|
Originally Posted by Rushster
Just a heads-up that it will not have been your SSH that was compromised, they use another method. Anyway, I will pass on the details in a mail or PM to Cairenn, this is why it is hard to trace and why it took so long for us at incgamers to not only confirm and infiltration but to find the root of the cause before giving a complete run-down of the situation to the public at large even though the corrupt files were removed right away. It is a nasty business this and the no exe policy was also added to wowui last week, it's just to risky.
|
For what it's worth, Rush, the zip now attached to the first post in the thread will work for your users also. It's the same trojan, downloaded from the same host. Same symptoms, same files, same solution.