World of Warcraft compromised by Trojans

Blizzard issues warning

It appears that there is a Trojan out there which is compromising players World of Warcraft accounts. Even if players use Blizzard's authenticator to logon accounts can be accessed. It looks like the Trojan is hidden in a fake version of the Curse Client.

If you've managed to install the Trojan client, you'll have to uninstall it and then run Malwarebytes in order to get rid of the possible issues.

Quote:
The trojan is built into a fake (but working) version of the Curse Client that is downloaded from a fake version of the Curse Website,” said Blizzard. “This site was popping up in searches for “curse client” on major search engines, which is how people were lured into going there."

“At this point, it seems the easiest method to remove the trojan is to delete the fake Curse Client and run scans from an updated Malwarebytes. Should you still have issues, there is a more manual method posted earlier in the thread. Most security programs should be able to identify this threat shortly.”


Just about a few days ago Blizzard reported DDoS attacks and now there is a Trojan stealing player information in real-time. In this case it's not only the account password but also the authenticator password that is being stolen.




Source: www.vg247.com

News by Luca Rocchi and Marc Büchel - German Translation by Paul Görnhardt - Italian Translation by Francesco Daghini


Previous article - Next article
comments powered by Disqus
World of Warcraft compromised by Trojans - Blizzard - News - ocaholic