Article View: alt.games.warcraft
Article #220273Re: Interesting read - Account hacking detective work
From: pvu... PV
Date: Fri, 08 Jun 2007 18:17
Date: Fri, 08 Jun 2007 18:17
15 lines
1357 bytes
1357 bytes
Super...@mindspring.com writes:
>A player got hacked, find out how it was done and what he used to find it:
>Blizzard CS forum:
>http://forums.worldofwarcraft.com/thread.html?topicId=108417129&sid=1
Some of his assumptions are wacky (mods can't connect to the network -
removing them was wasted time). Also, it's quite possible that the
keylogger showed up in tcpview as "wow.exe" without actually BEING wow.exe.
It might be purposely changing it's name to hide from the warden.
Still, not a bad article, and, surprise, the keylogger traces back to
China. *
--
* PV something like badgers--something like lizards--and something
like corkscrews.
Technical Details
Message-ID:
<136j7aftnoi795e@news.supernews.com>Path:
mbox-mo1.pugleaf.net!g2news1.google.com!news3.google.com!sn-xt-sjc-04!sn-xt-sjc-01!sn-post-sjc-01!supernews.com!news.supernews.com!not-for-mailReferences:
<kn4h631onff8hnud40ktp9rlqnkpbiv8df@library.airnews.net>Show Full Headers
Complete Article Headers
Path: mbox-mo1.pugleaf.net!g2news1.google.com!news3.google.com!sn-xt-sjc-04!sn-xt-sjc-01!sn-post-sjc-01!supernews.com!news.supernews.com!not-for-mail From: pv+u...@pobox.com (PV) Newsgroups: alt.games.warcraft Subject: Re: Interesting read - Account hacking detective work Date: Fri, 08 Jun 2007 18:17:51 -0000 Organization: Inline Software Creations Message-ID: <136j7aftnoi795e@news.supernews.com> References: <kn4h631onff8hnud40ktp9rlqnkpbiv8df@library.airnews.net> X-Newsreader: trn 4.0-test76 (Apr 2, 2001) Originator: p...@pobox.com (Paul Vader) X-Complaints-To: ab...@supernews.com Lines: 15 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit