'hacked account' more like hacked battle net

by Akker | 07/05/2010 17:19:52

Akker

The account was last accessed once on April 24. It was accessed on a virtual system that had never been used before and thus could not have a virus on it.

I checked the email account and server that was associated with the account and found no unauthorized access to the server. Let alone the email account. I verified that no relays have occured.

Since the account was added to battle.net on April 24 it was only accessed once prior to the 'hack'. I performed a complete check off all access entries and relay requests on the small email server that is used to house this account.

Bottom line is that there is zero way that the aco***@ could have been compromized as a result of any action taken by me (the user). The only remaining possibility is that battle.net has been compromized.

I can provide detailed logs showing access to and from the email server and show a build history log for the workstation used to access the account. I also can account for every email from battle.net for password changes/resets.

I tried to call customer service this morning starting 1 hour before they opened and hooked up a redialer program to be the 1st one in queue. Sadly customer service didn't arrive at work on time today. So I am writing this post instead.

Another fun fact is that they accessed an inactive account. It was only accessed on the 24th of April, 2010 with the 7 day promo. Account activity shows that they purchased a game card from the online store and used that to activate the account.

So much failure!

[ Post edited by Akker ]

by Malkorix | 07/05/2010 22:37:17

Malkorix

I'd like to help get you on the right track Akker, but first I need to correct your mistaken impression that Battle.net has a security issue:

Up to the moment of my posting, neither Battle.net nor Blizzard Entertainment at large have had a security breach. That doesn't mean your system does either - but it remains possible that you were the victim of social engineering, accidentally logged into a phishing site or that someone else with access to your login information was not so cautious as yourself. Moreover, would you consider the acquisition of a Blizzard Authenticator? The device is sold at cost and the Mobile Authenticator is either free of charge or very inexpensive. It is the only security step I can think of that provides an effective layer of security against social engineering.

I will not elaborate on the security systems we have in place for what I hope are obvious reasons, but if you want to address this issue properly, I hope that you'll trust me and take the steps you need to take to ensure that your account remains secure in the future.

It is unlikely, but I may be able to shed further light on the situation if you provide me with the name and realm of a character on the affected account.

[ Post edited by Malkorix ]


“No snowflake in an avalanche ever feels responsible.”

- Voltaire

Blizzard Announcement Recent Blizzard Announcements

 



Loaded in 0.02075 seconds