Scam emails

melandru ascended

Ascalonian Squire

Join Date: Dec 2006

ur closet

[RR] Runners of the Rose

R/

There are recently allot of scam emails like these:

------------------
NCsoft Account Security Risks Notice‏
From: NCsoft Support ([email protected])                                                 . ([email protected])
Sent: Sunday, January 10, 2010 6:00:08 AM
To: [email protected]

When you receive this message when your NCsoft Account means that there are serious security risks.
We have evidence to prove your account has been in different countries and regions, several attempts to login.
So we have to remind you to enter our web site as soon as possible https://secure.ncsoft.com/login to account verification, otherwise, we will be lock your account.
In order to protect your interests.

The NCsoft Team
-------------------

obviously this is a scam, cause when clicked on the link. You're not brought to the official NCSoft site but to this:
Link removed - don't really want people clicking on this.

It looks the same. But here are some tips:

1* If you get such a email, of course you wanna be sure it isn't real. But never click the links, just google/type the official site in your url-bar to avoid the risk on ending on 1 of those duplicate sites that wanna steal your account.
2* Be sure to play legally, when you know you play legit there is no point to expect an email regarding stuff like: "We've became under the knowledge your selling real money for in game currencies, please login in "this" link so we can come in contact with you." or some blablabla like that
3* Use a different email address for games and game forums. Usually they get your name from some kind of forum that isn't as good protected as it should.

Anyway... watch out for those emails since I got mine yesterday, I expect more people will be getting them.

Aussie Boy

Aussie Boy

Alcoholic

Join Date: Mar 2007

Australia

W/

Lots of reported scam emails all over Guru already this is just another type.
The dead give away is the wording if anything else didn't look suspicious enough.
"we will be lock your account." LOL

gone

Guest

Join Date: Jan 2007

http://www.guildwarsguru.com/forum/a...t10421243.html
yep. gotta love it, eh?

Fril Estelin

Fril Estelin

So Serious...

Join Date: Jan 2007

London

Nerfs Are [WHAK]

E/

In passing I added an "Email security" section (number 4) to the security guide here:
http://www.guildwarsguru.com/forum/g...t10298453.html

(feel free to send comments by PM! these scam emails make me think that I should expand this section)

Metalmaster

Metalmaster

Wilds Pathfinder

Join Date: Dec 2006

Guardians of the Stars

N/

Quote:
Originally Posted by melandru ascended View Post
obviously this is a scam, cause when clicked on the link. You're not brought to the official NCSoft site but to this
It's obvious for anyone who has basic knowledge of English, there's no need to click at all.

melandru ascended

Ascalonian Squire

Join Date: Dec 2006

ur closet

[RR] Runners of the Rose

R/

It's obvious not everyone speaks native or half-decent English, majority of the French as an example.

Fril Estelin

Fril Estelin

So Serious...

Join Date: Jan 2007

London

Nerfs Are [WHAK]

E/

Even those that speak natively do not always pay attention to the details.

Mcsnake85

Mcsnake85

Wilds Pathfinder

Join Date: Nov 2009

Italy

E/P

mmmm...even for ppl that dont speak english or dont understand, you can compare that link with real ncsoft site...i explain...
If you know that real site is : xxx.com , when you point that link with mouse cursor you can see where the link bring you, so you can see that it can bring you to xcx.com instead xxx.com...so thats all.

Metalmaster

Metalmaster

Wilds Pathfinder

Join Date: Dec 2006

Guardians of the Stars

N/

Quote:
Originally Posted by Fril Estelin View Post
Even those that speak natively do not always pay attention to the details.
I think you've noticed that English isn't my native language, but still...
Quote:
When you receive this message when your NCsoft Account means that there are serious security risks.
Quote:
we will be lock your account
I'm sorry in advance but are native speakers THAT bad?

jonnieboi05

jonnieboi05

Forge Runner

Join Date: Mar 2006

Mableton, Georgia

Guild Ancestors Reunited [?????????]

Old news. Happens all the time. Good luck to any of them being able to get passed the new Guild Wars character name requirement if anyone is really that stupid to believe such an email (and sadly there are a LOT of people who fall for this :\).


Ty aNet for the added in-game security. ^^

Fril Estelin

Fril Estelin

So Serious...

Join Date: Jan 2007

London

Nerfs Are [WHAK]

E/

Quote:
Originally Posted by Metalmaster View Post
I'm sorry in advance but are native speakers THAT bad?
It's not about being good or bad, but not paying attention, not spending the time.

OT: there are more and more of these circulating, people need to be aware.

maxxfury

Wilds Pathfinder

Join Date: Apr 2006

[DVDF] Gp

Me/A

Ncsoft account security risks

When you receive this message when your NCsoft Account means that there are serious security risks. We have evidence to prove your account has been in different countries and regions, several attempts to login. So we have to remind you to enter our web site as soon as possible https:// secure.ncsoft.com/login to account verification, otherwise, we will be lock your account. In order to protect your interests.

The NCsoft Team

recieved this today, tho suprisingly to an email address thats never used for anything anywere, other than one of my gw accounts.

Tho the link doesnt take you to the official site...on the url the "secure" is misspelled....

not impressed and didnt actually use the page as it looked suss.

hope no one has actually fallen for it!!!

gone

Guest

Join Date: Jan 2007

lol, just posted in this thread(see link).
http://www.guildwarsguru.com/forum/a...33#post5014433

Sergeant of Marines

Sergeant of Marines

Desert Nomad

Join Date: Jul 2006

Japan

[트두므s], Guild Leader

Mo/

Got the same email, to my work email that has nothing to do with Guild Wars except here on guru, so my guess would be a Guru Issue or something?

