Guild Wars 2

So, I may have, against my better judgement clicked the link… a did what it said.. Anyway, I also re-added the mobile authenticator and changed my password.. Anything else I should do?

The fact people fall for this kitten still makes me weep for humanity.
Are people really too dumb to hover over a link and see the freakin’ URL as being different? (and containing a prefix?) Are people really so stupid that they can’t try to read the source header to see the real address it comes from? Are people REALLY NOT ABLE to tell this isn’t real?!?!

Lowest common denominator sadly. ugh.
And I guess as long as people fall for this crap, they will keep doing it.

How did they get the emails though? That’s what I’m worried about.

Was Guild Wars Guru hacked?

HoboLyra.4908:

The fact people fall for this kitten still makes me weep for humanity.
Are people really too dumb to hover over a link and see the freakin’ URL as being different? (and containing a prefix?) Are people really so stupid that they can’t try to read the source header to see the real address it comes from? Are people REALLY NOT ABLE to tell this isn’t real?!?!

Not only that, buut… since I was wondering what they did with their little scam, I took a quick look without doing anything else (Didn´t login, and I scanned for anything out of the place after doing so). The color of the textfields was wrong and the the lock that should be up there in the adress window was not there. That if nothing else should make it clear to people that something is wrong.

Reapee.5093:

So, I may have, against my better judgement clicked the link… a did what it said.. Anyway, I also re-added the mobile authenticator and changed my password.. Anything else I should do?

Change yer email address for GW2 to one that is only tied to the game and nothing else

Out of curiosity: Anyone who get the email registered on GWGuru? Anyone who get the email NOT registered there?

Kain Francois.4328:

Out of curiosity: Anyone who get the email registered on GWGuru? Anyone who get the email NOT registered there?

I am not registered on Guru and got the email on an account that was not even closly related to anything GW past and present

Hm.. Well this is certainly just plain weird then.

Hey,
had several emails come through over the past few days

From: ArenaNet (noreply@guildwars2.com)

stating that i am attempting to sell my account, now iv checked out the link, and it seems legit they provided to ‘confirm’ my account, but im really sceptical over it all as i havnt connected to GW2 for about 2 months as my internet at home has gone down hill.

anyone know if this is legit or not? and iv gone ahead and changed my credentials for the 30th time since game purchase.

There’s a huge thread dedicated to this issue. It’s labeled: Email from “ArenaNet?” Please read!

https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read/first#post1807876

Oh wow, didnt even see this thread, i tried to search for it, but nothing came up,
thanks heaps

GWGuru was hacked once several years ago during the GW1 days. (That was how I got my GW1 account hacked back in the day, because while I’d taken the precaution of using a different e-mail and password for Guild Wars itself, I’d forgotten about my NCSoft account, which did use the same credentials.) The hackers may still have the e-mails from that attempt, since it’s a fair chance that anyone who played GW1 will have gone on to play GW2.

Got this today but my account is fine, I guess its scam?

:

Greetings!

Due to an unusual change in your access pattern, the Guild Wars 2 account under this email address has been locked. This can be caused by logging in from a new location, but it may also signal an attempt to compromise your account. If you feel that your account’s security is at risk, please follow the steps below.

Step 1: Verify Your Account Ownership

Click on the link below to verify your e-mail address of the Guild Wars 2 account:
https://

Step 2: Secure Your Computer

Ensure that your computer is free from any malicious programs, as a password change alone may not deter future attacks. Visit our Account Security website to learn how to protect your computer from unauthorized access.

Step 3: Secure Your Email Account

Choose a new password for your email account and review your email for any filters or rules you did not create. For more information on securing your email account, visit our Account and Computer Security page.

Step 4: Choose a New Password

Change your password to resume using this Guild Wars 2 account, as your former password no longer grants access to any login-protected Guild Wars 2 account service or game. Visit our Password Reset page to begin the password change process.

Once you’ve regained access to your account, you can add additional security with Mobile Authenticator, a free service that allows you to unlock your Guild Wars 2 account on your own with a few simple steps. For more

information, see the Account Protect FAQ

—The ArenaNet Team

Need help or have questions about your Guild Wars account? Visit our support site: http://

Wow, that’s a new one. Sounds almost good, except for the ‘verify your ownership’ part. Someone has been doing their homework.

