Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

World of Warcraft: Integrity Compromised

1910111315

Comments

  • TeknoBugTeknoBug Member UncommonPosts: 2,156

    It's possible that there's an inside guy, unlikely but possible. I mean many of us that posted here hasn't played the game for years and accounts getting hacked after years of inactivity- which is very odd. I don't visit unknown websites either, I surf the web to read discussion forums on EA, Steam, Crackberry, Androidcentral, and here and I read news on CNN and Castanet. I don't click url's that I don't recognize on posts, and I have AVG and spybot search&destroy.


    I have many accounts, not a single one has been hacked except for the WoW one that I haven't touched in over 3 years, I don't have a clue to how and why it happens so no it's not always our fault.

    image
    image

  • ClattucClattuc Member UncommonPosts: 163

    Originally posted by Rydeson

    The keylogger was piggyback upon a "ADDON"..  I and 2 friends all use the same addons, 2 of us auto update our addons, the other scans and self installs..

    There is no such thing as a piggyback upon an "ADDON" because WoW Addons are collections of LUA code that run in a protected sandbox and are not allowed to do anything dangerous.  Period.

    The only way to install a keylogger is by running an executable Windows file - a program.  You should be suspicious of any unknown site, addon or product that wants you to run their "installer."  The install clients from reputable sites (MMOUI, Curse client, Zygor etc) are safe and you should not worry.  Anything else, ESPECIALLY if it's a little shady or promises the moon, you should avoid.

  • MMOManiacsMMOManiacs Member UncommonPosts: 191

    Originally posted by Clattuc

    Originally posted by Rydeson

    The keylogger was piggyback upon a "ADDON"..  I and 2 friends all use the same addons, 2 of us auto update our addons, the other scans and self installs..

    There is no such thing as a piggyback upon an "ADDON" because WoW Addons are collections of LUA code that run in a protected sandbox and are not allowed to do anything dangerous.  Period.

    The only way to install a keylogger is by running an executable Windows file - a program.  You should be suspicious of any unknown site, addon or product that wants you to run their "installer."  The install clients from reputable sites (MMOUI, Curse client, Zygor etc) are safe and you should not worry.  Anything else, ESPECIALLY if it's a little shady or promises the moon, you should avoid.

     That is absolutly incorrect. running an exe (or any  executable Windows file) is not the "only way".

    Key loggers can be imbedded into jpegs or any other file tipe on websites. Curse.com (the most widely used mmo addon site) had one of their banners (obviously not purposly) doing this a couple of years ago, and were unknowingly infecting ppl.

    Gold sellers/hackers even stage fake "conversations" with themselves on the official wow forums, flaming eachother with links to in game screenshots that people fall for.

    You can even get haced/keylogged by doing things completely unrelated to wow. Do you have any idea how many of these online F2P mmos are run by gold selling companies? Chances are, if you have signed up to one using your email address, you use the same id and password.

    There are so many clever ways to get hacked, its not even funny. Saying that perhaps its somehow Blizz's fault or an inside job is laughable.

    L2 use the interwebs....

    PS: Did anyone else notice that the screenshot used had the Wrath of the LK login screen, whcih hasnt been in the game for almost 2 months now?

  • OfficerNastyOfficerNasty Member Posts: 5

    [quote] The only way to install a keylogger is by running an executable Windows file - a program.  You should be suspicious of any unknown site, addon or product that wants you to run their "installer."  [/quote]

     

    100% incorrect.  Arbitrary code execution, especially when using the swiss cheese web browser that is IE, gives hackers multiple ways to infect a target system without user intervention, ie: "running an installer"

  • Sky427Sky427 Member UncommonPosts: 99

    I stopped reading at "Authenticator added this was not there before!"

    Thats why you got hacked. There was an extra layer of security you should have been using because this game is so large ethat chinese farmers will do anything to get your account.

    You got hacked because you're a noob. Im never going to read another post on this site with the same respect I used to. Seriously you're retarded.

  • OfficerNastyOfficerNasty Member Posts: 5

    And im calling BS on this whole hacked story... he shows screen shots from the WotLK login screen, and said it happened this past weekend, with the rant being on the 21st of December.

     

    That login screen hasn`t around since the Shattering back in November.   This just seems to be just some lame anti-wow rant written by someone who pays about as much attention to detail as a fire hydrant.

  • Dreamo84Dreamo84 Member UncommonPosts: 3,713

    If anyone doesn't use an authenticator at this point, I have NO sympathy for them getting hacked. Sorry, but enough people have been hacked that its worth the 6.95.

    Also, anyone who really thinks that Blizzard is making big bucks off of a 7 dollar authenticator with free shipping is nuts. I imagine the server costs alone in running those authenticators is worth more than that.

