http://us.battle.net/d3/en/forum/topic/5235706038
Frobozz <http://us.battle.net/d3/en/forum/topic/5235706038>
Edited by Frobozz#1468 on 5/21/12 12:10 PM (PDT)
This works regardless if you have an authenticator or not. Until Blizzard
patches the exploit, you need to take precautions for yourself.
How to know if your session is hijacked:
You will lose connection to the game. This can result in just the 'Lost
connection to server' error message or no message at all. A good sign that
the connection loss is a hijack attempt and not just a server error is if
you are also having trouble surfing the web (i.e. slow connections, or
can't load pages). People are reporting that their IP is getting DDOSed to
prevent them from relogging into Diablo 3 and thus getting a new session
and stopping the attack.
What to do if your session is hijacked:
The best thing to do is to try and reconnect to Diablo 3 ASAP. As said
before, some people are reporting being DDOSed after the hijack. This is
because the hackers want to prevent you from relogging into your account
until they transfer all your gold and items. So you should do these steps:
1. Reboot your modem to get a new IP address.
2. Relogin to Diablo 3 ASAP once your connection is re-established.
3. Remove any friends from your friends list that you have not added.
4. Repeat if necessary.
The bottom line is if you get disconnected and it isn't a server outage or
network outage, you need to try to reconnect ASAP. This is a good time for
the hackers to do this exploit because of the Blizzard server outages, most
people simply believe it is just another server issue and go do something
else. Meanwhile, the hackers are plundering your account.
Let's hope that Blizz can get this patched ASAP, but until then you need to
be on the lookout for this yourself.