Got a mail monday (noticed it only today lol) on an Anet investigation that my account has been stolen blablabla… It actually look pretty legit at a glance except a weird introduction “Greetings! It will be ongoing for further investigations by ArenaNet’s employees” (what?) and I can imagine some people falling for it, unfortunetly.

Yeah, I got the same email today. Lucky it was in was my junk mail, and all my other Anet emails never have been. So I knew something was wrong.

It does look legit though, I can see people falling for it.

This is what made me look twice. Notice the e-mail address it was sent from is noreply@guildwars2.com and hotmail confirmed it as in my contact list.

However, hovering over the links showed that it was trying to redirect me to another website which proved it was fake, but they are getting smarter.

Any way of blocking these, but still allowing guild wars 2 emails?

Whether you can block them depends on hotmail’s spam filters and how customizable they are. Fastmail.fm has the best spam filters I know of, but I personally use gmail, which has, overall, performed beautifully in terms of getting rid of spam.

I strongly suggest using an email address for GW2 that you don’t use anywhere else. Don’t use it for contacting family/friends, for signing up for third party GW2 forums, for signing up for your bank’s web site, etc. Only use it for your GW2 account. This way if you get email about GW2 going to a different email account, you’ll immediately know it’s bogus, and you are not likely to get any GW2 scam emails going to your GW2 email. (hope that makes sense!)

I just got an email from noreply@guildwars2.com, and…well…refer to the attachment for details. It looks like the real thing, but the link I am “supposed” to click on leads to something that does not look legit.

Just wanted to make sure that this is, in fact, a phishing email and not the real thing. Correct me if I am wrong.

EDIT: Surprisingly, the bottom link leads to the correct address; it’s the top link that’s really…“phishy”. (Horrible pun, I know.)

Doesn’t look legit, but I could be wrong.

nchandler.3697:

Doesn’t look legit, but I could be wrong.

That’s what I think. I wonder how many people got the same email and actually clicked on that link. :s

Gaile Gray.6028:

The simple answer to this sort of thing: Do not click a link that you believe may pose a security risk. In this example, simply access your account through the account page, which is https://account.guildwars2.com/account. Log in, and secure your account.

Alternately, type the URL into your browser instead of clicking a risky link. Where clicking a link can take you someplace other than where you intended, if you type the URL, you control where you’re heading, right?

Exactly. I haven’t clicked it yet, because it’s probably just a terrible phishing email, but I am not worried about my account security, either. I have a strong password and I am using the authenticator, though I could change my password just in case.

Got an identical email today and was concerned that it might be a phising email. Logged into account online and signed up for the authenticator to try to increase security. Will change p/w too just in case!

I just got this email too, and logged in using the link to confirm my account. As soon as I did that, I realized it seemed phishy (lol) and now I’m very paranoid the e-mail didn’t really come from Anet. Can we please find out if it is real or not?

Juniordee.8496:

I just got this email too, and logged in using the link to confirm my account. As soon as I did that, I realized it seemed phishy (lol) and now I’m very paranoid the e-mail didn’t really come from Anet. Can we please find out if it is real or not?

It is almost certainly a phishing scam, so change your password and any account that uses the same one. The domain in the posters email goes to “en-log.pw” which is not owned by ANet/NCSoft and is rather registered to a Chinese address. The likelihood of it being a genuine email is extremely slim.

Just check the link of the website it isnt gw2 website…..login . guildwars2 . zh-rvc . asia

I been getting alot of emails from those guys trying to steal my account, idk if GW2 can do something about it. Like Turnning that Website Off.

Hey guys, I JUST literally got the same email again. Man, those Chinese really won’t give up, huh…

You might get a dozen more today alone. I’ve been getting “wow” and “rune-something” account hacked emails for YEARS and I’ve never played either. Once you’re on the lists, you stay on the lists until you change email addresses.

To get an external site shut down, this requires that a message be sent to the hosting company where the site is located. Sometimes they respond, sometimes they don’t, but it won’t matter. The phishers will just send out thousands/millions more emails with a new web site that does the same phishing.

