fans World of Warcraft are eagerly waiting for Blizzard to release the Warlords of Draenor. But cybercriminals are trying to trick WoW players and take over their accounts.
There is a phishing email promising recipients lots of goodies in the new game. The malicious email is titled World of Warcraft: Warlords of Draenor and states that with the pre-purchase you get a key that you can supposedly use to unlock the goodies, which include various upgrades.
Of course, when users click on the links contained in the fake emails, they go to a seemingly legitimate phishing page that uses a subdomain of the website battle.net. blizzardentertainmentfreeactivitiese.com.
The website may look like it belongs to Blizzard, but it doesn’t. In fact, in Chrome and Firefox, it has already been flagged as a phishing scam. The phishing page is well-designed. An analysis of the page’s source code shows that most of the content is taken directly from battle.net, Blizzard’s official Battle.Net website. However, a JavaScript is designed to collect the credentials entered by the victim and send them to the criminals.
While the page may look legitimate, none of its links work. Additionally, unlike the real login page, the phishing page is not protected by an SSL certificate. If you encounter these emails, delete them. If you are already a victim, change your Battle.Net password as soon as possible. If you have used the same password for other websites, change it as well.
