General Discussion

Re: Account hacked

myrroddin — Tue, 06 Oct 2009 07:24:30 GMT

Nevermind the obvious: addons are loaded after you put in your user name and password, not before. In fact, those are two different servers at Blizzard. Ever notice that sometimes the login server is down but the world server is up? You can try this little test:

install LOTS of addons, even stuff you wouldn't normally use
time the Loading screen, which is after the login screen

Repeat those two steps above with ZERO addons. Notice how faster the login is? That's all your addons loading, AFTER you have entered your user/pass

WoW is sandboxed, meaning it has no internet access other than to and from the Blizzard servers. If you got hacked, then sorry it happened to you, and good luck with the process of getting your stuff back. In the meantime, don't blame curse.com or its affiliates, hosted addons, or any related matter.

I am locking this thread, just like all other "I got hacked" threads, because the blame is not ours, and the solution lies with you, the player, and Blizzard, helping to get your stuff back.

One final note: if anyone got hacked AND banned for a week or longer, then those of you who are in that boat are to blame, and nobody else.

Re: Account hacked

Wowza1 — Mon, 05 Oct 2009 23:10:42 GMT

Quote:

Originally Posted by magicat777 magicat777" src="/Themes/Common/v6/images/forums/btn-lastpost.gif"/>

How can Curse gaurantee that their Add-On's do NOT have keyloggers/trojans on them?

Simple... a keylogger/trojan requires executable code... Not only does Curse SCAN all the files that get uploaded prior to making them available, addons do not have any executable code... If you're silly enough to run something with a .exe or a .bat, then you're your own self to blame.

Re: Account hacked

Flisher — Mon, 05 Oct 2009 22:14:59 GMT

Sidenote: blizzard is the best investment you can make to protect your wow account, however I would worry more about the other stuff that you got keylogged.

Re: Account hacked

Flisher — Mon, 05 Oct 2009 22:14:01 GMT

addon are LUA file, executed by wow.

They can't include keylogger. that simply not possible (we can't even read or write outside the client without reloading the ui).

As an IT securitu specialist (yes some people earn their living from that), I would like to remind that the vast majority of people getting infected by virus/keylogger are just people simply not updating theyr browser, flash and media player.

Also note that NO sane keylogger folk will use your credential the day they get it. They really want to gather the most stuff possible and let's you bash anyone randomly with random rant, ensuring their infection vector is out of the radar.

Do you really thing that the gas station that clone your credit card will use it overnight? they will wait a few weeks/month to ensure you used it in alot of place to make it harder to traceback. Same apply in the keylogger(while keylogger doesn't fear jail but fear having their infection vector mitigated too quickly).

Another kind of dubass (and you can count anywhere from 10-30% of any forums user, will use the same credential on random forums. their guild forum, than wow. Yes, your favorite cooking website could use is user/pass database and try them in wow, or get hacked silently and someone use the credential from there and test them in wow.

Note that almost all my wow/war/aion friends use the Curse Client, premium and standard, and no one ever got whacked. (they got impossible to guess password, patchedcomputer and anti-virus).

Re: Account hacked

Lazare — Mon, 05 Oct 2009 21:42:22 GMT

The one thing everyone is forgetting... get the Blizzard Authenicator.... either as the $6.50 item from the Blizzard store, as the iPod Touch/iPhone application that is free or the .99 application for most other phones. Then it doesn't matter if they have your login / password. If they don't have your authenicator, they can't get in.

Re: Account hacked

teek5449 — Mon, 05 Oct 2009 21:38:39 GMT

Holy thread rez.... please read up on what addons are, what they can do, and what they can not do. The only culprit is the one who is typing on the keyboard at your computer. yes, yes, you are the safest person on the internet and never do anything that could put your computer at risk. (/sarcasm) There are more than a few legitimate ways that your account was hacked.... and while addons can be one possible way there is no way that a standard addon (non exe) is the origination of your hack.

Just stop the fear-mongering before it starts, please. I am not dismissing your problem but just get the idea that you were hacked via a non-exe addon. I am more than willing to help you try and determine the origin of your hack if you like.

Re: Account hacked

magicat777 — Mon, 05 Oct 2009 21:16:38 GMT

How can Curse gaurantee that their Add-On's do NOT have keyloggers/trojans on them?

Two of my accounts were also hacked after downloading the Auctioneer add-on from the Curse site. Why blame Curse? Because TWO accounts were hacked...the only commonality between the two computers was that they were running Curse and the AuctioneerSuite for WoW. One was a PC, the other a Mac. The chance that both computers had WoW accounts hacked via some OTHER third-party app is nearly impossible. My wife's computer is only ever used for WoW and occassionally some web browsing. She doesn't buy gold, she doesn't visit supsect websites, she doesn't do anything but play WoW in the vanilla style that most are accustomed to.

