World of Warcraft strikes back against game-related cybercrime

Filed Under: Data loss, Malware

Blizzard token authentication

Blizzard, the company behind the popular online role-playing game "World of Warcraft", has announced that it is producing a hardware token device to help protect its gamers against cybercriminals.

In a trick nabbed from an increasing number of online banks, Blizzard is fighting back against hackers who have feasted upon game players on poorly protected PCs in the past by introducing a small hardware device that produces a one-time six-digit number that can be entered at login alongside the user's regular username and password.

Even if keyboard logging spyware has infected the PC and can grab the username and password it won't find the random number very useful as it expires within a couple of minutes.

What has become clear in recent years is that hackers are actively trying to steal from players of online MMORPGs, whether it be "cyber-money", spells or armoury that they are after. These virtual assets are sometimes sold for real money via the internet. By stealing usernames and passwords, hackers can break into these games and steal other player's virtual identities and belongings.

It should be pointed out that devices like this aren't a complete answer to the problem of cybercriminals stealing your cloak of invisibility or sword of Thorin, but they certainly make life more complicated for the cybercriminals, and could help kill off the market for databases of stolen user ids.

Blizzard's online store says that the devices are only currently available in the USA, and are being marketed for $6.50.  At the time of writing they appear to be sold out - hopefully that means plenty of WoW players have recognised the value of a device like this and are taking Blizzard up on the offer. 

By the way, if you have a problem controlling employees in your company playing games like World of Warcraft in the office, we have a solution for you.

,

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

About the author

Graham Cluley is senior technology consultant at Sophos. The readers of Computer Weekly voted him security blogger of the year in 2009 and 2010, and he pipped Stephen Fry to the title of "Twitter user of the year" too. Which was nice. He was also named "Best Security Blogger" by the readers of SC Magazine in 2011. You can subscribe to Graham's updates on Facebook, follow him on Twitter and circle him on Google Plus for regular updates.