Hackers step it up a level

[Orthien]

Just got this email in a few days ago to my often not checked WoW email account.
This is a big step up from the previous attempts I have received to try and make me click things.
The English is not that bad and if I was not an active player that knew 4.2 is Firelands I could of thought this was real at a glance.
Obviously on mouse over its not a link to Blizz and it was not sent from them ether but these guys are getting convincing.

[lythac]

The English is not that bad and if I was not an active player that knew 4.2 is Firelands I could of thought this was real at a glance.

It has been kicking around for several months, my brother came in and asked me about it a while back.



I always thought the e-mail in question was a legit offer when 4.1 was coming up (which is why it looks legit), then a scammer amended the link and resent.

[PsiVen]

I think it's rather odd that most phishing scams aren't smart enough to copy/paste actual Blizzard e-mails like this.

[Delakar]

Anything that starts with a typo in the first word like that will not be from Blizzard. =)

[Flex]

Anything that starts with a typo in the first word like that will not be from Blizzard. =)

Did you read some of the quest text and NPC world yells at Cata release?

[fafhrd]

I think it's rather odd that most phishing scams aren't smart enough to copy/paste actual Blizzard e-mails like this.

I think it's rather odd that phishing attempts that do a great job otherwise still never seem to have anyone capable of checking for typos. Not even running a spellcheck apparently...

[Worldie]

What I'm really worried for is, if they keep doing "unspelled" ones, it means people do actually click on them.

I always check links on emails anyway, so this kind didn't work either

Besides, REAL Blizzard emails either got your RL Name or your Account name (which is not same of Battle.net account). You should always discard those without it.

[lythac]

Besides, REAL Blizzard emails either got your RL Name or your Account name (which is not same of Battle.net account). You should always discard those without it.

Hum, never knew that part.

Seems I still have the legit e-mail I recieved back in May (for an inactive US account).

Code: Select all

https://www.worldofwarcraft.com/account/claim-promotion.html?promoId=SEVEN_DAYS_PROMOTION

Seems the scammers only had to spell one word and they got it wrong...

[Shyrtandros]

I will admit - that is a very good attempt for account theft..

I am sure they are getting dozens if not hundreds of free accounts because of it.

[lythac]

Just received a legit one for Firelands




Googling the image location I found a scam e-mail already made with "Players" instead of your name and a dodgy link.