Forum Settings
       
Reply To Thread

Just a warningFollow

#1 Dec 17 2009 at 10:35 PM Rating: Good
Scholar
38 posts
I have apparently had my account hacked some time in the past day or so. I haven't been able to play due to working crappy holiday hours at a retail camera store. So today my day off I get to play a little WoW! Actually, no I'm not because I received this message in my email today.

Quote:
Account Action: 3 hour suspension and password reset
Reason for Action: In-Game Chat Policy Violation - Advertisement and Spamming

This suspension happened because a character on the account above repeatedly abused World of Warcraft's in-game chat system. This abuse includes advertising third party services/websites and repeatedly spamming in-game chat channels.

To prevent further harm to the game and the account you use, the account has been suspended for 3 hours and the password was reset. You do not need to reply to this email, as the account will automatically become available again once the 3-hour suspension period has ended. It may take up to one hour for our system to generate and send the new password. If you have not received a password within one hour of this message's delivery, please check your Spam, Junk, or Suspect Mail folders. If you are still unable to locate the email containing your new password, please contact us using this form: http://us.blizzard.com/support/webform-us.xml.

Account compromises most often occur when a player shares login information with an unauthorized third party or plays on a computer that has a virus, Trojan, or key-logger. We recommend you read and apply the following tips to protect yourself and the account.


And I know it is nothing I personally did because I don't even keep public chat up, all I use is guild or whispers to communicate with my friends and fellow players. For 5 years of play time I've never even got so much of a warning for blizzard for in game behavior :(.

I've become so habitual in my web usage that I've been going to the same sites for past couple of years. I'm meticulous in my use of computer security and I never click on links unless it has been confirmed safe from a reliable forum member of the 2 message boards I frequent. Yet, somehow my log in information was gathered and my account exploited :( and no wow on my day off! I'm just glad Blizzard suspended my account and reset the password(still waiting for it to come).

So aside from wanting to do a mild rant I just want to make this warning.

That the vicious gold spammers are relentless and it can happen to you!

Would you like to know more?
#2 Dec 19 2009 at 3:58 AM Rating: Default
8 posts
I seem to have had the same thing happen. I haven't been to any sites that I don't normally visit and the last site visited was Blizzards own. All of the sites I frequent are legit businesses that I've been dealing with for two years or more without problem. Unlike you I'm ticked off. I've now had my account suspended twice within 12 hours and the last time I was on I sent one message on the guild channel. I've now been forced to change my password twice in one day without any sign of why other than the same note you got. It would be nice if they'd include a section of the log showing the spam so you could verify the offence.
#3 Dec 19 2009 at 4:05 AM Rating: Excellent
Citizen's Arrest!
Avatar
******
29,465 posts
bigbearaaa wrote:
I seem to have had the same thing happen. I haven't been to any sites that I don't normally visit and the last site visited was Blizzards own. All of the sites I frequent are legit businesses that I've been dealing with for two years or more without problem. Unlike you I'm ticked off. I've now had my account suspended twice within 12 hours and the last time I was on I sent one message on the guild channel. I've now been forced to change my password twice in one day without any sign of why other than the same note you got. It would be nice if they'd include a section of the log showing the spam so you could verify the offence.


Wait, is this the same letter that you got? If so, they didn't "impune your character". They just said "Hey, we think you mighta been hacked. You should do something about it."


Quote:
I've become so habitual in my web usage that I've been going to the same sites for past couple of years. I'm meticulous in my use of computer security and I never click on links unless it has been confirmed safe from a reliable forum member of the 2 message boards I frequent. Yet, somehow my log in information was gathered and my account exploited


Advertising servers can and do get hacked on occasion and even "safe" sites can become dangerous. Have you located the keylogger and dealt with it?
#4 Dec 19 2009 at 6:14 AM Rating: Excellent
***
1,069 posts
The One and Only Poldaran wrote:
bigbearaaa wrote:
I seem to have had the same thing happen. I haven't been to any sites that I don't normally visit and the last site visited was Blizzards own. All of the sites I frequent are legit businesses that I've been dealing with for two years or more without problem. Unlike you I'm ticked off. I've now had my account suspended twice within 12 hours and the last time I was on I sent one message on the guild channel. I've now been forced to change my password twice in one day without any sign of why other than the same note you got. It would be nice if they'd include a section of the log showing the spam so you could verify the offence.


Wait, is this the same letter that you got? If so, they didn't "impune your character". They just said "Hey, we think you mighta been hacked. You should do something about it."