I’ve been getting ones from WoW for years as well. Every time I see them, I think, “I have never even played the kitten game.”

Thank you, I was freaking out again, I just got one a bit ago. And was confused. They are really going out of their way to make them look legit. Maybe its just me. I’m a nobody on the leaderboards. But since they have been out I have received at least 7 or more emails. I have never visit any websites other than dulfy. guru and here. this really concerns me. Nor have I ever got any before the leaderboards. I could all just be a coincidence.

Yeah, that looked fairly convincing- URLs and everything looked fairly legit. I was even nervous using my regular bookmarks to come to the forums.

Will change my password, tho, just to be certain.

Well these phishing attempts are definitely not a laughing matter, but whoever is responsible failed miserably to snag me. The interesting part is who might that be?

I thought I would provide some information from my experience, as it might help the ArenaNet detective service…

The email that I received just over an hour ago was similar to the convincing looking one posted by AdelaisAer.4109. The thing is that it was sent to the email address that I only use for third-party Guild Wars and Guild Wars 2 sites, never for anything connected with my actual gw and gw2 accounts (ncsoft or ArenaNet).

Real ArenaNet emails connected with my (two) gw2 accounts are always sent to the respective email for the relevant account. On checking my email, the last one I received from ArenaNet with subject line “Authorize log-in attempt” was on 14 March 2013, to the correct email address for that account.

Note: My second gw2 account uses a different email address. I receive those type of emails, when expected, after my broadband is disconnected and reconnected again. For some odd reason, it often happens that my new WAN Internet IP is in a completely different part of the UK to where I actually live. Fortunately, my broadband rarely disconnects now and actually the last authorize email is from when I was accessing GW2 from my laptop at my brother’s house and was in a different part of the UK.

So, from my experience, I can say categorically that the email used for the phishing attempt to me was definitely not obtained from any ArenaNet or NCSoft source, as I have never used that email address in connection with either.

I hope that this re-assures readers that ArenaNet databases are very unlikely to have been hacked, rather one of the “fan sites” has, instead.

As a further note, ArenaNet may like to re-think the “Authorize log-in attempt” email system, as those emails do require you to click a link at present, and for those people currently only using a single email address, it would be much harder for them to identify what is real, or not. It rather defeats the object of that system to make things more secure.

I got one of these aswell, stating an unusual access pattern in my account, being in such of a paranoia I changed all my passwords for everything from Hotmail to GW2 and Guru.

I received a different kind of email from “ArenaNet” that I suspect to be a phishing scam. This one stated only that my login patterns had changed and that, as a result, they locked my account and I was to follow a link to verify ownership and change my password. The layout and grammar/syntax were extremely convincing, the only give-away was that the link they posted seemed to direct to a slightly different url than what was written in text, and that contrary to what was stated, I was actually still able to login with my current password. I’ll copy the email below:

Greetings!

Due to an unusual change in your access pattern, the Guild Wars 2 account under this email address has been locked. This can be caused by logging in from a new location, but it may also signal an attempt to compromise your account. If you feel that your account’s security is at risk, please follow the steps below.

Step 1: Verify Your Account Ownership

Click on the link below to verify your e-mail address of the Guild Wars 2 account:
[redacted to be careful about security]

Step 2: Secure Your Computer

Ensure that your computer is free from any malicious programs, as a password change alone may not deter future attacks. Visit our Account Security website to learn how to protect your computer from unauthorized access.

Step 3: Secure Your Email Account

Choose a new password for your email account and review your email for any filters or rules you did not create. For more information on securing your email account, visit our Account and Computer Security page.

Step 4: Choose a New Password

Change your password to resume using this Guild Wars 2 account, as your former password no longer grants access to any login-protected Guild Wars 2 account service or game. Visit our Password Reset page to begin the password change process.

Once you’ve regained access to your account, you can add additional security with Mobile Authenticator, a free service that allows you to unlock your Guild Wars 2 account on your own with a few simple steps. For more information, see the Account Protect FAQ

—The ArenaNet Team

Need help or have questions about your Guild Wars account? Visit our support site: http://en.support.guildwars2.com/

Greetings!

