Well my best friend just got hacked a second time and this time I was there as I watched him get logged out, I was in a Skype call with him and he just had a range of emotions. After he drained about 4 of his 5 heroes, the bot made a new hero called "wwwmmookcom" which after some Googling turned up some really shady websites. He sent in a support ticket to Blizzard from the first hack from last week and no response, he's also changed his password twice. I think I can convince him to get an authenticator now.