Several years ago I played World of Warcraft for a few months, then kicked it into touch. Today I received the following email:
"Hello,
Blizzard Entertainment recently received a request to change the e-mail address used to log in to the Battle.net account with the username [my email address]. The e-mail address k***@hotmail.com has been specified as the new username for this Battle.net account. An email has been sent to this new address containing a verification link to complete the change.
Once the new address has been verified, the e-mail address [my email address again] can no longer be used to log in to this Battle.net account or any World of Warcraft accounts merged with this Battle.net account.
If you did not initiate this request, please click (http:// us.blizzard. webmailsupport.us /battlelogin.html) to contact the Blizzard Billing & Account Services team immediately.
When I click on the link I get taken to a login screen. Here’s my two problems:
It’s so long ago I played a Blizzard game I’m not sure what my login password is. I could use the ‘forgotten password’ link, but I’m worried it might send an email to the new email mentioned in the link.
I could possibly work out what password I originally used, but is this site the real deal?
Could any of you guys help me? I don’t use this account at present, but I would like to keep it mine, in case I want to take advantage later.
Moderation: Link broken to avoid people from following it accidentally. This has been confirmed by consensus to be a phishing attempt. For more, follow the discussion below.
That is the email you get when you change your battle.net email address. If you didn’t initiate it, it’s probably a hacker at work. If you try to contact Blizzard customer service, they won’t ask for your password, just your “secret question” answer. They seem to be short-staffed at customer support; be prepared to be on hold for a while. When you do get through, though, they’re very helpful.
P.S. When in doubt about link authenticity, go to www.worldofwarcraft.com and follow the links from there.
… phiiiish.
Note that it is the last two entries that define the address. webmailsupport.us is notblizzard.com at all.
At least, I don’t think it is, and I would be horribly suspicious of it.
Mod’s note: Broke link to avoid people following it accidentally.
Not exactly the same, but related, and since we’re discussing WoW hacking:
a friend/guildmate got hacked yesterday. After some interrogation, I found the technique: they sent her an in-game mail inviting her to participate in the Cataclysm (upcoming expansion) beta test, and included a link in that message. She went to the link, “signed in”, and you can guess the rest.
She too got an email like the one in the OP. This time, though, it really WAS from Blizzard because the hackers had changed her account email.
Its a good idea to NEVER supply log in details for any site that you visit from an email link, unless you know for certain that it is legit. This goes for games, shopping, banking, etc.
My understanding is that if you get into the beta, you log into your battle.net account without clicking any links in the message they send you.
In fact, a good rule of thumb is to never click on any unfamiliar links when it comes to WoW. They’ve even disabled links on Blizzard’s forums; you have to copy/paste urls so you have an extra second and a half to think about whether it’s legit.
