Found this on the US forums thought it might be useful for everyone here to know as well.
Well, the thread that was on front page last night isn't there now, so I want to get word out to as many as people as possible. Scamming with WeakAuras is a scam once again, and if you don't know how it works, it's not as difficult as you might think.
WeakAuras is an add-on that can execute certain game that the API allows them to, and is widely used for raiding. Currently, that code is actually allowing malicious players to scam people - they will link you a WeakAuras script in-game - you're not downloading anything from any external site. This script will force you to trade the scammer all of your gold if a trade is initiated, regardless whether it is you or the scammer who initiates the trade. You won't see a trade screen. You won't get to click a button to confirm it. All you will hear is the sound of coins, and your gold will be gone.
Don't trust a WeakAuras script from ANYONE that you do not trust explicitly - even if it's some guy in trade chat who just wants someone to help him with his WeakAuras - that's a very common way to scam people. I want to get word out to as many people as possible - tell your guildies - tell your friends - I don't want to see anybody get scammed by this - this is something that so many people don't even realise is possible - so the more awareness that exists for this, the better.
Well, the thread that was on front page last night isn't there now, so I want to get word out to as many as people as possible. Scamming with WeakAuras is a scam once again, and if you don't know how it works, it's not as difficult as you might think.
WeakAuras is an add-on that can execute certain game that the API allows them to, and is widely used for raiding. Currently, that code is actually allowing malicious players to scam people - they will link you a WeakAuras script in-game - you're not downloading anything from any external site. This script will force you to trade the scammer all of your gold if a trade is initiated, regardless whether it is you or the scammer who initiates the trade. You won't see a trade screen. You won't get to click a button to confirm it. All you will hear is the sound of coins, and your gold will be gone.
Don't trust a WeakAuras script from ANYONE that you do not trust explicitly - even if it's some guy in trade chat who just wants someone to help him with his WeakAuras - that's a very common way to scam people. I want to get word out to as many people as possible - tell your guildies - tell your friends - I don't want to see anybody get scammed by this - this is something that so many people don't even realise is possible - so the more awareness that exists for this, the better.