Their is a hack out where they can literally log into your characters without using your screen name or password!
All they need is to see your name come up on the little "recent players" screen bottom right corner!
They will then log into you character (while your SCREEN NAME remains offline while COMPLETELY bypassing your authenticator).
Steal every single item you have. Then leave you stark naked and penniless at level 50+.
It does not matter if you have never been hacked, if your 100% secure, and have you computer security tighter then fort knox (noscript, adblocker, flashblock, malware bytes, immunities, and regularly format/update it).
This hack does NOT even need your email. They just need the name and # of your character (easily obtained from recent player menu).
This happen to my level 57 Wizard. It happen to my friends level 52 Barabarian. It happen to my other friends level 54 Barbarian.
All 3 of us have never in any game (including playing WOW for MANY MANY years) had our passwords/account compromised.
When we tried to invite "our" friend to join us. They kept declining invites. We noticed his screen name was offline but his character was online. We contacted him. He tried to log on and it errored him out.
To add insult to injury all 3 of us had authenticators (2 friends had the pay for kind, I had the phone my house kind).
What does Blizzard have to say to this?
Make sure your in the right region. Make sure you secure you password. They can reset it it to two days ago when you were 15+ levels lower and don't have your $900,000 worth of gear you spent hours and hours in the auction house getting to make your DPS 10,000.
This is disgusting and to make matters worse Blizzard is LYING to it's customers and not letting them know about this crazy horrible exploit!!!!!!!!