nah impossible. cant think of any logic

http://www.eurogamer.net/articles/2012-05-...nd-items-stolen

I don't want to sound like a fanboi but on a balance of probabilities, it is far more likely that the account was compromised from the end user's side. However, I am somewhat curious about the state of Blizzard security now.

i think if people can hack the password on battlenet or sc2 account.
it's the same password for diablo.

breach the easiest side then to the game

ive been browsing thru the blizzard forums as well, and apparently ppl are getting hack with or without the authenticator .. what i find more disturbing is that blizzard reply was that they will roll back,.first time u will be marked until u get an authenticator.. then if it happens again u will be banned from RMAH.. kinda unfair to shift the blame to us for their failure dont u think so

https://us.battle.net/d3/en/forum/topic/5149539239#4

"an exploit was discovered by duplicating a session ID
basically, if you join a public game with people, they can view your session ID and spoof it to login as you without need for a password or email or anyting
if you play with people, try not to play in public games bro, only with people you know"

This post has been edited by dishwasher: May 22 2012, 10:29 AM

Happened to me when I was playing WOW last time. For my case, it is a key capture or something. The hacker knows what I have entered via my keyboard in the hacked PC.

Try to put your password in a text file, and copy and paste every time instead of typing the real password.

keylogger will also recognize copy paste text I suppose

earlier on thats 1 suggestion which is practical I think

say the password is ahkao999

try key in kao9 1st
then move around the cursor and key in the rest, keylogger can read, but not the correct password

wew i kena yesterday. then straight away change pass.

that's because your pc had been compromised without your notice, and this time the method is totally different, where the haxxor hijack your session in pubby games and bypass the need of logins or authenticator.

well what worries me is that this is not the first time it happen to me, ive had my WOW hacked before last time. it was inactive for nearly a year already then one day my fren just called me up and ask if i was playing again (luckily). i quickly check my bnet account to found that password has been changed. funny thing is that, how could they even change the password and blizzard dint even send me an email on the password change. odd.

Anyone playing on Mac got hacked?

don't worry ts, normally blizzard will refund everything in game. i got hacked once in wow, the hacker actually xfer all my gold and eq to 2 of my characters then he actually use a credit card and xfer my 2 of my characters over to another server. i got notify in email by blizz that i jus xfer my characters which i did not. so i send in an email stating i suspect a hack then they lock down my account, i send my ic in for recovery and within 2-3days all my stuff in game was return to me. Blizzard customer service very wannnn, no problem

I will take back my words stated that it is a rumors.

My character is compromised as well... my level 49 barbarian. all the golds and items were gone. It was alright yesterday night before i went to sleep. Today morning all gone. I played a public game yesterday morning. As most suspected, public game maybe the cause.

It seems like the technique used to gain access to your character doesn't involve login at all. Many suspected that, the hackers can clone the session they played with you and through that gaining full access to your character.

seriously? lucky i choose to play solo yesterday...
sorry for ur lost.

Why not just activate Blizzard Authenticator for your account? Since everyone's hand is with smartphone right now.

not everyone has smartphones

I really feel for you man. I am starting to think its more than just end user compromise. If its a session hijack, then this is really serious. Who want to play with me while I packet sniff? I'm curious.

dint u read what i said.. ppl with authenticator are being hacked as well!!!
NOBODY IS SAFE!!!!!!!!!!!!!!! but i wonder how come it only started 1-2 days ago
i have a feeling blizzard has prolong the time for client n server to interact due to error 3007
given the chance for hacker to jump in and assume their identify with and ip spoof
well then again i might be wrong..im just an accounting student lol

Thanks for the heads up. Have since warned my friends.