Martin Alvito

Martin Alvito

Older Than God (1)

Join Date: Aug 2006

Clan Dethryche [dth]

Quote:
Originally Posted by Sergeant of Marines View Post
Got the same email, to my work email that has nothing to do with Guild Wars except here on guru, so my guess would be a Guru Issue or something?
Doubtful. Even people that don't have Aion/GW accounts have been getting spammed lately.

thelessa

thelessa

Jungle Guide

Join Date: Jun 2005

Texas

Purple Puzycats

R/Mo

Received the same email, bad english, the link provided was misspelled. Looked pretty much like the WoW emails I have been getting.

Smarty

Smarty

Krytan Explorer

Join Date: Mar 2008

England

Me/

Also got the same spam yesterday. Does anyone have a link to the relevant section on Gaile or whoever's talk page? (Too much on there for me to go searching through.) It'd be good if ANet/NCsoft can get the site shut down if at all possible, but I don't want to post the address here in case it gets clicked on.

Aleta

Frost Gate Guardian

Join Date: Jan 2006

California

TTP

R/E

I got one today for Aion. Rushed over to my Aion account and it's fine

I haven't opened it though I just read the title. Think I'll just delete it.

pumpkin pie

pumpkin pie

Furnace Stoker

Join Date: Jul 2006

behind you

bumble bee

E/

Quote:
Originally Posted by Mister Smartypants View Post
Also got the same spam yesterday. Does anyone have a link to the relevant section on Gaile or whoever's talk page? (Too much on there for me to go searching through.) It'd be good if ANet/NCsoft can get the site shut down if at all possible, but I don't want to post the address here in case it gets clicked on.
maybe can be reported to the web host.

I just realize I wrote a detailed report to Support using the wiki talk page's email after account hacked, it was around May last year, I have yet to receive a reply. That is how good their support is.

come to think of it, you know why they want you to send them email through the wiki? so they can ignore your complain and no one would know.

JimmyNeutron

Krytan Explorer

Join Date: Sep 2007

*****closed*****

StormX

StormX

Krytan Explorer

Join Date: Nov 2005

E/Mo

Lol I received the exact same email a couple of days ago. Went straight into the trash.

gone

Guest

Join Date: Jan 2007

I guess it's time for the fun to begin. LOL @ "activate your account or we will suspend your account."
Code:
Aion Account Check
Friday, January 15, 2010 2:24 PM
From NCsoft Support Fri Jan 15 19:24:45 2010
X-Apparently-To: 	XXXXXXXXXXXXX	 via 216.252.110.180; Fri, 15 Jan 2010 11:25:42 -0800
Return-Path: 		<[email protected]>
X-YahooFilteredBulk: 		65.55.111.107
X-YMailISG: 		XlDxPtUWLDtFI7ZGnwwBER8zjwqBLhMpxu9hlqI8VuW4fn0Z.YICL56UJfZYkBYeAjn7IhthKHXRlohkMLqxhp8CpGy4OAByT5XC798PIAgfgOJMhgWKEwEVYvHZ.XiDl0Fscraj7l6pP8UserH6Z5vvphZlAopKmUCzjI3BXVlA.sT9t1upOb2DGkFfpS7CQ05quBC8A_.icCv2lRLYh9ZXwgIc1R4a6CB5XFf50cliVeq055UmZc2hymX8TEKuOhVONc.h2q.xhbFHmmbRln9Xnwc.QhykRHBVZbpvgjTvk.UL30S8l2jy3b_3ua5wLSz.67uYc0zAjiMYU4Kp7nrqE.AH.cqU647y4l970Xh5Frvb__5uX71sAt3qCyoG_ZUE8prLlEBV
X-Originating-IP: 		[65.55.111.107]
Authentication-Results: 		mta1141.mail.XXXXXXXXcom from=ncsoft.com; domainkeys=neutral (no sig)
Received: 		from 127.0.0.1 (EHLO blu0-omc2-s32.blu0.hotmail.com) (65.55.111.107) by mta1141.mail.XXXXXXXXXX.com with SMTP; Fri, 15 Jan 2010 11:25:42 -0800
Received: 		from BLU0-SMTP70 ([65.55.111.71]) by blu0-omc2-s32.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 15 Jan 2010 11:25:04 -0800
X-Originating-IP: 		[116.217.114.134]
X-Originating-Email: 		[[email protected]]
Message-ID: 		<[email protected]>
Return-Path: 		[email protected]
Received: 		from evkbvzww ([116.217.114.134]) by BLU0-SMTP70.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959); Fri, 15 Jan 2010 11:25:01 -0800
From: 		
"NCsoft Support" <[email protected]>  
Add sender to Contacts
To: 		<XXXXXXXXXXXXXX.com>
Subject: 		Aion Account Check
Date: 		Sat, 16 Jan 2010 03:24:45 +0800
MIME-Version: 		1.0
Content-Type: 		multipart/alternative; boundary="----=_NextPart_000_0EEB_011FE33B.1DE59C40"
X-Priority: 		3
X-MSMail-Priority: 		Normal
X-Mailer: 		Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: 		Produced By Microsoft MimeOLE V6.00.2900.5512
X-OriginalArrivalTime: 		15 Jan 2010 19:25:02.0420 (UTC) FILETIME=[6F4D5140:01CA9618]
Content-Length: 		2495

When you receive this message at the same time means that you have a routine account of our recent examination, was checking your account we have the evidence to prove that involved in the controversial game currency transaction so we had to take the necessary measures.
Please visit our web site https://REMOVEDLINK.com

as soon as possible to activate your account or we will suspend your account.
The NCsoft Team
----------------------------------------------------------------------------------

http://www.ip-adress.com/whois/116.217.114.134