Panderia Beta Phishing

[Ryzon]

I just thoght I would like people to know. There's a very official looking invite to Pandaria Beta going around right now. Embedded in the URL to the invitation is a link to a Chinese company that has a very official looking Battle.net login. Be careful.

 

[CodenameG]

yea, but thats how it always is, if your unsure dont click it, if you really did get an invite it will show on your battle.net account, no need to click the link in the e-mail.

 

[Ryzon]

This one is really tricky and emulates the whole Battle.net login experience. The only way to detect it is an embedded url that links to some blizzard-account.net or some crap that is owned by some Chinese company. I just wanted to give people a heads up.

 

[CodenameG]

yea i know i got this a few months ago.

check the links before you click, or just dont click them.

 

[Ryzon]

I work in Internet security so that's why took this a little further to track down the company behind it. I think it might be worth posting a sticky warning the average users about this spate of phishing attacks in the name of Beta access. Just IMHO.

 

[weischbier]

Blizzards states several times that they don't have any links in their emails! (Don't know what they looked like some years ago but my Pandaria Beta Email hadn't any links)
Thats the best way to validate an official Blizzard email.

greetz

Weischbier

 

[CodenameG]

if your here, your not the average wow player, i like to think our user base is smarter then falling for that kinda of stuff.

 

[Ryzon]

I'm just saying that this e-mail had links and those links were what raised flags and made me investigate the authenticity of those links. I'm not sure that everyone who does not work in the Internet industry will be so suspicous. I'm just saying that warning people that there's a lot of Panderia Beta phishing crap going on right now will be a good thing in the long run. Taking the attitude that "you're stupid, you got duped, and your account got hacked" is not going to be beneficial in the long run.

 

[gippy]

i've got a few of them over the past week, looks quite legit, would fool a lot of kids or not internet savvy people

hovering over the play free now button gives some dodgy link ending with .tk