change password? not me o_O - Guild Wars Forums

Ayuhmii Shanbwa · Aug 29, 2012, 12:07 PM // 12:07

i got a mail from Anet "[email protected]"

i never asked for it, and the mail says not to change anything if i didnt

another thing is, that i dont even have GW2 (if it has something to do with it)

the link says "account.guildwars2.com/reset-password etc"

is someone hacking me, did anet do this, or is this a fail to hack me?

also, its from Anet, not ncsoft (dunno if thats important)

... man, prolly should be glad i dont get GW2, who knows how bad it'd go then...

Hanok Odbrook · Aug 29, 2012, 02:54 PM // 14:54

Quote:

Originally Posted by Ayuhmii Shanbwa

i got a mail from Anet "[email protected]"

i never asked for it, and the mail says not to change anything if i didnt

another thing is, that i dont even have GW2 (if it has something to do with it)

the link says "account.guildwars2.com/reset-password etc"

is someone hacking me, did anet do this, or is this a fail to hack me?

also, its from Anet, not ncsoft (dunno if thats important)

... man, prolly should be glad i dont get GW2, who knows how bad it'd go then...

Got the same thing and also do not have GW2. This looks legit in the fact that it's not a phishing attempt to get you to go to a link to log in, so I think it's the result of a genuine hack attempt. I am starting to see threads and posts in various places around the web indicating that many player accounts have already been hacked in GW2.

Hanok

ectogasm · Aug 29, 2012, 04:10 PM // 16:10

Sometimes, the phishers forget to replace the real links with their phishing link and send out official emails as-is with just the headers spoofed. It could even be a form of psychological warfare, to make people who would usually dismiss these messages outright start asking themselves if it's really legit, and softens them up to actual phishing attempts later.

Still, unless your account is actually inaccessible, I would not go anywhere to follow a password reset request even if it appears to be from Anet. If your account is hacked, firstly Anet probably would not know it, or if they did they should disable it.

Ayuhmii Shanbwa · Aug 29, 2012, 05:22 PM // 17:22

well, even if its from anet, i wont touch, as i didnt request it
my account isnt hacked, it seems, as i'm still playing right now

i hope anet does something about this, or at least warn people... cuz thats all they can, probably

Mortal Amongst Mere Gods · Aug 29, 2012, 05:52 PM // 17:52

I got the same email just a few minutes ago. It only references my GW1 account, not GW2 (and I don't have a GW2 account). It also says to ignore the email if I didn't request a password change. Weird.

ectogasm · Aug 29, 2012, 07:44 PM // 19:44

Ah, this could be an actual "Forgot password" request, which could be initiated by anyone who has your email. In this case you definitely do not need to respond to it. Though even if you did, the "hacker" would not gain access since they wouldn't know what you changed the password to either.

projectmercy · Aug 29, 2012, 08:26 PM // 20:26

I would say it's safe to say, outside of e-mail address validation from a direct result in a new account creation, that clicking a link in an e-mail is never the right thing to do. Even if it's a valid request, you should be able to get to the same place by just going to the site and logging into your account and dealing with the issue.

Sometimes I get bored, so I spin up a VM and click on some of the links inside the VM. Some are pretty lame, others are quite crafty.

Ayuhmii Shanbwa · Aug 29, 2012, 10:37 PM // 22:37

seems more people (my sis) had this too, even before she made her GW2 account
and think i saw more of those people who had that request mail

ectogasm · Aug 29, 2012, 10:49 PM // 22:49

LOL and I just got the email too...

Aug 29, 2012, 12:07 PM // 12:07	#1
Ayuhmii Shanbwa Desert Nomad Join Date: Oct 2005 Location: Holland Guild: [GaMe] Profession: Rt/	change password? not me o_O i got a mail from Anet "[email protected]" i never asked for it, and the mail says not to change anything if i didnt another thing is, that i dont even have GW2 (if it has something to do with it) the link says "account.guildwars2.com/reset-password etc" is someone hacking me, did anet do this, or is this a fail to hack me? also, its from Anet, not ncsoft (dunno if thats important) ... man, prolly should be glad i dont get GW2, who knows how bad it'd go then...

Aug 29, 2012, 04:10 PM // 16:10	#3
ectogasm Frost Gate Guardian Join Date: Aug 2012	Sometimes, the phishers forget to replace the real links with their phishing link and send out official emails as-is with just the headers spoofed. It could even be a form of psychological warfare, to make people who would usually dismiss these messages outright start asking themselves if it's really legit, and softens them up to actual phishing attempts later. Still, unless your account is actually inaccessible, I would not go anywhere to follow a password reset request even if it appears to be from Anet. If your account is hacked, firstly Anet probably would not know it, or if they did they should disable it.

Aug 29, 2012, 05:22 PM // 17:22	#4
Ayuhmii Shanbwa Desert Nomad Join Date: Oct 2005 Location: Holland Guild: [GaMe] Profession: Rt/	well, even if its from anet, i wont touch, as i didnt request it my account isnt hacked, it seems, as i'm still playing right now i hope anet does something about this, or at least warn people... cuz thats all they can, probably

Aug 29, 2012, 05:52 PM // 17:52	#5
Mortal Amongst Mere Gods Krytan Explorer Join Date: Oct 2007 Location: Riding the spiral Profession: W/	I got the same email just a few minutes ago. It only references my GW1 account, not GW2 (and I don't have a GW2 account). It also says to ignore the email if I didn't request a password change. Weird.

Aug 29, 2012, 07:44 PM // 19:44	#6
ectogasm Frost Gate Guardian Join Date: Aug 2012	Ah, this could be an actual "Forgot password" request, which could be initiated by anyone who has your email. In this case you definitely do not need to respond to it. Though even if you did, the "hacker" would not gain access since they wouldn't know what you changed the password to either.

Aug 29, 2012, 08:26 PM // 20:26	#7
projectmercy Academy Page Join Date: Apr 2012	I would say it's safe to say, outside of e-mail address validation from a direct result in a new account creation, that clicking a link in an e-mail is never the right thing to do. Even if it's a valid request, you should be able to get to the same place by just going to the site and logging into your account and dealing with the issue. Sometimes I get bored, so I spin up a VM and click on some of the links inside the VM. Some are pretty lame, others are quite crafty.

Aug 29, 2012, 10:37 PM // 22:37	#8
Ayuhmii Shanbwa Desert Nomad Join Date: Oct 2005 Location: Holland Guild: [GaMe] Profession: Rt/	seems more people (my sis) had this too, even before she made her GW2 account and think i saw more of those people who had that request mail

Aug 29, 2012, 10:49 PM // 22:49	#9
ectogasm Frost Gate Guardian Join Date: Aug 2012	LOL and I just got the email too...