In the past week, we’ve had two accounts in our guild get hacked, four in the last month. A lot of stuff that you would expect, happened. But there’s a new twist.
After they sell all your stuff off (including what you can get from the guild bank), and send your moniez off to some account no doubt in, shalwesay a galaxy far, far, away …. they keep you around to bot-farm. They don’t even gquit, at times.
And here’s the creepy part. If you don’t have an authenticator – they get one for you, effectively locking you out of your own account.
We had one guy return from the dead – hadn’t been playing in months, and suddenly he was off farming in Storm Peaks. The GM called the guy up in Facebook chat and confirmed that he was still not playing.
His account had been reactivated and an authenticator bought so he couldn’t just call in to fix it. Yes, the gold sellers are now paying to reactivate old accounts. They are using stolen credit cards to do so.
A few points I would like to present, in no particular order.
- Inactive accounts should have all access removed by the GM.
- If you see an inactive account go active, but the person won’t respond to gchat or /tell, be suspicious. If you have the means, contact that person in an alternate venue to find out what is going on with them.
- If you have a phone with data service, chances are high that you have free access to an authenticator. Use it! Don’t make people call you a newb!
- If you don’t have access to a data phone, or just don’t like tying your WoW account to something you might lose, hork up 7 bucks for the authenticator itself. If you “can’t afford it”, take a month off from WoW to fund it. But dooo eeeet!
- If you buy gold, you are funding these people, and are therefore part of the problem.
The most recent hacked account was active, and the owner caught them in the act. Even as he was talking to Mrs. Grimmtooth in guild chat, he received in the mail a Core Hound Pup. He was lucky, he changed the PW before they got that attached. But it was a close thing.