Blainie

Gold Scam Discovered with No Add-Ons Required!

13 posts in this topic

LYuH3Su.png

That's right. With a vanilla UI, there are players that can steal all of your gold. Scary stuff!

This was first brought to my attention by a Reddit post from user MrNoobyy. His post reads as follows:

Quote

So recently, there's been a guy on my realm spamming trade chat, claiming to be selling 13/13M with loot and mount on behalf of a top guild on our realm. Every guild he impersonates is a guild with an l somewhere in the name, and he actually makes a guild with a captial I instead of a lower case l, which in game, both show up the same.

He tries to get you to run do a /run command, one I won't type out here, with the claim that it's so the raid frames don't get messed up on the custom UI that the raiders use. Knowing better, I of course didn't run the script - but if you do, from what I can tell, it allows the scammer to execute scripts via whisper, that forces you trade away your gold when he trades you. I'm unsure if this requires an addon to work, as when I told him I'd run the script, he told me to try again, but disable all addons first.

Anyway, I reported him, and he's been showing up differing toons throughout the week, impersonating a different guild each time. Someone posted a topic on the forums about it here: http://us.battle.net/wow/en/forum/topic/20745644941?page=1 - and it turns out this scammer is trying this on multiple realms.

Fast forward a week or so. I logged onto my main, and my GM whispered me, "Can you please type '/run blahblahblah', it's to test a guild addon." Obviously the blahblahblah was the script. The very same script this scammer tries to use.

It turns out my GM was being hacked. By the same person? Can't really know. But it gets a little more interesting. One of the people in the guild did as the hacker asked, and is now whispering other people scripts that he can't even see, the same script the scammer and hacker is using, and also a few others.

No idea what's going on. For lack of a better word, it's like...the script infects the users who run it, forcing them to become part of it.

Does anybody know anything about this? I've googled the /run command in question, and saw a reddit post about this, but nothing about this....whatever is happening in my guild right now.

So it looks like this allows a user to force you to trade over your gold through a script. Previously, this was done through the use of add-ons such as WeakAuras, but it seems they now have the ability to do it on a simple, Vanilla UI. Another user, johsko, posted an explanation for how this might be happening:

Quote

Found parts of the script, but not all of it. It works by replacing a global function that gets called (by the vanilla chat frame) whenever a message is received, with a function that runs the message as if it had been written after /run by the receiver. It allows them to remotely script your UI. The piece of code they whisper you after you input the seemingly harmless /run hooks it up to the chat message event, allowing them to hide any script messages. Meaning they can do anything an addon can, but remotely without you knowing it.

A /reloadui should get rid of it, but until that is done they can use your client for whatever they want, as long as it fits in a whisper.

Edit: This is all with the vanilla UI, no addons needed. It would be easy for Blizzard to fix this particular instance, but they won't really be able to protect against scams like this. There's always going to be some other piece of code someone can tell you to input. The best thing they can do is to disable /script and /run as commands until the player opts in through a setting or something, and put a huge warning on the opt-in to not enable it unless they are absolutely sure they want to.

There has been no official response from Blizzard yet, but a forum thread has been started. Hopefully we'll see acknowledgement and a response soon! 

  • Like 1

Share this post


Link to post
Share on other sites

Interesting to see something like this surfacing when the game is 12 years old :p

  • Like 1

Share this post


Link to post
Share on other sites

Agreed, it is interesting, but I believe it is somehow connected to the value that in-game Gold recived (ability to buy game time and black market auction).

Share this post


Link to post
Share on other sites
1 hour ago, Dantalian said:

Agreed, it is interesting, but I believe it is somehow connected to the value that in-game Gold recived (ability to buy game time and black market auction).

Most likely, yeah. Gold is easy to get in WoD for sure, so many people have larger amounts than they had in previous expansions, while it can now be used for game-time for the first time. The value of gold to these people has now gone from just buying mounts and such to actually paying to play the game.

 

Share this post


Link to post
Share on other sites

The whole story is actually pretty spooky, with all that vanilla UI, script writing and infestation stuff. Blizzard, please, react! 