Quote:
I've become so habitual in my web usage that I've been going to the same sites for past couple of years. I'm meticulous in my use of computer security and I never click on links unless it has been confirmed safe from a reliable forum member of the 2 message boards I frequent. Yet, somehow my log in information was gathered and my account exploited


Advertising servers can and do get hacked on occasion and even "safe" sites can become dangerous. Have you located the keylogger and dealt with it?


This is why getting the authenticator is a good thing too. I knew about the Ad hacks from my FF11 days. Even though you may run Firefox with the plugins you never can tell when some script kiddie could find some way to get through the awesomeness that is Firefox.

Some people may see the authenticator as a scam or useless, I see it as a deadbolt. Sure a normal lock on a door works just fine, but wouldn't you feel that much safer by having that deadbolt put in?
____________________________
"Hey, mastering magic is a process of trial and error."
"Yeah, but that's back at the academy where most of your errors don't result in your friends turning into a pile of ash!"
"Actually...you'd be surprised."

-Chronicle of the Annoying Quest

Aileesa lvl 85 Fire Mage
Server: Misha
#5bigbearaaa, Posted: Dec 19 2009 at 1:09 PM, Rating: Sub-Default, (Expand Post) the note specifically says that I was spamming. Since I have, over 10 years of online gaming, prided myself for going above and beyond conduct wise accusing me of spamming IS impuning my character. It didn't happen and never will.
#6 Dec 19 2009 at 3:58 PM Rating: Decent
Scholar
***
3,157 posts
OK, grandpa, it seems that you have trouble understanding the issue, considering your responses in this and the other server.
It is not the site that has the malicious software on it. Reuters.com and blizzard.com aren't going to put a malicious program on their front page intentionally. They do, however, pay advertising sites for those little banner ads you see (I am just, at this point, going to assume that you two 'safe' people that have been hacked run Internet Explorer, or Mozilla with no security add-ons).
A malicious piece of software can be installed in a fly-by scenario, in which the software uses Flash and Java hooks to install as soon as the banner is 'viewed' by a computer. See, the computer has to load the information out of the banner to display it. All it needs to do is put a redirect sequence on, directing the computer to silently download, or even visit, any website it wants you to (the image for the 'banner' is stored on a computer SOMEWHERE, and your computer has to connect to that computer to get the image data).

THIS is how you 'safe' people get 'hacked.' It isn't a scheme, it isn't a plot. It's just you not being as safe as you think you are with your computers.

Following this up with one of those 'awesome' anti-virus suites like AVG (R.I.P good AVG), Norton, or McAaffe (I can list more you shouldn't use but the list would be too big), will solve nothing. Those things are designed to detect a minor disturbance once every few months, and then charge you again for a license update. No bueno.
____________________________
Cicorest, Mage||Das Führer, DK||Nalgas, Rogue
^Cenarian Circle^
1983 Mazda RX7 GSL - Rexie - My Garage

"Saying that a druid can go resto and do well in arena and saying that a hunter can't do the same doesn't make any sense whatsoever." - Wait
#7 Dec 19 2009 at 5:13 PM Rating: Excellent
****
9,473 posts
jaysgsl wrote:
Following this up with one of those 'awesome' anti-virus suites like AVG (R.I.P good AVG), Norton, or McAaffe (I can list more you shouldn't use but the list would be too big), will solve nothing. Those things are designed to detect a minor disturbance once every few months, and then charge you again for a license update. No bueno.

I'm going to take a bit of exception to this comment. I've been using McAfee software for a long time (back in the days of yore, it was shareware). I negotiated one of the first corporate licenses with John McAfee. My daughter worked for both Norton and McAfee, so I also have a lot of experience with the inner workings of both companies, but mainly McAfee. McAfee generally is able to update its DAT files within a few days of discovery of a new virus or variant. When you install the program, you can select automatic updating of the virus files. McAfee has saved me from trojans (and removed them) several times. It has also provided warnings (and stopped) malware from websites, and not just "minor disturbances".

As far as I know, Norton also updates its AV files regularly. I don't uses Norton not because it can't catch the bad stuff. I don't use it because it's clunky, intrusive, and causes significant interference with other programs.

Edited, Dec 19th 2009 3:21pm by ohmikeghod
____________________________
--- Mike ---
Old age and treachery will always overcome youth and enthusiasm!
Aside from the deep and complex parts, WoW is not deep and complex. Jordster
There are only 2 types of goldsellers in these parts. Dead ones, and dead ones that don't know it yet... Dread Lörd Kaolian
Stop hanging out with morons. That's probably impossible though because there are tons of morons out there. Mentalfrog

[wowsig]2577575[/wowsig]
#8 Dec 19 2009 at 7:15 PM Rating: Decent
Guru
*
104 posts
Quote:
I'm going to take a bit of exception to this comment. I've been using McAfee software for a long time (back in the days of yore, it was shareware).

