Have You Been Hacked?

The unhappy members guide to problem solving the hacking of your warcraft account

Firstly ... we are certainly sorry to hear that your account has been stolen, but there are ways that you can get it back and prevent it from happening again. Take it from someone who learnt the hard way.

Firstly check the obvious - check the realm status and your ISP connection and modem. Sometimes the solution is as simple as turning off your CAPS Lock key. Some modems will appear to be working normally, however if you are having connection problems, try a different modem or wireless device.

Next - What information does the sign-in screen give you? It usually will tell you if your user name or password is at fault.

Another common reason for connection failure is most companies will have IT protection. Many have restrictions on games, music, videos and so on. If your WoW worked at home but not in a change of location, content restrictions could be a possibility.

If you attempt to sign in and the following pops up; "this account has been merged with a battlenet account. Please log in with your battlenet sign in." If you see this message informing you your account has been merged, then immediately check your email for any messages from Blizzard Accounts.

I am not ashamed to tell you I saw that message three times within 40 days resulting in frustration, anger and downright disgust. Of the 40 days, I missed a total of 12 days play time because of the resulting delays in processing my hacked account. Hopefully the following will have you up and running within 24 hours during weekdays. Longer for weekends. Did I say I learnt the hard way...

The email will provide you with links to firstly blizzard accounts to have your account suspended, then secondly to direct you to blizzard support to report the hacking attempt. These two reports are critical. The report to accounts is to minimise damage to your account by the hacker selling off all your wow possessions and raiding the guild. The second reports the matter to the IT specialists so hopefully they can gather enough evidence to shut the hackers down.

Hacking is much more prevelant during the northern summer. Many more minors are on line and vunerable to cons. It is imperative that you are aware that the only site that requires your account and password is the Blizzard and / or WoW site. If you have another site masquarading as a Blizzard site they will also ask for the sign on information and possibly more. The list of authorised sites and emails is supplied in the links. Anything other than these are not Blizzard Official sites.

Common methods hackers use to gain access to your account are as follows, but please be aware, this is by no means a comprehensive list.

1. Signing onto websites claiming offers of new mounts, pets, armour and secret information. These are usually scrolled through in the general chat or trade channels.
2. Gold sellers usually whisper individuals after checking who is in each realm. Also be aware that this act alone contravenes the conditions of use. Report the whisper immediately using the GM option in game. Report the realm time, date, your account name and their character name and your location. Many of these whispers are generated from stolen accounts.
3. The hacker gains access to your email address. Your computer talks to many other computers all the time it is on line. Data going back and forth is tracable unless secured. Many people use the same address for all their personal dealings including registering their games, software and marketing invitations. Fairly benign? No. Rule 1 of any internet use. Never ever use your general email for your firewall and virus software registration. Hackers know when you are online. They then send your computer an offensive cookie which most firewalls and virus software will reject. The hacker gets a report back telling them what type of firewall if any is on your computer. They then file a "lost password" against the email address. They then turn off your firewall, lodge a small keylogger or something similar that latches onto your WoW details and reports your account details to the hacker. They then close your firewall again, hack your account and within seconds you will have a virus message on your screen.
4. The hacker has hacked your account before and found it an easy target. This applies generally to the WoW accounts, not the Battlenet accounts that have extra security in place.
5. Some else plays your account and inadvertantly gives away your details...
6. You bought a "secondhand" account. There is a huge trade in stolen and gutted accounts. They have all the real account details, give you enough to sign on with, then steal the account back again.

Now its time to read the emails sent back by Blizzard accounts and support. They make suggestions including:

• changing your password
• doing a virus scan on your computer
• securing your details
• report the hack to your guild - during the second hack, I created a trial account, and eventually was able to inform a fellow guild member. I also emailed a guild member.
• I ordered an authenticator (see links)

I was hacked again within 10 days. So... I employed Norton to scan my computer. They came up with a reasonably complex cookie that targeted my firewall. They thought the firewall may have been turned off. Thankfully there was no breach. The next step was to create a battlenet account only to find I couldnt merge Accounts on servers not located in North America, Europe or Korea. I also wanted to change my account name but that is not possible through account management.

6 days after getting the account released, I was hacked again. I did the following.

• report to accounts and support
• turned the computer off and walked away for a number of hours. I was livid. If I had typed anything but the bare minimum at this point, it would not have been polite.
• virus checked the computer through our specialists at work.
• I had a guild members email - emailed them to report the hacking.
• Rang Blizzard Support direct. They work Pacific Daylight time and only on weekdays. My dealings with them are all very positive and its well worth talking to them.
• My authenticator had not arrived yet...

So having told you what, most people ask why?

• to sell virtual resorces for real world money. There are plenty of people who buy virtual gold to accelerate their progress through the game levels.
• the sale of high level toons can generate US$200-$1000 each. Lower level toons are stripped for gold value and the gold sold on the real money market, usually using whispers
• the theft of accounts to sell for real world money

How to avoid account theft

• Have a reputable antivirus and firewall package. Run a second firewall made by another manufacturer.
• Dont fall for on screen or whispered offers. If in doubt message the Game Master. They are there 24/7
• Buy an authenticator. It is very cheap account insurance
• Merge your account with a Battlenet account, but do it over the phone as the Blizzard support person will put your account in the most appropriate server group
• Dont let anyone play your account
• If you have kids who play, let them know that some people are not nice, and "ignore" anyone approaching them that they dont know.
• If in doubt about anything... ask! Most guildies know or know of people who can help with queries. There is no such thing as a dumb question, but there are smart hackers.

Lastly a positive for everyone...

Thankyou to all on Saurfang who parcipated in reporting gold sales and pet offers whispers. Due to those actions and reports, the incidence of gold offers has dropped from dozens per 24 hour period to vertually none. Blizzard Support says thankyou!