Share this post


Link to post
Share on other sites

I hope players understand what is the risks are of running /script and /run. I personally will never do this until i'm 100% sure this is a valid fix for one of my issues. Don't want to get scammed and lose all my hard earned dollars :P.

I'll keep a close watch to the official forum thread. Really interested.....

Share this post


Link to post
Share on other sites
10 hours ago, Paracel said:

The whole story is actually pretty spooky, with all that vanilla UI, script writing and infestation stuff. Blizzard, please, react! 

Yeah, it's horrible to think that people can do this sort of stuff. Would be nice to see more PSAs from Blizzard on this.

Share this post


Link to post
Share on other sites

So as nice as this sounds in theory a user/addon is unable to accept a trade without a corresponding hardware event. The AcceptTrade() function has been protected from being called outside of hardware events since it's inception. While you could in theory run addon scripts remotely almost all important functions are protected currently. The only method to circumvent this efficiently would be for the remote user to add additional keybinds (possible as SetBinding() is only protected during combat) or to add additional UI elements that could register a click event (implausible with the character restriction on a whisper). 

 

TL;DR: Good on you guys for alerting the community that had missed the original post, but at this time it is implausible that this is being used for what is claimed as the API simply won't allow that. That said there is plenty of damage that can be done with the unprotected functions.

Share this post


Link to post
Share on other sites
4 hours ago, Psifour said:

So as nice as this sounds in theory a user/addon is unable to accept a trade without a corresponding hardware event. The AcceptTrade() function has been protected from being called outside of hardware events since it's inception. While you could in theory run addon scripts remotely almost all important functions are protected currently. The only method to circumvent this efficiently would be for the remote user to add additional keybinds (possible as SetBinding() is only protected during combat) or to add additional UI elements that could register a click event (implausible with the character restriction on a whisper). 

 

TL;DR: Good on you guys for alerting the community that had missed the original post, but at this time it is implausible that this is being used for what is claimed as the API simply won't allow that. That said there is plenty of damage that can be done with the unprotected functions.

Another post from Reddit on how this is happening, in addition to the one above:

Quote

Software developer here.

This actually doesn't involve any addons at all. It is somewhat misleading. What the /run command does is redirect calls to a built-in WoW API function (RemoveExtraSpaces) to another built-in WoW API function (RunScript) instead.

I suspect the attacker discovered that the default UI calls RemoveExtraSpaces on any text received via chat, including whisper. Once you run that initial script anything else they whisper to you is then interpreted as further /run commands so they've rather trivially enabled themselves to remotely execute anything on your client that can be done via /run.

After that point the cryptic bit including CHAT_MSG_ADDON is actually registering itself for an event anytime a new message is received, either locally or remotely. More than likely this is just setting up additional infrastructure to enable him to further take over your client and probably restore your chat in the process while maintaining an extra hidden button to allow him to continue to remotely execute things.

This is why he's asking you to disable your addons because he was thinking that some other addon was actually interfering with his simple RemoveExtraSpaces hack. I'm surprised we've never seen this sort of thing before as it seems quite trivial. Again though, nothing he's doing requires you to have any addons at all as RemoveExtraSpaces and CHAT_MSG_ADDON are both elements of the default WoW API (a function and event respectively).

If this happened to you a good first step to protect yourself would probably be to:

/run RemoveExtraSpaces=nil /run z:UnregisterAllEvents();

Which will undo the hooking of RemoveExtraSpaces to RunScript, and then remove the event handlers for CHAT_MSG_ADDON from the "z" button the attacker created.

 

Share this post


Link to post
Share on other sites
14 hours ago, Klynwe said:

This is scary, but  ive never seen one on Dalaran-EU

I've personally never seen it on my realm either, but it seems there has been a few reports on numerous servers on the forum thread

  • Like 1

Share this post


Link to post
Share on other sites
On 7/8/2016 at 3:26 AM, Klynwe said:

This is scary, but  ive never seen one on Dalaran-EU

Stormrage has seen it.

Today, on the PTR, I tried running a simple /run command that wipes out all action bars at once and the following warning popped up. Seems Blizzard took note to a degree.

Scripts.jpg

  • Like 1

Share this post


Link to post
Share on other sites
18 minutes ago, Sajakain said:

Stormrage has seen it.

