[Starman01]

Hey Guys,

there is an issue that starting to go on my nervs, maybe some can give me insights, or tell me they have the same problems. Once per Week (sometimes twice) I'm getting messages like this (I removed the link):

Greetings,

***Please read this e-mail carefully, as it is related to your account state of World of Warcraft ID.

Deathwing the Destroyer returns to Azeroth. There is a serious saturation point in the World of Warcraft ID(s) and it is very difficult for players to creat a role. That we may delete some of the same as role's ID(s) to ensure to get a better gaming experience for players.

Sorry, because the part ID(s) which is not logged on ,for a long time. For our regular check may cause your ID(s) is cleared. We need you to submit the further questionnaire in person. In order to confirm that you are still in Azeroth. Please click

https://us.battle.net/login/zh/login.xml?ref=https:...................................................

Login to your account, In accordance following template to verify your account.

*We look forward to seeing you back in Azeroth.

Once we verify your account, we will reply to your e-mail informing you that we have given up deleting.

Game Masters:

Game Masters (GMs) are Blizzard Entertainment personnel that are available in-game to assist you with your gameplay related questions, problems, etc. Learn more about Game Masters, including how to contact them at https://www.blizzard.com/support/wowgm/

Best regards,
World of Warcraft Account Administration Team
http://www.blizzard.com/support/wowaa/
Blizzard Entertainment

This smells a lot like pishing to me. Why ? Because I don't even have a ****ing WOW Account, never had. All I have, is the Battlenet Account I was forced to create for my Starcraft II. The messages vary in words most of the times, but the links look quite valid to me, correctly spelled etc.

Anyone has an Idea what the deal is ?

Cheers
Starman

[Bobboau]

check to make sure the links that those links go to in your original email actually go to the place they say they go to.

[pecenipicek]

did you ever play on any private wow servers? i know that the email i used for a few of those is getting bombarded with this kind of phishing attempts.

[Starman01]

check to make sure the links that those links go to in your original email actually go to the place they say they go to.

I take a look. But since I never registered a WOW Account I'm a little worried simply clicking on that link. Either I and on a pishing site that looks close to the Original, or I download maleware right away.

Nope, NEVER played any WOW; not Pirate or anything. I only have the battlenet account for Starcraft II

[Shade]

That message has some serious grammar, spelling and capitalization errors. I seriously doubt it could be official with that severe a lack of quality. A 4th grader could do better.

Interestingly, some parts of it do not suffer from this, so I'd guess that some lines have been copied from an official Blizzard website, while the ones pertaining to you giving out your account details (which are the ones with all the errors in them) have been written by some phisher imbecile who hasn't gone to school.

In short. Don't touch those links. And don't reply to the mail.

[Starman01]

Jep, noticed some errors myself. The only part that always wondered me is that it links to www.blizzard.com

Guess, since WOW is so big, a lot of evil things happen, afaik quite some accounts get stolen.

So, I don't have to worry about my battlenet account, right ?

[The E]

As long as you don't follow links in fishy mails like thatm you should be OK.

[Starman01]

Jep, never do (in fact spam and pishing always make me laugh because it's mostly so obvious). Just this one got me suspecious, since I get it so often.

Thanks guys

[Bobboau]

I take a look. But since I never registered a WOW Account I'm a little worried simply clicking on that link. Either I and on a pishing site that looks close to the Original, or I download maleware right away.

do not click on them, just hover over the link and look at the status bar, or right click on the link and copy it's location. pay special attention to what comes last in the www.something.legitimatesite.evilsite.com chain before the .com/org/net/etc

[Starman01]

Don't worry, I don't click, I will delete it like the others again. Once, I forwarded one of this mails to blizzard support, but they don't care/reacted.

[newman]

Well known scam. I had a few of those too even though I also never had a WoW account. Handle the same as any spam mail.

[headdie]

My recommendation is to set a filter up and divert them into your trash.  Marking it as spam would also help.

[rev_posix]

When in doubt for these emails, pick a phrase from the message and search for it via google, yahoo, whatever.  This is a pretty good way of finding out if it's a phishing attempt.

In your example, searching for "will reply to your e-mail informing you that we have given up deleting" turns up quite a few hits showing that it's an attempt to steam WoW accounts.

I bet if you were to look at the headers for the email, it would end up originating from some random email server that is a non-Blizzard server, if it's even a legit email server (and probably has a broken reverse DNS record to boot).

[Thaeris]

I didn't quite have the time to go through the entire dialogue here, but I have noted getting emails from Blizzard, or Pseudo-Blizzard myself. Seeing as the last time I played on Battle.net was years ago with StarCraft, I've never even bothered to open the things. I'm none the worse for it, either.

[Starman01]

Pfff, I now received 3 of them (each one is different) in two days