World of Warcraft: Cataclysm

[Akito]

I have a free authenticator program on my Android phone but I've been too lazy to implement it. I'm thinking about passing on it now. Just staying off shady WoW-related sites and recognizing phishing emails should be good enough I think....

All this can be resolved if FFXIV is worth playing and I can quit WoW...yay!!

[Logick]

still this trojan can be fixed easily, I won't panic until the actual authenticator system is cracked.  But hey corporations all over the world would be in a panic also.

[Ragnarok-Sabin]

Even with this trojan, your account is still safer with an authenticator on it. Keyloggers would gather your password and it could be used weeks later. This trojan is sending your authenticator password, which you just typed, to someone other than Blizzard. That means they have all of thirty seconds to log in before that code is useless. Just, like was said, don't go to shady WoW sites, and maybe run NoScript and your authenticator will still keep you safe from keyloggers.

[Akanbe-]

Indeed Ragnarok.  From what I heard, I believe certain/most virus scanners are picking these trojans up so if you're concerned, you could always scan.  Definitely it's a timing thing and with the current trojan(s), you WILL know if you are infected or not.  Apparently, the trojan takes the authenticator code and exchanges it with one that won't work so you cannot log on.  So, it's a giant red flag if you can't log on and you have an authenticator. 

And Ryos you did indeed call it.