Guild Wars 2

Saw the announcement that just went up, does that mean my issue will be addressed some time after the maint is completed?

Any idea what the turnaround time is on a ticket once it get to the billing support team? My ticket was in “waiting” yesterday and today it looks like they just updated the subject of it to reflect the type of issue it is… it is currently in “updated” but that is because I sent an email requesting an update…

Gaile, is there any way I could get a status update…

Vanadiel.6407:

My account was compromised, took about 24 hours to get access restored.
I did loose all my characters and “stuff”, so I am not all that motivated anymore to play since they have no ability to restore items or characters…

I wouldn’t let getting hacked stop you from playing. Maybe start a new character, get the story from a different perspective. Besides you have learned so much about the world already, shouldn’t take you any time at all to get back to your former glory…

I requested an update on this ticket this morning and have not received any new news… any updates on the ones you put together on that list yesterday?

@mcl
If you need instructions for how to open a new thread I would be more than happy to oblige

@mcl I can google just as you can, your ignorance is showing through your insecurity of your knowledge compared to a random forum person. I have nothing to prove, you seem to have a lot. I choose to use my powers for good, not trolling

Thanks for proving my point

Seems that you goal here is just to contradict by exploiting opinion and then clouding your opinionated argument with technical details…
I am here to help, you look like your looking for an argument. From the beginning your responses on this thread you have been extravagant to the point of narcissistic, can we please remember this thread was to further encourage the guild wars 2 community to use different and secure passwords for all their online accounts… or are you going to continue throwing your tech security manual around? I am not writing essays to combat your points not because I am not capable, but simply because it is not relevant to this topic. If you wish to continue this theme of discussion I would implore you to create another thread. Thank you

lozerette.2153:

mcl.9240:

If you were educated on the subject, you’d realize that worrying about packet sniffers in this context is foolish. Which has been my entire point all along, and you seem to have missed it repeatedly.

If you were paying attention, you would realize that he wasn’t saying “worry about packet sniffers,” only that it is a tool available to people today. If you re-read the initial post, you’ll see that he was agreeing with you.

Everyone, calm down. Take a deep breath. Walk outside for a bit. (Unless it’s eleventy-billion degrees, then just look out a window or something.)

I swear, you techno-geeks and your pride… (said the techno-geek.)

Back from my walk… how was your walk mcl?

My ticket was in waiting status and now is in “updated” but the only thing that has happened is the title has been corrected…
*waits patiently… I am sure the billing team is close to a resolution… although I wouldn’t complain if a well known mod got me an awesome update

mcl.9240:

Alexixiv.4582:

mcl.9240:

lozerette.2153:

Alexixiv.4582:

@mcl.9240: Dood, you…are not…my nemesis

My nemesis is Captain Hammer. (Couldn’t resist!)

Seriously though, I’m always going to disagree with anyone that says “Don’t worry about [method of getting your account data], no one does that/it’s too complicated/that never happens/etc.”

Assume nothing; secure everything. It’s better to be worried about things that probably won’t happen than to not worry and have your account compromised.

Best to stop using computers altogether then; nothing is actually secure.

Or, live in reality with the rest of us. Actual risk assessments take into account the likelihood of a given attack vector. In this particular case, the likelihood of someone using a packet sniffer (and the likelihood of the account information being contained in packet payloads unencrypted) is vanishingly small.

If you truly believe that there is a real possibility that there are packet sniffers at every hop between you and any particular destination, you must never shop online, or use online banking, or log into any websites…except that you had to log into this website just to post that response. So someone here is being hypocritical, and it’s not me.

lol you are blowing this way out of perspective. I never implied a frequency of packet sniffers being used, simply that it is still a possibility and that they are still used…
and no I do not believe that there are packet sniffers at every hop, just stating that they are out there and to say that it isnt a concern is ignorance that I refuse to submit to.

The post you’re responding to was in response to lozerette, not you.

There are all sorts of tools “out there”; you would not sleep nights if you were aware of some of the tools I’ve seen. A packet sniffer is one of the least effective and most effortful tools to use to compromise an account in the manner you’re concerned about. And as I’ve mentioned several times, the account information used in game and for the website is not sent in the clear, so the attacker would need to crack that encryption first.

But, if you want to be paranoid, be paranoid.

