Massively^™

Well, it seems I may have been too hasty in jumping on the 'omgblizzardgmsaretehsuckzorz" bandwagon last week. Merely a handful of hours after logging back on to my World of Warcraft account and submitting a GM ticket after reformatting my PC, not only had my deleted characters been restored, but all of their gold and items had been recovered.

Colour me chuffed.

I was correct in my suspicions, and whoever had managed to compromise my account had indeed stripped and deleted two of my level 70 characters. The last time I had logged on, I had three characters at level 70; a Horde Druid and Priest and an Alliance Warrior. On checking the Armoury, both the Priest and Warrior were missing, and the Druid was naked – which, as I'm sure any other Tauren player can attest, is rarely a good look.

Now, as much as I deplore it, I can understand the concept of hacking a person's account in order to sell their gear, then pass that money along via a Goldseller – that's simply business, but I don't understand why you would delete a character completely – while the first is an undeniably rotten thing to do to a person, it's generally something that can be recovered from, or (in the worst-case scenario) rebuilt. New gear can be acquired, gold can be earned once again, and if your guild happens to be chock-full of good folk like mine, you'll maybe get some help along the way.

When you play online games these days, you always have to be mindful that you don't leave yourself vulnerable to viruses, account fraud, and hacks. Something as seemingly simplistic as a hidden keylogger in a UI mod can open the floodgates to strangers to come on your computer and take your account information. Stories abound of players losing accounts they've dumped thousands of hours into because they didn't take the proper precautions. While some of the blame certainly lies with the players, there are some critics who have charge that the MMO industry doesn't do enough to prevent fraud.

Enter the Blizzard Authenticator. This new keychain SecurID device can be attached to your World of Warcraft account, making it impossible for anybody to access it without the Authenticator plugged into the computer They'll be debuting the device at the upcoming Blizzard Invitational, but it should be available on Blizzard's online store soon at the low, low price of $6.50. It's a small price to pay for peace of mind.

In the mainstream media it's not entirely uncommon to hear tales of virtual theft cast in a mocking or sometimes even light-hearted tone. Given the right set of details, we're sometimes guilty of it ourselves. In any case, when you actually read a first-hand account of such an experience, you quickly see how devastating a personal blow it can be to a person. A recent article in The Escapist explores one such experience, going into the depths with one unfortunate Paladin who had her Final Fantasy XI account hacked.

Much the same way that a real life burglar can rob somebody of their sense of safety, virtual thieves rob players of the joy and security they get from building up a character in a virtual world. The Paladin followed in the article lost her will to play altogether, which we think is an even sadder outcome than losing her highly-valued account.

It's official – my guildies are 'teh awesomez'. The reason? My World of Warcraft account was hacked yesterday afternoon, and I've already been inundated by offers of assistance and gold from my friends, should things go South once I log back into my account.

To clarify – I came home from work yesterday evening to find a nausea-inducing email from Blizzard informing me that my account had been suspended due to activities which made them suspect it has been compromised. They advised that they had reset my account password, and suspended the account for three hours as a precautionary measure. Unable to actually access my account in-game, I check the Armoury to see what state my characters were in, only to find that of my three level 70 characters, only one is now showing up, and he's completely naked. So it seems that not only have all my items been sold off, but at least two of my characters have been deleted. It's that last part that really annoys me.

It happens to the best of us. We try to be careful, we try to be conscientious, and then the unthinkable happens: your MMO account gets hacked. You log in to find your virtual life has been torn asunder. What happens then? Sean Sands, over at the Gamers with Jobs site, walks us through the ordeal of having his World of Warcraft account hacked.

Sean reminds us that the most important thing to do is to keep things in perspective. Most likely the person that hacked you was just doing their job. It probably wasn't malicious, and unfocused rage never helped anyone resolve their problems. Moreover, Blizzard is well aware of the problems inherent to the account breach issue. They've got a polished, professional team ready to give you back your stuff in a timely fashion. In fact, as Sean notes, it may be that they're a bit ... too practiced at this.

The problem of account hacking is universal. We suggest you check out some of the security resources WoW Insider has on hand for World of Warcraft fans, as many of them can be transposed to another game. in the meantime, have you had any experiences with hacked accounts? What happened and ... most importantly ... did you get your stuff back?

