!!! Alert if you use Curse.com client or visited any major WoW sites !!!

[Tim]

Hey all, just a friendly alert, I've had multiple people PM me today saying their accounts have been compromised and/or they suddenly started receiving spam from major WoW websites that use disposable tracking enabled email addresses (eg, tim_multiboxing.com@someemail.com).

This coincides with a major Flash vulnerability (yes, again!) that enables your PC to become infected simply by viewing something such as a flash advertisement (such as seen in the Curse client, big WoW websites, etc).

WoW Insider pretty much confirmed the issue, as seen here: The Lawbringer: The dangers of addon auto-updaters


Also there are a rash of Curse posts about it, as seen here: http://www.google.com/url?sa=t&sourc...oTylAA&cad=rja (VIEW CACHE!!!) Note: These posts are being deleted, so it may dissapear


So update your Flash, update your Virus scanner, change your passwords on a DIFFERENT computer, and potentially flat out re-install your OS.

Just a note: The keylogger is recording all logins to all email websites (gmail, hotmail, etc), your WoW information, your banking information, and any user input box which appears to ask for a username/password.

On a more specailized note: Major WoW websites *have* been hacked before. I know this because I've have actually seen the gigantic user database lists spanning hundreds of thousands of registered accounts. These lists are traded on the black market to companies such as keystroke loggers, gold farmers, etc.

[Nghtmr9999]

To add to this, use a password generator to generate your passwords.

e.g Security Guide for Windows - Random Password Generator

I use different random ALPha-numeric passwords for all my log-ins

[Tim]

Originally Posted by Nghtmr9999

To add to this, use a password generator to generate your passwords.

e.g Security Guide for Windows - Random Password Generator

I use different random ALPha-numeric passwords for all my log-ins

Sweet I just created a new password for my WoW account, and it is super easy to remember!

phAqUFRuYa!pAw?*q@THadachak*@3k3S#bu+eP&Ew*Pe4a2+AHa9raBreBeph

[Zub]

a keylogger will log your password no matter what it is..

Get an authenticator. it will help

[Ualaa]

Run Firefox + NoScript + Adblock.
Try not to go to questionable sites.

Don't use your wow/battlenet email for anything else.

Attach an authenticator to your account.

Have anti-virus software and/or internet security software, and keep it up to date.
Ditto on flash, windows updates, etc.

No one is 100% safe, unless they only use the given computer for warcraft and that is it.

Even those who say MACs are safe, it's not because they are but because a hacker/virus maker would rather attack 100,000,000 users than 25,000; being one of the smaller pool of users doesn't guarantee safety, but it helps.

[Tim]

Originally Posted by Zub

a keylogger will log your password no matter what it is..

Get an authenticator. it will help

Unfortunately most the keyloggers deal with Authenticators quite well

[Nghtmr9999]

This is why having a dedicated gaming computer for gaming is the best plan of action. By avoiding the internet as much as possible, you close out most of the risk of catching a virus.

If you want to surf the web, try a virtual PC or surf on an iPad

[Tim]

Originally Posted by Nghtmr9999

This is why having a dedicated gaming computer for gaming is the best plan of action. By avoiding the internet as much as possible, you close out most of the risk of catching a virus.

If you want to surf the web, try a virtual PC or surf on an iPad

iPad to surf the web, ha ha, only the web whereas Apple decides they can make money, or has no interest in making money from.

Oh and a side note, browse your websites from a VMWare or VirtualPC system on your normal system. That way there is 0 chance of getting infected, and if your VM/VPC gets infected, you can just restore the HD state to beforehand.

[Nghtmr9999]

Originally Posted by Tim

Oh and a side note, browse your websites from a VMWare or VirtualPC system on your normal system. That way there is 0 chance of getting infected, and if your VM/VPC gets infected, you can just restore the HD state to beforehand.

Speaking of a Virtual PC system Tim, I'm looking to use one for that project you assigned me. I used VMWare with Ubuntu for one of my classes. Any suggestions for a free GUI Linux-based Virtual PC? I heard Virtual Box is pretty good.

[Tim]

Originally Posted by Nghtmr9999

Speaking of a Virtual PC system Tim, I'm looking to use one for that project you assigned me. I used VMWare with Ubuntu for one of my classes. Any suggestions for a free GUI Linux-based Virtual PC? I heard Virtual Box is pretty good.

If your host OS is Windows, I would stick with VMWare 3.x, especially because it emulates a graphics card.