[New]Blizzard Site System

[Hasselhoff]

Well, as some of you may have started to notice, Blizzard has a whole new system for their US recovery process on their website.

This is good for scammers in some ways, and very bad in others. I'll break it down in here.

THE GOOD

We don't necesarily HAVE to call blizzard to take control of an account now!

They have added a new option, Change Email, and it is right there on the site!



The beauty of this baby, is if you know either the Secret answer OR the Last 6-Digits of the CD-Key, you can get the account in your email!



So, using this you can get the email under your control, without ever calling Blizzard. This means you can do it without ever knowing the correct last name.

But be warned! If it is done to much, Blizzard locks the option of doing it VIA the site and you are required to call in, but once again, this can be used to a scammer's advantage. You can change it so many times that the OO is REQUIRED to call Blizzard to get it back!

When retrieving a password, a SA is no longer required! So if you happen to get their CD-KEY, you can get the account on your email, and then use the new retrieve password function to get the password!



You are then emailed a link, which expires in 72 hours. It sends you to this:



Which is a very simple thing to do and you have the account!!

The Account Name Retrieval is still the exact same.

THE BAD

All of these changes also mean it is easier much more simply for someone who was scammed to get their account back.

If they know the email you changed it to, BAM, they have it back

They are no longer required to call blizzard, and can get an account back DURING THE WEEKEND! What used to be the safest time is no more.


It seems like now the only way to have the best chance of keeping a character you want to keep, is transferring it off and banning the old account.


There are many ups and downs to the new system, but I'm sure as a community we can exploit this to the fullest extent. It seems very promiising in allowing scammers to get quick access to accounts which can be used for a variety of reasons. Scammers will now need to watch out for getting recalled back on extremely fast.

:::::EDIT:::::

If the pictures do not show, here are direct links:
ImageShack - Hosting :: aaa1pi0.jpg
ImageShack - Hosting :: aaa2zw2.jpg
ImageShack - Hosting :: aaa3pi9.jpg
ImageShack - Hosting :: aaa4lj7.jpg

These are in the order they should appear in the post.

-Hasselhoff

[Face Mangler]

Just make an email address that the owner of the scammed account doesn't know and you're good. Nice post +Rep

[oovavoo]

i guess this is only for the us accounts :S

Damn i hate eu blizz

[CodeDemon]

Thanks for the info +Rep

[Skanky]

thanks for the info!

[Rowro]

I think that the biggest downside is the fact the site will no longer ask you for a secret question. This makes it virtually impossible to figure it out without scamming the SQ/A from them.

[Mr. Herbert]

You suck hassel i totallty told u i was gonna post this and also your worng you need to know the registered email adress on the account to change it

[vetis]

downfall is you need to know current email...

[Vannakix]

downfall is you need to know current email...

Simply just ask them for there e-mail... Especially if there selling the account they shouldn't mind.

[Purple Sprite]

repost..

Like 4 days old.

http://www.mmowned.com/forums/wow-sc...formation.html

[Hasselhoff]

Indeed it is, looks like I failed at searching.

I will just say that this actually goes in-depth about it, but I know I have gotten upset at other people for doing that : /

[Purple Sprite]

[COLOR="White"]Indeed it is, looks like I failed at searching.

I will just say that this actually goes in-depth about it, but I know I have gotten upset at other people for doing that : /

Ya this is way better though haha, and it's understandable because his post had nothing to do with it, just a link to the page where you can do it. And he didn't even type anything about it.


+rep

[Verye]

Thanks, found out about this pretty recently.

The advantages and disadvantages make it tough to tell if it's beneficial or bad for scammers. On one hand, the email of an account can now be changed WITHOUT the last name, thus making the last name not quite as important. On the other hand, it makes it easier for the account owner to take the account.

This is better for phishers overall, and makes taking accounts a lot simpler. For trade scams, I think it works against the scammers, since the person you take the account from can take the account easily, whether they're the OO or not.

For those who steal accounts by the use of keyloggers and phishers, this will make their life a bit easier.

[Hasselhoff]

Thanks, found out about this pretty recently.

The advantages and disadvantages make it tough to tell if it's beneficial or bad for scammers. On one hand, the email of an account can now be changed WITHOUT the last name, thus making the last name not quite as important. On the other hand, it makes it easier for the account owner to take the account.

This is better for phishers overall, and makes taking accounts a lot simpler. For trade scams, I think it works against the scammers, since the person you take the account from can take the account easily, whether they're the OO or not.

For those who steal accounts by the use of keyloggers and phishers, this will make their life a bit easier.

Agreed, Phishing just got a whole lot easier. Looks like this could be the beginning of the end of good ole' trade scams.

[Erilag]

Yayahyah nice1