/password-strength/
|
I also got hacked this morning
Got home from school tried to login to sc2 couldn't. So i opened my email and had a message from blizzard stating that i had changed my password.
I have tried to change my password/recover my account but for some reason it would not accept my email\name combination.
What should I do now? (I have a SEA account)
|
On March 24 2011 11:32 iloveroo wrote:
I say ignore it, I play WoW and SC2.
I always get e-mails from all these phony lookalike blizzard e-mail everyday saying i've been hacked, my account asked for a password reset, you name it..
Does everyone just read the first three lines and bang out a reply?
forget phish emails, this topic isn't about that.
It is wondering how without using a keylogger a battle.net account can be compromised when the password is only known to me and, practically speaking, not brute forceable.
Even if it WAS brute forceable, that would still be a blizzard problem as they should react to multiple attempts (100s+) to guess a password by locking the account until the real owner unlocks it using the secret question or whatever.
So my conclusion so far is either..
1. someone knows a lot more about my shit than I ever guessed, and I should be really paranoid (but why go for such a mundane target as my useless battle.net account?)
2. blizzard website or systems have a security leak somewhere
3. I used the same email/password combo in some random forum in the last six months and it got hacked, and the forum doesn't encrypt passwords, and the hacker ran through all the accounts cross-referencing to battle.net in order to look for wow products
For instance, for #3, gawker media leaked out usernames and passwords for their entire membership database. I got that alert email. However my email for those properties were different, so that wasn't the source.
|
I got that same email and I did check my bnet account and my usual password didn't work, so mine also got changed. I was able to reset it though. *shrug* All I have is SC2 so I wasn't too worried. Reading this topic makes me less worried that I have a trojan though =).
|
What I don't get is that there are so many possibilities out there as to how your account got "hacked" and you seem to know all of them already. No one other than the "hacker" himself would know how he was able to get on your account but you seem to insist on making a thread out of it. There are so many threads/topics all over the internet of someone's log-in to possibly get keylogged that I don't think this deserves another thread and let alone be in Tech Support.
|
No idea about how they hacked you, but I can tell you I've been getting e-mails telling me too many log in attempts and such.. Scares the crap out of me cause they give you no links or anything, just to contact blizzard without giving links. I had about 4 of them today when I checked my email, since I don't check it often. None in the spam folder where they usually end up either. But they were all titled differently as in "Too many failed log in attempts (5)" "Too many failed log in attempts (24)" "Too many failed log in attempts (73)" and the last was like 97 or something like that. Needless to say I logged out of my email and checked up on my account to make sure all was fine and dandy. If it was a fishing E-Mail, I have NO idea what they would gain by not letting me click links.. Maybe they just want to scare people now, atleast in my case. Anyhow, glad to hear you got your account back. Oh, btw, I have an authenticator aswell, one of the 5 dollar ones that gives 6 numbers or whatever. Had it since they came out. Never been hacked personally.
|
this happend to me last night, i found a keylogger in my system with superantispyware.
|
|
|
|
|
|
EPT
