#0 - Jan. 29, 2010, 4:14 p.m.
If you receive an e-mail with the following subject and text, DO NOT open the e-mail and DO NOT click the link:
From:
[email protected]. Actually it's [email protected], as seen on the original source further below.
Subject:
Worldofwarcraft Account Consulting‏ (Worldofwarcraft !!! It's never written like this in an original Blizzard e-mail)
Message:
World of Warcraft -> Legal -> End User License Agreement and Section 8 of the Terms of Use: Blizzard Entertainment -> Legal -> Terms of Use A 3-hour probationary suspension is pending on this account, awaiting confirmation from a specialist. A final warning has been issued. The investigation will be continued by the Account Administration team to determine the any further suspensions. If the account in question is found in violation of the EULA and Terms of Use, further action will be taken. Be aware that any additional inappropriate actions may result in the permanent closure of the account. Thank you for respecting our position on this matter. ================================================================================================================== ** We request that you verify your legitimate ownership of the account here:
http://www.worldofwarcraft.com/account/support/?id=msi0504p
Blizzard staff will verify your account information submitted in two days, please do not modify your account information during this time . It will not affect your game uptime.If you are unable to successfully verify your password .using the automated system, please contact Billing & Account Services at 1-800-59-BLIZZARD (1-800-592-5499) Mon-Fri, 8am-8pm Pacific Time or at [email protected]. Account security is solely the responsibility of the account holder. Please be advised that in the event of a compromised account, Blizzard representatives typically must lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play. Regards, The World of Warcraft Support Team Blizzard Entertainment
Original Source:
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9Mw==
X-Message-Status: n:0
X-SID-PRA: [email protected] <[email protected]>
X-AUTH-Result: NONE
X-Message-Info: JGTYoYF78jGch54uO+9+3BzS1IvaX9qYWZ4kj9bvEX+ZANJNthBYOYetCT2rt9hxP6PI8z67QtNp7LLH06mgEgXCPkvge9xx
Received: from blu0-omc2-s11.blu0.hotmail.com ([65.55.111.86]) by bay0-hmmc1-f7.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 20 Jan 2010 06:53:06 -0800
Received: from BLU0-SMTP100 ([65.55.111.72]) by blu0-omc2-s11.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 20 Jan 2010 06:52:47 -0800
X-Originating-IP: [211.189.4.21]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Received: from wi ([211.189.4.21]) by BLU0-SMTP100.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 20 Jan 2010 06:52:40 -0800
From: "[email protected]" <[email protected]>
To: <[email protected]>
Subject: Worldofwarcraft Account Consulting
Date: Fri, 19 Feb 2010 22:57:48 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0BE5_01815E14.12D5BA60"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-OriginalArrivalTime: 20 Jan 2010 14:52:44.0018 (UTC) FILETIME=[38EBC520:01CA99E0
I did some reseach on the IP address and collected the following information:
General Information:
Hostname: 211.189.4.21
ISP: KRNIC / UNITEL-LLINE-UNICOLOCATION
ISP Organization: Unitel CoLocation
Proxy: None detected
Type: Cable/DSL
IP Decimal: 3552379925
IP Hexadecimal: d3bd0415
IP Binary: 11010011101111010000010000010101
Geo-Location Information:
Country: Korea, Republic of
Country Code: KR
IDD Code: 82
State/Region: 11
Region: Kyonggi-do
Region Code: KRKG
City: Seoul
City ID: 16372
Latitude: 37.5664
Longitude: 126.9997
Area Code: Unknown
Once the hack is succesful, the hacker put's on an Authenticator on your account, so you won't be able to log in. Also, all your characters will be stripped from their gear and will be used for ingame trading activities, such as selling gold and items and powel levelling. Again, DO NOT open the e-mail and certainly DO NOT click the link.
