A new World of Warcraft scam is being used that uses social engineering to trick victims into entering a special command. When a victim enters this command it would allow attackers to take control of victim’s in-game WOW interface, make unauthorized trades, and find the victim’s location anywhere in the game. Blizzard has a pre-release for their upcoming Legion add-on that includes a warning when someone tries to input a script into their user interface. There is no way to protect yourself from this attack other than not typing in commands sent to you by other players.
Source: https://www.bleepingcomputer.com/news/security/world-of-warcraft-scam-allows-attackers-to-take-control-of-victims-user-interface/