ePwnage

This Saturday was exciting. I woke up at 8:00am to get a good two hours of World of Warcraft in before the start of the day. I attempted to login and kept getting a password error. “Hmm” I thought. I went to my email and noticed the following.

12:55am PST

1) This is an automated notification regarding the recent change(s) made to your World of Warcraft account <account name here>.

Your password has recently been modified through the Account Management website.

1:53am PST
2) Your Paid Character Transfer for the character <character name here> on the ARCHIMONDE realm has finished processing and is now ready to be finalized. This is for your World of Warcraft account <account name here>.

3) The character transfers listed below have been completed as of 4/26/2008. The character[s] listed will now appear in the new location and/or account selected and are immediately available for play!

- <character name here> - Level 70 Night Elf Hunter - now on realm: Ravencrest.

When I did get control back of my account I noticed that the guild bank was looted, characters striped, and my main switched on another server. The interesting oddity I noticed was the character that was switched to another server was logged out in an instance. This leads me to believe that Blizzard can’t track transaction in instances? Why would an account stealer (refuse to call them Hackers) login to an instance?

The scary part of the account hack was the fact that I still have no idea how they got my account information. I did have UI manager at one point but I did several checks on my system for Keylogger and haven’t had it.

Good Times…