Trojan targets World of Warcraft gamers

Malware snaffles virtual booty

By John Leyden • Get more from this author

Posted in Anti-Virus, 8th May 2006 10:22 GMT

Free whitepaper – Vulnerability management buyer's checklist

Security watchers have discovered a Trojan that's designed to steal user names and passwords from World of Warcraft players.

Wowcraft, which also attempts to disable security software packages on compromised PCs, has been planted on maliciously constructed websites. Unprotected Windows users visiting these sites can get infected through malicious browser pop-ups. The malware also spreads through infectious email attachments or as files downloaded from P2P networks.

Virtual gold and other booty obtained via compromised accounts can be converted to cash, as Tom's Hardware reports, but it's unclear if this is the motive of the attack. Wowcraft is the latest in a series of Trojans targeting the World of Warcraft community, some of which also attempt (example here) to steal the identities of players of other online games. ®

Free whitepaper – Avoiding 7 common mistakes of IT security compliance