New Phishing attempt


beyeajus

 

Posted

A friend of mine received the following mail from (allegedly) support@ncsoft.com, with a subject of “NCsoft-Account Check”. (I haven’t checked the mail routing, so can’t verify the source at this time.)

This mail has been reported to NCSoft, but it seemed worth mentioning to you all.

Quote:
When you receive this message at the same time means that you have a routine account of our recent examination, was checking your account we have the evidence to prove that involved in the controversial game currency transaction so we had to take the necessary measures.
Please visit our web site [malicious link removed on advice from fellow players] as soon as possible to activate your account or we will suspend your account.
The NCsoft Team
Edit: Have removed malicious link, following the advice below. Only included it for reasons of completeness, but I appreciate that it is inappropriate to post - my only excuse is that I was in a rush when I posted it, and didn't really have much time to think. Hopefully nobody went to the site.


The wisdom of Shadowe: Ghostraptor: The Shadowe is wise ...; FFM: Shadowe is no longer wise. ; Techbot_Alpha: Also, what Shadowe said. It seems he is still somewhat wise ; Bull Throttle: Shadowe was unwise in this instance...; Rock_Powerfist: in this instance Shadowe is wise.; Techbot_Alpha: Shadowe is very wise *nods*; Zortel: *Quotable line about Shadowe being wise goes here.*

 

Posted

You don't have to include malicious links just to tick off the 'complete' box, y'know.


 

Posted

Quote:
Originally Posted by poptart_fairy View Post
You don't have to include malicious links just to tick off the 'complete' box, y'know.
Yeah. You would have been much better off just replacing the malicious link with this, instead.

Unless, y'know, you WANTED to get people to go to a malicious link.


 

Posted

Quote:
Originally Posted by poptart_fairy View Post
You don't have to include malicious links just to tick off the 'complete' box, y'know.
I agree; Shadowe was unwise in this instance...


 

Posted

Yeah, please don't post the link. I know you said not to click on it, but that doesn't necessarily prevent that from happening by mistake. And if that's any usual scammer site, just loading it could seriously mess up your machine. If you pass it to ncsoft to look at I'd leave the link in, but just for the boards it'd be better off gone.

On another note, dang. Just when I think I've seen the worst english fail in a spam message, they go and top themselves.... That actually looks more like babelfish than the usual merely semi-literate stuff. I would scoff at their apparently serious belief that that message might fool someone, except for the sad fact that, somewhere, it probably did....


@MuonNeutrino
Student, Gamer, Altaholic, and future Astronomer.

This is what it means to be a tank!

 

Posted

Quote:
Originally Posted by Bull Throttle View Post
I agree; Shadowe was unwise in this instance...
So, I guess what you are trying to say is that he chose... Poorly.


 

Posted

*Clicks the link* (hey, I'm running Opera and Linux, what's the worst that could happen?)

*Gets Fraud Warning from Browser*

I loves you Opera. Who's a good little browser. You are. Yes you are *tickles Operas tummy*

Still a bit silly to actually post the link though Shad, no real reason to do so. All you're doing is giving poor Monday morning Ocho extra work to do.


 

Posted

Quote:
Originally Posted by Leandro View Post
  • The Google Chrome phishing filter caught it, so did IE's SmartScreen. People who don't disable those (and don't ignore the warnings) should be safe.
  • WHOIS reports the domain was registered by one Liu Yong Peng in China; no surprise there.
  • The server's IP is based in Hong Kong.
Supa Azn Famaz Strike again!


 

Posted

Edited original post to remove malicious link, following the advice above.

Oh, and...

Quote:
Originally Posted by Bull Throttle View Post
I agree; Shadowe was unwise in this instance...
Sigged. Thanks!

Edit: Heh. Gotta love people -repping me for posting the phishing link after I removed it. D'oh! (And yes, I know this because I checked the rep about an hour after I edited, and only had one positive comment, I come back 4 hours later and find myself -repped, as well as called a worthless twit for something the person saying it couldn't even see. Come on! Be brave! Say it to my face!)


The wisdom of Shadowe: Ghostraptor: The Shadowe is wise ...; FFM: Shadowe is no longer wise. ; Techbot_Alpha: Also, what Shadowe said. It seems he is still somewhat wise ; Bull Throttle: Shadowe was unwise in this instance...; Rock_Powerfist: in this instance Shadowe is wise.; Techbot_Alpha: Shadowe is very wise *nods*; Zortel: *Quotable line about Shadowe being wise goes here.*

 

Posted

Why are these things always written in sch amazingly bad English?
I mean, you would have to be intensely stupid to believe this came from a real company, never mind NCSoft.


Disclaimer: The above may be humerous, or at least may be an attempt at humour. Try reading it that way.
Posts are OOC unless noted to be IC, or in an IC thread.

 

Posted

I dunno, I've seen some real companies write almost unintelligible gibberish.


If we are to die, let us die like men. -- Patrick Cleburne
----------------------------------------------------------

The rule is that they must be loved. --Jayne Fynes-Clinton, Death of an Abandoned Dog

 

Posted

Quote:
Originally Posted by Sailboat View Post
I dunno, I've seen some real companies write almost unintelligible gibberish.

You mean Blizzard?



"You got to dig it to dig it, you dig?"
Thelonious Monk

 

Posted

Quote:
When you receive this message at the same time means that you have a routine account of our recent examination, was checking your account we have the evidence to prove that involved in the controversial game currency transaction so we had to take the necessary measures.
Please visit our web site [malicious link removed on advice from fellow players] as soon as possible to activate your account or we will suspend your account.
I am not being believing at the current time that this was honestly in fact sent by the NCSoft persons.


Paragon City Search And Rescue
The Mentor Project

 

Posted

Quote:
Originally Posted by Ironblade View Post
I am not being believing at the current time that this was honestly in fact sent by the NCSoft persons.
We agreement with you. If you receive this message at same time means initial message sent improperly was made. Please to contact NCSoft and take necessary measures to be not involved in the controversial game currency transactions.

NCSoft is to be thanking you for cooperate.


Head of TRICK, the all Trick Arrow and Traps SG
Part of the
Repeat Offenders

Still waiting for his Official BackAlleyBrawler No-Prize

 

Posted

Quote:
Originally Posted by Sailboat View Post
I dunno, I've seen some real companies write almost unintelligible gibberish.
Quote:
Originally Posted by Scarlet Shocker View Post
You mean Blizzard?
I think Sailboat was talking about company-customer communication, not the content of their MMOs.


@Roderick