From Blackhat '06 :
> Hacking World of Warcraft: An Exercise in
> Advanced Rootkit Design
> Greg Hoglund
>
> This was one of the best talks at the
> conference. Very entertaining, and it
> definitely had something for everybody.
> Hoglund described “The Supervisor,” a
> kernel-level rootkit made specifically to
> bypass “The Warden,” Blizzard Entertainment’s
> anti-cheating technology. This effectively
> allows anyone running “The Supervisor” to
> cheat and get away with it. Supervisor allows
> Hoglund to inject his own instructions into
> the World of Warcraft client, allowing him or
> others to take control of the client while
> also cloaking the contents of the injected
> instructions by replacing page tables
> corresponding to the modified memory with
> another page table filled with A’s. When The
> Warden next attempted to scan the system’s
> memory in order to look for any signs of
> cheating, it would only come across as bunch
> of As, rather than the actual instructions.
> Brilliant…and Hoglund’s presentation was
> flawless and entertaining as ever.