Today, on the PTR, I tried running a simple /run command that wipes out all action bars at once and the following warning popped up. Seems Blizzard took note to a degree.

Scripts.jpg

Saw this mentioned in a reddit thread, very happy to see it coming into the game.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

  • Similar Content

    • By Stan
      The second part of Tides of Vengeance hits live servers next week. Blizzard just released a survival guide to guide you through all the content that will be available starting January 22.
      Tides of Vengeance Part II
      The next content update arrives on live servers on January 22. What's new?
      New Raid: Battle of Dazar'alor opens on Normal/Heroic difficulty on January 22. Mythic and the First Raid Finder Wing open a week after on January 29. Check out the official preview of the raid, boss guides, and updated Class guides! Azerite Gear Improvements: You'll find a new fifth ring with spec-specific traits on Epic Season 2 Azerite Gear. This does not apply to old gear and your priority should be to upgrade your Azerite Gear asap. Mythic Season 2 Starts Titan Residuum Vendor will offer new wares at an increased cost in Mythic Season 2. The Infested affix will be replaced with Reaping. Blizzard's overall increasing dungeon difficulty and rewards in Season 2. More information can be found here. PvP Season 2 Starts A new PvP Season awaits the boldest of adventurers. Preliminary Season 1 Title Cutoffs have been posted. Game Director Ion Hazzikostas posted a blog post with details about what's (not) changing in Season 2. Artifact Power catchup is disabled right now and will commence on January 22. Blizzard (Source)
      There’s plenty to look forward to when Tides of Vengeance Part 2 goes live on January 22. Watch our Survival Guide to learn more.
      New Raid: Battle of Dazar’alor
      The Alliance will strike at the heart of the Zandalari empire—while the defenders of the Horde will rally to their new allies’ defense—in an epic new raid, Battle of Dazar’alor. This new raid provides both Horde and Alliance players with unique encounters for their faction—along with the opportunity to play through events from the opposite faction’s viewpoint.  Learn more.
      PvP Season 2 Begins
      PvP Season 2 will begin and introduce an updated Conquest reward schedule, mounts, and gear. Players who earn 500 Conquest points in a given week through PvP activities including Arenas, Battlegrounds, and Assaults in War Mode will be still be able to choose a piece of gear from each week’s selection; in addition, they’ll now earn a Quartermaster’s Coin, which can be collected and ultimately used to upgrade pieces from this season’s Sinister Gladiator PvP set. Learn more.
      Mythic Keystone Dungeon Season 2 Begins
      The new Mythic Keystone Dungeon season opens opportunities for new rewards and a new challenge with the new seasonal affix: Reaping. High-level Keystones will now summon Bwonsamdi, the Loa of Death, to wreak some spectral havoc upon players’ dungeon run. As heroes kill enemies, the vanquished spirits will continue to linger in the mortal realm. At certain points throughout the dungeon, Bwonsamdi will resurrect these twisted souls, who will swarm the unfortunate adventurers in a final act of vengeance. (Blog coming soon.)
      Azerite Armor Updates
      With the release of Season 2, we’re introducing new epic Azerite pieces from PvP Season 2, the Battle of Dazar’alor raid, World Quest Emissaries, and from the Mythic Keystone vendor Thaumaturge Vashreen in Zuldazar and Boralus. These new items will have a fifth ring with additional new trait options. Learn more.
      Content Difficulty and Rewards Changes
      With a new season upon us and the Dazar’alor raid dungeon opening, we wanted to share some additional information on the changes coming to a variety of dungeon and outdoor world encounters including increases to both difficulty and rewards.
      New Maximum Item Level: With great challenges come great rewards and the maximum possible item level will go up to 425. Battle for Darkshore Warfront: Battle for Darkshore rewards will also increase to 400 from both the outdoor boss and from Warfront quest that can be completed once per cycle. The difficulty of the Warfront will increase however, and the item level required to queue will increase to 335. These changes will go into effect after the current Warfront cycle has ended. Until that time, players will still receive Season 1 rewards. World Quest Emissary Rewards: World Quest Emissary weapon and armor rewards will also now scale up to 385 based on the player’s own item level. Rewards from the original Battle for Azeroth Launch World bosses will remain at item level 355 to stay on par with Uldir. Dungeon Rewards and Difficulty: The difficulty of Heroic and Mythic dungeons will also be increase as follows:  Normal–340, Heroic–355, and Mythic– 370(baseline) Mythic Keystone Dungeons and PvP: During the first week of Season 2 Mythic Keystone Dungeon rewards will be capped at Mythic 6 quality (item level 385). PvP Season 2 end-of-match rewards will be capped at 385. Seals of Wartorn Fate: Seals of Wartorn Fate are not being reset and this same currency can be used for Battle of Dazar’alor and Season 2 bonus rolls; the cap on how many can be held at once remains at 5. For additional insights on these changes, read the developer forum post.
    • By Stan
      Arena World Championship (AWC) and the Mythic Dungeon Invitational (MDI) will return in 2019 with a few twists. MDI will be split into two regions and for the first time, players will be able to crowdfund both events and increase the prize pools by purchasing in-game toys in spring.
      Blizzard (Source)
      Today we are very excited to share details for the 2019 Arena World Championship (AWC) and rebranded Mythic Dungeon International (still MDI!), including increases to both programs’ prize pools, which will come from a portion of the sales of two new toys. Let’s get right into it.
      Arena Returns for 2019
      We are pleased to bring back the Arena World Championship in similar form as last year—just with a few fun twists. Here’s a visual representation of the system in 2019:

