Social Engineering (Tested!)

[Jeremiah]

You may or may not have known the exact definition of Social Engineering, but basically, you talk to a person for awhile (usually out of game, since GMs cannot track logs once the player complains of a stolen account) and pull some information out of them. The problem is...Getting the Account Name on WoW.

This is how I went about doing it:

AIM:

For the privacy of the user(s) involved, I'm going to replace my AIM name with (Person1), and the Victim with (Person2)

Person1: Hey Omak.
Person2: .......hey J
Person1: Man, you totally kicked ZF, dude, you're like the best tank on the server for the 40-50 bracket
Person2: lol i kno right?
Person2: i just m really geared out
Person1: Nah, it's just toally major skill right there.
Person2: lol this is why i have u in my guild J
Person2: u kiss ass =P
Person1: No, I just want more runs XD
Person1: Hey man, did you hear about that whole account name scam thing?
Person2: no wat?
Person1: So you didn't?
Person2: no
Person1: Well basically, they can steal your account name by just using a whisper, and it chain-links it to all of your friends, sending them your account name and whatnot.
Person2: rly?
Person2: how?
Person1: It sent me yours, harvey1012 (<--- picked random numbers)
Person2: no thats not it mine is ******it** (censored)
Person1: Oh.
Person2: thats scry tho
Person1: Yeah...Well hey man, I'm gonna go to bed.
Person1: I wanted to ask you something, though
Person2: wut?
Person1: Do you want to sign up for my new PvP community?
Person2: lol awesome dude is it a website?
Person1: Yeah, I just need a Username and Password
Person2: o
Person2: ok
Person1: Want to set it up?
Person2: k
Person1: Give me this info: USERNAME: PASSWORD:
Person1: Think of a password you'll remember easily. (<--- It is VERY important to accentuate this line, it sometimes psychologically makes people want to use the same passwords as other accounts
they have)
Perosn2: user: clydehelm11 password: mc******
Person1: Awesome, I'll get it set up tomorrow

And I went into his WoW account, and scammed his gold, and everything, of couse, while using an IP Changer

IN order for this to most efficiently work:

1. Person needs to be on the same realm
2. Person needs to trust you well
3. You need to use some sort of Proxy so GMs have a harder time tracking it

And now, I'm the proud owner of 500g =P

Have fun!

[[M]illo]

Lol that scam suck. First, who will be dumb enough to give his pass to you.
Second, why scam your friend??

[AZO]

screw that man. if i want my friends passwords, i ask them for it, and i dont steal thier gold. scammin friends is lame man. no +Rep for you, and if i could, id give you - rep. i feel sorry for your friend.

[dynamikz]

From what I read, it is not a friend of his. Rather he joined a guild with the intention of scamming people in it. To do this he got in close with his victim, (conned him into thinking they were friends) and then he proceeded to bend over his victim lawl.

It's really not that hard to understand, reading comprehension 'for teh win' ?

[cydial]

You 2 seriously just stfu

at least this dude was trying to contribute as a leecher....

But, this scam does not seem very well thought out (no offense)

I see your theory though.... gain the trust of those that admire you then screw em

[Jeremiah]

From what I read, it is not a friend of his. Rather he joined a guild with the intention of scamming people in it. To do this he got in close with his victim, (conned him into thinking they were friends) and then he proceeded to bend over his victim lawl.

It's really not that hard to understand, reading comprehension 'for teh win' ?

That is correct. All I did was join his guild, donate to his bank, gain his trust, and call him "The Best Tank Ever"

And I had my way in

[Spronni]

i suggest doing the account name and password thing at separate days to not make him suspissious (i can't spell)

[stwalllok]

His pass is Mcdonalds...

[Spex]

His pass is Mcdonalds...

Hahahaha x'D + rep to you for making me lol

[ethtechno]

His account name and password was : yourafag
thispassdontwork01

[krazy1killa]

and then he proceeded to bend his victim over lawl.

Didnt know I had to do that just for gold...

[dynamikz]

Don't have to, but its a possibility