# WoW Account Hacked

**URL:** <https://boards.straightdope.com/t/wow-account-hacked/554965>\
**Category:** The Game Room\
**Created:** [September 25, 2010, 3:44am UTC](https://boards.straightdope.com/t/wow-account-hacked/554965 "2010-09-25T03:44:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fuzzy\_Wombats](https://avatars.discourse-cdn.com/v4/letter/f/d6d6ee/32.png) [@Fuzzy\_Wombats](https://boards.straightdope.com/u/Fuzzy_Wombats)\
**Post date:** [September 25, 2010, 3:44am UTC](https://boards.straightdope.com/t/wow-account-hacked/554965/1 "2010-09-25T03:44:38Z")

</div>

Well, my short stint in the world of Wow has been temporarily interrupted.

I received an e-mail while I was out to dinner indicating I’d been suspended for 72 hours for “hacking” WoW.

So, I get home, and my password doesn’t work (thankfully password retrieval does, and I’m able to change my password - wow isn’t my only game on my [battle.net](http://battle.net) account)

I’ve appealed the suspension, since I wasn’t playing at the time…

What confuses me is this: I haven’t fallen for any of the typical “phishing” scams, I haven’t responded to any blizzard requests, or filled out any forms without self-navigating to the blizzard site.

I’m now greatly concerned I have some sort of malware on my system and am running a full system scan, although it’s yet to come up with anything.  
:mad:

---

<div class="post-metadata">

**Author:** ![Ferret\_Herder](https://avatars.discourse-cdn.com/v4/letter/f/e47774/32.png) [@Ferret\_Herder](https://boards.straightdope.com/u/Ferret_Herder)\
**Post date:** [September 25, 2010, 11:38am UTC](https://boards.straightdope.com/t/wow-account-hacked/554965/2 "2010-09-25T11:38:33Z")

</div>

Are your Adobe Reader and Flash programs fully updated? There’s a well-known weakness in some older versions that some hackers are exploiting via website ads and the like, apparently.

I recommend you use only frequently-used addons, and get an authenticator via the Blizzard site - either order the plastic version, or get the app if you have a smartphone.

---

<div class="post-metadata">

**Author:** ![Spectralist](https://avatars.discourse-cdn.com/v4/letter/s/ecccb3/32.png) [@Spectralist](https://boards.straightdope.com/u/Spectralist)\
**Post date:** [September 25, 2010, 11:49am UTC](https://boards.straightdope.com/t/wow-account-hacked/554965/3 "2010-09-25T11:49:55Z")

</div>

I had this happen recently too. They somehow got my email password and used that to change my [battle.net](http://battle.net) password and then applied a burning crusade trial key to my long-defunct wow account and got me banned. I wouldn’t even have noticed had SC2 not just come out and it uses the same account credentials. A couple weeks later I discovered I’d also had my NCsoft account banned. Presumably by the same folks.

I never did figure out how anyone could have gotten my email password.

---

<div class="post-metadata">

**Author:** ![Gukumatz](https://avatars.discourse-cdn.com/v4/letter/g/74df32/32.png) [@Gukumatz](https://boards.straightdope.com/u/Gukumatz)\
**Post date:** [September 25, 2010, 12:51pm UTC](https://boards.straightdope.com/t/wow-account-hacked/554965/4 "2010-09-25T12:51:27Z")

</div>

If your password’s on this [list](http://www.whatsmypass.com/the-top-500-worst-passwords-of-all-time), it’s a good chance they just used a dictionary attack. (I was suprised when I saw it, because mine was in the top 200. I’ve changed it in favor of an algorithm, now, though.)

ETA: Agree with the people who suggest getting an authenticator.

---

<div class="post-metadata">

**Author:** ![Skammer](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/skammer/32/143_2.png) [@Skammer](https://boards.straightdope.com/u/Skammer)\
**Post date:** [September 27, 2010, 1:43pm UTC](https://boards.straightdope.com/t/wow-account-hacked/554965/5 "2010-09-27T13:43:07Z")

</div>

Hope you got it cleared up. My account was hacked a few weeks ago with no obvious method. Fortunately my account was suspended before the hacker did any damage and I was able get back in with a new password within a few hours. And I got my authenticator right away after that.
