Sorry your browser is not supported!

You are using an outdated browser that does not support modern web technologies, in order to use this site please update to a new browser.

Browsers supported include Chrome, FireFox, Safari, Opera, Internet Explorer 10+ or Microsoft Edge.

Geek Culture / Diablo3 scam email?

Author
Message
Plystire
23
Years of Service
User Offline
Joined: 18th Feb 2003
Location: Staring into the digital ether
Posted: 1st Nov 2012 23:22
Checking mail today I see an interesting piece of junk found its way into my inbox.

This is my professional email account. I never use it for personal accounts or for games, only for job related contacts. So, aside from not knowing how someone found this email, it's interesting that this would be the first piece of actual junk to land in my inbox.

The email claims to be from Blizzard entertainment, and looks fairly legit. The subject of the email was "Diablo III - Account validation" and the content of the email used legit links to blizzard's TOS, battlenet, as well as a legit phone number to support. The email doesn't request information FROM you, but you are provided a link to "us.battle.net" for "validation" purposes. Naturally, me being curious, I put up as many safeguards as I had available and followed the link. The "validation page" looks exactly like the real deal, but scripts are being used to capture keystrokes when information is put in.

I also find this interesting because I don't have Diablo3, nor have I ever played it.

Anyone else seen something like this? It seems a little too detailed for an account jacker.


~Plystire

A rose is only a rose until it is held and cherished -- then it becomes a treasure.
Wolf
18
Years of Service
User Offline
Joined: 8th Nov 2007
Location: Luxemburg
Posted: 1st Nov 2012 23:35
There used to be duplicates of Onlinebanking websites back around 2004 but I never heard of such websites that are game related. Its actually a bit sad if you concider all the effort put into making this Is there a way to get money off you blizzard account? I never played any of their games except Diablo2 for half an hour.

Dark Frager
16
Years of Service
User Offline
Joined: 16th Mar 2010
Location: The Void.
Posted: 1st Nov 2012 23:38
Quote: "Is there a way to get money off you blizzard account? "


Sell it. Which is not within the Blizzard rules.

Or simply just be a complete ass and delete every single piece of gear the player has.

Oh come on. We're trying to talk with sigs here and you rudely interrupt.
Seppuku Arts
Moderator
21
Years of Service
User Offline
Joined: 18th Aug 2004
Location: Cambridgeshire, England
Posted: 1st Nov 2012 23:50
It's likely to be phishing, sometimes they can be REALLY convincing, always check the URL, heck don't use their URL, just type the website into your browser yourself. I've had one from a bank i've never banked with, the URL was very slightly different to the official.

Fallout
23
Years of Service
User Offline
Joined: 1st Sep 2002
Location: Basingstoke, England
Posted: 2nd Nov 2012 00:05
You shouldn't follow links in scam emails, even if you have safeguards. Often the links will be unique for your email address and by following the link you'll validate your email address for future spam emails and misuse. Not a big problem but worth bearing in mind.

Phaelax
DBPro Master
23
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 2nd Nov 2012 01:49
I would forward it to [email protected]

https://us.battle.net/support/en/article/phishing

"You're not going crazy. You're going sane in a crazy world!" ~Tick
Virtual Nomad
Moderator
20
Years of Service
User Offline
Joined: 14th Dec 2005
Location: SF Bay Area, USA
Posted: 2nd Nov 2012 06:05 Edited at: 2nd Nov 2012 06:07
i've seen big bank sites, ebay, paypal, battle.net, etc replicated; some more sophisticated that others. now i enter the urls by hand/use favorites/copy-paste if i see something i might need to follow up on vs clicking any links in email. out of curiousity, i'll hover over the links to see what they might be trying to lure me into. ie, us.battle.net

comcast has been letting more and more junk through and they've removed handy "report this email" links from sight (last i checked & some time ago).

as far as your professional email address being "interesting"-ly in receipt - all it takes is one person you've sent/received email to/from to have you somewhere on their email client/contact list and it's just as subject as your "regular" accounts.

i've received junk mail where the To: line includes a dozen or more similar addresses. some just change one letter in a brute-force hacker fashion (like we use to do "back in the day"...).

and, just as fallout said, click a suspicious link and you've just validated the account for spammers/etc. same goes for the click here to unsubscribe links.

Virtual Nomad @ California, USA . DBPro V7.7
AMD Phenomâ„¢ X4 9750 Quad-Core @ 2.4 GHz . 8 GB PC2-6400 RAM
ATI Radeon HD 3650 @ 512 MB . Vista Home Premium 64 Bit
Kezzla
17
Years of Service
User Offline
Joined: 21st Aug 2008
Location: Where beer does flow and men chunder
Posted: 2nd Nov 2012 06:43
I get those a lot, I got sick of reporting them as phishing scams and now just let them die in the junk mail folder. the only blizzard account I ever held was for Neverwinter Nights and that was years ago, that and a brief guest trial of WOW.

They do look convincing and I am getting the diablo ones now too.

my only guess is that somewhere along the line someone got access to the blizzard email database.

Defy
FPSC BOTB Developer
VBOTB Developer '09
18
Years of Service
User Offline
Joined: 20th Aug 2007
Location:
Posted: 5th Dec 2012 10:28
I too have received these emails. If you hover over the link the address is often different than what it seems.

@Kezzla, yes you are on the money. Blizzard did get hacked and emails were stolen. However I too have never played Diablo. strange.

http://www.tomshardware.com/news/Blizzard-Hacked-Battlenet-Email-diablo,16789.html

I would say the major reason for this could be the Real Money Auction house implamented after the games release. Google will give more details on this if required for those interested.

Phaelax
DBPro Master
23
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 6th Dec 2012 00:09
I use the authenticator which is suppose to hopefully prevent hacks to my account.

"You're not going crazy. You're going sane in a crazy world!" ~Tick

Login to post a reply

Server time is: 2026-07-17 14:25:01
Your offset time is: 2026-07-17 14:25:01