Re: My account was hacked, I would like to share my story to warn others.

On Apr 16, 9:27 am, "NBChick" <n...@xxxxxxx> wrote:
"Fullauto" <Bama...@xxxxxxxxx> wrote in message

news:1176733464.159947.130740@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx





On Apr 16, 9:22 am, "NBChick" <n...@xxxxxxx> wrote:
"Fullauto" <Bama...@xxxxxxxxx> wrote in message

news:1176732606.999242.270390@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

On Apr 16, 8:39 am, "NBChick" <n...@xxxxxxx> wrote:
"Fullauto" <Bama...@xxxxxxxxx> wrote in message

news:1176729599.940738.22660@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

On Apr 16, 7:53 am, "Fullauto" <Bama...@xxxxxxxxx> wrote:
On Apr 14, 10:55 pm, "NBChick" <n...@xxxxxxx> wrote:

I will paste what I wrote on the Blizzard forums. Please read
very
carefully
before suggesting Windows updates, ect.

A week or so ago, guildportal.com got attacked and a trojan was
embedded in
the welcome messages of some guild's websites. This affected
Internet
Explorer users. Now I keep seeing people saying this only
affected
people
who haven't updated their Internet Explorer in 6 months and
didn't
have
an
antivirus program running... well they're wrong.
I have a firewall running on my router, I have Sygate Personal
firewall
running on this computer, I have AVG Pro, up to date running, and
I
ALWAYS
make sure my Windows updates are current. None of this stopped my
computer
from becoming infected by the trojan on guildportal.com. I knew a
trojan had
been downloaded, so I immediately stopped using IE with
guildportal
and
switched to Firefox - alas, it was too late. My virus scanner
picked
up
something and deleted it, and my memory is fuzzy but apparently,
it
wasn't
enough. I also had deleted my Temporary Internet Files when that
trojan
was
downloaded. Again, it wasn't enough.

Yestarday, I went out for groceries and when I came home and
tried
to
logon
to my account, I couldn't. So I tried to login on the WoW
community
website,
again, no luck. So my wife logged in on her account and checked
through
the
guild list when my character was last online. It had said 1 hour
ago.
We
weren't even home at that time, so no way was it me. I called
Blizzard,
they
restored my information and reset my password, and I think I
managed
to
kick
the guy back off my account before he could do any damage. All of
my
gear,
bank items, gold, everything was still in tact. One of my
trinkets
from
the
bank had been moved to my bags, so he was starting to clean me
out I
think.
But all ended well.

He changed my email address to wannabewarl...@xxxxxxxxx Cute huh?
Considering I'm a mage. And the country changed to Chile.
Anyways,
yestarday
ended in a day of calling banks, credit card comapnies, mass
scanning
both
computers with everything I could get my hands on, and
ultimately,
it
was
XoftSpy that found the Keylogger registery entries and file and
deleted
them. I will not use Internet Explorer again, I won't even begin
to
say
what
I think of Microsoft at this point. As I said, my windows updates
WERE
up to
date, I use AVG and that WAS up to date and scans every night.
And I
have
TWO firewalls. None of this stopped it.

I don't know how far these guys actually take this, if they would
go
to
the
extent or using my credit card elsewhere and so on, but they had
ALL
of
my
financial account numbers, passwords and so on. I had to cancel
my
credit
cards, changed bank passwords, everything. This just left me in a
state
of
anxiety. I also no longer feel safe even logging into WoW. And I
was
one of
the lucky ones...

Oh I also want to mention, he also had my email password! He was
able
to
login into my email to confirm the email and phone number change
through the
link in the email sent to my account. I checked my email account,
he
had
moved it to the trash bin, thinking I wouldn't see it, it seemed.
So
something for everybody to think about that got hacked. How safe
is
the
rest
of your passwords and information now? If he had my email
username
and
password, and my WoW username and password, then he had
everything
else
I
typed into the browser since my PC got infected....

You are so far from the real way your account was hacked, it isn't
even funny.......I will tell you it has absolutely NOTHING to do
with
any software (trojans) you may think are on your computer.- Hide
quoted
text -

- Show quoted text -

Sorry, I missed the part where you confirmed it was a keylogger.
Are
you 100% SURE it was a keylogger? The reason I ask, is because I
recently became aware of a sickeningly easy way to hack accounts
without ANY software...........you mentioned one big key that hinted
towards the technique.

Also, never EVER EVER EVER EVER trust ANY of those programs that
gather wow data, and upload it to website's. I don't care how cool
it
is, don't do it. You time invested in the account isn't worth it.
It
is a PERFECT platform to use for a covert keylogger file. I mean,
you
even willingly install it.......

I hinted at it? Help me out here, I just woke up :) Yea, I'm sure it
was
a
keylogger. The guildportal.com attack is publicly known now. I won't
link
it
but if you go to their site, under news, they released a public
announcement
all about it. I mean, I guess I could have got it somewhere else but
that
was the most likely place. Aspecially where I don't really go to other
sites
I don't trust. However, I don't upload any of my WoW files to their
site.

What's the other way to hack accounts?- Hide quoted text -

- Show quoted text -

I won't give details, because so many people can publically view this,
but I will tell you the 100% sure fire way to prevent it. Do NOT,
under ANY circumstances give your email address to any other WoW
players, or you IM name if it is associated with your email. It is
part social engineering, but once they get a contact email.......it's
over.

Ooooooh. Gotcha :) Thanks! (Thankfully, I changed the email accounts tied
to
our WoW accounts too)- Hide quoted text -

- Show quoted text -

Yep, it could be as innocent as a new guildee asking for a private
email to contact you out of game for help, or someone asking for your
IM to chat offline...........

If it's the way I'm thinking of, then no, that wasn't how they hacked my
account. But if I'm thinking of the right thing, you're right, that is easy.
A bit of guess work, but easy. Argh I want a Mac!- Hide quoted text -

- Show quoted text -

Actually, there is no guess work :) Sadly, there is a PUBLIC listing
of the answers to a few of the secret questions on the internet for
nearly everyone.................I'll stop there as I have probably
already given TMI :)

.

Relevant Pages