Authenticator Accounts Hacked, ICC Quests, Crimson Deathcharger

[Boubouille]

Trojan succesfully hacks Authenticator Protected Accounts
A new virus spawned on the internet a few days ago and seems to be the first trojan capable of hacking a WoW account protected by an Authenticator. It was confirmed by Blizzard a few hours ago.

After looking into this, it has been escalated, but it is a Man in the Middle attack.

http://en.wikipedia.org/wiki/Man-in-the-middle_attack

This is still perpetrated by key loggers, and no method is always 100% secure.

Basically, what the virus does is fairly simple after you're infected :

• The next time you log in World of Warcraft, the game asks for your Authenticator code.
• The virus intercepts it, send it to another server, and sends a wrong one to Blizzard = You get an error.
• The people behind the virus now have a few seconds/minutes to use the "real" code while it's valid to change your password / empty your account / guild bank.

How to check if you're infected
Just search for a file named "emcor.dll" on your computer, it is most likely located in "C:\Users\(Your user name)\AppData\Temp" but I suggest that you check everything just to be sure. If you do find the file, delete it and make sure you update your anti-virus to prevent any further problem.

To be honest, if you found this file your account is probably already compromised.

What does it mean exactly?

• Yes, you can get hacked even if you have an authenticator, the chances are MUCH lower but you're not invulnerable.
• It definitely isn't an excuse to not have an authenticator. We're talking about a single virus here and the authenticator will save your ass 99% of the time.
• Get a decent anti-virus, buy an authenticator, you'll be safe.

New Icecrown Citadel Quests in Patch 3.3.3 [SPOILER]
Patch 3.3.3 added even more quests to the Icecrown Citadel! They all seem to be part of the same questline and according to the descriptions we can assume it will start from Item #51315, most likely dropped by the Lich King.

• Quests descriptions aren't available yet, the description text for each quest is a transcript of the sound files.
• We can't know for sure how it will drop, the 3 possibilities are: A drop from the Lich King in 25-Man Heroic Mode, drop from the Lich King in 10-Man Heroic Mode, Shadowmourne extra quest rewards.

Thanks to Tyrsenus and the wonderful users who did most of the work in this forum thread.

Quest - Quest: Personal Property
Reward - Item #51316 (Maybe the loot bag for the other items?)
Description
Bring the Sealed Chest to Highlord Darion Mograine in Icecrown Citadel.

You can detect no hinges or openings on this box. Were it not for the shifting of items inside, it could easily be mistaken for solid metal. If anyone could know the method of its opening, it would be Highlord Mograine.

Presumably, opening the box will contain five items, which the player will then return to their respective owners:

Quest - Jaina's Locket
Reward - Item #52251 - Might be tied to Portal: Dalaran. (1 min cooldown)
Description
What's this? He... he kept it.. all this time he kept it! I knew! I sensed a part of him still alive... trapped... struggling. Oh Arthas! Perhaps he might someday remember from what he once was... By the Light may he at last find rest, free from the icy grip of that terrible blade!

Quest - Muradin's Lament
Reward - Item #52251 - Possibly a flavor item to transform into a Frostborn - Frostborn Illusion - Screenshot
Description
Oh lad, how I missed those endless days in Lordaeron, sharpening your skill with this dull blade. Forging you into a weapon meant to withstand the demands of a great destiny. Heh… You sure put them skills to use, didn't you lad? If only I'd been able to stop you that day, how different things migha' been. If only I'da never discovered that accursed blade. Farewell, Arthas, my brother.

Quest - Sylvanas' Vengeance
Reward - Item #52253 - Possibly another flavor item, probably tied to the Lament of the Highborne spell.
Description
So, it is done. I had not dared to trust my senses. Too many times has the Lich King made me to be a fool. Finally, he has been made to pay for the atrocities he imposed upon my people. May Azeroth never fail to remember the horrible price we paid for our weakness, for our pride. But what now, Hero? What of those freed from his grasp but still shackled to their mortal coils? Leave me. I have much to ponder.

Quest - The Lightbringer's Redemption
Reward - Item #52252 - Tabard of the Lightbringer - Screenshot.
Description
Arthas... Alas, hero of Azeroth. You give me a greater gift than you know. Long have I struggled to forgive the prince for his terrible transgressions. My soul has been wracked with unbearable anxiety, dark thoughts, distancing me from the light. I recall clearly... the gleam of pride in his eye as he stood before me, eager to defeat the enemies of the light... eager to defend his people, no matter the cost. It is this memory of Arthas that I choose to keep in my heart. I shall always be in your debt, friend. Thank you.

Quest - Mograine's Reunion
Reward - Item #52200 (Mount!)
Description
Alexandros: Darion, my son. At last I am able to lay my eyes upon you again. The Lich King tormented me without end, Darion. Endlessly he sought to break my will, to force me to serve him, to bind me to his blade. Finally, when events demanded his full attention, he left me. The one memory I clung to Darion, the one thought that kept me from giving in, it was your sacrifice, my son. That again saved me from eternal peril.

Darion: Father, father, I… I feared for your sanity, father, for you, I would give my life a thousand times.

The reward of this quest is most likely the Crimson Deathcharger mount spell added to the game in 3.3.3.

There is only one mount spell, but there are actually two new deathchargers creatures Azure Deathcharger and Crimson Deathcharger, we can assume that the color will change depending on the player's faction.

[Essarim]

Loving all the depth they're adding to Icecrown

[ELYPOP]

Interesting items!

[LordVader]

Deathcharger's looks awsome ;D We can only wait to get live it ^^

[Hezron]

I knew that at some point a Trojan would successfully hack an authenticator protected account, I hate viruses! >.<

But I love the sound of some more IC stuff!

Edit: Just noticed the tabard, looks really nice imo.

[Seriousdoom]

wow, people are really trying hard on taking over WoW accounts.

[Drizzay]

No one is safe!

[Kobomino]

Nice, can't wait to get my own Deathcharger!

[Dentoid]

the authenticator will save your ass

i smiled a little at that :P

[Metian]

For some reasons, this is just only the start about the trojan..

Nice content about IC btw.

[Vehemence]

Holy shit.

[Daxmort]

That sort of hacking attempt has been around for a long while, as they said, it's just increased in notoriety and usage. So long as people don't download silly things off of the interwebz and keep a virus-scanner up-to-date (y'know, the basic rules of the Internet) there's really not much to worry about.

[Dragonshardz]

Trojans at the gates! Oh wait.

I really much like how they are adding up things that should have been in ICC from it's very release. Still, better late than never eh?

[Grimmer]

http://db.mmo-champion.com/s/73324/portal-dalaran/

This was added along with the other quest rewards.

Maybe Jaina's locket gives us a portal?

If you get all 5 items, that's a hell of a reward...

[M1kra]

They should really add more class mounts to all classes, its abit unfair that some classes gets even more mounts through quests

[Marksweep]

It's pretty hard to defend against attacks where you have malicious code running on your computer. An authenticator will still protect against lots of other things like someone trying to guess your password or someone finding out your password by hacking some other site.

[G_PoWeR]

Crimzon Deathcharger for the Horde and Azure Deathcharger for the Alliance?

[Anthonymagus]

Looks like it back to good old common sense to keep your accounts perfectly safe. (as in don't download suspicious files and keep your password secret, sounds incredibly simple but pretty much all hacked accounts can be linked to them)
Doesn't matter what kind of security you use in the end everything can be hacked.

[Grimmer]

They should really add more class mounts to all classes, its abit unfair that some classes gets even more mounts through quests

None of the mounts in this news post are class restricted.

[Rafflesia]

I wonder if you get all of the items or just 1 or 2...