Malwarebytes researchers are warning of a new phishing campaign that exploits Blizzard Entertainment's recent announcement of the alpha testing phase for the Warlords of Draenor expansion set for World of Warcraft.
The e-mail arrives with the subject line, "Gift-Boost a character to Level 90 when you pre-purchase Warlords of Draenor," and states, "Blizzard gives you World of Warcraft: Warlords of Draeno! Congratulations, you become one of our 50000 players! You will get a update package of this game as a prize."
To access the expansion set, the e-mail asks the recipient to click on a link and redeem a code listed in the e-mail.
Clicks on the link, though, and you'll be asked for your Battle.net user name and password, along with the answer to your Battle.net security question.https://o1.qnsr.com/log/p.gif?;n=203;c=204650394;s=9477;x=7936;f=201801171506010;u=j;z=TIMESTAMP;a=20392931;e=i
"Security questions are considered by many as an essential extra layer of security," notes Malwarebytes' Jovi Umawing. "It may be the only thing left standing between your online data and information and the phishers. Once they have the data they need from you about you, they could either sell them in the black market or use them to access your other online accounts."