Someone gave me a gift box via p2p trade window. I opened it. got a fishing rod. 1hr later, got a notification in-game saying someone logged into my account from elsewhere. i chanced my PW already, but thought i should share this as 1. dunno if a PW change was sufficient security step, 2. i had assumed theres no way a person could insert malicious code in-game, but i guess thats a thing? TIA.
I could be wrong so don’t take my word for it 100%, but I really don’t think someone gifting you a gift box could potentially be malicious to the point where it says your account has logged in somewhere else. Now, this could just be a coincidence like some website had a security breach and you just happened to be caught in it but whatever happened, it’s always nice to have 2FA.
3 Likes
What type of notification did you receive? Was it an in-game message, an email, or something else?
If it was an in game message, it was probably a phishing attempt. Remember, Blizzard will never message you in game about account actions. If they ever do contact you in game it will be in a window of it’s own, blue text, with the Blizzard logo attached.
5 Likes
You know what… it’s actually a little weirder. When I got the notification my account had been logged into elsewhere I was playing the game. Then I noticed there were 2 instances of WoW up, the window I was playing my game and another with the post-loggin screen before entering the server. I think it was that window that had the “game logged in from elsewhere” message. It’s all just a little weird. Thankfully I have no money in my bankaccounts cause I spent it all on DF & subs 
Having two instances of WoW open on one computer will not show as being logged in from elsewhere. The IP address will be the same and it is not against ToS to be logged into multiple accounts.
2 Likes
If you are logged into WoW, start a new instance, and log in to the same account, the original instance gets the message you are logged in elsewhere. That happens even if you only have one account. If you have multiple licenses you can log into all of them at the same time and not get the message. It has been possible to get the message if you are logged into the Battlenet app on your computer and log into the remote app. The message has nothing to do with the IP address.
5 Likes
As mentioned, receiving an item from another player in-game has zero to do with getting that message.
We do have messaging you’d receive if there was a change in your account access, but it doesn’t sound like that is what you saw. As Rufflebottom said, this seems more like you just had a second client open, which conflicted with the first.
Just to confirm, I’m not seeing change in access and as a general rule, updating your password is always good to do as is adding an Authenticator.
8 Likes
Awesome. Thx for checking on your end. I think I figured it out, and as indicated, this is a matter of coincidence, not exploit. I must have accidentally hit the launch button twice. I did it later that day.
3 Likes