***IMPORTANT*** Keyloggers on Curse Gaming / ui.worldofwar.net

[Sinap]

Don't know much about keyloggers, but couldn't you hit a few keys before targetting the password field to fox it?

But then you have a load of random letters in your password and to delete em you need to erase which they can probably see when you press the delete button, dunno though, not a Keylogging expert myself here either.

[Bob]

Don't know much about keyloggers, but couldn't you hit a few keys before targetting the password field to fox it?

Keyloggers are very simple programs that do exactly what the name says: they log every keystroke you make on the keyboard.  If that keystroke is a letter, a number, some kind of control/function key doesn't matter.

Of course this will generate quite a lot of data, but it's not hard to make programs to filter out what you want.  And if you know what to look for it isn't too hard either.

The things you can do to prenvent this, is to keep at least a sowftware firefall running (can reccomend ZoneAlarm) and be suspicious about what you let through it.
Using the "remember my username" feature as mentioned by Bastet isn't a stupid thing either, but getting hold of your username isn't most likely too difficult, so don't rely only on this.
Also don't install any kind of silly addon you find.  Stick with the well known and much used.  It also doesn't hurt to look through the addonfolder before you copy it into your WoW directory: these addons shouldn't contain any kind of executable files (.exe, .bat, .com and so on).

[StrontiumDog]

http://www.microsoft.com/technet/security/Bulletin/MS06-054.mspx
 
http://www.microsoft.com/technet/security/Bulletin/MS06-055.mspx
 
Microsoft have released a security patches for IE for exactly this type of graphic exploit. The fixes above should help.