    The fact is, with my authenticator my WoW account is more secure than my bank accounts. I really wish Blizz would just bite the bullet and give them away. Then atleast they could say "We gave you security, why didnt you use it?"

    image
  • Daffid011Daffid011 Member UncommonPosts: 7,945

    Originally posted by Rydeson

    FYI..  Keep this in mind peeps..

         I for one and 2 good friends were all hacked within 2 weeks of each other..  During the conversation on the phone with the Blizzard employee to restore my account and items, she politely informed me that her account too was hacked that week and she is also waiting for  restoration..  She informed me her hack was from a virtually undetectable "keylogger" that way missed by updated virus programs.. The keylogger was piggyback upon a "ADDON"..  I and 2 friends all use the same addons, 2 of us auto update our addons, the other scans and self installs..  In any case, what happens is the keylogger is browser activated.. So when you go to use the Blizzard Armoy or Forums and it sends you to an "account" log in screen.. THIS is where it gets you.. YOU think you are logging into WoW when in fact you are also keylogging your info..   The customer service employee also informed me that such keyloggers are almost inpossible to detect because when you do updates to addons, the virus can be installed and removed befor any anti virus updates can keep up with them.. 

        In conclusion, Blizzard is very aware of this problem, they are very aware that many keyloggers are piggybacked on ADDON's and they are very aware that it is browser activated.. WHICH some suspect was the real cause of the "new" website for WoW and the Battlenet changes..   BTW.. NONE of us.. ALL 4.. never recieved anything in emails from Blizzard prior to the hacks.. All 4 us were ADDON hacked, not fake emails..

    PS.. NO matter how good our anti virus is and updated.. New hacks are always one step ahead.. It is always possible to get infected by new viruses before your computer even knows it.. Anti virus programs are REACTIVE, not proactive :) 

    Happy Holidays

    There is ZERO ways for a virus to piggyback on an addon in the manner you are suggesting or to be "browser activated". No offences, but it is clear that how addons work is well beyond your understanding and you are spreading misinformation which isn't doing anyone much good. 

    A wow lua addon CANNOT execute a virus. There is no code that wow will execute in an addon that will allow this to happen: none, zero, zip, nothing.  End of story.  You can download 10,000 addons that have viruses in the download and unzup them to your addon folder, but they will never ever execute.  Really, that is the truth.  Nor will they be activated by your browser as seem to be suggesting.  They can piggyback in the zip file all they want, but they will never do anything. 

    The only possible way a virus pretending to be a real addon can infect a computer is if the person downloading it somehow installs/executes it.  That would require unzipping it to a system folder, running a "special" install program or in your case using an auto updater. 

    The fact that you use an auto updater shows just how vulnerable you made your computer.  Again no offense, but just by doing that you have circumvented your computers security.  

     

     

    P.S.  Curse.com is owned by a gold selling company.  So is thottbot, wowhea, mmo-champion and just about every other major mmo site.  Just another reason not to use a program that auto-installs programs onto your computer.  Agree?

  • OfficerNastyOfficerNasty Member Posts: 5

    The guy above me doesn`t know what hes talking about either..

  • MMOManiacsMMOManiacs Member UncommonPosts: 191

    ^^

  • A1D3NA1D3N Member UncommonPosts: 276

    i got a password reset email today from blizard..... ive only ever had a trial account with wow lol, maby some1 tried getting on my account, this account is like 2years old minimum, it was weird lol, not that i care but i have no idea how anyone would get my info, i dnt even like the game or play it

    Currently Playing:
    ...... :(

  • Daffid011Daffid011 Member UncommonPosts: 7,945

    Originally posted by OfficerNasty

    The guy above me doesn`t know what hes talking about either..

    Then go right ahead and elaborate where people are wrong.  Don't just toss out useless comments like this.

     

    As I said.  Download addon, unzip to addon folder.  100% safe. 

     

    Anything beyond that is user error.

  • Daffid011Daffid011 Member UncommonPosts: 7,945

    Originally posted by A1D3N

    i got a password reset email today from blizard..... ive only ever had a trial account with wow lol, maby some1 tried getting on my account, this account is like 2years old minimum, it was weird lol, not that i care but i have no idea how anyone would get my info, i dnt even like the game or play it

    Odds are that a hacker got your email address and sent you a fake email that looks like it came from blizzard. 

  • LizardKing89LizardKing89 Member UncommonPosts: 61

    Originally posted by Fendel84M

    If anyone doesn't use an authenticator at this point, I have NO sympathy for them getting hacked. Sorry, but enough people have been hacked that its worth the 6.95.

