WoW password Phish or real?

[BunnyTVS]

Several years ago I played World of Warcraft for a few months, then kicked it into touch. Today I received the following email:

"Hello,

Blizzard Entertainment recently received a request to change the e-mail address used to log in to the Battle.net account with the username [my email address]. The e-mail address k***@hotmail.com has been specified as the new username for this Battle.net account. An email has been sent to this new address containing a verification link to complete the change.

Once the new address has been verified, the e-mail address [my email address again] can no longer be used to log in to this Battle.net account or any World of Warcraft accounts merged with this Battle.net account.

If you did not initiate this request, please click (http:// us.blizzard. webmailsupport.us /battlelogin.html) to contact the Blizzard Billing & Account Services team immediately.

Sincerely,
The Battle.net Account Team"

When I click on the link I get taken to a login screen. Here's my two problems:

1) It's so long ago I played a Blizzard game I'm not sure what my login password is. I could use the 'forgotten password' link, but I'm worried it might send an email to the new email mentioned in the link.

2) I could possibly work out what password I originally used, but is this site the real deal?

Could any of you guys help me? I don't use this account at present, but I would like to keep it mine, in case I want to take advantage later.



Moderation: Link broken to avoid people from following it accidentally. This has been confirmed by consensus to be a phishing attempt. For more, follow the discussion below.

- Gukumatz
Game Room Moderator

[Max the Immortal]

That is the email you get when you change your battle.net email address. If you didn't initiate it, it's probably a hacker at work. If you try to contact Blizzard customer service, they won't ask for your password, just your "secret question" answer. They seem to be short-staffed at customer support; be prepared to be on hold for a while. When you do get through, though, they're very helpful.

P.S. When in doubt about link authenticity, go to www.worldofwarcraft.com and follow the links from there.

[E-Sabbath]

http:// us.blizzard.webmailsupport.us /battlelogin.html

... phiiiish.
Note that it is the _last two_ entries that define the address. webmailsupport.us is _not_ blizzard.com at all.
At least, I don't think it is, and I would be horribly suspicious of it.




Mod's note: Broke link to avoid people following it accidentally.
- Gukumatz,
Game Room Moderator

[Max the Immortal]

Oh, I didn't even mouse over the link. I'm pretty sure that all legit customer support from blizzard is either blizzard.com or battle.net.

I just checked the email I got from when I changed my battle.net email address a few weeks ago. The legit "click here" link is http://www.battle.net/account/support .

[Jaico]

Its not real.
I got that email today and I don't even have an account there

[enigmatic]

I'd strongly suggest that someone break the link in that OP

[Raza]

Not exactly the same, but related, and since we're discussing WoW hacking:
a friend/guildmate got hacked yesterday. After some interrogation, I found the technique: they sent her an in-game mail inviting her to participate in the Cataclysm (upcoming expansion) beta test, and included a link in that message. She went to the link, "signed in", and you can guess the rest.

She too got an email like the one in the OP. This time, though, it really WAS from Blizzard because the hackers had changed her account email.

[Max the Immortal]

Originally Posted by Raza

Not exactly the same, but related, and since we're discussing WoW hacking:
a friend/guildmate got hacked yesterday. After some interrogation, I found the technique: they sent her an in-game mail inviting her to participate in the Cataclysm (upcoming expansion) beta test, and included a link in that message. She went to the link, "signed in", and you can guess the rest.

She too got an email like the one in the OP. This time, though, it really WAS from Blizzard because the hackers had changed her account email.

My understanding is that if you get into the beta, you log into your battle.net account without clicking any links in the message they send you.

In fact, a good rule of thumb is to never click on any unfamiliar links when it comes to WoW. They've even disabled links on Blizzard's forums; you have to copy/paste urls so you have an extra second and a half to think about whether it's legit.

[Gukumatz]

Broke link in OP and added last sentence to post.

Gukumatz,
Game Room Moderator

[Amblydoper]

Its a good idea to NEVER supply log in details for any site that you visit from an email link, unless you know for certain that it is legit. This goes for games, shopping, banking, etc.

[BunnyTVS]

Sorry for not breaking the link. It honestly never occured to me.

I've been out fishing something near 100 times. Never caught a thing. I think I'll let them buggers do the same.

Thanks for the advice folks.

[Zeriel]

I get these all the time--and usually, the "changed from" e-mail address cited isn't even mine.