Persistent WoW accounts-hacking problem: complacency is the enemy

Yes, this is yet another news regarding the growingly rampant WoW accounts hacking. And unfortunately, you guys just might have to be paranoid a little bit more.

Roger Thompson, CTO of Exploit Prevention Labs, warns that the gangs are still “incredibly active, and it’s a good exploit.” By now, you should know the hackers‘ MO already. But if not, it’s never too late to find out. Basically, these hackers infect those sites that WoW players usually visit with keylogging software. Now, the sites need not be WoW-related, but is frequented by avid gamers. With the software installed in the computers, the hackers are then able to spy on keystrokes, and ultimately, to steal WoW accounts from unsuspecting players.

As to why WoW accounts are the ones targeted, “The guys working out how to do it are WoW players. We’re pretty sure we know who (most of them) are: a couple of Chinese college students, and it turns out they’re interested in WoW.” They also suspect a Russian gang to be in on it as well.

For their part, Blizzard has already addressed the problem by giving a shout out to the gamers via their official website. “[An] important means of protecting your account information is keeping your system up-to-date. For instance, installing the latest Windows security patch is a good way to avoid exploits designed to steal your login and password details.”

The thing is, it’s most likely that this pilferage of WoW accounts will remain in the community because the players themselves do tend to be lax regarding their software security. Apart from this is the fact that there is an existing market out there for the stolen goods. Says Symantec‘s senior manager for the security response team, “People are willing to buy on the black market. If players themselves were not willing to go outside the games to improve their characters, then there wouldn’t be such a need.”

So at the end of the day, this security problem is still — er — a problem. While there still are no clear-cut mechanisms on how the WoW community can actually police these hackers, as well as a well-founded check and balance mechanism to avert these kinds of incidents, each player would just have to be extra vigilant that these folks with malicious intents on your accounts don’t tread on yours.

“The moral of the story is that if you patch, you’re safe,” concludes Thompson. “If not, be afraid, be very afraid. Complacency is the enemy.”

Via CNET

Yes, this is yet another news regarding the growingly rampant WoW accounts hacking. And unfortunately, you guys just might have to be paranoid a little bit more.

Roger Thompson, CTO of Exploit Prevention Labs, warns that the gangs are still “incredibly active, and it’s a good exploit.” By now, you should know the hackers‘ MO already. But if not, it’s never too late to find out. Basically, these hackers infect those sites that WoW players usually visit with keylogging software. Now, the sites need not be WoW-related, but is frequented by avid gamers. With the software installed in the computers, the hackers are then able to spy on keystrokes, and ultimately, to steal WoW accounts from unsuspecting players.

As to why WoW accounts are the ones targeted, “The guys working out how to do it are WoW players. We’re pretty sure we know who (most of them) are: a couple of Chinese college students, and it turns out they’re interested in WoW.” They also suspect a Russian gang to be in on it as well.

For their part, Blizzard has already addressed the problem by giving a shout out to the gamers via their official website. “[An] important means of protecting your account information is keeping your system up-to-date. For instance, installing the latest Windows security patch is a good way to avoid exploits designed to steal your login and password details.”

The thing is, it’s most likely that this pilferage of WoW accounts will remain in the community because the players themselves do tend to be lax regarding their software security. Apart from this is the fact that there is an existing market out there for the stolen goods. Says Symantec‘s senior manager for the security response team, “People are willing to buy on the black market. If players themselves were not willing to go outside the games to improve their characters, then there wouldn’t be such a need.”

So at the end of the day, this security problem is still — er — a problem. While there still are no clear-cut mechanisms on how the WoW community can actually police these hackers, as well as a well-founded check and balance mechanism to avert these kinds of incidents, each player would just have to be extra vigilant that these folks with malicious intents on your accounts don’t tread on yours.

“The moral of the story is that if you patch, you’re safe,” concludes Thompson. “If not, be afraid, be very afraid. Complacency is the enemy.”

Via CNET