      North America and Europe: The NA and EU regions will have two Arena seasons each, with six cups per season. Each cup will see teams battle for their share of a USD $10,000 prize pool. This represents an increase over last year’s competition, with more cups and more chances for players to win. Like last year, each cup will award points. For each finals event, the top four point-earners per season from both NA and EU will compete for a USD $100,000 prize pool. The first cup begins on Feb. 8; signups start today and will close Monday, Jan. 28, at 10 a.m. PDT/6 p.m. CET.
      Asia-Pacific, China, and Latin America: These regions also will run cups based on the Arena World Championship ruleset. Signups for Korea, Taiwan/Hong Kong/Macau, Australia/New Zealand, China, and Latin America will kick off later in the year. Keep an eye on regional channels for more information.
      Arena World Championship Finals: At the end of the year, we will celebrate the global scope of Arena with the AWC Finals. Invitations will be extended to:
      1st place from NA and EU Season 1 1st and 2nd place from NA and EU Summer Finals Top point-earner from NA and top point-earner from EU Winners of the China, APAC, and Latin America finals. Introducing the Mythic Dungeon International
      An invitational no more, we are pleased to announce the Mythic Dungeon International for 2019—a seasonal competition that will showcase the world’s best dungeon-running teams. We decided to update the name of the program in order to better reflect its increased scope and global reach. The Upgrades
      MDI will be split into two regions: MDI East (China, Korea, Southeast Asia, Taiwan, and Australia/New Zealand) and MDI West (North America, Latin America, and Europe). Here is how the year will flow:

