Link: https://old.reddit.com/r/wow/comments/1vormjw/security_notice_regarding/

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/wow by /u/gumdropsEU on 2026-08-15 03:09:48+00:00.

For approximately 1 hour 47 minutes, between August 11, 2026 17:05 and August 11, 2026 18:52 MDT (11:05 PM Aug 11 – 12:52 AM Aug 12 UTC), our support site was serving a malicious script. It displayed a fake Cloudflare "verify you are human" page that asked visitors to follow steps including pressing Windows + R followed by CTRL + V to paste a command.

Because 12.1 just launched we expect a lot of you were checking the support site for news on addon updates during exactly that window.

Your TSM account and data were not affected. This was limited to the support site, which is a separate system from the TSM addon, the desktop app, and your TSM account. No accounts, passwords, or user data were accessed, and nothing about the addon or app was modified or compromised.

If you did NOT follow those steps, you are fine. Simply visiting the page did nothing. You do not need to take any action.

If you DID follow those steps, act now. That sequence pasted and ran a hidden command that installs information-stealing malware. It targets saved browser passwords, session cookies, and crypto wallets so this is a risk to your own machine, independent of anything TSM-related.

From a different, clean device:

1. Change your passwords. Email first, then banking, then anything with saved logins.

2. Sign out of all sessions / revoke active sessions on those accounts. Stolen cookies keep working even after a password change, so this step is essential.

3. Turn on 2FA or Multi-factor Authentication wherever it's offered.

4. On the affected PC, run a full Microsoft Defender Offline scan.

The script on the TSM support site has been removed, the account used to place it has been locked, and we've rotated credentials. As a general notice, legitimate Cloudflare checks are only ever a checkbox - no real verification prompt will ever ask you to press Win+R and paste something.