3 ms·
To my knowledge, this is the first attack that is in the wild against RSA and similar SecurID token type devices. Basically, the virus intercepts your keystrok
by illumin8 17y ago
To my knowledge, this is the first attack that is in the wild against RSA and similar SecurID token type devices. Basically, the virus intercepts your keystrokes while you are logging in, instantly submitting (your constantly changing code) to Blizzard, and removing the authenticator device from your account.
I read before that the average World of Warcraft account is worth about $10 on the black market, much higher than a credit card number, so that explains why it is one of the first targets for new and innovative hacks that are designed to thwart 2 factor authentication.
- cheald 17y agoWoW authenticator tokens are single-use with a 30-second lifetime. On one hand, it's a testament to Blizzard's effectiveness in pushing them on the playerbase - the fact that enough accounts are protected by them now that the bad guys have to target them specifically is pretty impressive. On the other hand, it's scary that we're at the point now that the bad guys are developing attacks against hardware token-protected accounts. I've read the same thing about a WoW account - it's worth more than a stolen credit card, and is significantly easier to get ahold of. Not what I'd expect, at all, but given the lengths the bad guys go to in order to steal accounts, it seems like it lines up.
- tsally 17y agoIt's not the first time this type of attack has been seen in the wild: http://bits.blogs.nytimes.com/2009/08/20/how-hackers-snatch-real-time-security-id-numbers/ http://bits.blogs.nytimes.com/2009/08/20/how-hackers-snatch-.... This article cites a reported cases in 2008. The first case was probably even earlier. It's not a novel attack; what's interesting is that WoW accounts are valuable enough to attract this type of attack.