      The Proving Grounds are a qualification period open to any player with a Blizzard Battle.net account in good standing. Think you’ve got what it takes to be Mythic Dungeon International champions? Grab a team of five players and prove it! All you and your team need to do is complete five level 14 Mythic Keystone Dungeons in time between February 26 and March 12. (Note: Keystone level is subject to change, and will be determined sometime after the start of Season 2, on Jan. 22.) If successful, you and your team will be granted access to the Tournament Realm, where you will be able to create max-level characters, equip them with the items you feel are most optimal, and build out talents as you please. You and your team will have access to the Tournament Realm for the duration of the season.
      Each season, those who have gained access to the Tournament Realm via the Proving Grounds will be able to participate in Time Trials—a limited number of attempts at the week’s dungeons during a designated time period, of which your team’s best results will be submitted automatically. Each week will alternate between East and West, beginning with the Time Trial in ending in the week’s Cup, a double-elimination bracket featuring the top eight teams for that week’s region. All teams on the Tournament Realm will be able to run in their region’s Time Trials every alternating week, which means more opportunities to participate in Cups.
      Each Cup for MDI East and MDI West will be broadcast live on Twitch each weekend across six weeks. There is a USD $12,000 prize pool per Cup, as well as MDI points. Points will be awarded each week according to results, which will be used to determine who will be invited to each end-of-season LAN final. The end-of-season LAN events will be cross-regional, meaning the best teams of MDI East and MDI West will meet to race for their share of USD $100,000. The Proving Grounds for MDI Season 1 for both East and West will begin the week of February 26, when keystone affixes roll over. Closer to the event we will share more information about how to participate, qualification specifics, and more. NEW TOYS FOR ME? I PROMISE I WON’T BREAK THEM THIS TIME!
      As both Arena and MDI grow, we want to give fans a chance to further support the programs—and have some fun along the way! Soon we will introduce two new in-game toys to our shop (details to follow). A portion of the sale of these toys will contribute to the prize pools for both WoW esports programs.
      These toys will go on sale in the spring. As the proceeds will contribute to the year’s final LAN event prize pools for AWC and MDI, those prize pools will be announced later this year.
      We can’t wait to get things started. Be sure to follow World of Warcraft on Twitter and Twitch to stay up to date on all the latest WoW esports news, and bookmark WorldOfWarcraft.com/esports so you don’t miss a thing!
    • By Stan
      As PvP Season 2 draws closer, here are cutoffs for BfA Season 1.
      Note: The following cutoffs are not final and they're to be determined after the Season officially comes to a close.
      Americas
      Blizzard (Source)
      With Battle for Azeroth Season 2 fast approaching, we wanted to give those looking to push for titles at the end of Season 1 an idea of what to aim for.
      What follows are the current rating cutoffs as of this post, for the respective titles. These are not the final cutoffs, which will change slightly based on continued play through the end of the season as well as any disqualifications that occur after the season ends, but can be used as a general estimate for what ratings are needed in order to qualify.
      Dread Gladiator – Horde: 2957 Dread Gladiator – Alliance: 2842 Hero of the Horde: 2646 Hero of the Alliance: 2552 Again, these are not the final cutoffs, which we won’t be able to determine until after the season officially ends.
      Europe (Thanks to @Nightswifty for the link)
      Blizzard (Source)
      With Battle for Azeroth Season 2 fast approaching, we wanted to give those looking to push for titles at the end of Season 1 an idea of what to aim for.
      What follows are the current rating cutoffs as of this post, for the respective titles. These are not the final cutoffs, which will change slightly based on continued play through the end of the season as well as any disqualifications that occur after the season ends, but can be used as a general estimate for what ratings are needed in order to qualify.
