Authenticator fails, removed from account without user's permission

Reader Comments (Page 1 of 1)

7-24-2008 @ 6:28PM

baudkarma said...

Actually, this could have been a combination of failures. The account might have been compromised a couple of months ago with a keylogger. The hacker goes to account management, changes the contact info and secret question and stuff, but they don't harvest the account right away.

Then when it's time to take the keylogger off, the hacker knows everything but the CD key. Maybe they can talk the Bliz employee into letting them in, since they know everything else. Maybe they just spout off a random CD key and the employee doesn't bother to actually check it.

I've got another question, though. The person whose account was hacked is apparently female. Presumably they have a female name in their account info. So how does it work if the person on the other end of the line from tech support has a deep bass voice, but claims their name is "Laura" and they need help with their account?

7-24-2008 @ 11:54PM

slimj091 said...

there is no way for someone to change their account secret question. not even a blizzard phone rep will do it for you.. the same goes for the name of the person attached to the account. in fact i was told by a GM that was recovering my toons items after i caught a hacker in the process of vendoring my gear that the only way i could change it was to get another copy of WoW and TBC, and transfer my toons over to the new account.

the only thing that can be changed via the account management page is the password, email address (which needs to be confirmed through the previous email address before it takes), and subscription information.

Add your comments

Your comments:

Remember me

E-Mail me when someone replies to this comment

Please keep your comments relevant to this blog entry. Email addresses are never displayed, but they are required to confirm your comments.

When you enter your name and email address, you'll be sent a link to confirm your comment, and a password. To leave another comment, just use that password.

To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br /> tags.