This site makes extensive use of JavaScript.
Please enable JavaScript in your browser.
Live
PTR
10.2.7
PTR
10.2.6
Beta
Got a 'Blizzard' email on my Wowhead address
Post Reply
Return to board index
Post by
558626
This post was from a user who has deleted their account.
Post by
Pwntiff
Is it an obvious specific email address like wowhead@domain?
Post by
558626
This post was from a user who has deleted their account.
Post by
Hyperspacerebel
We don't think a user database breach is likely. We have fake accounts set up on our site with emails addresses that only exist to let us know that someone has compromised our database as well as real non-admin accounts set up for various purposes. These accounts have yet to receive emails such as the ones you describe.
Keep in mind that, even though you might own a domain that has an email address that you use specifically for Wowhead and nothing else, whether or not you receive email at that address is dependent on more than whether or not our user database has been compromised. For example, if you're just using wowhead@mydomain.com, that's not exactly hard to guess. Anyone trying to steal WoW accounts likely knows about Wowhead and figures spamming that address will get hits.
Likewise, email addresses with other common proper nouns or dictionary words or usernames that you've used elsewhere are pretty easy for a spamming bot to guess and email.
If you want to improve the nature of these types of domain-specific email addresses, a good idea is taking whatever identifier you're using to indicate that its your Wowhead address and concatenating it with something that's either more random or that is so specific to you that a bot would have a next-to-impossible time guessing it.
I do acknowledge that it seems like a startling coincidence to have 5 users using Wowhead-specific domain addresses all receive phishing emails, but considering that this email didn't hit many of our users or our honeypot accounts, I'm more inclined to say that something else is amiss.
http://www.wowhead.com/forums&topic=169222#p2311157
Post by
224056
This post was from a user who has deleted their account.
Post Reply
You are not logged in. Please
log in
to post a reply or
register
if you don't already have an account.