It may seem like it didn't need to be said, but they're saying it anyway: gold buyers are
financing the hacking of accounts and the
selling off of people's gear. Since we at WoW Insider have seen a lot of these cases (have even had them happen to some of us) we know how profoundly irritating and even emotionally painful it can be to have all of your work on a character or characters gone in a heartbeat, much less seeing them transfered to other servers and even in some cases having their names changed. Blizzard points out p
ower leveling services as a particular culprit in this trade, saying "
Through our normal support processes and the assistance of players, we also find that many accounts that have been shared with power-leveling services are then hacked into months later, and all of the items on the account are stripped and sold off. Basically, players have paid money to these companies, sometimes large amounts, and they're then targeted by these same companies down the road."Now, this doesn't mean that you shouldn't still be careful with add-ons you download or keep a good anti-virus program on your computer, as we know there are
many malicious trojans out there targeting
World of Warcraft players. But just as clearly, if you use a power leveling service or buy gold, not only are you funding account hacking, you're in danger of seeing your own account hacked as well.
Reader Comments (Page 1 of 2)
2-23-2008 @ 11:37AM
warhound said...
I just got hacked two weeks ago and I have never shared my password or username with anyone and I have the username on remember so I dont type it to avoid keyloggers though it still happened and now my account is still closed due to all the paperwork you have to do to recover it.
Reply
2-23-2008 @ 11:51AM
Def Wolf said...
This happened to a guild-mate a week ago. The hacker took all of his chars' stuff and cleaned out our guild bank except for the gold. Luckily we have a set limit of how much can be withdrawn. I was able to report to a GM and everyone got everything back a few days later.
Reply
2-23-2008 @ 12:04PM
Dan said...
Umm, didn't you post this same thing yesterday? Different link but the page content is the same.
http://www.wowinsider.com/2008/02/22/anti-gold-seller-faq-page-goes-up-at-the-official-eu-site/
Reply
2-23-2008 @ 12:42PM
ryno106 said...
shhhh, he's trying to make a post count...
2-23-2008 @ 12:46PM
Matthew Rossi said...
No, no need for a post count, I'm mostly a columnist here. I just plain missed it and messed up. Ah well, nothing like the internet to rub your face in your mistakes.
2-23-2008 @ 1:19PM
Justin said...
This is the reason I could never be a blogger... All people do is talk $*it
2-23-2008 @ 1:33PM
Dan said...
It's ok Matthew, your warrior columns more than make up for momentary lapses of attention :)
2-23-2008 @ 12:48PM
Ironhide said...
3 things you need to use. Firefox, ClamAV for windows and NoScript Addon for Firefox..
The keyloggers are installed by browsing a site with javascript that downloads and installs the keylogger without you realising it. The script is often installed deliberately on the site, or its installed on a hacked site through cross-site scripting or 0 pixel IFRAME's.
The NoScript addon for firefox works by default denying javascript to run. You get to choose which scripts run, and which domains can run scripts. I deny scripts from domains i dont know or trust.
This isnt 100% effective, but it will help out alot.
Secondly, be very careful the addons you use in WoW itself.
I recommend ClamAV because most of the big name virus vendors are crap, they dont detect alot of things. No vendor is going to detect everything and the bad guys have alot of keyloggers no one will detect, but I have found ClamAV to be the best.
I work in the security field, specifically application securty and the above are the precautions I take. Your never going to be 100% safe, but you can make yourself alot less of a simple target.
Reply
2-23-2008 @ 12:49PM
Eternalpayn said...
That EU though, so a lot of people probably ignored it. :P
Honestly, I'm not so sure it's people buying gold that this is happening to. I'm thinking that it is an exploit in addons, actually. I believe I read that lots of people using CentralUI are having this problem, and people who only use Curse for addons. I have heard it from WoWAce people, however, which is why I haven't updated in forever. I am thinking that there is a Lua exploit that allows these hackers access to your registry, or possibly just to another program that has access to it. My guess is that it was uploaded on to Curse as an addon, and put inside a working addon itself. Also, I believe it was put onto Addon programs this way as well. That's just my theory, however.
Reply
2-23-2008 @ 1:09PM
Mats said...
I think you should downgrade that to a hypothesis. I don't think non-executable files will be able to do any of those things, however the self extractable exe files one downloads, they might be a big problem.
2-23-2008 @ 1:22PM
Ironhide said...
I am willing to buy into that theory, Lua is a scripting language, I am sure you could do some interestingly devious things with it.
The real issue is javascript on websites, even ones you trust.
2-23-2008 @ 7:19PM
Aichon said...
Lua might be a scripting language, but until it gets turned into a machine-readable format (a process called "interpretation"), it can't do anything at all. WoW converts it into a machine-readable format on the fly as you start up the game or whenever you reload your UI. Up until then, the Lua code is no more dangerous than any other text file on your computer.
The whole way that Lua is used in WoW effectively sandboxes it so that none of the Lua code itself can actually impact or interact with the rest of your computer. Now, as was mentioned, executable files that come with the addons could be problematic, or maybe even other sorts of files that get packaged with the addons that you download, but the addons themselves, that is, the .lua and .xml files, are entirely harmless by their very nature.
2-24-2008 @ 4:00PM
Verit said...
Rest assured - just because LUA is a scripting language doesn't mean someone couldn't exploit a private API internal to WoW - even one that isn't accessible from the public API's. How? Using a process called fuzzing. All they need to do is find a method LUA that causes a buffer overrun in the application. A good chunk of javascript exploits in IE and Firefox (and Acrobat) have used this - and javascript is just a scripting language just like LUA.
2-23-2008 @ 1:10PM
wowtard said...
The demand for gold will not stop until the crooked and greedy practice of stretching a games content out to fill monthly subscription coffers subsides.
Reply
2-23-2008 @ 1:15PM
Erixx said...
Does Blizzard REALLY think people care about this?
Honestly, this is no more effective than saying "Don't do drugs!" or "Robbery is bad!"
Is it bad, probably, do the people who do it care, not in the slightest.
Reply
2-23-2008 @ 1:33PM
mattarin said...
this is why i don't install any addons or doing the gold or power level things. they are not trustworthy.
Reply
2-23-2008 @ 1:53PM
Seprin said...
Ummm...here's an idea...disable the stupid free trial accounts...with 10 million people playin the game now you would think word of mouth/tv ads would be more than enough to bring new players into the game.
Reply
2-23-2008 @ 3:52PM
Felwrathe said...
I bought enough platinum in Everquest to know that not only does it hurt the economy, but it's actually pretty futile.
All the money you spend on having the best gear, it just gets replaced by better gear that's unpurchaseable, especially in the higher levels. And if you're in the lower levels, it's pretty easy to just outlevel all that gear anyway. And if you're not spending it on gear, what are you buying? Tradeskill mats? To do what with, exactly?
Reply
2-23-2008 @ 4:49PM
Diabla said...
Actually, not really any of those. It's the damn epic flying skill cost. The hefty price tag on that "fuels the fire" with the fight against gold sellers. Having something everyone wants cost such a high price is virtually going to garruntee folks are going to cut corners. I prefer not to (grinding mine out now) but that's not to say even I haven't thought about it. 3K would have not only kept the epics from being a hand out, but also be more obtainable than at it's current price.
2-23-2008 @ 5:03PM
Felwrathe said...
@Diabla - Ahh. I haven't gotten there yet, so I guess that's why I didn't think of that. Guess that one's Blizzard's fault then...they could have just done what EQ did and make mounts obsolete by adding their own "Plane of Knowledge".... one area that ports to every area in the game...
I'm not sure if I'd want it to be that easy to get around in WoW, but I suppose it couldn't hurt for what seems to be their goal of getting everyone leveled and geared quickly to be ready for new content, and lessening the need for all that currency in the market.
For the record, Shattrath is a sorry excuse for a transportation hub, especially if you're not actually supposed to be there yet [mage portal].