What's new
By:
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal

Account hacked - Next steps

m0rf0

m0rf0

Member
Joined
Sep 14, 2010
Messages
305
Reaction score
1
Hello guys,

Woke up this morning and went to see if there was any changes in my toon (I've left HB running all night) and it was stuck at some place in Ironforge. I didn't worry, as it happened before. Then I've changed to my bank toon and noticed he had no gold at all... Logged off instantly and... ?Surprise! My three lvl.80 where totally naked, except for badge/PvP gear (cannot be sold/disenchanted).

My first reaction was kind of "oh, shit... move on", but then I've opened a ticket and currently I'm waiting to get a response (it's been escalated a few minutes ago). The main concern I've got is about the fact I've been botting almost 18-19h since tuesday. I'd like to see the face of the GM when he sees that ^_^'

So, any advice? Should I retire the ticket and simply move on? Or should simply play dumb in a "oh, I'm unemployed ATM and play a lot" + "don't know what happened, help me Obi Wan Kenobi your my only hope" style?

Some info about my setup:

HB 1.9.6.0
Profile: Dwarf-Gnome 1-60 Quest Order
CC: The One (Actaeon - Hunter)
Plugins:
Autoequip
BuddyProwl
DHX eBuy
DHX protected items
AutoAngler
eRefreshment
eSafe
mountdetect
PVPtargetingoverride
Rgather
(Installed RelogMe HB2 Relogger, ran it but I never logged into WoW with it)
 
I dont see how it was hacked, if someone else logged in you would of been disconnected?

Either way GL! :)
 
The GM isn't going to care about how long you play for, he probably won't even check and I don't even think regular GM's have the authority to ban.
 
When I was hacked I was actually botting the night before. I doubt they even check and if they do they might be under the pretense it was the hacker somehow. I still don't understand how they were able to steal your gold though if you were not disconected?
 
if you have the authenticator its no chance to hack your account and steal chars gold or anything
 
I've managed to get an authenticator in my iPhone a few minutes ago.

Also, I suppose the login was not when I was botting. I'm revising the logs in search for a clue and I've found some strange things. All my log files are named "18-9-2010.txt", but there's a 2010-09-18.txt one (different HH/MM/YYYY setup), and starts with:

C:\Users\Administrator\Documents\My Received Files\Honorbuddy 1.9.6.0\Honorbuddy.exe

And also:

[00:49:23:225] Character is a level 1 Mage
[00:49:23:227] Current zone is: Tirisfal Glades

WTF?! I don't have any horde char! And my Honorbuddy client isn't at that adress... Anyways, I've just received a couple of emails from Blizzard stating that my password has been reset as a security step, and explaining the next steps I've got to do. Sounds good, no banhammer ATM.
 
m0rf0 said:
I've managed to get an authenticator in my iPhone a few minutes ago.

Also, I suppose the login was not when I was botting. I'm revising the logs in search for a clue and I've found some strange things. All my log files are named "18-9-2010.txt", but there's a 2010-09-18.txt one (different HH/MM/YYYY setup), and starts with:

C:\Users\Administrator\Documents\My Received Files\Honorbuddy 1.9.6.0\Honorbuddy.exe

And also:

[00:49:23:225] Character is a level 1 Mage
[00:49:23:227] Current zone is: Tirisfal Glades

WTF?! I don't have any horde char! And my Honorbuddy client isn't at that adress... Anyways, I've just received a couple of emails from Blizzard stating that my password has been reset as a security step, and explaining the next steps I've got to do. Sounds good, no banhammer ATM.
Click to expand...

That log file came from HB relase - check rar archive.
 
mat53 said:
That log file came from HB relase - check rar archive.
Click to expand...

Oh... Ehm... I suspected that, you know? Was only testing... ehm... if I got your... attention... or something... :confused:

I suppose they logged in the night from friday to saturday, when I was outside home. I arrived home a little bit late (or early, it depends how do you see it... something around 7am :cool:) and I don't remember if Wow was disconnected or not. Well... in fact, there are many things I don't remember about that night :D

I've entered the Armory and all my toons show they've been online on 18 september (no recent activity, but simply updated (with their new and austere outfit xD)
 
No, sure 99,9% I never write my wow info in any page that isn't the original battle.net. I've got avast up to date and firefox too.

I'll do a fresh reinstall this evening. With the authenticator & new password it should be ok. Of course, I've set the new password from my iMac, not the windows one.
 
Last edited:
I suspect something on reloggers, since my friends account got scammed when I used one on his account - didn't use on mine and it's still running without losing all my stuff.

Not saying for sure, but it's a possibility.
 
Well, I'd prefer not to blame anyone, but these are the only executables I've used this days:

Wow.exe
Honorbuddy.exe
Teamviewer.exe

...and the relogger.

Coincidence? ;-)
 
leo said:
if you have the authenticator its no chance to hack your account and steal chars gold or anything
Click to expand...

Your wrong. A authenticator does not mean your 100% safe that your account cant get hacked, there is still way's to get around that.
 
actually authenicators are very easy to hack if you research on it its why i dont bother with them and just be wary of what websites you go to sorry to say.
 
Solved!

Got all items back via ingame mail. Reinstalled brand new OS, firewall, antivirus and anti-spyware program. Changed password and gotten an authenticator. Of course, I'm aware that isn't hack-proof, but I suppose it will be more difficult to do so.

And, as I have no willpower...

...already installed HonorBuddy and started botting in a few minutes. :p

Thanks a lot for all the info and the advice!
 
I prefer the android one myself :)

Btw DO NOT USE i repeat DO NOT USE ANY authenticator that is not DIRECTLY FROM blizzard. Your only asking for trouble. I don't care if someone says "oh they are find i use them all the time", if you know anything about security.. then you know its not safe.. if you claim it is.. your as stupid as .. well you get my drift...
 
You must log in or register to reply here.
Back
Top