EPTIt's either you have/had a keylogger, you used your password/email combo elsewhere, or simply got phished at some point earlier.
battle.net account hacked - theories? - Page 2
| Forum Index > Tech Support |
|
Go0g3n
Russian Federation410 Posts
It's either you have/had a keylogger, you used your password/email combo elsewhere, or simply got phished at some point earlier. | ||
|
peekn
United States1152 Posts
On March 24 2011 14:10 Go0g3n wrote: Blizzard doesn't have a leak, they can't randomly "lose" a few account details every now and then, and have the other 15 million accounts secured. It's either you have/had a keylogger, you used your password/email combo elsewhere, or simply got phished at some point earlier. I have a feeling it was something on the lines of this. But I would really suggest that you get an authenticator... really impossible for anything to hack you account at that point. | ||
|
chestnutman
176 Posts
| ||
|
Seion
United States45 Posts
It turns out that my account had the same password and registered email that I used for a forum. Whoever did it used an exploit designed for older forum software and was able to retrieve emails/passwords. After that, they probably just entered the info in hopes of finding usable accounts. I can imagine they try the same thing for services like Paypal; fortunately my Paypal password is not used for anything else. This happened to me shortly after Blizzard forced people to use your email as a login for Battle.net. | ||
|
nyc863
200 Posts
100% definitely not a past phish. I should know that, I actually run a public database for submitted phishs, lol. I wouldn't have posted unless I was confident it was not my fault. I've been using accounts and passwords forever. Like since the only browser was netscape with a grey background and a boat wheel for an icon. Always been careful, don't pick stupid passwords, never had an issue. And actually my security weakest link (the PC) is only used for SC2. Mostly I am on OSX and linux, and not for gaming. Not a keylogger/trojan either, unless it is one that all the scanners don't know about yet. But why go for a useless (non wow) battle.net account. It is puzzling. At this point I feel that if my account got taken, it can happen randomly to anyone, regardless of their experience and how clean their PC is. Just have that feeling. | ||
|
Obsolescence
United States270 Posts
Seriously, however, that is pretty scary. Do you like using the authenticator? | ||
|
emythrel
United Kingdom2599 Posts
Some sites dont have any decent security for their databases, some outright use their site to gather login info to hack accounts, others just have security slip ups or get hacked themselves and their database gets stolen. you should have an e-mail account that is solely for bnet, don't give it out, except for read-id (make sure you can trust the read id friends ;p) and don't use a password you normally use. you have an authenticator now, so you shouldn't have any more issues, but you should still change u bnet e-mail as they have it now........ btw, "my password isn't guessable" isn't ever true. unless you use a hexcode, your password is always guessable. If there is a word and numbers, it can be guessed or cracked. Most people use the same e-mail and similar passwords for all their stuff... i.e the password always contains the word "smoke" with a comination of numbers either before or after, i know i certainly do this, that means if they got your e-mail from a fansite, they have part of your password. Also, blizz passwords aren't case sensitive, to bnet smoke01010101 is as good as SMOKE01010101 or sMoKe01010101 so dont think that just by putting in different capitolization and using the same password makes you safe. | ||
|
Manimal_pro
Romania991 Posts
| ||
|
Elvin
149 Posts
| ||
|
SmoKim
Denmark10307 Posts
| ||
|
SmoKim
Denmark10307 Posts
On March 25 2011 01:11 SmoKim wrote: i got the same email, and i can't log into b.net now too secret question made the password reset, and now i can log in again, phew | ||
|
xilaratu
United States233 Posts
| ||
|
god_forbids
United States111 Posts
+ Show Spoiler + X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9Ng== X-Message-Status: n X-SID-PRA: noreply@blizzard.com <noreply@blizzard.com> X-DKIM-Result: None X-AUTH-Result: NONE X-Message-Info: 2etWe3f/w1emhdx/aseFKHDeRIXblS05NUebFKyJdB3rpYGIwIDtbUDscaH+CV0K8iMU9a4LZQp1v9TUo4SY5xS/CoYFjFANCszgPfHkB1o= Received: from ol.net ([124.237.78.196]) by bay0-mc3-f1.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 24 Mar 2011 09:50:29 -0700 Message-ID: <46AC04C95C7AE8E4D3E5449FEC84B91D@ol.net> From: "noreply@blizzard.com" <noreply@blizzard.com> To: <god_forbids@hotmail.com> Subject: Battle.net Account - Account Change Notice Date: Fri, 25 Mar 2011 00:51:07 +0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0F03_010FBC5C.1CADF8A0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5512 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512 Return-Path: nhrgpono@ol.net X-OriginalArrivalTime: 24 Mar 2011 16:50:29.0373 (UTC) FILETIME=[950062D0:01CBEA43] Text was: + Show Spoiler + Hello, This is an automated notification regarding your Battle.net account. Some or all of your contact information was recently modified through the Account Management website. *** If you made recent account changes, please disregard this automatic notification. *** If you did NOT make any changes to your account, we recommend you log in to Account Management review your account settings. If you cannot sign into Account Management using the link above, or if unauthorized changes continue to happen, please contact Blizzard Billing & Account Services for further assistance. Billing & Account Services can be reached at 1-800-59-BLIZZARD (1-800-592-5499 Mon-Fri, 8AM-8PM Pacific Time) or at billing@blizzard.com. Account security is solely the responsibility of the accountholder. Please be advised that in the event of a compromised account, Blizzard representatives will typically lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play. Regards, The Battle.net Support Team Blizzard Entertainment www.blizzard.com/support Online Privacy Policy Link "Account Management" was to: + Show Spoiler + http://www.battle.net.login.zh.suppor.management.xml.admin-suppor-wowaccountadmin.com/login/en/login.asp?ref=https%3A%2F%2Fus.battle.net%2Faccount%2Fmanagement%2Fbeta-profile.xml&app=bam | ||
|
SecretA5DC
Korea (South)225 Posts
| ||
|
Character
Canada18 Posts
Here's part of the header: Received: from uw1-web-35-blade04.wowadmin.net (uw1-web-35-blade04.wowadmin.net [10.48.58.64]) by smtp11.us.worldofwarcraft.com (8.13.8/8.13.8) with ESMTP id p2OFwf51028793 | ||
|
humblegar
Norway883 Posts
Of course checking the headers will tell you if the address is real or not; and you can always open the blizzard support page to make sure in stead of replying or using links in the email itself. | ||
|
lolton
Germany6 Posts
On March 24 2011 10:43 Naicella wrote: I have a wow account that was hacked. I didn't have an authenticator. I used a gmail account only for battle.net nothing else. I didn't log in anywhere but my home. i use no wifi. i live alone. My password was 16 characters letter/number/upper and lowercase and was still hacked. One problem with the battle.net passwords: they aren't case-sensitive. if you write "pAsSwoRd" or "password" doesn't really make a difference, can't explain why but this is a serious flaw in the hash-functions or whatever they are using for storing the passwords. Don't know about the length of the password, but iirc someone told me that after the 8th character or so it also doesn't matter what you write, can't check this right now. So perhaps if both things are true and your first 8 letters of the password are easy to guess, maybe there is the problem with bruteforcing. But as I said, I can't verify the length part atm, the part about case sensitivity is true, tested this myself a while ago. | ||
| ||
