Security Update at Blizzard, and new Phishes…

Jul 29 2010 Published by jayras under Posts

Posting a day early, this is just a notice about a specific change Blizzard made last week (That I missed..sorry for not mentioning it sooner.)

I had the unfortunate pleasure of getting locked out of my account.  Luckily it wasn’t a case of getting Hacked.  No, it was more stupid than that.

I got a new iPhone!!

Of course, I didn’t prep my account and I did format and turn in my old iPhone so I no longer had access to it.

When I got home, I soon realized my mistake when I went to login to Warcraft and when I launched my Authenticator it was giving me steps to register my NEW authenticator (WHOOPS)

So, next morning, I use my new iPhone and a headset and sat on Hold for 37 minutes (Yes, I counted…)

They drilled me, asking me question after question, making me PROVE to them that I am who I say I am (Good for you Blizzard!!)

In the end they pulled my old authenticator off, and sent me on my way to put the new one on.

During the process I noticed they added a step.

No longer can you just simply drop in a Serial number and wam BAM you have an authenticator (Which, unfortunately, hackers did all the time.)

No, now you put in the serial number, and then they send you an e-mail!

And from that e-mail you must click the link!

This is perfect…it means any hacker would be notifying themselves to you when they attempt to steal your account, and you are smart enough to scream HEY!! I didn’t do that, and NOT click the link!!

Here’s the new process:

  • Log onto Account Management (
  • Click on Settings, then click Manage Security Options
  • Click on Add this authenticator
  • [new]—>Required confirmation link sent to your account email address
  • You log onto your email account itself, look for an email titled Account Authenticator Addition from with a link to loop back to Account Management. This contains a one-time use token.
  • Add a mobile or keychain authenticator
  • Now you have an authenticator

More information on the change can be found here:

Forum Post on the new change.

Now, for the bad news…

Blizzard broke one of their cardinal rules…the e-mail you get is not Personalized.

AND…I’ve already received a fishing attempt with this new e-mail (Its is a direct copy…with a new link….)

So, if you are adding an authenticator…make sure you are looking at a good e-mail and not a phish, scrutinize the header and make sure it isn’t from Hotmail, and it is from Blizzard.

Comments are off for this post

Ͼ Ͼֳ ewinֳ Ŷij ˰ټ Ŷij bet ȫѶ 188 bet 365 Ͼ Ͼij ˹˶ij Ͼij ƶij Ŷij淨 ȫѶ ˹ά˹ij ζij ŶijЩ ij ˹˶ij Ͼij ĥij ijϷ ĥƽij ĥij Űټ ټϷ ˰ټ Ŷij ˰ټ ټ Ŷij ֳ Ŷij bet Ŷij ټ ˹ Ͼ ټ Ŷij ewinֳ bet ټ Ŷij Ŷij Ŷij Ŷij Ŷij ewinֳ ewinֳ ewinֳ ewinֳ ewinֳ ټ bet ˹