Security watchers have discovered a Trojan that's designed to steal user names and passwords from World of Warcraft players.

Wowcraft, which also attempts to disable security software packages on compromised PCs, has been planted on maliciously constructed websites. Unprotected Windows users visiting these sites can get infected through malicious browser pop-ups. The malware also spreads through infectious email attachments or as files downloaded from P2P networks.

Virtual gold and other booty obtained via compromised accounts can be converted to cash, as Tom's Hardware reports, but it's unclear if this is the motive of the attack. Wowcraft is the latest in a series of Trojans targeting the World of Warcraft community, some of which also attempt (example here) to steal the identities of players of other online games. ®