But if you’re going to be paranoid, do it correctly. For example, what’s the Shannon entropy of your password for the game? For the dozens (or hundreds) of accounts at various online vendors, websites, and services, you of course have completely random, unique passwords that you have memorized and do not ever write down, and unique email addresses for each one(preferably using a secure, offshore, fully-encrypted anonymous email system such as SecureNym)? And you route all your traffic through encrypted tunnels, with random egress points around the world (e.g., Tor)? You encrypt the contents of your hard drive, run all software in a sandbox, and have a plan in place to destroy the hard drives and RAM in your computer at a moment’s notice, preferably using something fast-acting like thermite (yes, information can be recovered from unpowered RAM these days)?

And of course you only use computers from a windowless SCIF to avoid things like people bouncing lasers off your windows to use vibrations to detect keyclick patterns that can be used to determine what you’re typing? And I’m certain you check all your power cords regularly for unknown devices, inside and out, since minute fluctuations in power can be used by passive devices to decode exactly what you’re doing on the computer?

Were you aware that there’s a book available in libraries and bookstores that contains the full plans, parts lists, and schematics for building a dedicated crypto cracking machine for under $10,000 that can brute force the encryption used to secure banking transactions? Were you aware that book is over 10 years old, and the hardware today would consist of a few high-end graphics cards?

There’s paranoid, and then there’s paranoid. You’re not doing paranoid very well. But hey, don’t take my word for it. It’s not like I’ve got 20+ years in the industry, including being responsible for the computers that ran one of the larger (partially nuclear) power grids in the nation, having a security background that predates the WWW, and having held various government security clearances in the past.

Holy essays batman, cool your jets,
simply being educated is not the same being paranoid. Every individual should determine the extent that their content should be secured based on their contents value to the world. We are protecting civilian email accounts, virtual possessions, and credit card information typically not exceeding $10k in available funds. This does not justify the extravagant methods you highlighted above… you ok man, sounds like you might need a hug?

mcl.9240:

lozerette.2153:

Alexixiv.4582:

@mcl.9240: Dood, you…are not…my nemesis

My nemesis is Captain Hammer. (Couldn’t resist!)

Seriously though, I’m always going to disagree with anyone that says “Don’t worry about [method of getting your account data], no one does that/it’s too complicated/that never happens/etc.”

Assume nothing; secure everything. It’s better to be worried about things that probably won’t happen than to not worry and have your account compromised.

Best to stop using computers altogether then; nothing is actually secure.

Or, live in reality with the rest of us. Actual risk assessments take into account the likelihood of a given attack vector. In this particular case, the likelihood of someone using a packet sniffer (and the likelihood of the account information being contained in packet payloads unencrypted) is vanishingly small.

If you truly believe that there is a real possibility that there are packet sniffers at every hop between you and any particular destination, you must never shop online, or use online banking, or log into any websites…except that you had to log into this website just to post that response. So someone here is being hypocritical, and it’s not me.

lol you are blowing this way out of perspective. I never implied a frequency of packet sniffers being used, simply that it is still a possibility and that they are still used…
and no I do not believe that there are packet sniffers at every hop, just stating that they are out there and to say that it isnt a concern is ignorance that I refuse to submit to.

Raindown.6918:

So the main problem with the hacked account seems to be the time it takes before people finally have their accounts back. If you have the serial and the original account email adress then I don’t see why it should take so long. Are there too many tickets and not enough support?

They have recently expanded the support teams to be able to address the flow of inbound tickets. In the past 2 days we have seen a dramatic jump in issues being resolved, but keep in mind that in some cases the investigation and resolution of an issue could take 5 days from the time it is grabbed by a support member.

https://forum-en.gw2archive.eu/forum/support/account/Tickets-take-5-days-confirmed/first#post62711

did you mean “Invalid Ban”?

GaileGray.9587:

dogmeow.3765:

This is by request, to prove something is messed with security, I am blocked from my account, but my friend took a screenshot that shows someone is using the account and is somehow level 0 in WvW.

I hope hes having fun with my account, cause I sure am not.

Account blocked.

Mod is it possible to get this screen shotted case insta-blocked as well…

Pictish.3410:

Just to confirm 2 things
If you do not have a battlenet account they do sometimes tend to lock you after logging on after not using it in a while.
They will never ask you for details in emails like most companies and even if you think the email is a legit one never go through any links in the email.
Battlenet was hacked before and diablo was hacked a few weeks back.
For those saying they would see more hacking if arena was hacked there was no upsurge in diablo 3 after the breach, but it would be a very good place to get emails for other games coming out.

