#0 - July 29, 2010, 2:33 a.m.
One asked me to follow a link to opt-in the the cataclysm beta - it lead to a battle.net-looking site. Obviously, I didn't put in my account information.
I received another email today from "noreply@blizzard.com" - telling me my password has been changed and I need to go to "wowbattle-review.net" or something to fix it. It even listed the actual Blizzard customer service phone number at the bottom. Well, my password hasn't been changed and I didn't go to that website. For some reason, it lists an old date in the subject header.
Why this troubles me - the golden rule is any address ending in "blizzard.com" is real. So how am I getting phishing emails from "noreply@blizzard.com"?
From: Blizzard Entertainment <noreply@blizzard.com>
Subject: Blizzard Entertainment Cataclysm beta
Date: January 5, 2007 2:58:23 PM EST
To: <removed>
Reply-To: noreply@blizzard.com
Greetings!
This is an automated notification regarding the recent change(s)
made to your World of Warcraft account. Your password has recently been modified through the Password Recovery website.
*** If you made this password change, please disregard this notification. However, if you did NOT make changes to your password
we recommend you Login verify your password:
http://www.wowbattle-review.com/login/login.asp?ref=https://www.worldofwarcraft.com/account/&app=wam
If you are unable to successfully verify your password.
using the automated system, please contact Billing & Account Services at 1-800-59-BLIZZARD (1-800-592-5499) Mon-Fri, 8am-8pm Pacific Time or at billing@blizzard.com. Account security is solely the responsibility of the account holder. Please be advised that in the event of a compromised account, Blizzard representatives typically must lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.
Regards,
The World of Warcraft Support Team Blizzard Entertainment
-------------------------------------------------------------------------------------------
I'd like it explained to me how these hackers have disguised their emails to appear to be from "noreply@blizzzard.com". This is the third email like this I've received. The first one told me my play time was about to expire, the second one asked me to opt in for the beta (as mentioned above), and this is the third one.
I only clicked on one link (the second email) and didn't type in any info. I also have an authenticator, and I use a mac (lol good for something?), so I'm not too worried. Thanks for any info!