    Also, anyone who really thinks that Blizzard is making big bucks off of a 7 dollar authenticator with free shipping is nuts. I imagine the server costs alone in running those authenticators is worth more than that.

    The fact is, with my authenticator my WoW account is more secure than my bank accounts. I really wish Blizz would just bite the bullet and give them away. Then atleast they could say "We gave you security, why didnt you use it?"

    I wish they would have included them with this expansion or something.  I can't imagine not having one of your account.

  • wolftamerwolftamer Member Posts: 29

    Originally posted by Daffid011

    Originally posted by OfficerNasty

    The guy above me doesn`t know what hes talking about either..

    Then go right ahead and elaborate where people are wrong.  Don't just toss out useless comments like this.

     

    As I said.  Download addon, unzip to addon folder.  100% safe. 

     

    Anything beyond that is user error.

     Try reading this article about how worms work > http://www.thehackerslibrary.com/?p=39 < what you will notice is that what worms will do is get onto your computer and can actually create a backdoor for a trojan or other malware to get onto your computer with.  This means a keylogger could find it's way onto the computer, but in general it doesn't require activation and can simply be on the website of the addon.  I will agree that the addon itself may not introduce a virus or whatever just by running wow, but this is one example that I think most people really aren't aware of.

     

    However, I wouldn't be surprised if you could still activate a virus or malware just by the addon being on your computer and a worm or something activating it without the need of an executable.  But I'm not a virus programmer or anything, so i can only research what other people know.

  • OfficerNastyOfficerNasty Member Posts: 5

    Don`t mind him wolf.. I didn`t respond to him because I didn`t feel like trying to explain the million ways someone can have their account stolen (and yes, its stolen, not hacked. For it to be hacked that would mean the guilty party hacked Blizzards servers) because some people are just too dense to get it.  He wants ~elaboration~... its all over the internet.

  • Daffid011Daffid011 Member UncommonPosts: 7,945

    Originally posted by wolftamer

    Originally posted by Daffid011


    Originally posted by OfficerNasty

    The guy above me doesn`t know what hes talking about either..

    Then go right ahead and elaborate where people are wrong.  Don't just toss out useless comments like this.

     

    As I said.  Download addon, unzip to addon folder.  100% safe. 

     

    Anything beyond that is user error.

     Try reading this article about how worms work > http://www.thehackerslibrary.com/?p=39 < what you will notice is that what worms will do is get onto your computer and can actually create a backdoor for a trojan or other malware to get onto your computer with.  This means a keylogger could find it's way onto the computer, but in general it doesn't require activation and can simply be on the website of the addon.  I will agree that the addon itself may not introduce a virus or whatever just by running wow, but this is one example that I think most people really aren't aware of.

     

    However, I wouldn't be surprised if you could still activate a virus or malware just by the addon being on your computer and a worm or something activating it without the need of an executable.  But I'm not a virus programmer or anything, so i can only research what other people know.

    Thanks Wolftamer.  I do appreciate the information, but I am familiar with browser exploits and various other types of attacks.  No expert by any means, but familiar enough.  Check my post history in threads like this and you will see I'm a long time and firm believer in these types of attacks.

    The issue I was talking about was specifically ADDONS bieng the source of compromised accounts and nothing beyond that.  Somehow OfficerNasty seems to have missed that, but such are the ways forums users who just registered on the forums and just spew one liners and venom.  image

     

    Again, I don't debate that a browser attack or anything in that realm might be the source of players account related problems.  A worm doesn't need to "piggyback" an addon and people do not need to beware of addons as a result.

  • OfficerNastyOfficerNasty Member Posts: 5

    I don't spit venom.. what the hell is wrong with you?  I'm not a fricken lizzard.... hippie..

  • SwaneaSwanea Member UncommonPosts: 2,401

    Everyone who signs up at any website that is anywhere close to related to gaming (Even movie websites) will get spam mail claiming they are blizzard saying there are problems with their account.

     

    Why do people rush to believe them?  Your account isn't hacked because you got an email.  Your account is now hacked since you rush to click the link in your email that "they" sent and logged in.

     

     

    If you at ANYTIME You think your account might have been compromised or anything, type in www.battle.net, and check yourself.  Then get an authenticator on your phone for free, and quit whining.

  • Stuka1000Stuka1000 Member UncommonPosts: 955

    Always amazes me how the WoW fanbois come out in force to defend Blizzard whenever a post like this is created.  Let's look at this in a logical fashion shall we?

     

    Truth number one is that most end users have insufficient security on their systems.

    Truth number two is that most people use the same dumb password & email address for everything 

    Truth number three is that most end users are very bad at maintaining security; regular virus scans etc.

