New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus Advice and insight from world-class Apple enthusiasts Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
OS X - Operating System General OS operation information and support

OS 10.5 - WoW account hacked through my Mac


Post Reply New Thread Subscribe

 
Thread Tools
Francis31

 
Member Since: Jun 15, 2009
Posts: 2
Francis31 is on a distinguished road

Francis31 is offline
Hi all, I am new to the forum, and relatively new to the MAC-world.
I am not sure if this is the right place to post this thread, in case it isn't I kindly ask the moderators to move it to where it belongs, thanks!

Recently, I had a problem on my MacBook. I am fairly sure that my World of Warcraft (WoW) account info were somehow sent to somebody from my Macbook. I am owner of a WoW frozen account (it means I ended my subscription, so I cannot access the game till I renew it). The account has been frozen and safe since April 2008. About 2 weeks ago (May 2009) I logged into my account from the MacBook to browse around, since I am going to reactivate the account in a couple of days. I stayed logged in for about 15 minutes. The next day I tried to log in again, but the account had been hacked, merged into another one, and the log-in info changed.
Also, during the same browsing session, I found all links leading to the Game Developer's customer support not working, meaning that something was going on in my own browser (I was using firefox at the time, but I think it was the same with safari. After cleaning cache and cookies, and reconnecting, I was able to reach those links again.
Now, the WoW account issue has been resolved, but what bothers me is that I am confident that the info were taken while using the MACBook, which I deemed extremely safe.
I installed Little Snitch, and I found out that when I connect to the WoW website and type anything in my log-in screen, the browser (both Firefox and Safari) connect to view.atdmt.com, which I read is some sort of spyware website.
I cleaned the cache, the cookies, added view.atdmt.com to the "block coockies" list, but that did't solve the problem. Whenever I go on the WoW website, and I "pretend" to log in, Safari and Firefox connect to view.atdmt.com.
Since I am new to MAC, I would like to ask your help to make the MACBook safe again.

1) is view.atdmt.com my problem?
2) if so, how do I prevent all connections to it?
3) if not, how do I find the real problem?
4) how did they hacked my browser, so I could not reach the customer support of the Game Developer's website?
5) how do I make sure this is not going to happen again?

I would really appreciate your help

Francesco
QUOTE Thanks
Lifeisabeach

 
Lifeisabeach's Avatar
 
Member Since: Sep 30, 2007
Location: Wilmington, NC
Posts: 6,892
Lifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond repute
Mac Specs: iMac i3 (mid-2010) + OS 10.9; TV 3; iPhone 5S; iPad 4

Lifeisabeach is offline
My WoW account was hijacked about a year or so ago. At that point, it had been inactive for over a year. The only reason I knew it was hijacked was because I got an email from Blizzard stating that my account "may" have been compromised. I logged in, found the account was active and paid for 3 months on someone else's credit card, found my characters had been tampered with and in use. One had better equipment. LOL! Anywho... I found it strange that Blizzard was who figured out my account had been compromised. I'm fairly certain it was an inside job by someone who got busted. Really... how else would Blizz have even suspected my account was compromised to begin with?


Please verify and include the exact model/year of your Mac and OS X version number (available from "About This Mac", then "More Info" on the Apple menu).
------
Links: Onyx | EasyFind | Apple Hardware Test | How to test your hard drive | The Safe Mac Adware Removal Guide | Uninstall MacKeeper
------
Lifeisabeach - Mac-Forums Member of the Month June 2009, Feb 2012, and March 2013.
QUOTE Thanks
Francis31

 
Member Since: Jun 15, 2009
Posts: 2
Francis31 is on a distinguished road

Francis31 is offline
No, I don't think Blizzard or its employees have anything to do with it. I am sure that something was going on on my computer, unfortunately. The reason why Blizzard knew about your account is probably because whoever hacks an account strips characters, sends gold around, uses cheats to increase stats and skills and sells the account to somebody else. It is a pattern that is easy to recognize, that's why the company comes to know about it. Even before I contacted them, my account had been already suspended because the user violated something in game.

Anyway, I am more concerned with cleaning the MacBook than with WoW right now
QUOTE Thanks
Lifeisabeach

 
Lifeisabeach's Avatar
 
Member Since: Sep 30, 2007
Location: Wilmington, NC
Posts: 6,892
Lifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond repute
Mac Specs: iMac i3 (mid-2010) + OS 10.9; TV 3; iPhone 5S; iPad 4

Lifeisabeach is offline
Nah... the characters and their banks were largely untampered with, aside from my warlock losing tailoring for herbalism. My two main characters had gear improvements, partly from PVP, partly from a dungeon zone that opened since I had quit. Whoever took the account took it for themselves and even had a small friends list, one of whom I had been acquainted with for a short while but didn't know me well enough to know I wasn't the same person. I'm certain it was an inside job. My password was a very secure one, my email address had not been changed, though I received no notice that my account had been re-activated and billed for, and as I said, had sat for well over a year. If anyone had actually stolen my password via spyware or a virus, they wouldn't have waited so long just to play it. I've seen enough Windows users' characters being raped (and their guild bank being raped too) as the character owner struggled to get ahold of Blizz to stop it all.


Please verify and include the exact model/year of your Mac and OS X version number (available from "About This Mac", then "More Info" on the Apple menu).
------
Links: Onyx | EasyFind | Apple Hardware Test | How to test your hard drive | The Safe Mac Adware Removal Guide | Uninstall MacKeeper
------
Lifeisabeach - Mac-Forums Member of the Month June 2009, Feb 2012, and March 2013.
QUOTE Thanks
Lifeisabeach

 
Lifeisabeach's Avatar
 
Member Since: Sep 30, 2007
Location: Wilmington, NC
Posts: 6,892
Lifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond reputeLifeisabeach has a reputation beyond repute
Mac Specs: iMac i3 (mid-2010) + OS 10.9; TV 3; iPhone 5S; iPad 4

Lifeisabeach is offline
Anywho, my general point is that with the lack of viruses or spyware on OS X, I'm just skeptical that that was how you were compromised. There are a couple trojans, acquirable only by pirating the software they are disguised as. If you did do so, then BINGO! If not, then look at your add-ons, and perhaps add-on updaters like Curse.

BTW... the Warcraft site is connecting to atdmt.com because it is supposed to. It's an ad server among other things. They can't spy on your password.
http://www.spywaredb.com/remove-atdmt-com/


Please verify and include the exact model/year of your Mac and OS X version number (available from "About This Mac", then "More Info" on the Apple menu).
------
Links: Onyx | EasyFind | Apple Hardware Test | How to test your hard drive | The Safe Mac Adware Removal Guide | Uninstall MacKeeper
------
Lifeisabeach - Mac-Forums Member of the Month June 2009, Feb 2012, and March 2013.
QUOTE Thanks

Post Reply New Thread Subscribe


« Format drives? | The Sims 3 window mode anyway? on mac »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
Running Windows on a Mac: A Switcher's Guide cwa107 Running Windows (or anything else) on your Mac 283 03-13-2014 04:15 PM
MAC Accounts JonnyAlpha OS X - Operating System 4 09-11-2008 08:26 AM
Guest account - Mac OS X Leopard shahvikram123 OS X - Operating System 4 10-17-2007 01:54 PM
Switcher Article in Today's Times studio34 Switcher Hangout 9 08-11-2006 03:10 PM
Mac Users Get More ISP Choices schweb Apple Rumors and Reports 1 03-06-2003 10:57 AM

All times are GMT -4. The time now is 07:22 PM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?