You've probably heard the stories before. A friend's roommate's cousin once got his WoW account hacked. The hacker took all of his character's items and gold, and left a few naked, violated characters to fend for themselves. It conjures the same feelings as coming home to find your house has been broken into, or walking out to the driveway in the morning to find your car is gone.

There has been a recent phenomenon of hacked accounts lately, more than ever. WoW had a recent problem with Xfire, and several people got their accounts hacked. The leader of Rebel Rising [rawr], one of the top PvP guilds in Guild Wars just got their account hacked and the hacker disbanded the entire [rawr] alliance and deleted the guild. This is a guild that had worked for years to establish itself in the GW PvP community, including its very own tournament cup named after them. But the fact that it can all go away so easily, as it did from one hacker, makes us aware of the inherent dangers and vulnerabilities we face in this environment.

A sixteen-year old boy allegedly hacked the website of Nexon Japan, and made off with about $325k worth of game points for Mabinogi, a free-to-play MMO that's inspired by Celtic mythology (and on its way to North America soon). He reportedly was able to obtain the password of a former Nexon employee, and then used that info to log on to the game servers and load himself up with virtual cash.

Some of which apparently then turned into real cash, as he was able to sell it (as least that's what it seems like) for "web money," which he used to buy books and other software. The bottom line here seems to be not that the kid is a genius, but that the company and/or its employee made a dumb mistake, allowing the password to get nabbed by simple hacking software.

No word on what punishment, if any, the kid faces, but Nexon claims they've "re-evaluated" their security software, and created a "24-hour monitoring system." Well that's good -- when they get hacked again, at least they'll be able to monitor it.

Numerous reports have come in concerning the recent hacking of Final Fantasy XI player accounts, with the concomitant liquidation of assets, leaving many users without gear and gil. Although complaints to the game admins have been many and passionate, Square-Enix seems to be employing a strategy of claiming that the hacked users are somehow to be found at fault for downloading keylogging software, or somehow allowing their account information to be taken by malicious hackers.

There is an interesting theory circulating that the attacks are in response to S-E's crackdown on real money trading (or RMT) activities, which in general drive up inflation of in-game economies. It's been supposed that " ... RMT have decided for Christmas to meet demands for the people who buy the games currency (gil) to hack droves of veteran characters and sell everything of value in an attempt to meet the demand with the least amount of labor as possible", to quote player Sparthos.

Interestingly, many of the hacked account holders place the inception of these attacks as occurring shortly after the release of FFXI's newest expansion, Wings of the Goddess. If there is a connection, it might be possible for there to be some weak code in the expansion that allows a hack of this nature to occur. With S-E's refusal to acknowledge legitimate grievances on the part of the players, however, it's not likely that we'll have this either confirmed or denied. We'll keep an eye on this story and see how it develops.

[Thanks to everyone who sent this in!]

MMO players have more to fear than simply kobolds and virtual super villains. According to several security engineers interviewed by TechNewsWorld, gamers face greater risks than many of them realize, as lax security measures on the part of publishers expose players to identity theft, malware, and potential hack attacks. And as persistent online worlds continue to grow in size, they only become more lucrative targets for online ne'er-do-wells. They attribute much of the risk to the fact that so much of the actual game software lies on users' home computers, and is not adequately shielded by firewalls and other protective measures.

Unfortunately, the solutions posed by the so-called experts betray an obvious lack of experience with MMOs and the people who play them. They cite enterprise networks as an example of having the kind of network security that gamers need to ensure that they're protected from intrusive attacks... So they suggest that people play games from work to alleviate the risk. While I'm enthusiastic about such a prospect personally, I highly doubt that most employers are too keen on the idea of their employees logging in while on the clock and using up company bandwidth to grind for Sporeggar rep. They also suggest purchasing expensive security products, but that's not something I'd imagine most people haven't considered and disregarded already.

A more prudent suggestion, though not one explicitly cited in the article, is to instead be extremely mindful of what kind of mods you download for your favorite games, and from where you download them. If you don't give hackers an open door to your system, than there's probably not too big a cause for concern, unless you're unlucky enough to have bought pre-hacked products.