This site makes extensive use of JavaScript.
Please enable JavaScript in your browser.
Live
PTR
10.2.7
PTR
10.2.6
Beta
Security
Post Reply
Return to board index
Post by
Ranadicus
You guys need to check out your site security.
I've been running in WoW since the open beta and have never been hacked until today. I run Avast Antivirus locally and Avast says I have no virus' on my computer so I ran a web scan over at Trend Micro for a second opinion to be sure and it agrees, no virus (I couldn't find a way to export it so here's a screen of my
Avast log
). My WoW password, which has since been changed, was VengeRTHE!1 so I'd say it's unlikely to have been found by random. Unfortunately I made the mistake of using the same password for the Wowhead account I created
just two days ago
. I can only assume that somebody used my Wowhead info to hack my WoW account since that's the only way anybody could have gotten that password.
Seriously check your security.
P.S. I don't run the Wowhead client so that wasn't it.
P.P.S. I went ahead and ran a seperate Malware scan just to be thorough. Here's the
log
from Malewarebytes.
Post by
335609
This post was from a user who has deleted their account.
Post by
Koper
I can only assume that somebody used my Wowhead info to hack my WoW account since that's the only way anybody could have gotten that password.
We never save your password; we save a hash of it. A hash is a one way function; this means that we use it to verify if the password you give us is correct, but we cannot know what your password actually is (since it's never stored).
Additionally, since you are sending us the password (that again we do not store) through https this pretty much eliminates every possibility of someone intercepting the communication.
There are only two likely possibilities left: your computer is infected by a trojan or similar, or someone brute forced your password. The latter is not as unlikely as you think. Remember that wow passwords are
NOT
case sensitive, and vengerthe!1 is not such a difficult password to guess.
Post Reply
You are not logged in. Please
log in
to post a reply or
register
if you don't already have an account.