{"id":99858,"date":"2016-07-26T15:41:42","date_gmt":"2016-07-26T13:41:42","guid":{"rendered":"http:\/\/mygaming.co.za\/news\/?p=99858"},"modified":"2016-07-26T15:43:00","modified_gmt":"2016-07-26T13:43:00","slug":"how-world-of-warcraft-hackers-can-steal-your-items-using-one-line-of-code","status":"publish","type":"post","link":"https:\/\/mygaming.co.za\/news\/pc\/99858-how-world-of-warcraft-hackers-can-steal-your-items-using-one-line-of-code","title":{"rendered":"How World of Warcraft hackers can steal your items using one line of code"},"content":{"rendered":"<p>Scamming has been a part of multiplayer games since they first implemented trading systems, and has become a common phenomenon in every MMORPG.<\/p>\n<p>However, a devious and more sinister\u00a0type of attack has <strong><a href=\"https:\/\/blog.gdatasoftware.com\/2016\/07\/28809-world-of-warcraft-one-simple-line-of-code-can-cost-you-dearly\" target=\"_blank\">surfaced <\/a><\/strong>in <strong>World of Warcraft<\/strong>, which simply requires the victim to enter one line of code in order to work.<\/p>\n<p>The following situation\u00a0is an example of the attack:<\/p>\n<ul>\n<li>A high-ranked player walks up to your character in-game and promises to share or give you some cool items (rare mounts, weapons etc.)<\/li>\n<li>The player says they are attempting to give you the item but you cannot see\u00a0it in the trade window.<\/li>\n<li>The player then asks you to enter the following line of code into your\u00a0chat window to fix the &#8220;bug&#8221;:\u00a0<strong><em>\/run RemoveExtraSpaces=RunScript<\/em><\/strong><\/li>\n<li>The player can now remotely access your\u00a0character via chat messages.<\/li>\n<\/ul>\n<h3 class=\"my-4\">How it works<\/h3>\n<p>This is what the command actually does:<\/p>\n<ul>\n<li><strong><em><span class=\"codetext\">\/run<\/span> <\/em><\/strong>interprets the following text as a Lua script<\/li>\n<li><strong><em><span class=\"codetext\">RemoveExtraSpaces<\/span><\/em><\/strong> is a built-in function which removes unnecessary spaces from text<\/li>\n<li><strong><em><span class=\"codetext\">RunScript<\/span> <\/em><\/strong>is a function that executes text as Lua code.<\/li>\n<\/ul>\n<p>This is a threat because after obliviously entering this code, the\u00a0<strong><em>RunScript<span class=\"codetext\">\u00a0<\/span><\/em><\/strong><span class=\"codetext\">function is called every time a chat message is received.<\/span><\/p>\n<p>This means that every chat message you receive will be interpreted as Lua code, allowing other players to control your user interface via chat messages.<\/p>\n<p>After you have opened the backdoor by entering the code into your text chat, the player can send you\u00a0<strong>invisible chat messages which can control your interface<\/strong>.<\/p>\n<p>Hackers can use this backdoor to force you to give away your items and virtually rob your character.<\/p>\n<p>This unique attack requires only a bit of social engineering for the victim to unknowingly hand over control to the attacker, who can then force them to trade away their items.<\/p>\n<hr \/>\n<h3 class=\"my-4\">More gaming news<\/h3>\n<p><strong><a title=\"Permalink to 5 things you need to know before buying a hard drive in South Africa\" href=\"http:\/\/mygaming.co.za\/news\/hardware\/98990-5-things-you-need-to-know-before-buying-a-hard-drive-in-south-africa-and-where-to-buy-one.html\" rel=\"bookmark\">5 things you need to know before buying a hard drive in South Africa<\/a><\/strong><\/p>\n<p><strong><a title=\"Permalink to The biggest movie releases in South Africa this week\" href=\"http:\/\/mygaming.co.za\/news\/entertainment\/99626-the-biggest-movie-releases-in-south-africa-this-week-6.html\" rel=\"bookmark\">The biggest movie releases in South Africa this week<\/a><\/strong><\/p>\n<p><strong><a title=\"Permalink to Pokemon GO\u2019s player numbers are steadily declining\" href=\"http:\/\/mygaming.co.za\/news\/nintendo\/99750-pokemon-gos-player-numbers-are-steadily-declining.html\" rel=\"bookmark\">Pokemon GO\u2019s player numbers are steadily declining<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This one dangerous line of code can open up your World of Warcraft character to malicious attacks.<\/p>\n","protected":false},"author":232,"featured_media":89143,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[20,3],"tags":[31,11360,17193,18095,9463,20768,20770,469,2317,11325,18917,641],"class_list":["post-99858","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-features","category-pc","tag-active","tag-attack","tag-chat","tag-code","tag-hacked","tag-lua","tag-message","tag-mmo","tag-mmorpg","tag-warcraft","tag-world","tag-wow"],"_links":{"self":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/99858","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/users\/232"}],"replies":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/comments?post=99858"}],"version-history":[{"count":0,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/99858\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/media\/89143"}],"wp:attachment":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/media?parent=99858"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/categories?post=99858"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/tags?post=99858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}