Trojan.Loginck: Trojan Validates Millions of Stolen Game Credentials

On Wednesday, Symantec discovered a server that contained a flat file with 44 million stolen gaming credentials. The credentials were from online gaming sites and also game hosting servers.

Hackers turn around and sell the stolen game credentials for cash. But, knowing that unused or closed accounts are of no value, these hackers wrote an intelligent process to check to see if the accounts were valid. Using the processing power of a botnet, they ran a process that validated each and every one of the 44 million game credentials. Symantec calls this process the Trojan.Loginck:

Most botnets have the ability to download and run files, so why not push a custom piece of malware to each bot? The malware could log on to the database and download a group of user names and passwords in order to check them for validity.

If the Trojan succeeds in its task of logging in, it will update the database with the time it logged in and any user credentials (such as current game level, etc.) before moving to the next user name and password. The attackers can then log on to the database and search for the valid user name and password combinations.

Some of the credentials found in the file were from the online games World of Warcraft, and Aion. A list of affected game publishers can be found on Symantec’s website. Symantec recommends that you make sure your virus definitions are up to date and also to change your online game passwords to defend against this attack.

2 thoughts on “Trojan.Loginck: Trojan Validates Millions of Stolen Game Credentials”

    1. LOL, I hear you Philo.

      I never got into World of Warcraft. Played Star Wars and LOTR for awhile. Mostly spending way too much time playing single player games now.

      Dragon Age was cool, but I like Oblivion with the Francescos mods, QTP3 graphics mods and CM Companion Mods more.

      Also, if you like medieval combat, I really like the original Mount & Blade with the Prophesy of Pendor mod. Most realistic combat that I have seen in a swords and shields type game.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.