      Dread Gladiator – Horde: 3022 Dread Gladiator – Alliance: 3069 Hero of the Horde: 2726 Hero of the Alliance: 2749 Again, these are not the final cutoffs, which we won’t be able to determine until after the season officially ends.
    • By Stan
      An overview of Class changes from the initial 8.1.5 PTR build.
      Note: Some of the changes listed below may have been deployed to live servers via hotfixes.
      Death Knight
      Blood
      Marrowrend - Surrounds you with a barrier of whirling bones, increasing Armor by [ 40% 50% of Strength ], and your Haste by 10%. Each melee attack against you consumes a charge. Lasts 30 sec or until all charges are consumed. Unholy
      Necrotic Strike - A vicious strike that deals [ 30% of Attack Power ] Plague damage, and converts 1 Festering Wounds into a Necrotic Wound, absorbing up to 7% 8% of the target's maximum health in healing received. Druid
      Balance
      Empowerments - Causes your next Solar Wrath to explode for an additional 20% 10% of its damage to all nearby enemies and reduces its cast time by 15%.  Feral
      Feral Druid - Increases damage/healing by 15% 8%. Mage
      Frost
      Frost Mage - Decreases damage/healing by 19% 22% (3% buff). Frozen Orb - Launches an orb of swirling ice up to 40 yards forward which deals up to [ 325.4% 310% of Spell Power ] Frost damage to all enemies it passes through. Grants 1 charge of Fingers of Frost when it first damages an enemy. Priest
      Discipline & Holy
      Halo - Creates a ring of Holy energy around you that quickly expands to a 30 yd radius, healing allies for [ 103% 110% of Spell Power ] and dealing [ 103% 110% of Spell Power ] Holy damage to enemies. Discipline
      Discipline Priest - Decreases damage/healing by 19% 16%. Purge the Wicked - Cleanses the target with fire, causing [ 27.6% 28.5% of Spell Power ] Fire damage and an additional [ 152% 157% of Spell Power ] Fire damage over 20 sec. Spreads to an additional nearby enemy when you cast Penance on the target. Holy
      Greater Heal - Mana Cost: 4% 3% Base Mana. Symbol of Hope - Bolster the morale of all healers in your party or raid within 40 yards, restoring 2% of their missing mana every 1 sec for 6 sec immediately and every 1 sec for 5 sec. Can be cast in Spirit of Redemption. Shadow
      Edge of Insanity - While not in Voidform, reaching 90 Insanity reduces damage taken by 5% 10%, and increases damage dealt by 10% for 15 sec. Rogue
      Subtlety
      Shuriken Storm - Sprays shurikens at all targets within 10 yards, dealing [ 16.2% 13.8% of Attack Power + 16.2% 13.8% of Off-hand Attack Power ] Physical damage. Shaman
      Elemental
      Lightning Lasso - 5 6 sec cast (Channeled). Grips the target in lightning, stunning the target and dealing O2% of the target's maximum health in Nature damage over 5 6 sec. Warlock
      Fear - Base Mana cost decreased from 10% to 5%. Affliction & Destruction
      Demon Armor Protects the caster, increasing maximum health by 10% and increases armor by 275% 125%. Warrior
      Protection
      Vanguard - Hardened by battle, your Stamina is increased by 45%, and your armor is increased by 60% 55% of your Strength. Most Recent Patch 8.1.5 Articles
      Patch 8.1.5 Developer Notes Patch 8.1.5 Build 28938: Highlights Kul Tiran & Zandalari Troll Racial Abilities PTR Nerfs to Regeneratin' Crusader's Direhorn (Zandalari Troll Paladin Class Mount) Kul Tiran & Zandalari Trolls Coming in Patch 8.1.5 New Portal Rooms in Stormwind & Orgrimmar Kul Tiran & Zandalari Druid Incarnation Moonkin Forms Kul Tiran Shaman Totem Models 8.1.5 Mount Preview: Bruce Raiding with Leashes VI: Pets of Pandaria Overview The Story of Xal'atath in Patch 8.1.5 (Spoiler Alert) Allied Races Speculation: Are Mechagnomes and Vulpera Next? Tools of the Trade Profession Items
    • By Stan
      The first Patch 8.1.5 build is available for playtesting on PTR and here's what's new.
      Highlights
