Man in the middle attacks circumventing authenticators

Reader Comments (Page 1 of 1)

2-28-2010 @ 12:45PM

Mailia said...

a) 192.168.12.1 is your LAN adress.
b) How does the IP thingy work? I'm gonna give an example.

I come home from work and start WoW. I enter my account name, ExampleAccount@YarrHarr.com and password YarrHarrFiddlyDee. The keylogger gets both of these things, but the data still gets connected to Blizzard and the WoW client asks for the Authenticator key. I enter the key, 123456 and instead of sending that to Blizzard, thus disabling it, it sends it to the hacker, who gets the key 123456, which lasts for about 30 seconds and sends some other key, like 456789 to Blizzard and you will see an error when logging in. If the IP restriction would come, someone trying to lock on your account could disable you from getting in the game by trying to access the game on your account name all the time.

Add your comments

Your comments:

Remember me

E-Mail me when someone replies to this comment

Please keep your comments relevant to this blog entry. Email addresses are never displayed, but they are required to confirm your comments.

When you enter your name and email address, you'll be sent a link to confirm your comment, and a password. To leave another comment, just use that password.

To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br /> tags.