Getting Full Infro from Phished Account

[tsukime234]

What's the point?

If you already have an account/email, but would like to keep the account by obtaining the rest of the information.

What do I need?

The basic premise of this thread is the assumption that via phishing or another form of scamming, you've obtained a character's password/account name and their email. This is by far not foolproof but if they're dumb enough to put their information into your phisher, they have a high chance of falling for this.

1) There are two options to begin. You could A: change their password and lock the account so they can't get in it, or B: leave the password and change the email accordingly.

2) Go to OpenDNS ww.soom.cz/index.php?name=projects/mail/main

3) Do the usual; from: [email protected], to: [email protected], subject: World of Warcraft - Account Recovery Instructions

4) Time for the body of the message.

The Body

Greetings,

An investigation of the World of Warcraft account _____ has produced evidence that the account has been accessed by someone who is not allowed to use it. The account has been disabled to provide you with an opportunity to secure and regain access to it. Any recurring subscriptions on this account have also been suspended to prevent further monetary charges.

Further compromises of this account's security may result in the account being disabled again. Please be sure to follow the steps below to help prevent future security issues:

1. SECURING THIS ACCOUNT

Account compromises are usually the result of the registered player of the account sharing his or her login information or playing on a computer that has a virus.

Please remember that it is your responsibility to keep your login information confidential. Any account that is registered to your name may not be shared with anyone except for one minor, of whom you are acting as a parent or guardian. You are also responsible for every use of your login information, whether authorized or not.

For your own protection, we encourage you to keep the following security tips in mind when using any computer on which you play World of Warcraft:

- Keep current with the latest operating system and other software updates.
- Make use of firewall protection if possible.
- Regularly scan for viruses, Trojan files, and key loggers.
- Be wary of "spoof" emails and websites and when downloading new software.

For additional security tips and information, please visit the following sites:

- Computer Security: h*ttp://us.blizzard.com/support/article/21118
- Account Security: h*ttp://us.blizzard.com/support/article/20572
- Unauthorized Access Policy: h*ttp://us.blizzard.com/support/article/20460

2. RETRIEVING THIS ACCOUNT

Once you have taken the appropriate steps to secure this account, please send an email to [email protected] with the following information to regain access to the account:

- Account Name:
- First and Last Name of Registered Player:
- Acknowledgement That Account Has Been Secured:

It is important to note that we are unable to assist any player in retrieving access to an account not created in his or her own name. Please be sure to send this request from the email address that is currently registered to this account.

3. VERIFYING YOUR SUBMISSION WAS RECEIVED

We will contact you once your email is received and processed. If you do not receive a reply within 48 hours of sending your email, please send it again.

Only the Account Administration team can address disputes or questions you may have about the account retrieval process. To learn more about how we are able to assist you, please visit us at ht*tp://us.blizzard.com/support/article/21505



Respectfully,

Myrrisi
Game Master
Blizzard Entertainment

ht*tp://w*ww.worldofwarcraft.com

What now?

Now, of course you could leave this email in tact and use this to your favor, but there are a few changes that you can make to create a great email.

- Remove the * from the links.

- If you chose to NOT lock the scammed account, then I suggest you change the first highlighted section and replace it with "we will disable your account.." otherwise, it looks rather awkward that the email states the account is locked yet they can still access it. If you chose to change the password, then leaving it would be acceptable.

- Where the email lists the information require to authorize the account again, you could add or retract all possible information you'd like to aquire. For instance, if I want their CD key, I can add "- Original WoW CD Key" or whatever you prefer. You could even ask for valid proof of ID.

To make this seem more authentic rather than just asking for the CD key, you can go to the wow website and click on "forgot email," enter the account name and under "last 6 digits of CD key" there will be the security question chosen by the OO. You could make the email more authentic by saying "- Answer your secret question: What is your mother's maiden name?" etc.

- Change the links depending on whether the account is EU or US. If its EU, simply change the part of the link that says US to EU, simple. This will make the email seem much more authentic.

Why would this work?

Blizzard really does this. They send you emails when they suspect your account to be "compromised" by hackers or scammers. If the scammed person finds out that someone else has control of their account, they will take this email as a godsend, considering they have all the information to take it back. They probably won't suspect to be scammed considering it already happened.


Pardon me if this or another variation of this has already been posted, but I did search around and couldn't find something exactly like this and thought I'd share regardless. Please delete this immediately if its a reposted idea.