Friday, December 17, 2010

Hacker Alert: Blizzard Customers

I've been sent an email from someone faking Blizzard's email address. They've claimed that they are Blizzard, and that due to increased hacker activity all accounts must be reconfirmed. If you click the link and enter your email and password, you will lose your account, as it is a phishing scam and not actually Blizzard.

It's aimed at World of Warcraft users, as the email is signed (fraudulently of course) "The World of Warcraft Support Team". The idea is to steal accounts for the items and money.

The email includes a link that claims to lead to "https://us.battle.net/login/en/?ref=https%3A%2F%2Fus.battle.net%2Faccount%2Fmanagement%2Fadd-game.html&app=bam&cr=true", which is the legitimate Battle.net login page.

While "https://us.battle.net/login/en/?ref=https%3A%2F%2Fus.battle.net%2Faccount%2Fmanagement%2Fadd-game.html&app=bam&cr=true" is legitimate,
the link does not, in fact, lead there. Hovering over the link in the email, I saw that it goes to (abbreviated) "us.battle.net.support.login-confirm.com". And that's totally fake. The actual Battle.net url is completely different.

Anyways, if you're brave, give them fake emails and stuff to mess up (on a minimal scale) their CPU time. I entered stopit@yahoo.com like 20 times, each time with a different password.


So, please, whoever you are, be it a Blizzard customer (WoW especially) or an employee, or anyone else that cares, take notice.

No comments:

Post a Comment