So last night I got one of those "Please authorize this new login" emails because someone was trying to access my account from China. That email authentication thing is great, but the whole thing is curious because it means someone had my GW2 password even though:
1. Neither Norton 360 (yes, I know you hate Norton) nor Malwarebytes found anything questionable on my PC.
2. I check that little Save Password box, so a keylogger, which I understand is the most common way of getting people's passwords locally, wouldn't do any good anyway.
3. My password was not GW2PASSWORDLOLZ.
4. It was a password that I tend to use for all MMO's, but GW2 is the only one I've had active for quite some time.
5. I do not use that password anyplace else, including internet forums, email accounts, etc.
6. I am not going to finally reveal 18 posts down-thread that, well yeah, I did go to that one site and buy gold and give them my account information, but I'm sure it wasn't them because they seemed really nice, you guys.
7. I am not going to finally reveal 18 posts down-thread that, well yeah, I did give my password to my cousin's girlfriend but I'm sure it wasn't her because she seems really sweet, you guys.
8. Nobody has my password. Not even my husband. Because what good would it do him? He knows all my characters in every MMO are always broke.
So the million dollar question is, how did they get my password?
Meanwhile I feel so violated. And I'm kind of worried that Norton and Malwarebytes are both wrong and someone is about to get into my bank account.
Edited, Dec 7th 2012 8:28am by teacake