Due to an unusual change in your access pattern, the Guild Wars 2 account under this email address has been locked. This can be caused by logging in from a new location, but it may also signal an attempt to compromise your account. If you feel that your account’s security is at risk, please follow the steps below.

Step 1: Verify Your Account Ownership

Click on the link below to verify your e-mail address of the Guild Wars 2 account:

Step 2: Secure Your Computer

Ensure that your computer is free from any malicious programs, as a password change alone may not deter future attacks. Visit our Account Security website to learn how to protect your computer from unauthorized access.

Step 3: Secure Your Email Account

Choose a new password for your email account and review your email for any filters or rules you did not create. For more information on securing your email account, visit our Account and Computer Security page.

Step 4: Choose a New Password

Change your password to resume using this Guild Wars 2 account, as your former password no longer grants access to any login-protected Guild Wars 2 account service or game. Visit our Password Reset page to begin the password change process.

Once you’ve regained access to your account, you can add additional security with Mobile Authenticator, a free service that allows you to unlock your Guild Wars 2 account on your own with a few simple steps. For more

information, see the Account Protect FAQ

—The ArenaNet Team

Need help or have questions about your Guild Wars account? Visit our support site:

It a phishing email…disregard it. There is a large thread on these emails here in the account issues forum.

Thanks. I have also been getting another email that is obviously fake, the one about “attemping to sell your account” etc. But this email seems to be written more proffessional than most fake emails.

Hello everyone if u receive a mail like this :

Greetings!

It has come to our attention that you are trying to sell your personal Guild Wars account(s). As you may not be aware of, this conflicts with the EULA and Terms of Agreement. If this proves to be true, your account can and will be disabled. It will be ongoing for further investigation by ArenaNet Entertainment’s employees. If you wish to not get your account suspended you should immediately verify your account ownership.

You can confirm that you are the original owner of the account to this secure website with:

[LINK]

If you ignore this mail your account can and will be closed permanently. Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.

Regards,

Account Administration Team
Thanks! —The ArenaNet Team

From noreply@guildwars2.com

IT’s a fake i opened a ticket asking for support since it seemed really suspicious…
and the support team answered it’s a fake

i opne this thread to let you know since it’s a phishing attempt (normally other hacking attempt are stupid)

hope it helps

It’s already been reported many times.

https://forum-en.gw2archive.eu/forum/support/account/Email-from-ArenaNet-Please-read

The latest one claims to be an Arenanet questionnaire – I received 2 scam emails today

The latest is labelled Accounts Questionnaire:

Gamers, be warned!!!!!! Hackers tried to access the account via e-mail. I just received it from this address : noreply@guildwars2.com Greetings!

Due to an unusual change in your access pattern, the Guild Wars 2 account under this email address has been locked. This can be caused by logging in from a new location, but it may also signal an attempt to compromise your account. If you feel that your account’s security is at risk, please follow the steps below.

Step 1: Verify Your Account Ownership

Click on the link below to verify your e-mail address of the Guild Wars 2 account:
https://account.guildwars2.com/account/login-support.html

Step 2: Secure Your Computer etc……

Thank you for the warning.

However, there have been simular posts bout this, one of them is started by Gaile Gray (Arenanet support liason) with an official statement by her. To prevent cluttering this forum up you are better of by bumping that one by reporting it in there.

Bumping to get on top of the single post threads. This one with the official statement from Arenanet should be up. Please keep them reporting people.

Gamers, be warned!!!!!! Hackers tried to access the account via e-mail. I just received it from this address : noreply@guildwars2.com Greetings!

Due to an unusual change in your access pattern, the Guild Wars 2 account under this email address has been locked. This can be caused by logging in from a new location, but it may also signal an attempt to compromise your account. If you feel that your account’s security is at risk, please follow the steps below.

Step 1: Verify Your Account Ownership

Click on the link below to verify your e-mail address of the Guild Wars 2 account:
https://account.guildwars2.com/account/login-support.html

Step 2: Secure Your Computer etc……

Coxelph – Thanks for posting that, I just recieved one myself and was curious about it’s naure. Even logged into my account to see the login history.. Nice to see someone else has had it so i know for sure its b.s xd