      Blizzard pushed the initial 8.1.5 Build to PTR last week and our latest coverage includes: Patch 8.1.5 Developer Notes Patch 8.1.5 Build 28938: Class Changes Kul Tiran & Zandalari Troll Racial Abilities PTR Nerfs to Regeneratin' Crusader's Direhorn (Zandalari Troll Paladin Class Mount) Kul Tiran & Zandalari Trolls Coming in Patch 8.1.5 New Portal Rooms in Stormwind & Orgrimmar Kul Tiran & Zandalari Druid Incarnation Moonkin Forms Kul Tiran Shaman Totem Models 8.1.5 Mount Preview: Bruce Raiding with Leashes VI: Pets of Pandaria Overview The Story of Xal'atath in Patch 8.1.5 (Spoiler Alert) Allied Races Speculation: Are Mechagnomes and Vulpera Next? Tools of the Trade Profession Items The datamined broadcast text revealed some interesting plot development around Derek Proudmoore. You can check it out below by clicking the "Reveal Hidden Contents" button below.  The initial build comes with three scenarios: 8.1.5 Magni - Uldir - Magni and Brann venture into Uldir to meet MOTHER. The Prison of Ink - You are engaging in a trial to earn a blood contract. The Creator's Workshop - Mimiron has called you to the Spark of Imagination in Ulduar to reform Hati. New micro-holidays include Wanderer's Festival, Free T-Shirt Day & Vash'jir Diving Day. Achievements
      Flame Keeper of Zandalar Flame Warden of Kul Tiras Extinguishing Kul Tiras Extinguishing Zandalar Elite: Battle for Azeroth Season 1 Tides of Vengeance Tides of Vengeance Raiding with Leashes VI: Pets of Pandaria Item Reward: Happiness Broadcast Text (Spoiler Warning)
      Global Strings
      SPELL_FAILED_CUSTOM_ERROR_375 - You are not wearing a shirt! ERR_MAIL_TEMP_RETURN_OUTAGE - Mail return temporarily unavailable BLIZZARD_STORE_VAS_ERROR_AUTHENTICATOR_INSUFFICIENT - You must attach an authenticator and then log in to your Guild Master character at least 7 days prior to purchasing a guild service. BLIZZARD_STORE_VAS_ERROR_ALREADY_RENAME_FLAGGED - Your Guild Master character has a pending name change. Complete the name change and try again. BLIZZARD_STORE_VAS_ERROR_GM_SENORITY_INSUFFICIENT - Your character must be the Guild Master for at least 7 days before purchasing this service. BLIZZARD_STORE_VAS_ERROR_OPERATION_ALREADY_IN_PROGRESS - Your recent guild service transaction is still processing. BLIZZARD_STORE_VAS_ERROR_LOCKED_FOR_VAS - You must wait 30 days after purchasing a character or guild service on this character before you can purchase a new guild service. BLIZZARD_STORE_VAS_ERROR_MOVE_IN_PROGRESS - Your recent guild service purchase is still processing. Holidays
      8.1 Tides of Vengeance: War Campaign Part 3 Wanderer's Festival Free T-Shirt Day Vash'jir Diving Day Titles
      "Name" the T-Shirt Enthusiast Items
      You can find all items added in the first 8.1.5 build here.
      LFG Dungeons
      8.1.5 Magni - Uldir - Magni and Brann venture into Uldir to meet MOTHER. The Prison of Ink - You are engaging in a trial to earn a blood contract. The Creator's Workshop - Mimiron has called you to the Spark of Imagination in Ulduar to reform Hati. Mounts
      Kul Tiran Charger - "The Kul Tiran military prides itself on mastery of both sea, through a vast navy, and land, with armed cavalary." Bruce - "BRUCE!" Crusader's Direhorn - "A loyal steed to the holy crusaders of Zandalar." Toys
      Noblegarden: Noble Gardener's Hearthstone Midsummer Fire Festival: Fire Eater's Hearthstone Brewfest: Brewfest Reveler's Hearthstone World Safe Locs
      8.1.5 Allies - Horde - Zandalari - Vehicle Safe (JAK) 8.1.5 Allies - Horde - Quest 03 - Safeloc (JAK) "Wintergrasp BG, Defense Starting Area" "Wintergrasp BG, Offense Starting Area" AI Test Map 8b - Arathi Basin - Alliance Graveyard AI Test Map 8b - Arathi Basin - Horde Graveyard Warsong Gulch - Horde Enter Loc (New) Warsong Gulch - Alliance Enter Loc (New) Warsong Gulch (Uprez) - Alliance Rez Loc Warsong Gulch (Uprez) - Horde Rez Loc Arathi Basin (Uprez) - Horde Entrance Arathi Basin (Uprez) - Alliance Entrance 8.1.5 Magni - Uldir - Start - RMV 8.1.5 Magni - Uldir - Exit - RMV 8.1.5 Magni - Uldir Scenario - All - Entrance GY Drustvar-Sef'sRetreatGY 8.1.5 Professions - Inscription - Prison of Ink GY "Wintergrasp Battleground, Siege Factory (SW)" "Wintergrasp Battleground, Siege Factory (SE)" "Wintergrasp Battleground, Siege Factory (Defense NW)" "Wintergrasp Battleground, Siege Factory (Defense NE)" "Wintergrasp Battleground, Fortress Graveyard (Indoors)" "Wintergrasp Battleground, Fortress (West)" "Wintergrasp Battleground, Fortress (East)" GMOD Drustvar Safety Port GMOD Escape Safety