Yes, never open any link from your email if you can avoid it, and in most cases you can.

kamikaze.2319:

i got banned for no reason too, they said i was using a fkin bot.. i have playng for 2 weeks and im lvl 39.. what kinda stupid bot would that be?i hope they give us better support. im still wating for an answer,
i had a ticker 1 week old askin them to fix my misfire wolf cause it wasnt workin after i upgraded do dde, and instead of an answer for that ticket, what i got was a ban… WTF

What profession were you playing… some suspect that it is being caused by an engineering skill that auto heals turrets and when you go afk it flags you as a bot…

thatoneguywtf.3172:

My account has successfully been returned, thank you. I hope you guys are making progress so this becomes less of an issue in the future. I apologize for being rude, but this was a very frustrating situation to be placed in so soon after getting started. I’ve made many security changes to ensure that this doesn’t happen (as easily at least) again.

Thanks again.

looks like it got mod attention on the other case…
not an advocate of spam, but worth a shot I suppose

Shiny.1905:

Here is a screenshot from my wifes account(Shiny.1905) showing my hacked account(Shiny.1635) online.

that has to be annoying to see…

dogmeow.3765:

This is by request, to prove something is messed with security, I am blocked from my account, but my friend took a screenshot that shows someone is using the account and is somehow level 0 in WvW.

I hope hes having fun with my account, cause I sure am not.

can you ask your friend if he still sees you online now that Gaile has beat him with an iron “block”?

Gaile, is the billing support team working 24/7 as well or are they 8-6 type?

Kadrra.4138:

how are you able to log into the forums if you account is hacked my buddy cant even log in here becasue they changed his email addy

different hackers do different things….?

dogmeow.3765:

This is by request, to prove something is messed with security, I am blocked from my account, but my friend took a screenshot that shows someone is using the account and is somehow level 0 in WvW.

I hope hes having fun with my account, cause I sure am not.

dang, that is crazy… did your friend report him in game as well?

dogmeow.3765:

After wanting to know if we wait 5 days to get a response, I was told I was wrong, and that it takes 5 days for them to examine your case and exact a judgement.

GaileGray:

“The five days allows for review and resolution, it does not mean that at five days the tickets is viewed for the first time!”

Thank you, that was all I wanted to hear. I will be back in 4 days time to play.

Not saying to pour over the forms like some of us have, but definitely keep an eye on your email

moonslightv.6704:

Same problem here. My gf’s dad’s account was hacked late Saturday night and the hacker is online right now and moved his char over to a french server. Someone needs to put a stop to this.

Yeah, it would be nice if there was an automated system to disable any account that select “Hacked Account” from the dropdown during ticket creation…

You will find the forums a much warmer place today thanks to Gaile and the support teams she is in touch with:

https://forum-en.gw2archive.eu/forum/support/account/Resolved-Tickets/page/4#post62376

GaileGray.9587:

A few more for today:

120902-011084 This has been routed to the team that can assist you.
120906-004508 Resolved
120906-010451 Resolved
120906-010208 Resolved
120906-009144 Resolved
120904-008242 Resolved

GaileGray.9587:

I think I’m going to do the whole-day updates again, because trying to find the posts and respond to individual players is difficult (especially when they post a dozen times. )

Here are updates for today, 11 September:

120905-008337 Resolved
120905-004759; 120905-008912 Resolved
120904-002404 Resolved
120904-003141 Resolved. Please take care, as this was compromised twice.
120829-011557 Resolved (fixed error in email registration process)
120831-018621 Resolved — two accounts reinstated.
120831-017533 Resolved
120902-016845 Issue assigned and being reviewed by agent
120901-006247 Issue assigned and being reviewed by agent
120827-010196 Issue assigned and being reviewed by agent
120901-018012 Issue assigned and being reviewed by agent

We will post more updates later this evening or tomorrow.

Remember, only post if you have been waiting for five days or longer.

Silentear.3490:

With all due respect I posted 11 hours ago, and my first and last reply was 7 hours ago.

Just sayin…

Gamer Bearded.6980:

I applied GW2 CE to my account and I never even got a notice about my items or anything. I’m a little disappointed at the moment. Why haven’t I got what I paid for?

Did you put in a ticket? I am sure they will look into it. Seems like they have moved on from prioritizing hacked accounts and have really started to delve into other types of issues…

yeah, I am on the road to recovery as well, is your ticket in the “waiting” status now?

Shiny.1905:

Yeah I tried that first but the website would not let me log in either.

ah, they probably removed your approved location info… a-holes

Alvin.2731:

Hooray! It seems i got a legimate answer for my serial code issues. Not solved but I really hope its being worked on.

