Spooncraft

A friend of mine who doesn’t even own a World of Warcraft account recently got an email in his inbox. I went ahead and placed X instead of the actual URL and disabled all the links so anybody reading this won’t fall for the trick. It’s a phishing scam where the player follows the link, goes to a page that looks identical to an legit Blizzard site, inputs all of his account information and unwittingly has just given the bad guys his password and user name. I can only imagine there are a few keyloggers scattered throughout the sight possibly hidden within the HTML or on another link in the email.

“Greetings,

We are writing to inform you that, unfortunately, we have had to temporarily suspend your World of Warcraft account and place a final warning on it.

We have had a problem in our database, it is possible that it is an error, in this case enter in the following link and follow the form:

https://www.worldofwarcraft .com/account/?ticket=WB-5XXXXXXXXXXXXXXXXXXXoyR

Investigation Concluded: 05/02/2008
Type of Violation: Involvement in online trading activities
Consequences for Account: Account suspended for 72 hours, Password Reset and Final Warning issued.

It is with regret that we take this type of action, but it is in the best interests of the World of Warcraft community as a whole, and for the integrity of the game. After your suspension has expired, you will be able to access the World of Warcraft servers again.

To protect the account security, we have also reset your password and issued you with a computer generated one, which you will receive in a separate e-mail. You will be able to change this password at your leisure, using the Account Management feature on our web site, located at: http://www.wow-europe.com/en/

Your password will be sent from noreplyeu@blizzard.com. If you do not receive it after one hour, please add this address to your email address list so that it is not rejected by any spam filter you are using, and reply to wowaccountrevieweu@blizzard.com informing us that you have not received the password.

Please do not disclose your new password to anyone, including Blizzard staff, or change it back to one of your previous passwords as this could result in your account becoming compromised.

Please note that should any further violations of our Rules and Policies occur, this will almost certainly lead to the permanent closure of your account.

We strongly suggest you review our current Rules and Policies to avoid further action in the future, they can be found at:
http://www.wow-europe.com/en /policy/

Regards,

Account Administration Team
Blizzard Entertainment Europe”

Once again I want to make sure everybody is aware that Blizzard will never send you links or ask for your account information. Notice how in the email it says to not go back and change your password to something else under the risk of compromising your account (or changing your password before they have a chance to get into your account) The only site in which you will have to put in your account information is the official Blizzard one www.worldofwarcraft.com