World of Warcraft Trojan Found in Fake Curse Client

A trojan has been found, which compromises World of Warcraft accounts. According to officials at Blizzard, even accounts that use the authenticator, both mobile and key fob, as an additional security method can be compromised with this trojan. The trojan is dangerous and officials state that it captures account data as users enter their information.

The trojan, which goes by the name of Disker, appears to be delivered through a fake version of the Curse client. The Curse client provides add-on services for multiple MMOs, such as World of Warcraft. People downloaded the fake version due to the version being an advertised link on search pages.

So far, the trojan is Windows specific. It can not run on Mac. Warnings don’t show up until the trojan runs, unfortunately.

For more information, including how to remove the trojan, see the official post on the World of Warcraft forums. Technical Support has been actively answering users questions.

Just to be safe, remember to only download the client from the official Curse Client page.