Response Erik via Email 09/11/2012 02:07 PM

Hi Alvin,

Thanks for contacting us!

I apologize for the delay in our response; we have an unusually high ticket volume which we are working through as quickly as possible.

I’m escalating your problem to Reissues, and you’ll hear from someone soon about reconciling your accounts via a reissue.

Please let us know if there is anything else we can assist you with.

Thanks,
Erik
NCsoft Account Support

Response David via Email 09/11/2012 04:31 AM

Hello Alvin,

Thank you for contacting NCsoft Account Support.

It seems the issue you’re reporting will require additional investigation.

I am escalating your ticket to a Senior member of the Billing Team to further assist you. Someone will be in contact with you as soon as the issue has been fully reviewed.

Thank you for your patience,

Regards,
David
NCsoft Account Support

grats, be sure to let us know how it all worked out for you, sure helps to keep other spirits up here

Shiny.1905:

Yes I reported the account stolen almost right after it happened… I was in game playing, went to a waypoint and then got up to go to the kitchen to get some food. Came back about 20 mins later and the game said “Network Error” or something like that and it logged me out of the game. I tried to log back in and it said that my email was not associated with a GW2 account. Then got the email that my email was changed so I reported it.

were you able to log back into your account and change the email address to a different email and change the password?

If you move fast enough, in some cases I have seen users reverse the change pretty quickly and get their account back, give it a shot, might not be too late…

Another happy camper:

Tyrraeth.8765:

Update:
Case closed! GM P—- (am I allowed to post gm names?) restored my access, approx 3:32pm.
What was changed: <expletive> hacker took my entire gem balance and moved my toon to a new server. I’d like my 750 gems back, but whatever…I can deal for now.

Was a long wait, but am in game!

@GaileGray: Pop-pop-pop – makin’ cases drop!

http://en.support.guildwars2.com/app/answers/detail/a_id/9212

Shiny.1905:

Have there been refunds for gems bought? or do we need to cancel the cards outright? or has something already been posted about this?

NCSoft will work with you on refunds of gems from what I have seen on the forum users posts and mods responses.
They will usually store your card info and attempt to sell it (the hackers). In many cases you need to cancel the card if you see fraudulent activity on your account , call your bank immediately and notify them of the situation, many banks already have NCSoft on a watch list for this type of issue, however, if you do not see any activity on your account then they may not have gotten to your credit card info. the wiki I believe has more information regarding this topic.

Shiny.1905:

Have there been others that have seen their accounts logged on after they were hacked?

yes, quite a few actually… keep an eye on your bank statements, lots of times they like to use any credit card info associated with the account to buy gems

Dang, they are on a roll today:

passion.5481:

I guess that’s it – I have my account back. * cheers *

Thank you for your help and I hope we won’t meet again that fast and if we do, let’s hope the circumstances will be more pleasant.

Thank you.

Another one bites the dust

Calonn.7093:

I never got the e-mail that went out today to people with open tickets, and my ticket has been changed form its original subject to ‘access restored’ making me think that im probably no longer prioratized as a hacked account.
So far i’ve been waiting 7 days (which i know now is the norm for this kind of issue) But id rather not create a new ticket and start from square one, and it seems to me that i cannot edit the title of my ticket from ‘access restored’ to something more appropriate like ‘hacked account still need help’.
120904-002404
This is my ticket number, hopefully someone can help with this issue so i dont have to send in another ticket so i’m back in line once again.

GaileGray.9587:

This is marked as resolved. Please update if that is not the case, but I have seen the email, and it did go out to you so you should be just fine now.

@mcl.9240: Dood, you…are not…my nemesis

Smooth Penguin.5294:

>Widowmaker

Ok, I’m not here to dispute your background or education. Just want to be clear on that. But you made a mistake in your post about how your account could be hijacked. You mentioned only Keyloggers or Rootkits can get you. Other people chimed in and talked about PC security, AV conflicts, etc. Did anyone consider that your internet connection might be compromised? My apologies if someone brought it up, because this thread was tl;dr. :P

You can have the most secure PC, but if you’re wireless, someone nearby could be using a packet sniffer. Or worse (and probably more rare), is that your hard line connection could be tampered with, and someone could be seeing your data. For cable internet customers, it’s not hard to piggyback off of a neighbor’s line if you know which connection to tap into. Happened to me, and I only knew because I caught the guy next door trying to push the wiring back into the outlet. Cable company had to install a special outlet cover prevent break-ins.

You speak some truth, in most cases that level of security violation is exactly what you experienced, just a free loader looking to get some free service, most underhanded individuals looking to gold-farm don’t do house calls, but yes we were discussing packet sniffers.

GaileGray.9587:

I think I’m going to do the whole-day updates again, because trying to find the posts and respond to individual players is difficult (especially when they post a dozen times. )

Here are updates for today, 11 September:

120905-008337 Resolved
120905-004759; 120905-008912 Resolved
120904-002404 Resolved
120904-003141 Resolved. Please take care, as this was compromised twice.
120829-011557 Resolved (fixed error in email registration process)
120831-018621 Resolved — two accounts reinstated.
120831-017533 Resolved
120902-016845 Issue assigned and being reviewed by agent
120901-006247 Issue assigned and being reviewed by agent
120827-010196 Issue assigned and being reviewed by agent
120901-018012 Issue assigned and being reviewed by agent

Yay!! I am on that list, and my ticket is now in the “Waiting” status

mcl.9240:

Alexixiv.4582:

You forgot packet sniffers
But yes you have a good point, many many tools in a hackers (data miners) arsenal today.

I didn’t forget them, I simply don’t consider them relevant, since actually sniffing a switched network requires administrative access to the switch at either the ingress/egress point or the border of one of the endpoints, and the ability to reconfigure the VLANs to add a span or mirror port, not to mention a way to get all the sniffed data out of the network without anyone noticing a doubling in network traffic. Plus, any half-decent protocol handling secure data (e.g., usernames/passwords) isn’t going to transmit that information in the clear, so the packet payloads would be useless.

Not to mention the fact that if someone had enough access to install a packet sniffer, whoever controls that network has much, much bigger problems than someone sniffing a videogame password. That’s like watching a house burn down and telling the owner he’s screwed because his grass is getting a little high and the HOA might not like it.

And please don’t lump data mining in with hacking. It’s bad enough people misuse the word “hacker”. Let’s not start associating data mining, which is a perfectly legitimate pursuit both in research and in business, with what is these days generally used to describe illegal activities.

I agree with you on the misuse of the term hacker, but I didn’t misuse the term data-miner as that is a very common means of aquiring information used to compromise a system. Data mining was not intended to be used as a reference to an action specifically malicious, just stating that it is in many cases all you could call the thieves. Hacker just seems to give them too much credit.

On the point of a packet sniffer, very few system are immune to being compromised and, you are right, that they typically need admin level of access on the equipment between the DSLAM switch and the router; however, unless it is run by a bunch of robots then humans still manage most network operation centers and are in charge of network architecture, meaning each employee is capable of unintentionally providing the needed information to breach a network. Hell, many companies dont even secure their employees PCs properly and many have company laptops that they carry home and use as a personal PC OFF of the vpn.

I can tell you from experience that unless a packet sniffer is put into place to target large numbers of users it often will not trigger any alarms on the network unless the one who put it in place was very sloppy. Typically the way we identify a packet sniffer is because a user reports slow speeds and after all typical transport checks have been made (provisioning and port speed yada yada) we then begin to look for things of that nature.

Antares.3984:

Alexixiv.4582:

Yesterday I received an email from Battle.net stating that my DiabloIII account had been locked due to suspicious activity and a password change will be required before I will be able to access the account again.

1. I do not have a DiabloIII account, just a wow battle.net account
2. I have not logged into my battle.net account in over a year
3. I did verify that the source of the email was legit
4. Upon attempting to log in my battle.net account it BECAME locked due to suspicious activity
(I was able to unlock it with an account verification and password reset process)

These points tend to indicate a security breach on blizzards systems, or at the very least that they suspect one relating to Diablo III linked accounts.

If you have a battle.net account I implore you to make sure it is NOT the same as any other password including(but not limited to) other games, emails and ESPECIALLY banks. Ideally you want to have a different password for everything you log into (I know I do).

If you want to go one step further, I would encourage you to delete any wow addons and the curse client if you have it and then run a virus scan. I have have guild mates in WoW that have been hacked by using plug-ins(Addons) which is why NCSoft does not allow them and tends to stay very secure because of it.

Maximum security on your account helps make all of ncsoft games more secure for you and everyone else.
Plus, you paid at least $60 for this game, dont let those thieves take that from you

Always check the email headers in those kind of messages.

yes, I have my headers to always display

And another resolved:

GaileGray.9587:

Heaven.4985:

I have just had my account restored ref number 120906-004508

I was over joyed when i tried to log in and ofc my account is perm banned as i reported the hacker on my account for botting and hacking me. Is it possible to get it unbanned without having to wait as long as i did before or?

