Ars Technica has a piece on a new tojan called "Infostealer.Wowcraft" that targets World of Warcraft accounts.According to Symantec, a new trojan called "Infostealer.Wowcraft" is making the rounds. Unlike many malicious programs, however, it makes no attempt to steal your credit card information. Instead, it goes after something much more personal—your World of Warcraft account.
The trojan, which is a modified version of a similar piece of nastyware that had already been detected in the wild, installs itself in the startup portion of the registry, disables any running anti-virus software it can find, and launches a keylogger process when it finds any windows labeled "wow.exe," "Launcher.exe," "signup.worldofwarcraft.com," or "www.wowchina.com," the latter being Blizzard's official Chinese web site.
Once the trojan has nabbed the unsuspecting user's World of Warcraft account information, it e-mails the name and password back to an address used by the author. Once the thief has this information, he can log on to the stolen account and use it with impunity, as the game does not check for a specific CD key or even geographic location when the user logs in. More... |