Dicas de segurança e explicações sobre quebra de senha do wow

Achei este doc no site da Blizz

O endereço é: http://us.blizzard.com/support/article.xml?articleId=20572&searchQuery=patch&pageNumber=1

*IMPORTANT* - Account Security

Your account security is of the utmost importance. As such, we want to equip our customers with the knowledge they need to ultimately ensure their account, their characters, and their valuable in-game items remain safely in the right hands. We recommend that everyone visit this page and follow the helpful tips to ensure that their computers and accounts remain secure.

The vast majority of account compromises originate from one of three sources:

1. "Spoof" websites and emails
2. Downloading hacks, cheats, or other executable content
3. Sharing account information and/or using power-leveling services

See below in this page for more information on these and other increasingly common scams, as well as information on recovering your account and keeping yourself safe.

KEEPING YOUR SYSTEM UP TO DATE

Please be sure that you have the most secure operating system environment on your computer by running Windows Update (if you own a Windows-based PC) or Software Update (if you own a Mac) and installing all of the updates marked “High Priority”. Note: you may have to run the updater more than once to ensure you have all the high priority updates; many of the patches require a system restart, and then additional patch installations to complete the process.

"SPOOF" WEBSITES AND EMAILS

This term refers to an email or a website, typically sent to a large number of players, which pretends to be officially from Blizzard, but is really a trick to get unsuspecting users to send their account information. If account information is sent to one of these "spoofs", it usually winds up in a thief's database list of accounts to steal.

How to identify a spoof site or email:

* It asks for your account name AND PASSWORD (Blizzard will never ask you for your password through e-mail!)
* It comes from an email address which is NOT an official Blizzard.com address, but may look similar
* Often they promise you will be banned if you do not provide the information demanded
* Conversely, they may promise "special features" like free items or character changes if you comply

How to keep them from stealing your password:

If it's an email, forward it to our official address -- billing@blizzard.com -- and do NOT reply at all unless our Billing staff actually confirms for you that the message is legitimate

There are only four places where you should EVER type your password:
- The World of Warcraft game login screen.
- The Account Management page on the official site(http://www.worldofwarcraft.com/account/)
- The World of Warcraft Armory page(https://www.wowarmory.com/login.xml).
- The official World of Warcraft forums (http://forums.worldofwarcraft.com)

If you're not certain you're at the official page, you can always be sure you're in a "safe zone" by manually pointing your browser to www.worldofwarcraft.com. Anything else is likely to not be an official site, even if the address says "wow", "blizz", etc.


DOWNLOADING ADDONS, HACKS/CHEATS, & EXECUTABLES

Viruses, 'trojan' applications, and key-logging software can all steal your World of Warcraft information, in addition to anything else on your computer once it has been compromised. These sorts of threats are typically brought into the system and installed by "executable" programs.

An "executable" program is something you download and then you run it as its own program
- as opposed to opening a file or a folder. You can tell if a program is an executable if its file name ends in EXE. You can also right-click the file and choose "Properties." If the "File Type" says "Application," then that file is an executable.

Hackers and account thieves like to put their viruses, keyloggers, etc into executable files and then make those files very appealing to our World of Warcraft fan base, to trick users into downloading and running their programs.

The most common executable threats we have seen reported are:

* Gold duplicating or gold-making hacks (wowgoldmaker.exe, for example)
* Programs that promise you a way to create or copy ("dupe") items
* "Teleportation" or movement-cheating programs
* Programs otherwise promising unrealistic cheats or benefits (invulnerability, invisibility, instant PVP kills, etc)

The majority of these programs, if they actually DO what they claim, will first off place a user in a serious violation of our Terms of Use, which may result in permanent account closure.

However, the issue we are addressing here is that ANY unsupported and unofficial executable program (whether it "works" or not) is a perfect and all-too-common way for a hacker to get something onto the system of a dedicated World of Warcraft player.

GIVING OUT ACCOUNT INFORMATION -- TO *ANYONE*

Sadly, our support teams take a considerable number of inquiries from people who have lost their account solely because they at one time shared their password to a friend, spouse (or ex-spouse), roommate, relative, etc, and then had their account stolen, items sold, and characters deleted by that individual.

Most of the small-scale account thefts (those not done by a widespread hack or scam) take place because the individual *gives out* their own information to someone they believed they could trust.

This is not to say players should inherently start distrusting their friends, but your password is supposed to be yours and YOURS alone... this is part of why our Terms of Use specifically forbid sharing your login information.

Even more unfortunate is the situation Blizzard sees with many players who choose to flat-out intentionally break the Terms of Use and share their account information with a third-party service simply to have their character leveled up while they work, sleep, etc.

These services could quite feasibly try to sell off a user's items if they receive login information, and we have seen many services that people thought "reputable" wind up stealing customers' information and all their items. These businesses make their money by helping user's break the Terms of Use, devaluing play time while putting accounts at significant risk. That leaves the user and Blizzard's support team cleaning up a considerable mess.

Not to mention, if Blizzard's staff identifies any account as having been intentionally "shared" to a power-leveling services, the account is subject to immediate suspension, possibly a permanent ban.

Sharing account information is unwise and can wind up costing you everything you have worked for --and paid subscription fees-- in World of Warcraft. Don't do it!

RECOVERING YOUR ACCOUNT AFTER A COMPROMISE

If you believe your account has been compromised, please visit our Account Administration page and more information can be found under the Compromised Account Issues section.

If you find that, regardless of the cause, you are unable to get back into your account, your first step should be to attempt automated password recovery.

If you are having trouble accomplishing the recovery for your password, be sure to try the suggestions that pop up after the unsuccessful attempt, and if necessary, follow the instructions provided to Contact Billing and Account Services for further assistance.

KEEPING YOUR COMPUTER SAFE FOR THE FUTURE

Even after you get your account back, if your computer has been infected with a virus, trojan, keylogger, etc, you need to make sure it is cleaned off entirely, or your account will still be at considerable risk. You should also be certain you are using a secure password at all times as well!

Keeping your account secure relies heavily on keeping your computer secure. This can help keep your computer safe from malicious programs and person's intent on stealing private information.