I'm going to have to disagree. My 1st computer used McAfee and it missed a virus that resulted in us having to reformat the hard drive (course that was a decade ago). In addition my high school used McAfee on its computer system, turns out it had missed over 50 different viruses(that was 7 years ago). While I don't know if it has improved since then, I'd not risk it.

Norton I stopped using for 2 reasons, it started becoming a major resource hog and there was a bug where it didn't like Blackwing Lair. I've not used it since so I couldn't tell you how it is nowadays.
#9 Dec 19 2009 at 8:26 PM Rating: Good
Avatar
***
3,677 posts
Therenody wrote:

This is why getting the authenticator is a good thing too. I knew about the Ad hacks from my FF11 days. Even though you may run Firefox with the plugins you never can tell when some script kiddie could find some way to get through the awesomeness that is Firefox.

Some people may see the authenticator as a scam or useless, I see it as a deadbolt. Sure a normal lock on a door works just fine, but wouldn't you feel that much safer by having that deadbolt put in?


Amen to this. If it's good enough for the US Government it's good enough for me. Granted the government ones require a passcode to USE the crypto-card, but it's the same idea and even the same company.
____________________________
Beohrn -- 85 druid
Brandmanen -- 85 Hunter

"Skill is a measure of how fast a player can turn experience into competence." -- Anedris, EJ forums
"The warrior acts, the fool reacts"

Please pardon the ego, it keeps getting stuck in doorways. I'm working on it.
#10 Dec 20 2009 at 6:04 AM Rating: Good
Scholar
***
3,157 posts
If you look at a database update on Norton, it's usually around a 100-300MB file with less than 50 updates. A similar update in McAffee contains less than 100. A similar (these were all downloaded the same week) update on Avast contained an, in comparison, staggering 402 definitions added or updated.

As someone who used to sell homebuilt computers, I used to do a test (this was around a year ago). I'd get four rigs, one with Kaspersky, one with Norton 360, one with McAffee, and one with Avast. I had a file I had downloaded previously from dubious sources that had a rather well known and old piece of nastyware. I opened the executable on all 4 machines, and only two picked up the (Extremely old, I must stress) virus. They were not the ones with the commercial software.

McAffee may have indeed started out as a great company, but so did AVG. When I do a checkup on a friend or customer's computer, McAffee fails to pick up around 30% of the crap on hard drives, whereas Norton's 'success' rate is closer to 60% malware missed. This is NOT acceptable.

Of course, to be fair, AVG missed around 30%, the same as McAffee, and Avast misses around 5% of the malware that Lavasoft, AVG, or Spybot pick up. All of those free programs have around the same failure to detect rate, but they seem very good at picking up what the others missed.
In all of my tests in recent times, McAffee did pick up a total of 3 'potential malicious software' hits which my free programs did NOT, though 2 were false alarms. The one it caught, though, was a Trojan, for what it's worth.

In short, I believe the free programs have better detection rates because they have extremely competent Heurustic (sp) coding, which is what allows an Anti-ware program to detect virii that aren't in it's definition base. McAffee, Norton, and Kaspersky would lose too much money putting a good hereustics code in, as less people would see the need to renew their license every year.
____________________________
Cicorest, Mage||Das Führer, DK||Nalgas, Rogue
^Cenarian Circle^
1983 Mazda RX7 GSL - Rexie - My Garage

"Saying that a druid can go resto and do well in arena and saying that a hunter can't do the same doesn't make any sense whatsoever." - Wait
#11 Dec 20 2009 at 6:14 AM Rating: Good
****
7,720 posts
A common sense helpful tip, after checking your PC and fixing the issue.

Change your email password first. Then change your everything else.

All most all passwords route through email. If they keylogged WoW crap, they have your email name and password as well.

If you nuke the keylogger and don't reset email; then don't they still have access to your email?
____________________________
Hellbanned

idiggory wrote:
Drinking at home. But I could probably stand to get laid.
#12 Dec 20 2009 at 10:55 AM Rating: Decent
Scholar
38 posts
*edit* Sorry Jay, thought you had directed that towards me.

Horse:Thanks for the suggestion but that has already been done :)

Edited, Dec 20th 2009 11:15am by rehevark
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 0 All times are in CDT