Phishing

[Pincus]

Just a reminder kids, people are douchebags, and trying to steal your WoW accounts. This popped up into my honeypot today:

Code: Select all

Greetings,

An investigation of your World of Warcraft account has found strong evidence that the account in question is being sold or traded. As you may not be aware of, this conflicts with Blizzard\'s EULA under section 4 Paragraph B which can be found here: WoW -> Legal -> End User License Agreement and Section 8 of the Terms of Use found here:
WoW -> Legal -> Terms of Use

The investigation will be continued by Blizzard administration to determine the action to be taken against your account. If your account is found violating the EULA and Terms of Use, your account can, and will be suspended/closed/or terminated.
In order to keep this from occurring, you should immediately verify that you are the original owner of the account.

Click on the link below to verify your Battle.net account e-mail address:

http://us.battle.net.eu.worldofwarcraft.xml-login.net/login.asp?ref=https://www.worldofwarcraft.com/account/&app=wam

Account security is solely the responsibility of the account holder. Please be advised that in the event of a compromised account, Blizzard representatives will typically lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.

Sincerely,
The Battle.net Account Team
Online Privacy Policy

Note the wonderful link. Luckily, it got flagged as spam and "dangerous" six ways to Sunday. Just watch out!

[Canaie]

Ha, not too bad.

Another reason to use a different e-mail for bnet (and for nothing else), so the odds something like this being sent there are minimal.

[Deminthus]

Just a reminder kids, people are douchebags, and trying to steal your WoW accounts. This popped up into my honeypot today:

You have a damn honeypot?? I'm jealous, and a little in love with you.

[Pincus]

Kinda. I have domains. They're cheap. I point the MX addresses to various places to catch spam. If I get an email at one of them, you're done.

http://www.projecthoneypot.org is a GREAT way to start...

[Deminthus]

Yup, I know the place. Honeypots fascinate me, all of em.

[Greebo]

I use Google Apps For Your Domain to run my mail server. Every service/site I use/sign-up to gets a unique email address so it is generally quite easy to distinguish between legit email and illegit.

[Abric]

I received from Mail Delivery returns with Russian in it, to Russian accounts.

Changed the password. I feel it was probably Pincus.