[Alizandro]

from "ncsoft" saying that i changed my password and if i didnt change it to click the link and deny it blah blah. of course ididnt click the link but did scroll over it to see where it lead and it looked almost like a real nc site except that it was off by 1 letter.

the thing that puzzles me is that it was sent to an email address that i only use for this site when i registered....i have sevral emails for verious purposes so does this mean someone is in the curse or aionsource database taking emails and targeting ppl here? again, i dont use that email for anything at all over then this forum...hmm. add that to the verious trojan horses found on this site over the past couple weeks...something funky going on with curse grrrr.


fyi, the fake site was created through nic.com

This post has been edited by Alizandro: 28 January 2010 - 10:46 AM

[paintcan]

Imagica said:

Doesn't THAT prove that NCSoft sucks? From the amount of QQing around this forum I believe it does, don't you? :)

I'm pretty sure they are implicating AionSource, not NCSoft.

I also just received an "account reset" e-mail, which a link going to a fake site.

The only Aion related site that knows of this e-mail address, is this one.

There were some hacking problems here at AionSource. Perhaps e-mails got leaked?

[Isone]

I got it too. (Fake site adress that ends with nic.com)

"Someone 65.255.34.173 Aion has been reset to your game account password. If you not make the change, please contact support "

[vandevere]

Someone 65.255.34.173 Aion has been reset to your game account password. If you not make the change, please contact support https://secure.ncsoft.com/login.

Is this the real addy? Or the fake addy?

Edit: When I mouse over the addy, I see a weird link

Looks like the fake one to me...

This post has been edited by Silvervain: 28 January 2010 - 11:27 AM

[Doc Thirst]

No need, anyone with a web-server can fake an email.

[Broom]

sumpie said:

Got same.. Looks like they maybe hacked in aionsource email software to send emails....

It's a spoof, not a hack. Either way, it's a phishing attempt, so don't fall for it

Linna

[vandevere]

Thanks. Now I know it's fake. Gonna tell my email it's spam, and delete it...

[Neowulf]

Definitely the fake one. I never click the link in the email. I always just go the official site.

[falc410]

I wonder from which site they got my email. The only place Aion related where I registered this email is this forum...

[Broom]

Curse has my e-mail too, and I've yet to receive one of these phishing mails. On the other hand, people who never even played Aion (and who have never been on this site) ARE getting these mails. Remove the tin foil hats, people, e-mail addresses are easy to get, they're for sale all over the internet. And there's this too: I remember a time when get-rich-quick-mails were sent to every possible user name at Compuserve (don't laugh, it was the only provider in my entire country at the time) and Hotmail, it's quite possible something like that is going on.

Linna

[vandevere]

I marked it as spam, and deleted it.

They're getting desperate, ain't they?

[Eliina]

Yeah, i got one too, but the funny thing is, that my Aion is registered to a different email address. Sooo it makes me wonder :)

Also, just a side note - NCSoft has restored my hacked account, gave me back all my items and restored my Abyss Points. They have done such wonderful job and fairly quickly as well.

[Booda_Aion]

vandevere said:

Someone 65.255.34.173 Aion has been reset to your game account password. If you not make the change, please contact support https://secure.ncsoft.com/login.

Is this the real addy? Or the fake addy?

Edit: When I mouse over the addy, I see a weird link

Looks like the fake one to me...

Whois lookup.


Domain Name.......... the wieird link
Creation Date........ 2010-01-18
Registration Date.... 2010-01-18
Expiry Date.......... 2011-01-18
Organisation Name.... zhang dong
Organisation Address. beijingdonghuaxinlu13hao
Organisation Address.
Organisation Address. beijing
Organisation Address. 100873
Organisation Address. beijing
Organisation Address. CHINA

Admin Name........... zhang dong
Admin Address........ beijingdonghuaxinlu13hao
Admin Address........
Admin Address........ beijing
Admin Address........ 100873
Admin Address........ beijing
Admin Address........ CHINA
Admin Email..........
Admin Phone.......... +86.13672183987
Admin Fax............


What a nice fellow this Zhang Dong is. I wonder if the phone # is legitimate. Anyone have some friends in the Chinese mafia? :)

[Silvervain]

I edited the ops post... and took out that link so no one clicks on it.

Please ignore these emails and register a different email on these forums.

[vandevere]

The stupid thing is that I have Guild Wars. But I don't have Aion. I would like to get Aion, but my computer is an old one, and the security issues are also holding me back...

I run Firefox, with noscript, have Avast and Spybot Search and destroy. I don't know if all that is enough. But, even if I get a better pc, I won't get Aion until NcSoft addresses these security issues...

[Thedversary]

I got this one too, hotmail throws it directly into the junk folder though, so no worries for me.

It's weird because I never received any strange or fake emails until the 23rd of January and today. They were:

Quote

For your information This message was marked as junk and will be deleted after ten days.
Messages in the Junk folder never get opened automatically. Open message
World of Warcraft Account The Inspection Result Notification?
From: NCsoft Support (support@ncsoft.com)???????????????????????????????????????????????????????????????. (********@hotmail.com)
Sent: January 23, 2010 3:11:48 AM
To: ********@hotmail.com

LMAO ... A WoW email from NCSoft? WTF?! lol

and

Quote

For your information This message was marked as junk and will be deleted after ten days.
Messages in the Junk folder never get opened automatically. Open message
Password Reset Success?
From: NCSoft Support (support@ncsoft.com)???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? . (********@hotmail.com)
Sent: January 28, 2010 11:47:02 AM
To: ********@hotmail.com

-------------------------

Silvervain said:

I edited the ops post... and took out that link so no one clicks on it.

Please ignore these emails and register a different email on these forums.

isn't it:

• A little late for that?
  
• Pretty stupid to have to make a new email account for every forum you visit?
  
• Probably not our fault?

This post has been edited by Thedversary: 28 January 2010 - 11:38 AM
Reason for edit: Automerged Double-Post.

[paintcan]

Broom said:

Curse has my e-mail too, and I've yet to receive one of these phishing mails. On the other hand, people who never even played Aion (and who have never been on this site) ARE getting these mails. Remove the tin foil hats, people, e-mail addresses are easy to get, they're for sale all over the internet. And there's this too: I remember a time when get-rich-quick-mails were sent to every possible user name at Compuserve (don't laugh, it was the only provider in my entire country at the time) and Hotmail, it's quite possible something like that is going on.

Linna

Sure it could be that, perhaps it's not. I think we're all just trying to find solutions. I guess by your logic we should just ignore it, however.

[Silvervain]

Thedversary said:

isn't it:

• A little late for that?
  
• Pretty stupid to have to make a new email account for every forum you visit?
  
• Probably not our fault?

It doesn't have to be a different email for EVERY forum that you go to... you can use the ONE different email for every forum you go to. Your email shouldn't be the same one that you used for NSCoft master account.

[16Regaj]

I got the exact same e-mail as well. The horrible English is a dead give away that it's a fake.... -_- I logged in just fine with my old account info anyway.

[Thedversary]

Silvervain said:

It doesn't have to be a different email for EVERY forum that you go to... you can use the ONE different email for every forum you go to. Your email shouldn't be the same one that you used for NSCoft master account.

So you are telling me that this website is compromised?