That leaves the Curse Client and it's Add-ons as the culprit. In addition, Blizzard has had a NUMBER of compromised accounts, all which seem to link back to running the Curse client. While it may be impossible to prove without litigation and subpoening Curse's logs, the best people can do is to avoid using ANY third party tools where there's no transparency or validation of the add-ons that are being placed on your computer.

If VISA can have their computers hacked and personal account information stolen, there's nothing to say the same can't happen at Curse.

Re: Account hacked

wramphist — Tue, 13 Jan 2009 15:14:08 GMT

ok, here is the best advice i can give any of you. do NOT type your password or account name into the appropriate boxes in WoW login screen. yes, i said DO NOT. here is what you do instead (my guild practices this and we have not had a hack in over a year):

1.) create a hidden text file or create a text file that only YOU can access on your account in Windows.

2.) in the body of that text file, type your WoW account name and password.

3.) save the file somewhere accessible (i put a shortcut on my desktop and named it something really ambiguous)

4.) MOST IMPORTANT STEP!! when attempting to log on to WoW server, open the text file and use cut and paste methods to insert your account name and password (highlight and copy your account name, click inside of account name box in wow login screen & use <control> - V to paste into box, rinse and repeat for your password)

if you understand what i have typed and follow those instructions every time you log into WoW, you will have at least bypassed and defeated any keylogger installed on your system.

i highly recommend that you scan all of your addons upon initial download, and again after installing it. i also suggest that you use a very good virus scanner and ad-ware removal program. all of this is common sense really, but for some, seeing it in print might just re-awaken those old memories and good practices.

oh yeah, dont be a retard and share your account info with anyone you dont implicitly trust, thats another great way to lose your characters and items.

Re: Account hacked

zeuseason — Tue, 13 Jan 2009 12:57:31 GMT

If you got hacked, Blizz'll restore what you lost (for the most part esp if recent) and they won't suspend your account for a week. Trolling is as trolling does?

Re: Account hacked

darkreign11 — Tue, 13 Jan 2009 12:00:35 GMT

Quote:

Originally Posted by teek5449 teek5449" src="/Themes/Common/v6/images/forums/btn-lastpost.gif"/>

Read the blue posts as they are from Blizz themselves. HERE Addons from a trusted site like Curse.com will not contain a keylogger / virus / etc. Please don't start up this same drawn out "OMG I got hacked only after I installed AddonX from SiteX" topic. It's old and has been discussed many times. Follow the advice given by Blizz in that link and let's drop this post before all the fear mongering gets out of hand.

Agreed. People seek to tarnish or blame something because they can. Not because it was the cause.

Re: Account hacked

hogit69 — Tue, 13 Jan 2009 06:54:46 GMT

Everyone in here should know. that there are programs that will run threw common passwords. too keep from being hack make your passwork long and use numbers as well. something like this ( j6k54n34mbh685) makes it hard to hack. why long pw and use numbers. if they dont get it in fast. they dont want too get caught so they move on .and change it once a month as well. when loggin in do not hit remember my name or password. if you have mozilla dont hit remember this password.saving your pw to your comp is by far the worst thing you can do.!!!! run adware checks, clear temp files and clear passwords. if you leave no tracks they cant hack. do that before each time you start up. gl and happy playing.

Re: Account hacked

teek5449 — Mon, 12 Jan 2009 15:12:25 GMT

Read the blue posts as they are from Blizz themselves. HERE Addons from a trusted site like Curse.com will not contain a keylogger / virus / etc. Please don't start up this same drawn out "OMG I got hacked only after I installed AddonX from SiteX" topic. It's old and has been discussed many times. Follow the advice given by Blizz in that link and let's drop this post before all the fear mongering gets out of hand.

Re: Account hacked

JewDew4 — Mon, 12 Jan 2009 05:50:58 GMT

I'm pretty sure you've done on a site getting something unknown . Curse is safe ! I got hackede BEFORE i knew of Curse !

Re: Account hacked

Wowza1 — Mon, 12 Jan 2009 04:30:32 GMT

Even if you use login info on Curse that is identical to login info for Warcraft, it is highly unlikely anything happened from you using an addon from here (unless you used a .exe).. On that note, currently there are a LOT of skimmers out there that will log keystrokes.. Careful of sites you browse but curse is safe.

Re: Account hacked

brokenmachine69 — Mon, 12 Jan 2009 02:54:05 GMT

My account got hacked last night. I downloaded some mods from curse the night before last but other than that I can't thing of any other way they could have gotten my account info. All of the mods that I downloaded were popular addons. Here is a list of what I got.

Recount (Preservation)

RatingBuster