We totally flubbed that one! You should truly be good to go now!

Heaven.4985:

ye account has been restored minus some stuff but happy to have account bk. Now only have to try get hom working as my account is merged and cannot access any of the gear i got from gw 1 XD but that can w8

Zanes.4510:

When I try to link my account I get this error: http://i.imgur.com/ZVpIg.png

I was getting that earlier when I was attempting to allow access to my location through the verification email, I fixed it by closing my browser window and opening a new one, and not hitting the button more than once lol
give it a shot, let us know how that works out so that we can let others know how to work around that error as well

From what I can tell this is caused by sending the same information to the servers more than once in a short period of time, which is why if your not hitting the submit button twice your browser may be doing something wonky. If it is still happening try using a browser without any addons, usually windows 7 comes with a version of IE that does exactly that (typically I wouldn’t suggest IE at all, but in this case they made that version for troubleshooting issues of this nature)

Found another resolved issue, looks like they are addressing serial key issues now *happy dance
and with the solution I hoped they would go with

MamaNooooo.8326:

Inviction.2945:

Seeing everyone getting such awful and useless replies is not comforting me when I finally get a reply..

You’ll see a few of my posts along with complaints in here. But good news has finally come. I accidentally created a 2nd account when trying to update my serial key and so I couldn’t access my main character that I had been playing during pre-release.

They finally responded about an hour ago letting me know that they’d be willing to issue a new serial key but that the 2nd account I created would be disabled.

Now I just need to wait on them to send me the serial key.

mcl.9240:

Widowmaker.5812:

Even if I was compromised there are only 2 stealth methods to steal my account, 1-key logger and 2-root kit. Both are hardly the tools of a game hacker. These are tools of espionage or commerial theft not the tools of kids stealing wow or guild wars accounts.

You’d be surprised.

Also, password length by itself is not adequate security for a password. For example:

aaaaaaaaaa is a length-10 password. It’s also horrible.

thisisatest is a length-11 password. It is just as bad, because dictionary attacks are trivial to do.

7h1515@7357 is the same length-11 password using leet-speak character substitution (which people seem to think is somehow secure). Password cracking and brute-forcing software has been able to do these sorts of dictionary substitutions for YEARS.

Q2W3E4R5T6^t%r$e#w@q is a length-20 password, using a keyboard pattern mnemonic. Password cracking/brute-forcing software has been able to suss these types of password schemes for years as well.

Add to the mix things like general-purpose GPU computing to greatly accelerate things, and rainbow tables plus years worth and millions upon millions of accounts’ worth of cracked passwords, and today’s script kiddie has at his disposal extremely sophisticated tools and a gargantuan corpus of raw data from which to work, not to mention enough data to do some fairly sophisticated analysis on password choice behavior that allows some rather intelligent guessing as well as advanced mnemonic attacks.

And that’s just the script kiddies. Now, imagine what someone with a profit motive (e.g., businesses whose sole purpose is to steal accounts and convert items into gold or real money, and use the stolen accounts to farm for and/or sell gold) would be willing to do.

Don’t think a length-32 password protects you. If that length-32 password was unique AND actually high-entropy (i.e., random, which means you’d have to use rote memorization or a third-party secure password program, e.g., 1password or keeppass or similar), THEN and only then might you begin to consider yourself safe from the above.

You forgot packet sniffers
But yes you have a good point, many many tools in a hackers (data miners) arsenal today.

Angelkitten.3674:

Alexixiv.4582:

Wow your name is a good reflection of your disposition lol. No really I work for Verizon for 4 years as 1 of 5 tier2 email/portal support, worked very closely with security every day. Today I am in charge of Frontier Communications chronic third party circuits.
brag brag brag believe me lol

Really not sure how that is relevant, you got an email that your account was blocked for a game you never had right? if you ask me it looks like them guys tried to get your account details and that got your account, no need to start acting like a know it all sir…

I have been getting them emails for the past 3 months on my email and I don’t even have a battle.net account on it. Unless they bought you a free game.

You challenged my observation that it was a legitimate email. I was stating my credentials to back up my claim. You on the other hand are acting like a know it all by making a claim without having the email in your possession. I am well versed in spotting spoofed emails. You should not be so quick to shoot down something if you do not have all the facts to back it up.