     

    That's the end users done and most people that read this will be guilty as charged with one or more of those truths.  Now onto Blizzard.

     

    Truth number one is that Blizzard know that all the above are true.

    Truth number two is that rather than beef up their own procedures to combat account theft they have identified a money making opportunity by selling the authenticator, which shows a mercenary attitude and complete lack of respect for their customers.  What's more this stance is counter-productive as they likely spend what revenue is recieved in customer support to recover the accounts that do get hacked.

    Truth number three is a simple one.  If Blizzard wished to they could make their security as difficult to break as any bank and they have the resources to do so.  The fact is that they would rather make a few extra pennies from the long suffering subscribers so make of that what you will.

  • marowitmarowit Member UncommonPosts: 268

    A friend of mine had his WoW account hacked, then it got  aperma ban, now he created a new one, just after reaching 84 it was hacked again, they had his email password and used that to get the paswords of every thing he had a user on, forums games etc. after scaning for 1 week with dozzens of softwares he found a keylogger, gues from where he got that? Porn:)

    __________________________________
    Remember the good old days when devs made games just for the sake of making a great game?
    They are forever gone now all they care is about how much they can earn from them, if they can't make millions they won't make that game.

    REMEMBER THE OLD DAYS AND REGRET THEY HAVE PASSED.

  • majimaji Member UncommonPosts: 2,091

    Originally posted by eric1000

    Truth number three is a simple one.  If Blizzard wished to they could make their security as difficult to break as any bank and they have the resources to do so.  The fact is that they would rather make a few extra pennies from the long suffering subscribers so make of that what you will.

    That is nonsense. How likely accounts such as those on WoW get "hacked" will always depend to some degree on the user. And if the user is an idiot, then Blizzard can do what they want, the account will get hacked.

    Let's play Fallen Earth (blind, 300 episodes)

    Let's play Guild Wars 2 (blind, 45 episodes)

  • Daffid011Daffid011 Member UncommonPosts: 7,945

    Originally posted by eric1000

    Truth number one is that Blizzard know that all the above are true.

    Truth number two is that rather than beef up their own procedures to combat account theft they have identified a money making opportunity by selling the authenticator, which shows a mercenary attitude and complete lack of respect for their customers.  What's more this stance is counter-productive as they likely spend what revenue is recieved in customer support to recover the accounts that do get hacked.

    Truth number three is a simple one.  If Blizzard wished to they could make their security as difficult to break as any bank and they have the resources to do so.  The fact is that they would rather make a few extra pennies from the long suffering subscribers so make of that what you will.

    1) Everyone knows that is true.

    2) How much do you think blizzard makes of authenticators?  $6.50 includes shipping.  I doubt they make a dime off of them. On top of that blizzard keeps making new apps for mobile devices that are FREE.  How much money do you think blizzard makes off of a FREE application?  If they were in this to make money, why would they make free versions for people? 

    They give them out for free to "beef up their procedures" as you put it.

    3) The problem isn't players logging into blizzards website.  The problem is players clicking on email links, videos and any number of other security issues.  Please answer this question, what would you have blizzard do to keep players from making mistakes with their account information?  Should they monitor players email for phishing emails?  Should they monitor what websites players visit to keep you from going to hacking related sites?  Should they force players to not use the same username/password on websites that they do in wow?

    Really, what more can a game company do to keep its players from being insecure?

  • ronubleronuble Member Posts: 1

    actually, when your account is stolen of course its your fault. Probably you used a pishing website , or gave your account to someone or used the same user/pass comb in some website about wow... etc. BUT, the important thing is that you did something wrong, your account doesn't get hacked by a malicious miracle:P

    AND, just for you to know, trial accounts are not useful for gold sellers, there are limitations so try to know what your talking about before you blame blizzard. As a side note, i hate both wow and blizzard, its so pop that it makes me mad, so no, this is not a fanboy talking. 

    You should be happy, by the way, about blizzard's position regarding hacked accounts;  most companies don't even bother when you get hacked -when accounts get hacked in ncsoft games you receive a "your an idiot, fuck you " mail :P and that's all , i know it because some of my guildies (ex wow players) of aion lost their accounts and then blamed ncsoft , ncsoft just suspends your account so nobody sells gold with it, and that's if you'r lucky.

  • wolftamerwolftamer Member Posts: 29

    Daffid011 I did mention I could see the possibility of a virus being hidden in the addons, then a worm activating them either through a web browser or I wouldn't be surprised if through the auto updater.  That's why I mentioned I'm not completely sure on the possibilities, but I could see something like that happen.

Sign In or Register to comment.