Comments on: Hacked: How could this happen to me?

By: DarkKnight

DarkKnight — Wed, 07 Oct 2009 11:18:26 +0000

Same here, same here.
I also was stupid enough to use a password which I used on (too many) websites as well.
I learned my lesson as my current WoW/Battle.net password is a total random one, which I use no where else.

Ah well, luckily Blizzard is quite good with returning items after a compromised account nowadays. And good to read you got it all back (or at least as good as).

By: pagb666

pagb666 — Tue, 06 Oct 2009 20:47:18 +0000

Noscript+Adblock work like a charm. Anyway, checking the "Remember account name" prevents you from writing your acc name and obviously from getting it keylogged.

It's a shame that in a time where sites are moving from email address as login name (ie. Facebook), Blizz does the opposite with Bnet.

By: William

William — Tue, 06 Oct 2009 14:46:44 +0000

I was in the same boat when I got hacked. I'm usually the computer person, I keep my computer completely clean of any spyware, trojans, etc. To this date, I still don't know if it was a keylogger, an infected website, or whatever else that got my PW. I never found anything suspicious on my computer even after I got hacked, and I've never logged in from anywhere else or shared my acct info. I got an authenticator right after the incident, so I'm pretty sure it'll never happen again, but the whole thing still gives me chills sometimes.

By: Tonus

Tonus — Tue, 06 Oct 2009 13:17:52 +0000

These days I use Firefox with two add-ons: noscript and adblocker. Noscript is particularly useful for two reasons- it blocks scripts until you allow them, and it shows you how many different sites you are connecting to when you visit a particular URL. I understand that some malware will install via infected ads that are pushed to sites, and being able to block scripts from third sites helps to avoid that risk.

Adblock can deny access to entire ad frames, not just the images or animations within them, also cutting down the risk of infection from those sources. I don't like blocking all advertising from sites (some of them rely on that revenue to keep running) but there's just too much risk in allowing them to run scripts, especially since those scripts can run in the background without my knowledge.