A malicious Trojan hiding in a legitimate World of Warcraft (WoW) add-on is infecting playersâ€™ accounts, according to a note by Blizzard, the gameâ€™s developer.
It seems the malware is posing as Curse, a genuine WoW add-on that can be downloaded from a fake Curse website. Once installed on the userâ€™s computer, the Trojan takes over the playerâ€™s account.
Â “The Trojan acts in real time to do this by stealing both your account information and the authenticator password at the time you enter them,â€ the developer adds.
In a recent update, the company advises players to solve the problem by deleting the fake Curse Client and running scans with an antivirus solution.Â Bitdefender Internet Security is up to date and removes this type of malware.
Blizzard also recommends changing account passwords regularly and downloading software only from official providers, for safety reasons.
World of Warcraft is one of the most popular multiplayer online games with over 7 million subscribers worldwide.