Hacked

More than once I've tried to log into WoW and got the 'incorrect password' message, and a chill always runs up my spine at seeing that, but when I re-type my password slowly (and correctly) I always get in.

This time I fired up WoW to log in and instead of 'incorrect password' I see 'Please enter your authenticator key'.

My what now? But I don't have an Authenticator!

And that's how I knew I'd been hacked.

I immediately retrieved the two emails I'd just deleted which, like the ones I've been getting every day for a month or two now, tried to warn me that I'd been hacked. When I moused over the URL in one of them it showed Blizzard's real URL. I actually had been hacked.

I called Blizzard and got "We're experiencing a high volume of calls right now. All operators are busy and we cannot take your call. Please try again later. *click*"

What the fuck???

They're so busy taking calls I can't even wait On Hold for the next available Operator?

To me that says they've got a majorly serious problem.

Here's the rub.

The password I use is not one I've used for anything but World of Warcraft.

The only person who has access to my WoW account is my wife and my 9 y/old son, and that's via my PC.

My PC is also pretty much used for nothing but WoW. Ok, there's the checking of email, Facebook activities, reading Blogs, etc, but for the most part I play WoW and that's about it.

I do visit sites like WoWWiki, WoWHead, Thotbott (or however it's spelled) but I'm also a security freak and have numerous anti-spyware programs like NoScript, AdBlock, AVG, Spybot S&D, etc.

I also doubt anyone could call Blizzard pretending to be me and satisfactorily answer my Security questions, not unless they're someone who knows me really, really well. And no, my wife wouldn't do this. That's not her style. She'd just log in on my account and Delete my characters. And she wouldn't clean out my sister's Guild Bank like this person did.

I don't have a keylogger on my computer because the software I listed above is not all that's in my arsenal, I have others, some specifically designed to find keyloggers, and all scans came up blank.

This means it was not someone close to me who hacked my account, and it (most likely) wasn't a case of me being hacked/keylogged.

In my opinion this was an inside job from someone inside Blizzard, and this is apparently what many people who have been hacked have claimed for a long time. Of course nobody has any proof because the only proof is an absence of proof (as in once you eliminate the impossible, all that remains, no matter how improbable, etc etc etc...) and that's not good enough. Not for court. It's good enough for me and for those who have been hacked but it still brings you no satisfaction. If anything it makes you wonder what's the point of playing Blizzard's game when they can't protect you from themselves.

After calling back numerous times I finally got into their automated help line and was able, eventually, to talk to someone who removed the Authenticator from my account and got me back into my account. The Rep also informed me that the hacker apparently had access to my email account, so when I got in I not only changed my password but I created a brand new email account and linked my WoW/Bnet account to it, rather than my old email.

I will be very curious to see if this email account receives any sort of Phishing emails and if so, how? If it's a brand new email account, not used for anything but accessing WoW, and so the only record of it being a WoW-related email is within Blizzard's own database...how do the Phishers know to target it? We'll see if that that happens.

Finally I logged into WoW, and this is what I saw...


That's a far cry from the character model I displayed a week or so ago...those Spaulders are the Heroic badge-bought shoulders. They're worthless as far as vendoring which is why I still had them. I also had the badge-bought necklace I'd picked up literally a day or two before but everything else was gone, including most of my badges (& I was 2 Frost badges or one Heroic away from getting my new Libram!).

I logged in and my Pally immediately began falling, falling, falling. A window popped up with Accept or Cancel but there was no message accompanying it. I wasn't going to Accept anything without knowing what I was accepting. I fell for several seconds until being automatically zoned out and re-appearing on a ledge in Sholazar Basin, naked. Well not quite naked. I still had my Badge-acquired Shoulders and a Mining Pick. As a Miner/Skinner I used to carry a Gnomish Army Knife which the Hacker vendored (for 22-silver. Wow.) opting for the cheaper Pick. They then went Mining, on my character. They sold all of my bags bar my original Pack and one other, and both were almost full of Ore & Gems. When my character raided their Guild Bank my sister put in a ticket to a GM that I'd been hacked, and eventually my account was closed down. The hacker had been caught in the middle of Mining run.

Fortunately, with Pets and Mounts now being built into the paper doll and not carried like inventory, I was able to fly back to Dalaran where I checked my bank and saw it had been stripped, too. I put in a ticket to a GM to (hopefully) get my gear restored, then with trepidation logged out to check my other characters. My old toons on Kilrog (Kwazimoto & Co.) had also been stripped. I returned to my sister's server and clicked my Bank Toon. He was still clothed but none of the Auctions I'd listed before going to bed last night were up, nor was there any Gold waiting in the Mailbox for me...or in my inventory. And every other character was the same. Many still had random items in their packs but practically no Gold to their name.

I am willing to start all over again but I'd rather not if I don't have to. Naturally I'd like to get my gear restored and get my sister's stuff back, but I have no idea how long that will take. Do I just play a low level Alt for a week until Blizzard do something? What if it takes them several weeks to restore my gear. What if they won't restore it, or only partially restore it?

And then my own security measures got the best of me. I forgot my new WoW password. And I forgot the password to my new email WoW-only email account. And to be ultra security conscious I'd used my work email as the secondary email and I can't access that until Monday. So this weekend has been a sad, WoW-less weekend.

Fortunately! The kids and I went to Dave & Busters on Friday and I ended up cashing in 10,000 points (the boy and I save them up for the BIG prizes) and getting MySims Agents for the Wii. You can apparently buy it for $20 but it's not likely we'll save up our points for the 85,000 X-Box, so why not spend some of the points on a game for a system we already have.

It's a cute, point & click-style adventure game with a bunch of mini-games (puzzles) to play as your Sim Agent gathers evidence to crack each case. There's also things to find if you're prepared to look around, like new outfits and decorations for your HQ. It's a fairly typical MySims game with lots of customization available, but the way it's presented with you as a Special Agent solving cases means you need to actually think as you play. And I like that. I'm giving it an 8/10. It's not the perfect game but it's well done and is a lot of fun :)