Blizzard or Yahoo EMail hacked?????

#0 - May 19, 2010, 6:48 p.m.

I sent email this morning to [email protected] ( i cut and paste this address from original) asking about a character restoration for an issue I had almost 3 months ago.

Then i get some this message back ASKING FOR my user name and password 4 hours later.. The reply address doesn't actually return to a blizzard address. it goes to<removing malicious domain>

IF this is a hacker, how did they know i emailed support this morning from a yahoo web acct and replied to same yahoo mail address with the following email :

************************************************************************
Blizzard Notification About World of Warcraft Account
...
From:
wowaccountadmin <[email protected]>
...
View Contact
To: ***********@yahoo.com
Greetings!
It has come to our attention that you are trying to sell your personal World of Warcraft account(s).
As you may not be aware of, this conflicts with the EULA and Terms of Agreement.
If this proves to be true, your account can and will be disabled.
It will be ongoing for further investigation by Blizzard Entertainment's employees.
If you wish to not get your account suspended you should immediately verify your account ownership.

You can confirm that you are the original owner of the account by replying to this email with:

Use the following template below to verify your account and information via email.
* First and Surname
* Date of birth
* Address
* Zip code
* Phone number
* Country
* Account e-mail
* Account name
* Account password
* Secret Question and Answer
Show * Please enter the correct information

If you ignore this mail your account can and will be closed permanently.
Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.

Regards,

Account Administration Team
Blizzard Entertainment
****************************************************************
WHOIS data on the domain

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: BATTLE-SUPPORT.COM
Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.c@!##@%#!!%#%!@@#@@%#*!@*#*
Referral URL: http://www.xinnet.com
Name Server: NS10.CDNCENTER.COM
Name Server: NS11.CDNCENTER.COM
Name Server: NS12.CDNCENTER.COM
Name Server: NS7.CDNCENTER.COM
Name Server: NS8.CDNCENTER.COM
Name Server: NS9.CDNCENTER.COM
Status: ok
Updated Date: 11-feb-2010
Creation Date: 11-feb-2010
Expiration Date: 11-feb-2011

<<

#7 - May 19, 2010, 7:11 p.m.

Q u o t e:
That is a phishing email, and Blizzard will never ask you to verify your information.

You can read on how to identify fake emails and what to do with them here:

Fake E-mails from "Blizzard Entertainment"
http://forums.worldofwarcraft.com/thread.html?topicId=965511383&sid=1

Indeed, an unfortunate and confusing coincidence, but a coincidence nonetheless.

We've seen emails like the one you've linked before, and you'll find examples of other such malicious emails in the thread linked above. The first post of that thread also contains information on how to identify phishing emails, and to penetrate the masks they use to make it seem as though their messages are from legitimate Blizzard addresses.