Phishing Attack or Bad Blizzard?

[Jim]

So I wake up this morning to find a helpful email from Blizzard, reminding me to renew my account before The Burning Crusade. "That's odd," I think, "My account is active right now. Well, I'd better just check..."
in my early morning stupor, I clicked the link, entered my account information, and realized that this is the model for a textbook phishing attack (in that order). I immediately changed my password and scrutinized the headers of the email and it looks legitimate to my untrained eyes.

Hi,

I seldom click on email links even if they look safe, I go direct to the web site and check the email info.

My WOW account got hacked I was not subscribed when this happened my last dated paid Feb 28 2011, so I got hacked between Feb 28th & May 10th when I tried to log on and couldn't.

I lost all aprox 40,000 gold...but this is the kicker the hacker played my account for at least 2 months, and changed my Professions from leather/skinning [max] to Herbs & Minning he used my lv 78 hunter to Gather.

Blizzard after a week said they could do nothing for me "Live with it"

For the past month I've had increased email phishing for my WOW account. I sent them ALL to Hack@blizzard.com

Greetings,

Thank you for contacting the World of Warcraft Game Master Department.

Your petition has been forwarded to our character specialists for further investigation and troubleshooting. Please keep in mind that, due to the nature and complexity of these types of petitions, it may take several days for us to contact you with the conclusion of our investigation. We apologize for the delay and thank you for your patience and understanding in this time.

Please remember that the security of the account you are using is crucial. we recommend following the http://us.battle.net/security/checklist on our Account Security site at http://us.battle.net/security/

Also note that restoration of any kind is not guaranteed. While we make every effort to verify your loss there are times where restoration is not possible. We sincerely apologize for any inconvenience you may have been caused.

For further information please check our Restoration Policy located at (http://us.blizzard.com/support/article.x...leId=20457)

Again, your time is greatly appreciated.



Regards,
Game Master Hahnric
Customer Services
Blizzard Entertainment
www.blizzard.com/support

-----Original Message-----
From: jimhorvath8@cox.net jim horvath
To: wowgm@blizzard.com
Sent: 5/14/2011 8:09:25 PM
Subject: HACKED

Hi,

My account was Hacked after 02/28/2011 on Malygos

Nankor's Profession was changed he did Leather & Skinning Max Can this be corrected???

I am missing all my Gold about 40,000g

I'm missing 1 character Nankipoo Horde

The Hacker's character Monsodas has been deleted by Blizzard.

Please advise if my Malygos account be rolled back to the last day I played.

Reagrds, Jim Horvath

SAMPLE PHISH:

Greetings!

It has come to our attention that you are trying to sell your personal World of Warcraft account(s).
As you may not be aware of, this conflicts with the EULA and Terms of Agreement.
If this proves to be true, your account can and will be disabled.
It will be ongoing for further investigation by Blizzard Entertainment's employees.
If you wish to not get your account suspended you should immediately verify your account ownership.

You can confirm that you are the original owner of the account to this secure website with:
https://xxxxx/login/en/login.xml [xxxxx in place of battle.net]

Login to your account, In accordance following template to verify your account.

* E-mail Address
* E-mail password
* Secret Question and Answer
Show * Please enter the correct information

If you ignore this mail your a ccount can and will be closed permanently.

Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.

Regards,

Account Administration Team
Blizzard Entertainment
World of Warcraft , Blizzard Entertainment 2011