Account got hacked and characters transferred.

My other account got hacked, and characters transferred out, someone seem to play them. I have backups through system.
I've been away from the game for some time. When I login a couple weeks back - characters were tagged for rename, so I renamed them to their original name and went in no problem.
I login to my account today and characters are gone and replaced with lvl 1 orc.
I then go to login to site and it said suspicious activity and that I have to use two factor authentication which I did not have in the first place.
What now?

http://forum.warmane.com/showthread.php?t=346180

The backups won't do any good in this situation.

Ironically one my character (Dimrok, human rogue) is still up in a process of selling on the marketplace, and I am guessing it's being done already from a different account. And then there is Dimthunder human DK that is being played in WOOP WOOP guild by someone, and then there was a bank alt with like 20k gold in mats if you were to just vendor them.

your account has been banned for "suspocius activity"?
https://www.warmane.com/account > support > create ticket > ban appeal (or general enquiry since you also need support for getting your account back?)

Quote:

---

I then go to login to site and it said suspicious activity and that I have to use two factor authentication which I did not have in the first place.

---

if I remember correctly in order to enable 2-step authentication you get a confirmation e-mail first.
So does this mean your email address has been hacked as well?

Account is not particularly banned, I can login on it from game and I see a lvl 1 orc in place of my characters.
When I login to website it prompts me for two factor authentication which I did not make, perhaps hackers somehow spoofed system and made their own two factor authentication. But without that I cannot get to see anything about the account on website, and as a note it says there been some suspicious activity on a side.
I doubt my email got hacked, there were no issues of that sort, and I did not get any two factor authentication info or any of that sort either.

Quote:

---

Originally Posted by skullatbash

your account has been banned for "suspocius activity"?
https://www.warmane.com/account > support > create ticket > ban appeal (or general enquiry since you also need support for getting your account back?)


if I remember correctly in order to enable 2-step authentication you get a confirmation e-mail first.
So does this mean your email address has been hacked as well?

---

It seems whoever got hold of OP's account, enabled 2FA on it, went on and placed characters on trade.

The suspicious activity line that reads on the right when asked for 2FA code is normal (always there).

Two methods of 2FA: Email Authentication and Google Authenticator.
Enabling 2FA Email Authentication will send the code to email.
Enabling Google Authenticator only requires punching in the code or using barcode that's displayed on the site.

Who ever got hold of his account, used Google Authentication for obvious reasons.