Warning: Curse Client

I didn't see a thread about this, so I figured I'd start one.

My roommate was hacked a few months ago, and was in contact with Blizzard support and everything. The guy he spoke with was a very cool guy, and helped him out a lot. He eventually got everything back, but both his guild and his account were seriously crippled for about a week.

Anyways, the tech support guy had informed my roommate that the problem probably originated from the Curse Client. He said that while Curse provides valid addons, the Curse Client uses P2P software, which many people use to phish account information with.

Since then, my roommate has placed the authenticator on his account, and changed his password. We all got rid of Curse Client, and now instead directly download the addons from the Curse website.

So my advice, do the above. Do not use the Curse Client, and if you do, take extra account security measures.

 

Thanks for the warning. I have it but no longer use.

 

I've always used curse client.
It could of been curse client,but...you know. Could of been something else. Hell even ads can give you viruses.

 

It wasn't a virus, technically. What happened was the addon must have picked up a bit of data from a pier, that was malicious in nature, but not anything too serious to be flagged, and bam.

The tech support guy said he's had a lot of reports of people who've used Curse, and have been compromised. True, there are chances of something else being the cause, but I'd say in a series of tests, the one constant is responsible .

 

Hmm thanks for the info. I've never used it, but I know my bro uses it. I'll tell him not to use it.

 

I always just used WoWMatrix, but I know my friends use Curse, I'll let them know.

 

I think people are blaming the Curse Client instead of their own account mistakes. A lot of people use the client (1/12 of the entire WoW subscriberbase.) It's the power of suggestion, personally; I've used the client for about 100 addons since launch, have no authenticator, and have used the same (secure) password since I started and haven't been hacked once.

 

It's not the people who are blaming it though, I agree with you that, yes, people are morons and will seek to make themselves look like less of one, but it was actually Blizzard technical support that told my roommate that they believe the fault is with the Curse client.

And from what I know, he's not so stupid as to put his account in jeopardy like so.


E: I too have used Curse Client for my entire account life (until the situation occurred, and not had any problems). My brother, however, had the same problem my roommate did about 6 months ago, in which he lost a level 78 priest.

 

Yep same here,I lost several of my low level alts. and found many level one female orc warriors created on my account.
A little story about whenever I got hacked .
They attached a authenticator,so it took a week or so for Customer service to get back to me via email. Then I logged back in,I saw i was at storm peaks in a popular botting area. All my gold is gone,all my boe greens/blues are gone. So I make a ticket saying I lost everything,boom it got answered in the next thirty minutes. All my alts and gold and items were back. So then I saw a level one female orc created on my main realm. I checked it out and..
It had over 3000 eternal fires on it (each EF went for about 15-30g at the time) Several BoE were bought and sent to another "player" >.>. And it also had 2k gold on it. I feel bad because I sold all of those eternal fires,i should of told the GM.
Also,I've heard stories where people get there hacked account back and they had over 50 battered hilts,20 mechano hogs,10+ of each ICC boe and a crap ton of other good items. There was a non-photoshopped pic of it on MMO-champion. If I find it I'll link.
(Sorry for the wall o' text)

 

Yep, the storm peaks thing was what they did on my roommates account. There was a level 1 on there too, probably used to AH everything, and send to the hacker, but yeah...

It was pretty shitty.

 

I've used this since it came out and have no problems.
This may be because I have an authenticator on my account,
but even before I did, I had no problems with it.

 

I didn't actually read through this thread, lot of shit to read.

But i'm pretty sure it's from specific addons, the small, un-popular ones.
Easier to put a virus in those.

 

Of course.... lets blame Curse Client for your own stupidity.

 

You're a retard. I never did. It was the Blizzard tech support. Learn to fucking read.

 

How does this work? In my WoW I only store my username, so unless they manage to intercept information leaving my computer such as when I enter it, how do they get my password too?