World of Warcraft add-on trojan steals account, authenticator info
A Trojan masquerading as a popular add-on for World of Warcraft was responsible for compromising user accounts even with authenticators, Blizzard revealed today.
According to a post on the MMORPG's support forum, a fake version of the Curse Client contained the trojan. The spoofed client appeared on a forged version of Curse's website, which ranked highly on major search engines for the term "curse client."
The hacked Curse Client transmitted account information, passwords, and even authenticator keys to the attackers as part of the login process, but otherwise functioned normally.
Blizzard recommends that users who believe they may have been compromised delete the client and run the latest version of Malwarebytes, then follow the steps listed on its support page.
"For those of you interested in these [man-in-the-middle] style attacks, this is the only confirmed case we've seen in several years outside of the 'Configuring/HIMYM' trojan in early 2012 that hit a handful of accounts," a Blizzard support agent wrote. "These sort of outbreaks are annoying, but an Authenticator still protects your account 99% of the time. Stay safe!"
World of Warcraft had 7.6 million subscribers as of November 2013, making it the most popular subscription based MMO nine years after its launch. Blizzard's Battle.net service was targeted for denial-of-service attacks this week allegedly intended to disrupt a single Twitch streamer.
As a reminder, the only place you should download the Curse Client is from http://www.curse.com/client/ to ensure it is the real client.
Posted:
Related Forum: PC Gaming Forum
Source: http://www.computerandvideogames.com/443860/world-of-warcraft-add-on-trojan-steals-account-authenticator-info/
Related Articles
Comments
HuniPosted:
got to be honest ive have never played WoW and dont plan on playing it. but it would be annoying
WishPosted:
I've never played WoW, but I can imagine this being a real annoyance for people who do play it.
KatsumiPosted:
LiaKatsumi This would of really sucked for someone who is an avid WoW player. Thank god that i don't use curse or anything
Curse add-ons really do improve the gaming experience for WoW, at least when I played a few years back. It's still a risky site though, and that's why I always researched my add-ons before actually downloading 'em.
I may be getting back into WoW in the near future so it's nice to know. Thanks for the advice :)
DissPosted:
Katsumi This would of really sucked for someone who is an avid WoW player. Thank god that i don't use curse or anything
Curse add-ons really do improve the gaming experience for WoW, at least when I played a few years back. It's still a risky site though, and that's why I always researched my add-ons before actually downloading 'em.
basedtelliPosted:
Katsumi This would of really sucked for someone who is an avid WoW player. Thank god that i don't use curse or anything
Lets hope it didnt happen -Tyler, TDK and Forest (Only people I know that play WoW)
KatsumiPosted:
This would of really sucked for someone who is an avid WoW player. Thank god that i don't use curse or anything
Latest Downloads
- 01. Jalopy SaveGame (Pumped up LaikaGT)(0)
- 02. Assassin's Creed 3 Save Game (Game completed 8%, until Chapter 4)(0)
- 03. Supermarket Simulator SaveGame (Quick start, 172 day, 65lvl)(0)
- 04. Caribbean Legend: SaveGame (before the start of the Dutch Gambit)(0)
- 05. Caribbean Legend: SaveGame (Passed the Secret Organization Gambit) [v1.0.0](0)
- 06. Jalopy: SaveGame (Pumped up LaikaGT)(0)
- 07. Assassin's Creed 3: Save Game (Game completed 8%, until Chapter 4)(3)
- 08. Supermarket Simulator: SaveGame (Quick start, 172 day, 65lvl)(0)
- 09. GoreBox: SaveGame (Ancient village of the Paleozoic era)(0)
- 10. Need for Speed: Most Wanted (2005) - SaveGame (0% career, 2 BMWs in the garage)(1)
- 11. [EU] CARX DRIFT RACING ONLINE - PROGRESS SAVE 6 SP DUO (CUSA15633)(10)
- 12. Fallout Shelter Modded Save PC(3)
- 13. Remember Me: SaveGame (The Game done 100%)(0)
- 14. The Long Drive: SaveGame (American pickup)(0)
- 15. Goemon's Great Adventure (US / NTSC) - Nintendo 64 Game Save(2)
Latest Tutorials
- 01. The Redress Of Mira 100% Walkthrough | Trophy & Achievement(552)
- 02. Russian Pinocchio Quick Trophy Guide(675)
- 03. Venatrix Quick Trophy & Achievement Guide(671)
- 04. Call of the Sea 100% Platinum Walkthrough(763)
- 05. Wire Lips 100% Platinum Walkthrough(770)
- 06. The Expanse 100% Platinum Walkthrough | Trophy & Achievement(720)
- 07. Doctor Who: The Edge of Reality - PS4 Platinum P/Thru(639)
- 08. Doctor Who:The Lonely Assassins - 100% Guide(567)
- 09. DAYMARE 1998 PS4 - Full game 100% TROPHY WALKTHROUGH(536)
- 10. Stray Platinum Walkthrough | Trophy & Achievement Guide(544)
- 11. Raji: An Ancient Epic | Complete Gameplay Walkthrough(710)
- 12. Corpse Killer: 25th Anniversary Edition - Longplay(727)
- 13. Song of Horror: Complete Edition Gameplay Walkthrough(473)
- 14. Remoteness 100% All Trophies Walkthrough(738)
- 15. Detective Inspector Mysterious Clues Platinum Walkthrough(606)
"World of Warcraft add-on trojan steals account, authenticator info" :: Login/Create an Account :: 58 comments