Warning Fake Mails

A new try to get some Account Details is like this:

Quote :

When you receive this message when your NCsoft Account means that there are serious security risks.
We have evidence to prove your account has been in different countries and regions, several attempts to login.
So we have to remind you to enter our web site as soon as possible Link deleted to account verification, otherwise, we will be lock your account.
In order to protect your interests.

The NCsoft Team

if you get a Mail like this please never follow the link. go with the original Page from NC Soft

Regards Kacy

Same for everything.

Banks.
Amazon.
Ebay.

NEVER follow the link sent in an unexpected email.
Obviously if you have requested something from the company, such as a password reset then it should be OK.

Open the web page for the company from either your saved address or from a web search for that company.
Most companies with an online presence state this repeatedly on their web sites.
Check the companies spam policy, the address to report them to is available from the site, they are usually SPAM@xxxxx.xxx

I absolutely love the grammar in that first message... It's so wrong it's so funny, and anyone who'd follow such a message, well, you get my point

Bad grammar never affects these scams.
Just look at the number of people who get conned by 419 scams.

Got this today in email

Quote :

From: NCSoft Support (support@ncsoft.com)　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　　.
Sent: Thursday, January 28, 2010 3:21 AM
To: sxxxxxxxx.hotmail.com
Subject: Password Reset Success


Someone 65.255.34.173 Aion has been reset to your game account password. If you not make the change, please contact support https:secure.ncsoft.com/login.

The tags are spoofed and the web page's http tag has been changed, to a know spoof site.
You think they would at least use someone who spoke English.

Lucky strike for me, i got the same mail... The only thing that prevented me from clicking that link was the grammar.
The address and e-mail and stuff looked awfully like the real NC-soft stuff, pretty shitty

Useful for catching this, is my setup.
Firefox with the add-on's, Mcafee Site Adviser and AVG SecurityToolbar, both are free.

Thought the site address was strange, on selecting it to see where it took me, instantly got picked up as a spoofed site.

yea i got that too, actually i tried to log ,however i relized it fast and changed both psw instantly

Got another of the fake emails today.
After reading up on this, apparently a simple test is to reply and see what the address is. Ususally they spoof your own address, as in this case.
Also the html tags are changed to show a different location.

Quote :

From: sxxxxxxxx.hotmail.com
To: sxxxxxxxx.hotmail.com
Subject: Password Reset Success
Date: Tue, 2 Feb 2010 14:15:30 +0800


Someone 65.245.37.172 Aion has been reset to your game account password. If you not make the change, please contact support https:secure.ncsoft.com/cgi-bin/plaync_login.pl.

The actual address is http:account.secure-ncsoft-llc.com

I have taken out the // and @ to stop them being detected as a web and email addresses.

once again

Quote :

Dear Aion players Thank you for your concern and support.
We continue to provide those high quality games. However, we have recently found a bug that some unscrupulous players to use.
We have to inform you that Your account is also suspected of being the columns.
If you do not as soon as possible login our website：https://secure.ncsoft.com/cgi-bin/plaync_login.pl to account verification we will lock your account.

Thank you
Regards,
NCsoft Support.

the mail you read is right but ends in phishing adress: http://account.secure-ncsofti.com

I hope i never will hear or read anymore that a member got hacked

Quote :

From: NCSoft Support (support@ncsoft.com)mail to. (sxxxxxxxx.hotmail.com)
To: sxxxxxxxx.hotmail.com
Subject: Aion Verification Notice
Date: Mon, 15 Feb 2010 14:26:38 +0000

Thank you for your continued support and encouragement to us.
We are as always offer the high-quality game services .
But we have evidence to show that you are involved in a series of illegal transactions rules of the game.
Coupled with the recent we have received a lot from other users to your complaint. so we had to investigate the matter.
Visit our web site as soon as possible into the https:secure.ncsoft.com/cgi-bin/plaync_login.pl show your username and password.clarify the matter. Otherwise, we will lock your account.

Thank you
Regards,
NCsoft Support.

Spoofed email address:
My hotmail account

Actual web address:
http:ertyhn.secure-ncsoft-helpdesk.com/

Grammer still is not getting any better.

Quote :

NCsoft Account Fraud Notice Of Termination‏
From: NCsoft Support (support@ncsoft.com)
Sent: 29 March 2010 11:02:12
To: sXXXXXXXX:hotmail.com

Dear aion player, your account due to suspected fraud. Will be banned within 72 hours.
Fraud Evidence: many times in the game using the game chat function induced to provide the game to deceive the other players offer accounts and passwords.
If you do not fraud, as soon as possible to verify your account login https://secure.ncsoft.com/cgi-bin/plaync_login.pl.

Aion Services Department

Spoofing is getting better, pity the grammar and punctuation isn't.