{"id":7135,"date":"2017-03-28T08:10:39","date_gmt":"2017-03-28T16:10:39","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/03\/28\/news-926\/"},"modified":"2017-03-28T08:10:39","modified_gmt":"2017-03-28T16:10:39","slug":"news-926","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/03\/28\/news-926\/","title":{"rendered":"World of Warcraft phish campaign lures victims with free pet"},"content":{"rendered":"<p><strong>Credit to Author: Christopher Boyd| Date: Tue, 28 Mar 2017 15:00:14 +0000<\/strong><\/p>\n<p>A phishing campaign currently in circulation is attempting to bait World of Warcraft with the promise of free in-game pets. We&#8217;ve seen two variations on this so far, and it&#8217;s possible there&#8217;s more. Both of the below examples lead to the same phishing URL. As great as the promise of some free content is, this is\u00a0nothing more than an attempt at stealing your gaming credentials.<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/fake-pet.jpg\" data-rel=\"lightbox-0\" title=\"\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-17005\" src=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/fake-pet-234x300.jpg\" alt=\"fake pet\" width=\"234\" height=\"300\" srcset=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/fake-pet-234x300.jpg 234w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/fake-pet-467x600.jpg 467w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/fake-pet.jpg 644w\" sizes=\"auto, (max-width: 234px) 100vw, 234px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/blizzard-phish-2.jpg\" data-rel=\"lightbox-1\" title=\"\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-17054\" src=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/blizzard-phish-2-300x286.jpg\" alt=\"blizzard phish 2\" width=\"300\" height=\"286\" srcset=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/blizzard-phish-2-300x286.jpg 300w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/blizzard-phish-2-600x571.jpg 600w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/blizzard-phish-2.jpg 606w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>One of the emails read as follows:<\/p>\n<blockquote>\n<p><em>You are receiving this e-mail because Your friend has purchased World of Warcraft In-Game Pet: Brightpaw for you as a gift!<\/em><br \/> <em> Claim Your Gift <\/em><br \/> <em>To claim your gift, enter your Gift Key on the Battle.net? Account Management. You\u2019ll be sent to the download page afterwards, if needed.<\/em><\/p>\n<\/blockquote>\n<p>The second mail claims a &#8220;WoW mount mystic rune sabre&#8221; is up for grabs.<\/p>\n<p>Keen Warcraft players will notice the email is branded with Battle(dot)net, the name of Blizzard&#8217;s online gaming service &#8211; but this <a href=\"http:\/\/www.eurogamer.net\/articles\/2017-03-24-blizzard-says-cheerio-to-battle-net-branding\" target=\"_blank\">name has just been retired<\/a>, which may well set off a few alarm bells.<\/p>\n<p>Both emails\u00a0lead to a phish located at (deep breath):<\/p>\n<p>us(dot)battle(dot)net(dot)login(dot)login(dot)xml(dot)account(dot)support(dot)password-verify(dot)html(dot)legion-game(dot)xyz\/login\/en\/login(dot)html<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/fake-pet-login.jpg\" data-rel=\"lightbox-2\" title=\"\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-17006\" src=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/fake-pet-login-251x300.jpg\" alt=\"fake pet login\" width=\"251\" height=\"300\" srcset=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/fake-pet-login-251x300.jpg 251w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/fake-pet-login-502x600.jpg 502w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2017\/03\/fake-pet-login.jpg 791w\" sizes=\"auto, (max-width: 251px) 100vw, 251px\" \/><\/a><\/p>\n<p>The phish again touts the Battle(dot)net name\u00a0and asks for an email and password.<\/p>\n<p>Feel free to ignore this one and send it straight to your trash folder,\u00a0there&#8217;s no free pets at the end of this path, just headaches and calls to customer support.<\/p>\n<p><em>Christopher Boyd<\/em><\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2017\/03\/world-of-warcraft-phish-lures-victims-with-free-pet\/\">World of Warcraft phish campaign lures victims with free pet<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2017\/03\/world-of-warcraft-phish-lures-victims-with-free-pet\/\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Christopher Boyd| Date: Tue, 28 Mar 2017 15:00:14 +0000<\/strong><\/p>\n<table cellpadding='10'>\n<tr>\n<td valign='top' align='center'><a href='https:\/\/blog.malwarebytes.com\/cybercrime\/2017\/03\/world-of-warcraft-phish-lures-victims-with-free-pet\/' title='World of Warcraft phish campaign lures victims with free pet'><img src='https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2015\/07\/photodune-9997891-phishing-s.jpg' border='0'  width='300px'  \/><\/a><\/td>\n<\/tr>\n<tr>\n<td valign='top' align='left'>We take a look at a World of Warcraft phish doing the rounds which could stand to do a spot of updating where it&#8217;s branding is concerned.<\/p>\n<p>Categories: <\/p>\n<ul class=\"post-categories\">\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/cybercrime\/\" rel=\"category tag\">Cybercrime<\/a><\/li>\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/cybercrime\/social-engineering-cybercrime\/\" rel=\"category tag\">Social engineering<\/a><\/li>\n<\/ul>\n<p>Tags: <a href=\"https:\/\/blog.malwarebytes.com\/tag\/battle\/\" rel=\"tag\">battle<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/blizzard\/\" rel=\"tag\">blizzard<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/phish\/\" rel=\"tag\">phish<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/phishing\/\" rel=\"tag\">phishing<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/world-of-warcraft\/\" rel=\"tag\">world of warcraft<\/a><\/p>\n<table width='100%'>\n<tr>\n<td align=right>\n<p><b>(<a href='https:\/\/blog.malwarebytes.com\/cybercrime\/2017\/03\/world-of-warcraft-phish-lures-victims-with-free-pet\/' title='World of Warcraft phish campaign lures victims with free pet'>Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2017\/03\/world-of-warcraft-phish-lures-victims-with-free-pet\/\">World of Warcraft phish campaign lures victims with free pet<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[11765,3321,4503,10511,3924,10510,11766],"class_list":["post-7135","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-battle","tag-blizzard","tag-cybercrime","tag-phish","tag-phishing","tag-social-engineering","tag-world-of-warcraft"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/7135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=7135"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/7135\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=7135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=7135"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=7135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}