Phish: Adding Authenticator

Here’s the e-mail:

Return-Path: ashtonlumley@hotmail.com
Received: from blizzazrd.net ([123.5.166.247]) by BLU0-SMTP83.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 28 Jul 2010 16:01:46 -0700
Reply-To:
Sender: wn@blizzard.com
From: “noreply@blizzard.com” <wowaccountadmin@blizzard.com>
To: <jayras@gmail.com>
Subject: world of warcraft-Notice on the account

Hello,

We’ve received a request to add a Battle.net Authenticator to this Battle.net account(s):jayras@gmail.com. Please click this link to continue with the authenticator attachment process. You will be redirected to Battle.net Account Management (please be prepared to log in) with further instructions.

https://us.battle.net/account/management/add-authenticator.html?authenticatorType=MA&ticket=ruhsimjt6vvg9t5rm0cng3v92e

If you no longer wish to attach an authenticator to this Battle.net account, or if you did not initiate this request, please disregard and/or delete this e-mail.

If you have any questions regarding your Battle.net account, click here for answers to frequently asked questions and contact information for the Blizzard Billing & Account Services team.

Sincerely,
The Battle.net Account Team
Online Privacy Policy

Let’s see here:

  • Header shows its from Hotmail
  • Link goes to bllizzard (Which is not Blizzard…but VERY Close)
  • No personalized greeting: Which unfortunately isn’t a help in this case.

Ironically enough I got this Phish less than 5 days after I actually went through this whole process.

So I can say, without a doubt, this e-mail is an exact copy of the actual e-mail you get when adding an authenticator.

This Phish is really easy to avoid, as long as you don’t panic and actually READ the e-mail.

If you aren’t adding an authenticator to your account THEN DO NOTHING.

“please disreagard and/or delete this e-mail.”

Bets advice a phishing e-mail has EVER Given you.

One unfortunate thing about this e-mail…Blizzard doesn’t personalize this one, which is a real disappointment.  I would think of all their e-mails this one would be personalized…it is one of the RARE e-mails that REQUIRES the link be clicked.

without clicking the link you can’t add an authenticator.

So, just be diligent, and when you are adding an authenticator (Or re-adding if you get a new phone…) just make sure you clear out your e-mail trash first, delete all them fishing e-mails, so when you get the REAL e-mail you won’t mistake it for this one and get Phished.

Ͼ http://www.pthkm.com/xpjylc/ http://www.pthkm.com/bgylc/ Ͼֳ http://www.pthkm.com/pjylc/ ewinֳ http://www.ybewv.com/ewinylc/ Ŷij http://www.ybewv.com/amdc/ ˰ټ http://www.eklhp.com/zrbjl/ Ŷij http://www.aojxq.com/amdcgl/ bet http://www.lpmwq.com/bet365ylc/ ȫѶ http://www.wfgpb.com/qxwgw/ 188 http://www.ywiql.com/jbb188gq/ bet http://www.nwiza.com/bet365ylc/ 365 http://www.rvodp.com/bet365tyzx/ Ͼ http://www.yjzhv.com/smxpjgw/ Ͼij http://www.utssx.com/ampjdc/ ˹˶ij http://www.bkrft.com/amwnsrdc/ Ͼij http://www.bkrft.com/pjdc/ ƶij http://www.bkrft.com/yddc/ Ŷij淨 http://www.bkrft.com/amdcwf/ ȫѶ http://www.bkrft.com/qxwzx/ ˹ά˹ij http://www.fldwd.com/lswjsdc/ ζij http://www.fldwd.com/lwdc/ ŶijЩ http://www.fldwd.com/amdcynx/ ij http://www.fldwd.com/mddc/ ˹˶ij http://www.fldwd.com/wnsrdc/ Ͼij http://www.yuwew.com/amxpjdc/ ĥij http://www.yuwew.com/mddc/ ijϷ http://www.yuwew.com/dcyx/ ĥƽij http://www.yuwew.com/mdhjdc/ ĥij http://www.hgvnk.com/lwmddc/ Űټ http://www.hgvnk.com/ambjl/ ټϷ http://www.hgvnk.com/bjlyx/ ˰ټ http://www.hgvnk.com/zrbjl/ http://www.dnczv.com/bcw/ Ŷij http://www.ybewv.com/amdc/ ˰ټ http://www.eklhp.com/zrbjl/ ټ http://www.zytygb.com/baijiale/ Ŷij http://www.luyouren.com/amdc/ ֳ http://www.yjzhv.com/ozylc/ Ŷij http://www.luyouren.com/aomenduchan/ bet http://www.lsylnj.com/bet365/ Ŷij http://www.lsylnj.com/amdc/ ټ http://www.lsylnj.com/bjl/ http://www.lsylnj.com/bcw/ ˹ http://www.lsylnj.com/wnsrylc/ Ͼ http://www.lsylnj.com/xpjylc/ ټ http://www.zytygb.com/baijiale/ Ŷij http://www.luyouren.com/aomengdushang/ ewinֳ http://www.luyouren.com/ewinyulechen/ bet http://www.luyouren.com/bet365/ ټ http://www.luyouren.com/bjl/ Ŷij http://www.luyouren.com/amdc/ Ŷij http://www.luyouren.com/amduchan/ Ŷij http://www.luyouren.com/aomendc/ Ŷij http://www.luyouren.com/aomenduchan/ Ŷij http://www.luyouren.com/aomengdushang/ ewinֳ http://www.luyouren.com/ewinylc/ ewinֳ http://www.luyouren.com/ewinylchen/ ewinֳ http://www.luyouren.com/ewinylec/ ewinֳ http://www.luyouren.com/ewinyulc/ ewinֳ http://www.luyouren.com/ewinyulechen/ http://www.dnczv.com/bcw/ ټ http://www.dnczv.com/bjl/ bet http://www.dnczv.com/bet365/ ˹ http://www.pthkm.com/wnsrylc/