Phishing Email? (Halloween Event)

#1 - Oct. 19, 2012, 8:01 a.m.
Blizzard Post

I just received an email from guildwars2 @ ncsoft.c** via bluehornet.com about this weekends event. Whoever is doing this really took the time to make the email look legit. Until I hovered over the more details tab in the email and it linked to a completely different site. Just be careful guys about these emails.

#2 - Oct. 19, 2012, 8:27 a.m.
Blizzard Post

Everyone should always be extremely careful when opening any email, ensuring it’s sent from who it appears to be. Thanks for the report, Phaze Delta One.

#4 - Oct. 19, 2012, 10:29 a.m.
Blizzard Post

I don’t know that that was a phishing attempt. We did send out a Halloween newsletter for both games.

Can you provide me with the “phishy-looking” details of that email?

#5 - Oct. 19, 2012, 10:32 a.m.
Blizzard Post

I had gotten this one too. It linked to https://www.guildwars2.com/en/events/halloween-2012/?utm_source=newsletter_gw2&utm_medium=email&utm_campaign=email_

Can we please get a quick confirmation whether or not it is legit, so we users don’t need to worry about it potentially having malware?

That came from us. You can tell because the active link — not the one you see, but the one that is actually embedded into the link — is guildwars2.com. Now, if you saw guildwars2.com but when you moused over it was not guildwars2.com, I’d be worried.

It’s good to be cautious and even suspicious about emails. One trick I learned was not to click the live link, but to right click and copy it, and examine it in notepad and if it legitimately links to the site I expect, then insert the link into the browser “by hand.”

#8 - Oct. 19, 2012, 10:39 a.m.
Blizzard Post

The Frog smiles upon us today!

Thank you for clarifying this, Gaile Gray!

You’re very welcome. They are both cool newsletter — GW and GW2 — and I don’t want anyone to miss them.

As a side note, I would note some irony/amusement in that they are sending these ads to both valid/open accounts and to customers who they have banned (either wrongfully or rightfully).

Oh dear. That doesn’t seem quite right, but I am not sure how to prevent it. I’ll talk to the newsletter person about that.

#16 - Oct. 19, 2012, 10:56 p.m.
Blizzard Post

I too, like the OP, received the spam version earlier tonight (I also received the legit one when it was first sent out, as well). Is there an e-mail address that we can forward the spam e-mails to, similar to how other places allow users to report spam e-mail being “sent” from them?

I believe we’ve established that the emails received today were legitimate, and not spam or phishing attempts.