This morning Lushnek, Xynzelle and I were doing the weekly stuff in the Barrens. We all logged off in the Barrens - Xyn had to go do family stuff, and Lush was hanging around at my house for the weekend since the kids like to see "Uncle Lush" and we were going to go out for lunch (and I've also got better internet - sorry Tout, your net does suck!). We had killed a fair few things, and vendored lots of stuff.
This evening, we logged back in to finish our weekly and Lush noticed he only had 2g on his toon. WTF?? And he had a new mail. Apparently he'd bought something from the Auction House.
OMG he'd bought a Black Trillium Ore for 178k gold?? He was horrified. What the hell? Had he been hacked? He was still in the Barrens, so he couldn't have gone to an AH, nor had his account been opened or he wouldn't be out in the Barrens where he'd logged off. While he opened a ticket and tried to figure out what to write, I thought about what we'd been doing. OMG, could this item have been bought through the Armory? I know my toddler son had been playing with Lush's mobile phone and has opened WoW Armory before - could he have accidentally bought it? I was mortified. Lush was very upset and despondent. I helped him compose a ticket to Blizz while I went to see if you could buy stuff through authenticator, and to check the auction house to see if this person had anymore funny items for purchase. I thought maybe it was one of those douchebags who puts a low bid price and a high buyout to trick you. I even told Lush to write a mail to that person saying there was a mistake (if it had been a bid) and to say would it be possible to send the gold back, and he would be happy to pay a reasonable, even slightly above market price for the ore.
Whilst Lush was offgame changing his account passwords, I decided I would do the same. But I was having that sinking feeling that my son had done the damage and I felt terrible. I told Luxy about it, and she made lots of sad faces, and said to put a ticket in. I thought, if it was my son and he'd bought it through Mobile Armory, Blizz was never going to get the money back. And the dodgy seller wouldn't send the money back either. I wasn't feeling very hopeful.
Lush didn't feel like logging into WoW for about 15 minutes, he looked sad, and said he didn't want to play. He thought he should check the other accounts, which he forgot to do in the shock of losing all his gold and trying to figure out what to write on the ticket. When he logged his other toons, he found this:
All his level 90 toons had bought a single Black Trillium Ore for pretty much all of their gold give or take 80g. All from the same person. I realised, my son couldn't have done this, it was a hacker.
And to top it off, the goddamn bastard had actually stolen Lushnek's Trillium from his paladin Farashkar (ie sold a stack of it on the AH for 1 copper and bought it from him) and then sold it once by one back to him for a total of 238k.
It was clearly a hacker. I didn't know people could hack into your mobile armory and use your authenticator. And Lush isn't the only one. After this happened, Luxy told me that it is on WoWInsider as well, published yesterday. There is also a forum thread on it here. And another incident of it here.
Lush uses Mobile Authenticator on Android. I do as well, and I'm nervous. Though I don't have much gold, so it's not so scary.
After we finished our weekly we decided to do a challenge mode, and I told Sev what had happened. Do you know what that cheeky bastard said?
"Well at least now he has 7 black trillium."
LOL. What else can you do but laugh, right? Poor Lush. I hope he gets his gold back :( And until the ticket is investigated, we can't move servers as it will look kinda weird if we lost all our gold then did a guild transfer. So Frosties, server transfer is delayed pending investigation of Lush's lost gold.