There's serious phishing going on

keshayra.2037

#1 - May 21, 2014, 2:33 p.m.

I was checking my emails and found no less than three emails claiming to say that an account password change was requested. I deleted these emails without clicking any link in them, so cannot provide any information about their source.

As I also play World of Warcraft I am pretty strict with keeping my login information for games I play safe. And after hearing what happened to Ebay I decided to make sure I had a new password for my GW2 account too.

My post is more meant as a warning to others playing to NEVER EVER click any link in an email even if it seems to come from the correct source. For example, if you receive an email telling you there’s an password change (like happened to me in triplicate) then delete the email, and go to your account and make sure you change the password used immediately. I also suggest to delete old login locations listed too, as I think keeping them on file increases the chance of someone compromising your account.

Also the same thing I always state for WoW applies here too. If an email claims to offer you something then always check that it’s actually valid and an active offer.

And finally do not ever go to sites other than the GW2 site because any unauthorized site could have code on it to key log stuff you do, such as capturing your username and password so therefore also make sure the two boxes to remember them are ticked.

And now for a question for the GW2 team: Are you ever going to make a version of the mobile phone authenticator that’s compatible with Blackberries. The versions you got right now seem not to work with my Blackberry.

Gaile Gray

#10 - May 22, 2014, 4:02 p.m.

Would-be hackers obtain lists of valid e-mail addresses and “ping” them against Guild Wars 2 to see if they can steal an account. They hope that they can get you to react carelessly, to approve access for them by not paying attention to the mail, not reading the remote location they’re coming from, etc.

They also obtain huge lists of “known passwords” through hacks of sites, such as the recent PayPal and eBay incidents.

And finally, a lot — the majority — of hacked game accounts are tied to hacked e-mail accounts. If I got those e-mails, I’d be asking a lot of questions, like “Is my e-mail secure?” or “Does my computer have a key-logger?”

If you want to change your user name, contact Support and we’ll work with you on that. I strongly encourage you to use a new e-mail account that you use nowhere else and that you chose passwords that are used only one time, and are quite complex. Be aware that if you issue a request for a new Account Name we will be required to establish that you’re the owner of the account, go through a verification process. But really, for security’s sake, you wouldn’t want us to react any other way.