1. Home
  2. ip security
  3. Have I Been The Target Of A World Of Warcraft Phishing Attempt?

Discuss in my Forum

Have I Been The Target Of A World Of Warcraft Phishing Attempt?

By Networking Security Posted in: ip security

Hullo all,
I received this email earlier-
Greetings ,
We have determined that your World of Warcraft account has been accessed/compromised by someone not authorized to do so by the World of Warcraft Terms of Use (http://www.worldofwarcraft.com/legal/ter…
To protect your privacy and security, we have temporarily disabled this account. Any recurring subscriptions have been suspended to prevent further monetary charges. In order to regain access to the account, you must complete the steps below to secure the account and your computer.
Please keep this email for your reference until the account recovery process has been completed.
STEP 1: SECURE THE ACCOUNT, YOUR COMPUTER AND YOUR EMAIL ADDRESS
Account compromises most often occur when a player shares login information with an unauthorized third party or plays on a computer that has a virus, Trojan, or key-logger. We recommend following the http://us.battle.net/security/checklist.… on our Account Security site at http://us.battle.net/security/index.html…
STEP 2: RECOVER THE ACCOUNT
We now provide a secure website for you to verify that you have taken the appropriate steps to secure the account, your computer, and your email address. Please go to this site and follow the instructions:http://us.battle.com/account/support/pas…
STEP 3: VERIFY YOUR SUBMISSION WAS RECEIVED
We will contact you with further instructions once we have received and processed your submission. If you do not receive a reply within 48 hours of submitting this form, please resend it from the address listed above.
Please be aware that if unauthorized access to this account continues after the recovery process is complete, it may lead to further action against the account.
Regards,
Neil G.
Game Master Bahrdrak
Customer Services
Blizzard Entertainment
The header info is – (I have starred out my details)
From: Blizzard Entertainment
Subject: World of Warcraft Account Security Verification
Date: 21 July 2010 21:52:44 GMT+01:00
To: ***********************************
Reply-To: WoWAccountAdmin@blizzard.com
X-Apparently-To: *********************** via 217.146.188.122; Wed, 21 Jul 2010 20:52:59 +0000
Received-Spf: pass (mta1009.bt.mail.ukl.yahoo.com: domain of deepnessblue@hotmail.com designates 65.55.111.76 as permitted sender)
X-Ymailisg: B3nZeIAcZAqJzn5qfPtLeNM0kp6XGrSLxJeicok… GnGlYBIRris8x.l5SdygxbWnVkyy.VYjjpu2KqKO… r.XcQFvRzgUlhxVHMG2FT1UWkZGLtp3vJDw9Kl7G… eHcZQujtEynUPEExYPkzY97sVFB3U3eQuwvbHScY… FU7JDmmFnSo_EvM2ZqpvUD3gDdp7qMZ4iCB9Qoym… X3kSVQaaTvvI2Flk2HrjQyBdUI_g8tYzIQZAGoeU… GE2P2nMZrHM1CYot2tB96vtCmaINSGgu6DaDWYFP… MTOv78PvL7Xc.TbpEPujxhhTIsoEzUpizejcPEVM… rkUOPY9sv330Yq3x40diRPOcBvjX5KnHuABv0jPm… YwjApICRP_WJ03rFOjH_6D.v6J2tCEVhbP6rv.6b… fGPCJ02i4GMR5AL42MnP6ZEwp3mfp5Daw1j3aEAL…
X-Originating-Ip: [65.55.111.76]
X-Originating-Ip: [114.85.32.245]
Authentication-Results: mta1009.bt.mail.ukl.yahoo.com from=blizzard.com; domainkeys=neutral (no sig); from=blizzard.com; dkim=neutral (no sig)
Received: from 65.55.111.76 (EHLO blu0-omc2-s1.blu0.hotmail.com) (65.55.111.76) by mta1009.bt.mail.ukl.yahoo.com with SMTP; Wed, 21 Jul 2010 20:52:59 +0000
Received: from BLU0-SMTP44 ([65.55.111.73]) by blu0-omc2-s1.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Wed, 21 Jul 2010 13:52:58 -0700
Received: from fbtfg ([114.85.32.245]) by BLU0-SMTP44.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 21 Jul 2010 13:52:54 -0700
X-Originating-Email: [deepnessblue@hotmail.com]
Message-Id: <BLU0-SMTP44225A4AA85BF42158B19ECEA10@p…
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="—-=_NextPart_000_0BE1_018DCD…
X-Priority: 3
X-Msmail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2900.5512
X-Originalarrivaltime: 21 Jul 2010 20:52:54.0987 (UTC) FILETIME=[B13E71B0:01CB2916]
It seems fairly legit, but I haven't used my wow account for about 6 months, and NOONE know my login details.
ta

  1. Robert M Says

    Yeah I get those all the time. One way to find out if it is fake is to put your mouse over the link and at the bottom left of your browser it should show the real address. If it is different from what they show you it is fake.

  2. s3anmik3 Says

    Ignore those e-mails. I haven’t played WoW in 2 years and I still get those e-mails. I get about 4-5 a day. I just put them in the junk folder. It’s really troublesome.

Leave a Reply

You must be logged in to post a comment.

More Interesting Things

©2011 Networking Security, All rights reserved.