battle.net email scam

[thilath]

This is a scam that involves using a blizzlike email to make people enter their details into your phisher. This will only be able to get their account name / password but i'm sure there are ways to make this scam involve full details.

What you need

• A fake mailer such as the soom.cz fake mailer, or any other fake mailer that lets you use html.
• A list of email addresses to send the email to.

How to pull it off

Open up your fake mailer of choice.
Make the email out from [email protected] or anyother blizzard email address.
Put the the in the subject:

Battle.net Account – Account Merge Notice‏

Make sure that html is enabled.

The email needs to say this:

This e-mail notification is in regards to an account merge that has just been completed for a Battle.net account.



You have successfully merged your World of Warcraft into the following Battle.net account:



p***@hotmail.co.uk



From now on, you must use the above Battle.net account name and its password to play World of Warcraft. In addition, use the above Battle.net account username and its password to log in to other Blizzard online services such as World of Warcraft Account Management, the World of Warcraft Armory, and the Blizzard Store.



You should expect to receive a similar notification of this account merge which has also been sent to your World of Warcraft account e-mail address.



For more information, click here for answers to Frequently Asked Questions or to contact the Blizzard Billing & Account Services team.



If you did not initiate this account merge, visit the Account Management Page and log in with your World of Warcraft account name and password to cancel the battle.net merge immediately.



Sincerely,
The Battle.net Account Team

You need to change the YOURPHISHER HERE to your actual phisher url.

Then, just send the email to as many people as you want and hopefully, they will click the link, enter their details and voila!



I did a search and didnt find anything. If this is a repost, please post a link of the original post.

[PublicEnemy219]

Kinda like that, nice job. +rep

[timebandit1]

Good idea here, you'll probably get a ton of hits, but then some password changes might happen fast due to them realizing their account is still in their control. @@

Epic idea though for the average player. It will freak them out.

[edoroom]

nice idea but the problem for me is to get emails of ppl that have accounts :P

[DaemonOnFire]

Good idea here, you'll probably get a ton of hits, but then some password changes might happen fast due to them realizing their account is still in their control. @@

Epic idea though for the average player. It will freak them out.

Just keep an eye on the log, and steal the money as fast as you can.

[ragin77]

This is a great Idea. Really simple, surprised more people didn't think of it. +Rep

[timebandit1]

I don't like it, the first thing they will do is to login game and test it first, and then they will act smart after that.

I think some people actually experience an adrenaline rush upon receiving a blizzlike email, particularly nastygrams, and are likely to exercise poor judgment upon giving them a panicked once-over. If the phisher is set up correctly, they shouldn't even realize they've been cheated.

Lewly lewl