SonicWALL first began providing protection against this malware in October, 2006, and has been issuing new signatures on a continual basis as more variants of the malware, designed to steal the in-game assets of WoW players, have been identified.

The Windows vulnerability is exploited by installing keylogging software on players' computers if they visit an infected web site. This allows hackers to obtain players' WoW passwords, access WoW player accounts and steal their virtual assets. While Blizzard Entertainment does not officially allow players to buy or sell assets, a thriving unofficial market for WoW assets exists.

"Although the malware currently only targets game players, it's important to protect against it in the workplace since keystroke loggers bring risks into a business network," said Alex Dubrovsky of SonicWALL's Security Center.

Users of SonicWALL's dynamic threat prevention services are protected by the signatures:

WOW.PU (Trojan) 4/4/2007 9:25:06 PM
WOW.JE (Trojan) 4/4/2007 9:25:05 PM
WOW.QG (Trojan) 4/4/2007 9:25:04 PM
WOW.ET (Trojan) 3/29/2007 10:49:55 PM
WOW.dldr.1 (Trojan) 3/23/2007 9:07:04 PM
WOW.ET (Trojan) 3/23/2007 9:07:04 PM
WOW.ES (Trojan) 3/23/2007 9:07:03 PM
WOW.dldr.2 (Trojan) 3/23/2007 9:07:03 PM
WOW.PU (Trojan) 3/12/2007 10:04:28 PM
Wow (Trojan) 12/21/2006 3:52:15 AM
Spy.WOW-53 (Trojan) 12/15/2006 1:58:21 AM
Spy.WOW-39 (Trojan) 10/27/2006 1:47:06 AM
Spy.WOW-38 (Trojan) 10/18/2006 1:19:40 AM

SonicWALL has developed unique technologies to deliver zero day gateway anti-virus, anti-spyware and intrusion prevention signatures to its subscribers providing them the tools to defend against new and existing Internet attacks and exploits such as phishing, viruses, DHA or DoS attacks and more. To be protected against this malware, subscribers must have a current subscription to SonicWALL's gateway threat prevention services - SonicWALL.